last executing test programs: 1m24.084693992s ago: executing program 2 (id=169): setresuid(0x0, 0xee01, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000100)={0x0, 0x16}, 0x0) r0 = shmget$private(0x0, 0x7000, 0x4, &(0x7f0000ff8000/0x7000)=nil) shmctl$SHM_LOCK(r0, 0xb) 1m23.831955842s ago: executing program 2 (id=172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000efffffff850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) setreuid(0x0, 0x0) 1m23.719512842s ago: executing program 2 (id=173): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="500401f7c038e1"], 0x7) 1m23.669826395s ago: executing program 2 (id=174): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) sendfile(r1, r1, 0x0, 0x800000009) 1m23.141499997s ago: executing program 2 (id=178): syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1m21.803720934s ago: executing program 2 (id=185): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.493807509s ago: executing program 32 (id=185): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.140312512s ago: executing program 0 (id=487): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="ff00400000000000"], 0x8) 9.91808297s ago: executing program 0 (id=488): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xf8000000, 0x10000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$key(0xf, 0x3, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0xdd3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) lseek(0xffffffffffffffff, 0x9, 0x0) unshare(0x64000600) 5.571889006s ago: executing program 0 (id=504): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x400000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000280)={'\x00', 0xc, 0x9, 0x8, 0x1, 0x1, 0x0}) write$cgroup_pid(r3, &(0x7f0000000300)=r4, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000015ab51a400001022e666"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3, 0x0, 0x3}, 0x18) syz_read_part_table(0x5df, &(0x7f0000001880)="$eJzs3D+rXEUYB+DfnN09Zw+o+w3MQhq7tDaXCJJc7NLY29pY2AlKdlEULGy0ENTCUgvzBbQNwdoiCBILQTux0UbvyPmzN6uNxXoR4Xlgz5kZ3ndmDjNTzob/t7pZrMf3Ra01myTN8GvKag7Y/JF+eE/13WXiUH/x81u3X9jeKe2vU1tJSX7u084xy+HRJk/3l2nb+f3lepmcv/PeB693Q7eP7ib5JNmVXXs5taTP+jLz46NZl0Pn/LeeGZ+HpViNCzOt2V+X50aSRdJlMYWM1fbtk8e/d3Z/f3Mo1JI6mvsvx1HzJhp24fWym7b4LxdZNdu/R97MN1/shk2+P2rs0tRaP3tq3JLD6ejauc/VIXv42gff382+nc7Jw68OydOJ+a6fYkrmw9Gc/OkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyBOnr32fVc/3R8Lj9MSZaHoOVUfr5dltQHU1Zfa83u5PHvnd3fvPnWq01eO3v54Stv/HD+03oYepEb50/Urkvyex3iXkrXHqXt01wsysmjJ7XbdmNhleRaPTRvs8/X17+91izS1s3j8FWZIudJ/BszAAAAAAAAAAAAAAAAAAAAgOTW7fX2TtNnugSfJnOpZv5HgONb9/W3WutzQ0BZJh/Nrf0Q9Gi8C/9j6uFKfB1Tm+TJ9PMfCayTksXj7t5fX/nn8Q/+DAAA//+Vk2Fs") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1d, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x4040880) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) shmat(r1, &(0x7f0000ff1000/0x3000)=nil, 0x400c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) 5.093238914s ago: executing program 1 (id=505): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x62000000) 4.812263967s ago: executing program 4 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = timerfd_create(0x0, 0x80000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r6, 0x407, 0x6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc00", 0x31}], 0x1) 3.933512716s ago: executing program 0 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = timerfd_create(0x0, 0x80000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r5, 0x407, 0x6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc00", 0x31}], 0x1) 3.63699179s ago: executing program 1 (id=510): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="ff00400000000000"], 0x8) 3.223314803s ago: executing program 1 (id=511): socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000400)='.\x00', 0xa4000021) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) pread64(r1, 0x0, 0x0, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) 2.682914026s ago: executing program 4 (id=512): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x400}, {}, {0x0, 0x0, 0x200000, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0xc, 0x5, 0x5}, {}, {0x0, 0xfffffffe, 0x8}, {0x0, 0x4, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x0, 0x0, 0x10001}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x7, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x800}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x80, 0x4}, {}, {0xb}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {0xffffffff}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d}, {0x2}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1, 0x2}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 2.367903291s ago: executing program 0 (id=514): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f00000003c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r1, 0x2}, 0x20) 2.265429089s ago: executing program 1 (id=515): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 2.242828571s ago: executing program 0 (id=516): syz_usb_connect(0x0, 0x128, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xc0, 0xe7, 0x9f, 0x10, 0x1199, 0x6859, 0xfd7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x116, 0x2, 0xf, 0x8, 0x60, 0x5, [{{0x9, 0x4, 0xae, 0x1, 0x8, 0xf7, 0x34, 0x51, 0x0, [], [{{0x9, 0x5, 0x5, 0x0, 0x0, 0x9, 0xf7, 0x3}}, {{0x9, 0x5, 0x1, 0x4, 0x8, 0x3, 0x5, 0xde}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x6, 0x5, 0x4}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x1, 0xb, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x9, 0xc0}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x24, 0xac, 0x2}}, {{0x9, 0x5, 0x794fab014817e5b7, 0x8, 0x20, 0x32, 0xb, 0x4, [@generic={0x5d, 0xc, "a5c48224b081cbdaba331dc6ecfe041ab405618d2b2569dac0d8216989fbc7917aa964ca3b3dc90d160c393e40e123f3cea7ab855bd365475133b3eeebc880cca4fd1cf34ca0377fc8d2804e246d7d33256c9a16da53f21dc22f90"}]}}]}}, {{0x9, 0x4, 0x5, 0x80, 0x4, 0x9f, 0xaa, 0xe4, 0x2, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x3, 0x1b}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0xd, 0x0, 0x3, 0x9, 0x2}]}], [{{0x9, 0x5, 0x8, 0x10, 0x400, 0x3, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4c, 0x90, 0xe, [@generic={0x2, 0x4}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0xe, 0xfc}}, {{0x9, 0x5, 0x8a, 0x10, 0x10, 0x5, 0xf6, 0x8}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x2, &(0x7f0000000140)=@string={0x2}}]}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.183632006s ago: executing program 4 (id=518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x62000000) 1.920475357s ago: executing program 3 (id=519): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="ff00400000000000"], 0x8) 1.872644471s ago: executing program 1 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = timerfd_create(0x0, 0x80000) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r6, 0x407, 0x6) openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc00", 0x31}], 0x1) 746.25259ms ago: executing program 4 (id=521): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) 695.656075ms ago: executing program 3 (id=522): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000, 0x0, 0x4}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {0xf}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd, 0x0, 0x0, 0xd}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x2, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x3, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, {}, {0xb, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0xfffffff7, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd, 0x0, 0xffffffff}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x6fdf}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0xfffffffc, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x7fff, 0x80}, {0x10000000, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x6}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x4}, {}, {}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}}, 0x0) 674.544996ms ago: executing program 3 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 570.240564ms ago: executing program 3 (id=524): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT, @ANYBLOB="000000000000670f4d0000b708000021040012007b8af8ff00000000bfa20000000000000000f8ffffffb7ff7f96915c4e3637e6ccaa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 399.642158ms ago: executing program 4 (id=525): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x228, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xd}, {0x0, 0xffea}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x1f0, 0x2, [@TCA_ROUTE4_ACT={0x1ec, 0x6, [@m_vlan={0x74, 0x6, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1b6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x37, 0x6, "657c8f856bb2bb5d377d3e798375b1d28aa9ff79c5750c001846426a94e358dab26224b357e0bd9c9b84cfee21ec99f48cf585"}, {0xc}, {0xc}}}, @m_bpf={0x174, 0xa, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x3, 0x0, 0x1, 0x9}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x4, 0x0, 0xe7}, {0x3373, 0x7, 0x5, 0xe786f6ae}, {0x2, 0x1c, 0xb0, 0x20000000}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x7, 0x3, 0x9, 0x8}, {0x5, 0x3, 0x5, 0x46}]}]}, {0xf5, 0x6, "8eb55930760aaf0b59772c5971036fba8994239acc2d66a896c98c740ca7d203000000000000002a326cef7c8ba136d0bce7d5be2f44c0f7df2af8b58cd15301925bdef87ac2e982db6d48439b06b9d7e9e88cb4d0262a5d0900461c33b2f76470602416519436d7f6f3d3dec1bf02a5ce6e83f8664d689fd77f1519cfac04b8ebd7ea20e82977ee8d8e46d44e8f8c8485af903929b1f3288322548d9e6a92389a03899eaaba97faeef8863180bc96804713e41b3d6d0032dc6414d0626a176725767c2a42131583a64bf3c2e43f64d02f9be090aa44978db670068ac547d4aa7dfb2219f8c926b7d6925ec9105d34f3b0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x228}, 0x1, 0x0, 0x0, 0x4004}, 0x20008885) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 290.234557ms ago: executing program 3 (id=526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a300000000014000780"], 0x5c}}, 0x0) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x3bf) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 281.996857ms ago: executing program 4 (id=527): r0 = socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x8000000000000000}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$nci(r2, 0x0, 0xfffffeea) r3 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x9) unshare(0x22020400) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000dc0), &(0x7f0000000e00)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) stat(&(0x7f0000000700)='./file0/file1\x00', &(0x7f0000001c80)) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) r7 = add_key(&(0x7f0000001340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r7) keyctl$read(0xb, r7, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000140)=0x3, 0x4) 66.626524ms ago: executing program 1 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_create(0x0, 0x80000) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r2, 0x407, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 81.659391][ T5778] cgroup: Unknown subsys name 'net' [ 81.843959][ T5778] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.598990][ T5778] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.806664][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.817104][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.826942][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.834942][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.844718][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.852421][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.862084][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.869872][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.878452][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.909063][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.911326][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.918475][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.930971][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.934295][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.946779][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.959374][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.960164][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.974003][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.975467][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.989292][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.997219][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.997376][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.013131][ T5805] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.020672][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.583913][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.595204][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 86.661685][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 86.718002][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 86.814555][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.822159][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.829590][ T5790] bridge_slave_0: entered allmulticast mode [ 86.837200][ T5790] bridge_slave_0: entered promiscuous mode [ 86.888641][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.895957][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.904200][ T5790] bridge_slave_1: entered allmulticast mode [ 86.911664][ T5790] bridge_slave_1: entered promiscuous mode [ 86.938800][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.946067][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.953613][ T5795] bridge_slave_0: entered allmulticast mode [ 86.960841][ T5795] bridge_slave_0: entered promiscuous mode [ 87.001497][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.008793][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.016262][ T5795] bridge_slave_1: entered allmulticast mode [ 87.023809][ T5795] bridge_slave_1: entered promiscuous mode [ 87.031133][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.038394][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.046105][ T5796] bridge_slave_0: entered allmulticast mode [ 87.053418][ T5796] bridge_slave_0: entered promiscuous mode [ 87.115387][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.122656][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.129814][ T5796] bridge_slave_1: entered allmulticast mode [ 87.138278][ T5796] bridge_slave_1: entered promiscuous mode [ 87.147809][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.160384][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.195401][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.202808][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.209967][ T5794] bridge_slave_0: entered allmulticast mode [ 87.217227][ T5794] bridge_slave_0: entered promiscuous mode [ 87.228553][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.263872][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.271113][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.278419][ T5794] bridge_slave_1: entered allmulticast mode [ 87.286137][ T5794] bridge_slave_1: entered promiscuous mode [ 87.307038][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.333539][ T5790] team0: Port device team_slave_0 added [ 87.380541][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.392515][ T5790] team0: Port device team_slave_1 added [ 87.400912][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.414664][ T5795] team0: Port device team_slave_0 added [ 87.423318][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.455552][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.479125][ T5795] team0: Port device team_slave_1 added [ 87.525055][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.532769][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.558849][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.610264][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.617484][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.644758][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.661170][ T5794] team0: Port device team_slave_0 added [ 87.670860][ T5794] team0: Port device team_slave_1 added [ 87.678350][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.685401][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.711628][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.726887][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.738314][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.764958][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.781212][ T5796] team0: Port device team_slave_0 added [ 87.824541][ T5796] team0: Port device team_slave_1 added [ 87.872332][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.879337][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.905935][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.931548][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.938590][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.965478][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.977296][ T5805] Bluetooth: hci0: command tx timeout [ 87.977315][ T5798] Bluetooth: hci1: command tx timeout [ 87.995711][ T5790] hsr_slave_0: entered promiscuous mode [ 88.002372][ T5790] hsr_slave_1: entered promiscuous mode [ 88.009994][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.017439][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.042119][ T5798] Bluetooth: hci2: command tx timeout [ 88.043729][ T5805] Bluetooth: hci3: command tx timeout [ 88.049059][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.079046][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.086316][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.112343][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.189664][ T5795] hsr_slave_0: entered promiscuous mode [ 88.196875][ T5795] hsr_slave_1: entered promiscuous mode [ 88.206599][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.214586][ T5795] Cannot create hsr debugfs directory [ 88.275820][ T5794] hsr_slave_0: entered promiscuous mode [ 88.283885][ T5794] hsr_slave_1: entered promiscuous mode [ 88.290071][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.299173][ T5794] Cannot create hsr debugfs directory [ 88.316220][ T5796] hsr_slave_0: entered promiscuous mode [ 88.322761][ T5796] hsr_slave_1: entered promiscuous mode [ 88.328968][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.337162][ T5796] Cannot create hsr debugfs directory [ 88.762420][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.784270][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.795609][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.806651][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.899355][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.910368][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.924987][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.957004][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.013089][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.038847][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.060190][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.071422][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.138286][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.157672][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.169973][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.180851][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.265942][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.294151][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.324084][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.331470][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.386327][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.393535][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.446831][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.501118][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.545255][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.552489][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.570008][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.591356][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.613166][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.646941][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.654207][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.667375][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.674604][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.720523][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.727778][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.758543][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.790390][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.797591][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.841443][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.848698][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.045154][ T5805] Bluetooth: hci1: command tx timeout [ 90.045326][ T5798] Bluetooth: hci0: command tx timeout [ 90.107082][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.123673][ T5798] Bluetooth: hci2: command tx timeout [ 90.129167][ T5798] Bluetooth: hci3: command tx timeout [ 90.297000][ T5790] veth0_vlan: entered promiscuous mode [ 90.341060][ T5790] veth1_vlan: entered promiscuous mode [ 90.448471][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.465251][ T5790] veth0_macvtap: entered promiscuous mode [ 90.480111][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.503316][ T5790] veth1_macvtap: entered promiscuous mode [ 90.565851][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.581140][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.602769][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.617036][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.626548][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.635742][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.645786][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.709419][ T5795] veth0_vlan: entered promiscuous mode [ 90.729808][ T5794] veth0_vlan: entered promiscuous mode [ 90.775304][ T5794] veth1_vlan: entered promiscuous mode [ 90.786751][ T5795] veth1_vlan: entered promiscuous mode [ 90.825995][ T5796] veth0_vlan: entered promiscuous mode [ 90.890003][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.905634][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.920757][ T5796] veth1_vlan: entered promiscuous mode [ 90.963828][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.972453][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.987069][ T5795] veth0_macvtap: entered promiscuous mode [ 91.007536][ T5795] veth1_macvtap: entered promiscuous mode [ 91.033420][ T5794] veth0_macvtap: entered promiscuous mode [ 91.080685][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.098653][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.110224][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.120316][ T5794] veth1_macvtap: entered promiscuous mode [ 91.148235][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.166539][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.181683][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.202686][ T5796] veth0_macvtap: entered promiscuous mode [ 91.217069][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.238586][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.256446][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.267313][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.280408][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.296019][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.305545][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.314770][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.325312][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.348640][ T5796] veth1_macvtap: entered promiscuous mode [ 91.359039][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.379274][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.389800][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.400700][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.413986][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.426855][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.435753][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.448391][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.457794][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.591126][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.605721][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.616927][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.627906][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.637899][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.649091][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.661077][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.672202][ T5886] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5'. [ 91.709980][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.734396][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.744495][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.759150][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.770797][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.783138][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.805519][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.822334][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.831106][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.840844][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.850722][ T5796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.901403][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.910445][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.949422][ T2971] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 92.062795][ T786] cfg80211: failed to load regulatory.db [ 92.069105][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.080288][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.122256][ T5798] Bluetooth: hci1: command tx timeout [ 92.127112][ T5805] Bluetooth: hci0: command tx timeout [ 92.183635][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.202104][ T5805] Bluetooth: hci2: command tx timeout [ 92.207606][ T5805] Bluetooth: hci3: command tx timeout [ 92.218873][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.369289][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.389519][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.406988][ T5903] syz.2.3[5903]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.559622][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.588920][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.701528][ T5850] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 92.739463][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.767522][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.776731][ T5850] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 92.842763][ T5850] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 93.684133][ T5850] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 93.789543][ T5912] ALSA: seq fatal error: cannot create timer (-22) [ 93.968291][ T5914] fido_id[5914]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 94.068197][ T5919] loop0: detected capacity change from 0 to 512 [ 94.117018][ T5919] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.149313][ T5919] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.149361][ T5920] loop2: detected capacity change from 0 to 2048 [ 94.200965][ T5920] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 94.211226][ T5805] Bluetooth: hci1: command tx timeout [ 94.216731][ T5805] Bluetooth: hci0: command tx timeout [ 94.217787][ T5920] NILFS (loop2): mounting unchecked fs [ 94.232735][ T5919] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.11: invalid indirect mapped block 4294967295 (level 0) [ 94.260868][ T5919] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.11: invalid indirect mapped block 4294967295 (level 1) [ 94.281335][ T5920] NILFS (loop2): recovery complete [ 94.288097][ T5805] Bluetooth: hci2: command tx timeout [ 94.294052][ T5805] Bluetooth: hci3: command tx timeout [ 94.303518][ T5919] EXT4-fs (loop0): 1 orphan inode deleted [ 94.309299][ T5919] EXT4-fs (loop0): 1 truncate cleaned up [ 94.311838][ T5923] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.319201][ T5919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.352073][ T5919] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.433351][ T28] audit: type=1800 audit(1755300241.279:2): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 94.631821][ T28] audit: type=1800 audit(1755300241.469:3): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 95.003191][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.123450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.346414][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12'. [ 95.480629][ T1118] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 96.020602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 96.052882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 96.062136][ T0] NOHZ tick-stop error: local softirq work is pending, handler #288!!! [ 97.592183][ T5965] IPv6: Can't replace route, no match found [ 97.622511][ T5965] loop3: detected capacity change from 0 to 128 [ 97.826897][ T28] audit: type=1800 audit(1755300244.679:4): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21" name="file2" dev="loop3" ino=1048592 res=0 errno=0 [ 98.627932][ T5965] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.649889][ T5965] FAT-fs (loop3): Filesystem has been set read-only [ 98.658818][ T5965] syz.3.21: attempt to access beyond end of device [ 98.658818][ T5965] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 98.673654][ T5965] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.682196][ T5965] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 98.722300][ T5965] syz.3.21: attempt to access beyond end of device [ 98.722300][ T5965] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.778114][ T5965] syz.3.21: attempt to access beyond end of device [ 98.778114][ T5965] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.836774][ T5965] syz.3.21: attempt to access beyond end of device [ 98.836774][ T5965] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.860075][ T5965] syz.3.21: attempt to access beyond end of device [ 98.860075][ T5965] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.910401][ T5978] syz.3.21: attempt to access beyond end of device [ 98.910401][ T5978] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.931481][ T5965] syz.3.21: attempt to access beyond end of device [ 98.931481][ T5965] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 98.943124][ T28] audit: type=1326 audit(1755300245.799:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53f8ebe9 code=0x7ffc0000 [ 99.001124][ T5978] syz.3.21: attempt to access beyond end of device [ 99.001124][ T5978] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.008787][ T28] audit: type=1326 audit(1755300245.829:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e53f8ebe9 code=0x7ffc0000 [ 99.077064][ T28] audit: type=1326 audit(1755300245.829:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53f8ebe9 code=0x7ffc0000 [ 99.115402][ T28] audit: type=1326 audit(1755300245.829:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e53f8ebe9 code=0x7ffc0000 [ 99.150380][ T28] audit: type=1326 audit(1755300245.829:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53f8ebe9 code=0x7ffc0000 [ 99.177437][ T28] audit: type=1326 audit(1755300245.829:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4e53f8ebe9 code=0x7ffc0000 [ 99.236562][ T5988] loop2: detected capacity change from 0 to 512 [ 99.271460][ T28] audit: type=1326 audit(1755300245.829:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e53f8ebe9 code=0x7ffc0000 [ 99.293895][ T5988] EXT4-fs warning (device loop2): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 99.330814][ T5988] tipc: Started in network mode [ 99.342032][ T5988] tipc: Node identity ac14140f, cluster identity 4711 [ 99.350362][ T5988] tipc: New replicast peer: 255.255.255.83 [ 99.366860][ T5988] tipc: Enabled bearer , priority 10 [ 100.223954][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 100.223971][ T28] audit: type=1326 audit(1755300247.079:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 100.327814][ T28] audit: type=1326 audit(1755300247.109:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 100.386528][ T28] audit: type=1326 audit(1755300247.109:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 100.409527][ T28] audit: type=1326 audit(1755300247.109:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 100.446352][ T28] audit: type=1326 audit(1755300247.109:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 100.503633][ T786] tipc: Node number set to 2886997007 [ 100.910266][ T28] audit: type=1326 audit(1755300247.109:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 101.161977][ T28] audit: type=1326 audit(1755300247.109:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 101.191019][ T28] audit: type=1326 audit(1755300247.109:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 101.251876][ T28] audit: type=1326 audit(1755300247.109:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 101.300772][ T28] audit: type=1326 audit(1755300247.109:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.0.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 101.384915][ T6036] loop1: detected capacity change from 0 to 512 [ 101.393175][ T6036] journal_path: Lookup failure for './bus' [ 101.433200][ T6036] EXT4-fs: error: could not find journal device path [ 101.745127][ T34] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 102.947746][ T6063] netlink: 'syz.1.50': attribute type 13 has an invalid length. [ 102.962711][ T6063] netlink: 'syz.1.50': attribute type 17 has an invalid length. [ 103.196867][ T6063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.603852][ T6102] loop3: detected capacity change from 0 to 1024 [ 104.678483][ T6102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.704321][ T6102] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 104.795005][ T6102] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.64: bg 0: block 88: padding at end of block bitmap is not set [ 105.372001][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.099597][ T6134] loop1: detected capacity change from 0 to 512 [ 106.138636][ T1126] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 106.173313][ T6134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.187355][ T6134] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.897208][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.050933][ T6146] loop2: detected capacity change from 0 to 2048 [ 107.182140][ T6146] loop2: p2 p3 p7 [ 107.313965][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.79'. [ 107.362063][ T6158] netlink: 108 bytes leftover after parsing attributes in process `syz.1.79'. [ 107.417616][ T6158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.79'. [ 107.443945][ T6158] netlink: 108 bytes leftover after parsing attributes in process `syz.1.79'. [ 107.467307][ T6158] netlink: 84 bytes leftover after parsing attributes in process `syz.1.79'. [ 107.594375][ T5808] udevd[5808]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 107.619245][ T5807] udevd[5807]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 107.619603][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 108.335529][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 108.335544][ T28] audit: type=1326 audit(1755300255.179:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 109.197812][ T28] audit: type=1326 audit(1755300255.189:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 109.228718][ T28] audit: type=1326 audit(1755300255.219:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 109.440390][ T28] audit: type=1326 audit(1755300255.219:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 109.513662][ T28] audit: type=1326 audit(1755300255.219:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 109.539822][ T28] audit: type=1326 audit(1755300255.229:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 109.562968][ T28] audit: type=1326 audit(1755300255.969:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 109.586281][ T28] audit: type=1326 audit(1755300255.969:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 109.649221][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 110.111134][ T6211] capability: warning: `syz.3.94' uses deprecated v2 capabilities in a way that may be insecure [ 111.284903][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.99'. [ 112.177601][ T6255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.111'. [ 112.894892][ T6277] loop3: detected capacity change from 0 to 512 [ 112.903907][ T6277] ======================================================= [ 112.903907][ T6277] WARNING: The mand mount option has been deprecated and [ 112.903907][ T6277] and is ignored by this kernel. Remove the mand [ 112.903907][ T6277] option from the mount to silence this warning. [ 112.903907][ T6277] ======================================================= [ 112.998501][ T6277] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.003921][ T6279] syz.1.121[6279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.021621][ T6279] syz.1.121[6279] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.086731][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.086853][ T6277] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.297410][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.881409][ T6292] loop1: detected capacity change from 0 to 512 [ 113.889379][ T6292] EXT4-fs: Ignoring removed nobh option [ 114.707887][ T6292] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.125: corrupted inode contents [ 114.744106][ T6292] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.125: mark_inode_dirty error [ 114.769588][ T6292] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.125: corrupted inode contents [ 114.811330][ T6292] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.125: mark_inode_dirty error [ 114.852236][ T6292] Quota error (device loop1): write_blk: dquota write failed [ 114.877327][ T6292] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 114.890191][ T6292] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.125: Failed to acquire dquot type 0 [ 114.919382][ T6292] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.125: corrupted inode contents [ 114.939199][ T6292] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #16: comm syz.1.125: mark_inode_dirty error [ 114.984918][ T6292] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.125: corrupted inode contents [ 115.010780][ T6292] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.125: mark_inode_dirty error [ 115.036871][ T6292] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.125: corrupted inode contents [ 115.059617][ T6292] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 115.078466][ T6292] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #16: comm syz.1.125: corrupted inode contents [ 115.103851][ T6292] EXT4-fs error (device loop1): ext4_truncate:4288: inode #16: comm syz.1.125: mark_inode_dirty error [ 115.120516][ T6292] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 115.149348][ T6292] EXT4-fs (loop1): 1 truncate cleaned up [ 115.158267][ T6292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.175326][ T6292] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.278193][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.501539][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 115.565289][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 115.754178][ T6329] netlink: 256 bytes leftover after parsing attributes in process `syz.0.135'. [ 115.802066][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 116.890618][ T6363] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.928863][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 117.710500][ T6363] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.966038][ T6363] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.119275][ T6363] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.290124][ T6363] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.310690][ T6363] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.340619][ T6363] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.494496][ T6399] loop0: detected capacity change from 0 to 128 [ 118.630258][ T6363] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.645506][ T5806] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.489314][ T6435] syz.1.171 uses obsolete (PF_INET,SOCK_PACKET) [ 119.546374][ T6436] Zero length message leads to an empty skb [ 119.806288][ T6448] loop2: detected capacity change from 0 to 512 [ 119.932056][ T6448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.999442][ T6448] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.105382][ T28] audit: type=1800 audit(1755300266.959:137): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.174" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 120.194214][ T6448] EXT4-fs (loop2): shut down requested (1) [ 121.494992][ T6459] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.333444][ T6506] 9pnet: Could not find request transport: 0xffffffffffffffff [ 123.427324][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.436706][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.445071][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.467229][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.477361][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.487158][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.549784][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.600682][ T6517] process 'syz.0.193' launched './file0' with NULL argv: empty string added [ 123.757684][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.894333][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.985624][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.687776][ T34] tipc: Disabling bearer [ 124.720863][ T34] tipc: Left network mode [ 124.726784][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'. [ 124.736446][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.815846][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.886944][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 125.293404][ T6572] loop3: detected capacity change from 0 to 2048 [ 125.334092][ T6572] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 125.338383][ T6514] chnl_net:caif_netlink_parms(): no params data found [ 125.353951][ T6572] NILFS (loop3): mounting unchecked fs [ 125.421445][ T6572] NILFS (loop3): recovery complete [ 125.446922][ T6583] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.504171][ T28] audit: type=1800 audit(1755300272.359:138): pid=6572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.211" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 125.553038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.561673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.564718][ T5798] Bluetooth: hci2: command tx timeout [ 125.582371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.590682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.599491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.628589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 125.742617][ T28] audit: type=1800 audit(1755300272.459:139): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.211" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 125.993529][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.213'. [ 126.123927][ T6582] netem: change failed [ 127.650337][ T5798] Bluetooth: hci2: command tx timeout [ 129.725755][ T5798] Bluetooth: hci2: command tx timeout [ 130.077386][ T6616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'. [ 130.255629][ T6514] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.282601][ T6514] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.307213][ T6514] bridge_slave_0: entered allmulticast mode [ 130.329512][ T6514] bridge_slave_0: entered promiscuous mode [ 130.411051][ T6514] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.420455][ T6514] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.450554][ T6514] bridge_slave_1: entered allmulticast mode [ 130.461694][ T6514] bridge_slave_1: entered promiscuous mode [ 130.799724][ T6639] loop1: detected capacity change from 0 to 512 [ 130.832628][ T6639] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.906562][ T6639] EXT4-fs (loop1): 1 truncate cleaned up [ 130.919882][ T6639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.571736][ C0] sched: RT throttling activated [ 131.801949][ T5798] Bluetooth: hci2: command tx timeout [ 131.882774][ T6514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.949810][ T6514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.716441][ T6514] team0: Port device team_slave_0 added [ 132.842983][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.882055][ T6665] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.969739][ T34] hsr_slave_0: left promiscuous mode [ 132.997870][ T34] hsr_slave_1: left promiscuous mode [ 133.006684][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.007042][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.021483][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.026835][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.058958][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.101533][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.153480][ T34] bridge_slave_1: left allmulticast mode [ 133.159216][ T34] bridge_slave_1: left promiscuous mode [ 133.183571][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.229840][ T34] bridge_slave_0: left allmulticast mode [ 133.237890][ T34] bridge_slave_0: left promiscuous mode [ 133.376110][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.440477][ T34] veth1_macvtap: left promiscuous mode [ 133.449041][ T34] veth0_macvtap: left promiscuous mode [ 133.458143][ T34] veth1_vlan: left promiscuous mode [ 133.464117][ T34] veth0_vlan: left promiscuous mode [ 133.633407][ T34] bond1 (unregistering): Released all slaves [ 134.030140][ T34] team0 (unregistering): Port device team_slave_1 removed [ 134.073425][ T34] team0 (unregistering): Port device team_slave_0 removed [ 134.114251][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.157370][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.566582][ T34] bond0 (unregistering): Released all slaves [ 134.639293][ T6514] team0: Port device team_slave_1 added [ 134.645318][ T6669] netlink: 96 bytes leftover after parsing attributes in process `syz.1.233'. [ 134.894815][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.913700][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.917628][ T6684] loop0: detected capacity change from 0 to 2048 [ 134.972282][ T6514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.001290][ T6514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.035127][ T6514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.063352][ T6514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.086444][ T6684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.290172][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.335125][ T6514] hsr_slave_0: entered promiscuous mode [ 135.344240][ T6514] hsr_slave_1: entered promiscuous mode [ 135.362188][ T6514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.391365][ T6514] Cannot create hsr debugfs directory [ 136.085307][ T6514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 136.177997][ T6514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 136.253588][ T6514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 136.345916][ T6514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 136.547148][ T6498] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.687727][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 136.738447][ T6498] usb 4-1: device descriptor read/64, error -71 [ 136.758491][ T6514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.925288][ T6514] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.938306][ T6740] loop0: detected capacity change from 0 to 2048 [ 136.986351][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.993648][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.021840][ T6740] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.067115][ T6740] NILFS (loop0): mounting unchecked fs [ 137.117605][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.124865][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.126081][ T6740] NILFS (loop0): recovery complete [ 137.154844][ T6744] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.261697][ T6498] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 137.284027][ T28] audit: type=1800 audit(1755300284.139:140): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.252" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 137.420001][ T28] audit: type=1800 audit(1755300284.239:141): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.252" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 137.469938][ T6498] usb 4-1: device descriptor read/64, error -71 [ 138.208906][ T6498] usb usb4-port1: attempt power cycle [ 138.822038][ T6498] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.963921][ T6498] usb 4-1: device descriptor read/8, error -71 [ 139.329610][ T6498] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.233843][ T6498] usb 4-1: device descriptor read/8, error -71 [ 140.459240][ T6498] usb usb4-port1: unable to enumerate USB device [ 141.777729][ T6514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.133834][ T6777] loop0: detected capacity change from 0 to 8192 [ 142.403747][ T6791] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 142.410696][ T6791] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.423779][ T6791] vhci_hcd vhci_hcd.0: Device attached [ 142.493173][ T6791] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 142.534896][ T6791] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 142.541481][ T6791] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 142.616926][ T6791] vhci_hcd vhci_hcd.0: Device attached [ 142.641904][ T786] vhci_hcd: vhci_device speed not set [ 142.655266][ T6802] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 142.661940][ T6802] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.731981][ T786] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 142.784822][ T6514] veth0_vlan: entered promiscuous mode [ 142.812744][ T6802] vhci_hcd vhci_hcd.0: Device attached [ 142.834535][ T6791] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(10) [ 142.841208][ T6791] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.851766][ T6514] veth1_vlan: entered promiscuous mode [ 142.982172][ T6791] vhci_hcd vhci_hcd.0: Device attached [ 142.990203][ T6804] vhci_hcd: connection closed [ 142.990685][ T6795] vhci_hcd: connection reset by peer [ 142.993861][ T6799] vhci_hcd: connection closed [ 143.004222][ T6514] veth0_macvtap: entered promiscuous mode [ 143.031836][ T1126] vhci_hcd: stop threads [ 143.038952][ T1126] vhci_hcd: release socket [ 143.056214][ T1126] vhci_hcd: disconnect device [ 143.078857][ T1126] vhci_hcd: stop threads [ 143.080108][ T6514] veth1_macvtap: entered promiscuous mode [ 143.104565][ T1126] vhci_hcd: release socket [ 143.111430][ T1126] vhci_hcd: disconnect device [ 143.129462][ T1126] vhci_hcd: stop threads [ 143.145375][ T6807] vhci_hcd: connection closed [ 143.150666][ T1126] vhci_hcd: release socket [ 143.182196][ T1126] vhci_hcd: disconnect device [ 143.195025][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.217302][ T1126] vhci_hcd: stop threads [ 143.221013][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.231899][ T1126] vhci_hcd: release socket [ 143.236621][ T1126] vhci_hcd: disconnect device [ 143.281813][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.331816][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.365031][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.424327][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.461810][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.501803][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.561828][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.601827][ T6514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.641860][ T6514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.683699][ T6514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.740603][ T6514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.781862][ T6514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.790645][ T6514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.851779][ T6514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.451696][ T6829] syz.0.269[6829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.452025][ T6829] syz.0.269[6829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.516697][ T6830] loop0: detected capacity change from 0 to 512 [ 144.612075][ T6830] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 144.700270][ T6830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 144.710274][ T6830] System zones: 1-12 [ 144.744018][ T6830] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.269: corrupted in-inode xattr: e_value size too large [ 144.786352][ T6830] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.269: couldn't read orphan inode 15 (err -117) [ 144.797451][ T28] audit: type=1326 audit(1755300291.649:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 144.831050][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.873361][ T28] audit: type=1326 audit(1755300291.679:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 144.881443][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.915205][ T6830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.937952][ T28] audit: type=1326 audit(1755300291.679:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 145.025436][ T28] audit: type=1326 audit(1755300291.679:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 145.069843][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.104014][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.116420][ T28] audit: type=1326 audit(1755300291.679:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 145.178011][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.188372][ T28] audit: type=1326 audit(1755300291.679:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 145.294231][ T28] audit: type=1326 audit(1755300291.679:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 145.399961][ T28] audit: type=1326 audit(1755300291.679:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 145.480576][ T28] audit: type=1326 audit(1755300291.679:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 145.558820][ T28] audit: type=1326 audit(1755300291.679:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6838 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 146.188179][ T6869] loop0: detected capacity change from 0 to 128 [ 147.839167][ T6891] loop1: detected capacity change from 0 to 2048 [ 147.872869][ T6891] loop1: p1 < > p4 [ 147.881094][ T6891] loop1: p4 size 8388608 extends beyond EOD, truncated [ 147.901314][ T786] vhci_hcd: vhci_device speed not set [ 148.712509][ T6920] syz.4.290[6920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.712651][ T6920] syz.4.290[6920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.780117][ T5807] udevd[5807]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 148.780816][ T5806] udevd[5806]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 148.953138][ T6925] loop1: detected capacity change from 0 to 128 [ 149.125158][ T6925] syz.1.293: attempt to access beyond end of device [ 149.125158][ T6925] loop1: rw=2049, sector=145, nr_sectors = 456 limit=128 [ 153.821653][ T7084] loop1: detected capacity change from 0 to 512 [ 153.847766][ T7084] ext4: Unknown parameter 'fscontext' [ 154.001313][ T7086] loop4: detected capacity change from 0 to 128 [ 154.845074][ T7108] syz.1.333[7108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.845220][ T7108] syz.1.333[7108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.559011][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 156.478380][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 156.573976][ T7155] loop0: detected capacity change from 0 to 1024 [ 156.612873][ T7155] EXT4-fs: Ignoring removed bh option [ 156.639871][ T7155] EXT4-fs: inline encryption not supported [ 156.689533][ T7155] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.728072][ T7155] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 156.779526][ T7155] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.350: lblock 2 mapped to illegal pblock 2 (length 1) [ 156.820593][ T7155] __quota_error: 66 callbacks suppressed [ 156.820609][ T7155] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 156.894235][ T7155] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.350: lblock 0 mapped to illegal pblock 48 (length 1) [ 156.963608][ T7155] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 157.001988][ T7155] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.350: Failed to acquire dquot type 0 [ 157.045099][ T7155] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 157.086547][ T7155] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.350: mark_inode_dirty error [ 157.098909][ T7171] syzkaller0: entered promiscuous mode [ 157.104513][ T7171] syzkaller0: entered allmulticast mode [ 157.112237][ T7155] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 157.127364][ T7155] EXT4-fs (loop0): 1 orphan inode deleted [ 157.136061][ T7155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.181966][ T7049] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 157.239801][ T7049] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 157.262337][ T7049] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:30: Failed to release dquot type 0 [ 157.970631][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.984441][ T5795] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 158.003292][ T5795] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 158.045612][ T5795] EXT4-fs error (device loop0): ext4_quota_off:7222: inode #3: comm syz-executor: mark_inode_dirty error [ 158.277043][ T7182] loop1: detected capacity change from 0 to 128 [ 158.302882][ T7182] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.337927][ T7185] syz.3.361[7185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.338070][ T7185] syz.3.361[7185] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.360290][ T7182] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.845457][ T7195] loop0: detected capacity change from 0 to 2048 [ 158.882652][ T7195] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 158.902054][ T7195] NILFS (loop0): mounting unchecked fs [ 158.972184][ T7195] NILFS (loop0): recovery complete [ 159.002054][ T7201] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.142282][ T28] audit: type=1800 audit(1755300305.989:218): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.364" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 159.273858][ T28] audit: type=1800 audit(1755300306.099:219): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.364" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 163.384353][ T28] audit: type=1326 audit(1755300310.239:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 163.431497][ T28] audit: type=1326 audit(1755300310.259:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 163.502068][ T28] audit: type=1326 audit(1755300310.259:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 163.553194][ T28] audit: type=1326 audit(1755300310.259:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 163.589315][ T28] audit: type=1326 audit(1755300310.259:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 163.910092][ T28] audit: type=1326 audit(1755300310.269:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 164.003261][ T7237] binder: 7228:7237 ioctl 400c620e 0 returned -14 [ 164.588002][ T28] audit: type=1326 audit(1755300310.269:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 164.611159][ T28] audit: type=1326 audit(1755300310.269:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 164.720459][ T28] audit: type=1326 audit(1755300310.269:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 164.771785][ T28] audit: type=1326 audit(1755300310.269:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 165.676119][ T7249] capability: warning: `syz.3.377' uses 32-bit capabilities (legacy support in use) [ 167.208369][ T7237] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 167.217939][ T7237] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 167.227712][ T7237] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 167.783804][ T7279] loop4: detected capacity change from 0 to 1024 [ 167.801076][ T7279] EXT4-fs: Ignoring removed orlov option [ 167.815891][ T7279] EXT4-fs: Ignoring removed nobh option [ 167.867293][ T7279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.935896][ T7284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 167.999872][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.635219][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 168.673810][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 168.721502][ T7300] netlink: 180 bytes leftover after parsing attributes in process `syz.0.394'. [ 168.828424][ T7300] netlink: 180 bytes leftover after parsing attributes in process `syz.0.394'. [ 169.494031][ T7332] netlink: 240 bytes leftover after parsing attributes in process `syz.1.404'. [ 170.782599][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 171.385507][ T7352] netlink: 96 bytes leftover after parsing attributes in process `syz.3.411'. [ 171.399105][ T7354] netlink: 'syz.1.412': attribute type 13 has an invalid length. [ 171.430632][ T7354] netlink: 'syz.1.412': attribute type 17 has an invalid length. [ 171.610200][ T7354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.847715][ T7366] loop4: detected capacity change from 0 to 512 [ 171.895037][ T7366] EXT4-fs: Ignoring removed i_version option [ 171.924982][ T7366] EXT4-fs: Mount option(s) incompatible with ext2 [ 172.997070][ T7390] loop1: detected capacity change from 0 to 1024 [ 173.028803][ T7390] EXT4-fs: Ignoring removed bh option [ 173.076622][ T7390] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 173.138659][ T7390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.314962][ T7397] loop3: detected capacity change from 0 to 512 [ 173.327388][ T7390] EXT4-fs error (device loop1): ext4_read_inline_dir:1565: inode #12: block 7: comm syz.1.424: path /118/file2/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 173.359167][ T7397] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.426: casefold flag without casefold feature [ 173.405085][ T7397] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.426: couldn't read orphan inode 15 (err -117) [ 173.418942][ T7397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.534489][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.776656][ T5796] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.319895][ T7427] netlink: 68 bytes leftover after parsing attributes in process `syz.3.434'. [ 175.327927][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 175.327943][ T28] audit: type=1326 audit(1755300322.169:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 175.409408][ T28] audit: type=1326 audit(1755300322.169:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 175.441398][ T7438] loop4: detected capacity change from 0 to 512 [ 175.466491][ T7438] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 175.544389][ T28] audit: type=1326 audit(1755300322.219:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 175.609774][ T28] audit: type=1326 audit(1755300322.219:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 175.673037][ T28] audit: type=1326 audit(1755300322.219:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 175.688078][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.436'. [ 175.739169][ T28] audit: type=1326 audit(1755300322.219:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 175.786672][ T28] audit: type=1326 audit(1755300322.219:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 175.887323][ T28] audit: type=1326 audit(1755300322.229:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 175.972217][ T28] audit: type=1326 audit(1755300322.229:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 176.001431][ T28] audit: type=1326 audit(1755300322.229:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7436 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbddaf8ebe9 code=0x7ffc0000 [ 176.282925][ T7438] syz.4.436 (7438) used greatest stack depth: 17960 bytes left [ 176.338754][ T1108] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 176.381960][ T7455] loop1: detected capacity change from 0 to 2048 [ 176.483770][ T7455] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 176.545397][ T7455] NILFS (loop1): mounting unchecked fs [ 176.650738][ T5807] udevd[5807]: incorrect nilfs2 checksum on /dev/loop1 [ 176.716270][ T7455] NILFS (loop1): recovery complete [ 176.759570][ T7466] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.528682][ T7472] loop3: detected capacity change from 0 to 512 [ 177.879943][ T7472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.115994][ T7472] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.976976][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.689239][ T7498] loop0: detected capacity change from 0 to 512 [ 183.059368][ T7502] netlink: 'syz.0.457': attribute type 12 has an invalid length. [ 184.466440][ T7530] loop0: detected capacity change from 0 to 2048 [ 184.560610][ T7530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.611058][ T7535] loop3: detected capacity change from 0 to 2048 [ 184.633578][ T7535] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.653425][ T7535] NILFS (loop3): mounting unchecked fs [ 184.660021][ T7534] loop4: detected capacity change from 0 to 1024 [ 184.665639][ T5806] udevd[5806]: incorrect nilfs2 checksum on /dev/loop3 [ 184.679534][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 184.679548][ T28] audit: type=1800 audit(1755300331.529:255): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.464" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 184.730632][ T7535] NILFS (loop3): recovery complete [ 184.744301][ T7534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.766928][ T7538] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.787450][ T7534] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.820540][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.882841][ T28] audit: type=1800 audit(1755300331.729:256): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.465" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 185.735572][ T28] audit: type=1800 audit(1755300331.839:257): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.465" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 186.790150][ T6514] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.097991][ T7544] loop1: detected capacity change from 0 to 128 [ 189.825136][ T7560] netdevsim netdevsim3: Direct firmware load for ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa failed with error -2 [ 189.952878][ T7560] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 191.398673][ T7578] loop0: detected capacity change from 0 to 512 [ 191.508815][ T7578] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.621873][ T7578] EXT4-fs (loop0): 1 truncate cleaned up [ 191.630288][ T7578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.887345][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.991416][ T7598] loop3: detected capacity change from 0 to 512 [ 192.074901][ T7598] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 192.083848][ T7599] loop1: detected capacity change from 0 to 512 [ 192.113742][ T7598] EXT4-fs (loop3): mount failed [ 192.159316][ T7599] EXT4-fs (loop1): too many log groups per flexible block group [ 192.202611][ T7599] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 192.265015][ T7599] EXT4-fs (loop1): mount failed [ 193.731500][ T28] audit: type=1326 audit(1755300340.579:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 193.854432][ T28] audit: type=1326 audit(1755300340.579:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 193.878241][ T28] audit: type=1326 audit(1755300340.609:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 193.959499][ T28] audit: type=1326 audit(1755300340.609:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 194.458171][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.601971][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.696076][ T28] audit: type=1326 audit(1755300340.609:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7627 comm="syz.3.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c598ebe9 code=0x7ffc0000 [ 196.113973][ T7648] netlink: 52 bytes leftover after parsing attributes in process `syz.1.492'. [ 197.901171][ T28] audit: type=1326 audit(1755300344.749:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 197.925256][ T7667] loop4: detected capacity change from 0 to 512 [ 197.980109][ T28] audit: type=1326 audit(1755300344.749:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 198.006732][ T7670] loop0: detected capacity change from 0 to 2048 [ 198.028010][ T28] audit: type=1326 audit(1755300344.749:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 198.099955][ T7670] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 198.106232][ T7670] loop0: partition table partially beyond EOD, truncated [ 198.118117][ T28] audit: type=1326 audit(1755300344.749:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 198.145502][ T7670] loop0: p1 start 4278190080 is beyond EOD, truncated [ 198.172582][ T7670] loop0: p2 start 16908800 is beyond EOD, truncated [ 198.201592][ T28] audit: type=1326 audit(1755300344.749:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f470938ebe9 code=0x7ffc0000 [ 198.218525][ T7667] EXT4-fs (loop4): too many log groups per flexible block group [ 198.240004][ T7670] loop0: p5 start 16908800 is beyond EOD, truncated [ 198.240129][ T7667] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 198.255863][ T7667] EXT4-fs (loop4): mount failed [ 200.836719][ T7695] loop1: detected capacity change from 0 to 128 [ 200.989407][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 200.989423][ T28] audit: type=1326 audit(1755300347.839:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 201.133886][ T28] audit: type=1326 audit(1755300347.879:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 201.204055][ T28] audit: type=1326 audit(1755300347.879:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 201.291966][ T28] audit: type=1326 audit(1755300347.879:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 201.507975][ T28] audit: type=1326 audit(1755300347.879:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 201.567703][ T28] audit: type=1326 audit(1755300347.879:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 201.590128][ T28] audit: type=1326 audit(1755300347.889:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 202.050346][ T785] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 202.357995][ T28] audit: type=1326 audit(1755300347.889:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 202.614326][ T28] audit: type=1326 audit(1755300347.889:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7694 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 202.644442][ T785] usb 1-1: Using ep0 maxpacket: 16 [ 202.653716][ T28] audit: type=1326 audit(1755300348.269:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.1.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff4778ebe9 code=0x7ffc0000 [ 202.666681][ T785] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.771814][ T785] usb 1-1: config 15 has an invalid interface number: 174 but max is 1 [ 202.792170][ T785] usb 1-1: config 15 has an invalid interface number: 5 but max is 1 [ 202.811333][ T785] usb 1-1: config 15 has an invalid interface descriptor of length 2, skipping [ 202.823895][ T785] usb 1-1: config 15 has no interface number 0 [ 202.830197][ T785] usb 1-1: config 15 has no interface number 1 [ 202.841871][ T785] usb 1-1: config 15 interface 174 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.853476][ T785] usb 1-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.863577][ T785] usb 1-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 202.874825][ T785] usb 1-1: config 15 interface 174 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 202.885756][ T785] usb 1-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 202.897445][ T785] usb 1-1: config 15 interface 174 altsetting 1 has an invalid endpoint with address 0xB7, skipping [ 202.908459][ T785] usb 1-1: config 15 interface 5 altsetting 128 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 202.919796][ T785] usb 1-1: config 15 interface 5 altsetting 128 has an invalid endpoint with address 0x0, skipping [ 202.930685][ T785] usb 1-1: config 15 interface 5 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 202.950876][ T785] usb 1-1: config 15 interface 174 has no altsetting 0 [ 202.958079][ T785] usb 1-1: config 15 interface 5 has no altsetting 0 [ 202.966814][ T785] usb 1-1: language id specifier not provided by device, defaulting to English [ 202.988186][ T785] usb 1-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 203.004024][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.012182][ T785] usb 1-1: Product: syz [ 203.016550][ T785] usb 1-1: Manufacturer: syz [ 203.021247][ T785] usb 1-1: SerialNumber: syz [ 203.230386][ T7736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.526'. [ 203.314321][ T7731] lo speed is unknown, defaulting to 1000 [ 203.321440][ T7731] lo speed is unknown, defaulting to 1000 [ 203.360313][ T785] sierra 1-1:15.174: Sierra USB modem converter detected [ 203.408131][ T785] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 203.410990][ T7731] lo speed is unknown, defaulting to 1000 [ 203.446918][ T785] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 203.635059][ T7731] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 308.661664][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 308.668670][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7034/1:b..l P6552/1:b..l [ 308.678088][ C1] rcu: (detected by 1, t=10502 jiffies, g=23005, q=339 ncpus=2) [ 308.685813][ C1] task:udevd state:R running task stack:26120 pid:6552 ppid:5161 flags:0x00004002 [ 308.697451][ C1] Call Trace: [ 308.700825][ C1] [ 308.703765][ C1] __schedule+0x14d2/0x44d0 [ 308.708287][ C1] ? bpf_jiffies64+0x20/0x40 [ 308.712889][ C1] ? asan.module_dtor+0x20/0x20 [ 308.717744][ C1] ? mark_lock+0x94/0x320 [ 308.722081][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 308.728066][ C1] ? save_fpregs_to_fpstate+0xa3/0x210 [ 308.733554][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 308.738970][ C1] preempt_schedule_irq+0xb5/0x140 [ 308.744109][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 308.749847][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 308.755687][ C1] irqentry_exit+0x67/0x70 [ 308.760126][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 308.765599][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x5c/0x60 [ 308.771795][ C1] Code: f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 70 2e 7e 7e 65 8b [ 308.791410][ C1] RSP: 0018:ffffc900033a7620 EFLAGS: 00000293 [ 308.797500][ C1] RAX: ffffffff8192b8ad RBX: 00007f8bcc115527 RCX: ffff88802c613c00 [ 308.805476][ C1] RDX: 0000000000000000 RSI: ffffffff8afc66a0 RDI: ffffffff8afc6660 [ 308.813456][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff21b46a0 [ 308.821442][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a1 R12: ffffffff8a8000d0 [ 308.829418][ C1] R13: ffffc900033a7ae0 R14: 00007f8bcc115527 R15: 1ffff92000674ee2 [ 308.837396][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.843483][ C1] ? is_bpf_text_address+0x6d/0x2a0 [ 308.848694][ C1] is_bpf_text_address+0x6d/0x2a0 [ 308.853730][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 308.858935][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.865026][ C1] kernel_text_address+0xa0/0xd0 [ 308.869980][ C1] __kernel_text_address+0xd/0x30 [ 308.875014][ C1] unwind_get_return_address+0x5d/0xc0 [ 308.880495][ C1] ? stack_trace_save+0xe0/0xe0 [ 308.885355][ C1] arch_stack_walk+0x11d/0x190 [ 308.890139][ C1] stack_trace_save+0x9c/0xe0 [ 308.894837][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 308.899960][ C1] ? __stack_depot_save+0x1f/0x630 [ 308.905078][ C1] kasan_set_track+0x4e/0x70 [ 308.909695][ C1] ? kasan_set_track+0x4e/0x70 [ 308.914463][ C1] ? kasan_save_free_info+0x2e/0x50 [ 308.919719][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 308.925017][ C1] ? slab_free_freelist_hook+0x130/0x1b0 [ 308.930664][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 308.935729][ C1] ? tomoyo_path_perm+0x3a0/0x4b0 [ 308.940762][ C1] ? tomoyo_path_symlink+0xa4/0xe0 [ 308.945886][ C1] ? security_path_symlink+0xe0/0x130 [ 308.951284][ C1] ? do_symlinkat+0x108/0x3f0 [ 308.955964][ C1] ? __x64_sys_symlink+0x7e/0x90 [ 308.960912][ C1] ? do_syscall_64+0x55/0xb0 [ 308.965506][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.971613][ C1] ? __kmem_cache_free+0xba/0x1f0 [ 308.976667][ C1] kasan_save_free_info+0x2e/0x50 [ 308.981733][ C1] ____kasan_slab_free+0x126/0x1e0 [ 308.986854][ C1] slab_free_freelist_hook+0x130/0x1b0 [ 308.992327][ C1] ? tomoyo_path_perm+0x3a0/0x4b0 [ 308.997382][ C1] __kmem_cache_free+0xba/0x1f0 [ 309.002261][ C1] tomoyo_path_perm+0x3a0/0x4b0 [ 309.007123][ C1] ? tomoyo_path_perm+0x1df/0x4b0 [ 309.012166][ C1] ? tomoyo_path_permission+0x380/0x380 [ 309.017773][ C1] ? __d_add+0x4ec/0x810 [ 309.022029][ C1] ? d_set_d_op+0x25f/0x370 [ 309.026558][ C1] ? current_check_access_path+0x38d/0x460 [ 309.032369][ C1] ? simple_lookup+0xc5/0xf0 [ 309.036966][ C1] ? lookup_one_qstr_excl+0x120/0x250 [ 309.042346][ C1] tomoyo_path_symlink+0xa4/0xe0 [ 309.047294][ C1] ? tomoyo_path_rmdir+0xe0/0xe0 [ 309.052263][ C1] ? kern_path_create+0x50/0x50 [ 309.057135][ C1] security_path_symlink+0xe0/0x130 [ 309.062357][ C1] do_symlinkat+0x108/0x3f0 [ 309.066867][ C1] ? vfs_symlink+0x2b0/0x2b0 [ 309.071463][ C1] ? getname_flags+0x20a/0x500 [ 309.076242][ C1] __x64_sys_symlink+0x7e/0x90 [ 309.081028][ C1] do_syscall_64+0x55/0xb0 [ 309.085475][ C1] ? clear_bhb_loop+0x40/0x90 [ 309.090172][ C1] ? clear_bhb_loop+0x40/0x90 [ 309.094855][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.100777][ C1] RIP: 0033:0x7f8bcc115527 [ 309.105204][ C1] RSP: 002b:00007ffcc4209728 EFLAGS: 00000202 ORIG_RAX: 0000000000000058 [ 309.113622][ C1] RAX: ffffffffffffffda RBX: 0000563e8d1cfbc0 RCX: 00007f8bcc115527 [ 309.121600][ C1] RDX: fffffffffffffe68 RSI: 00007ffcc4209730 RDI: 0000563e8d1921d0 [ 309.129583][ C1] RBP: 00000000000002db R08: 0000000000000064 R09: 0000000000000000 [ 309.137566][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffcc4209730 [ 309.145541][ C1] R13: 0000563e8d1a9420 R14: 0000000000000008 R15: 0000563e8d1cfbc0 [ 309.153528][ C1] [ 309.156552][ C1] task:kworker/u4:20 state:R running task stack:22728 pid:7034 ppid:2 flags:0x00004000 [ 309.167340][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 309.175160][ C1] Call Trace: [ 309.178442][ C1] [ 309.181384][ C1] __schedule+0x14d2/0x44d0 [ 309.185904][ C1] ? mark_lock+0x60/0x320 [ 309.190329][ C1] ? asan.module_dtor+0x20/0x20 [ 309.195187][ C1] ? mark_lock+0x94/0x320 [ 309.199543][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 309.205536][ C1] ? preempt_schedule_irq+0xaa/0x140 [ 309.210858][ C1] preempt_schedule_irq+0xb5/0x140 [ 309.215992][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 309.221722][ C1] ? mark_lock+0x94/0x320 [ 309.226082][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 309.231917][ C1] irqentry_exit+0x67/0x70 [ 309.236358][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 309.242357][ C1] RIP: 0010:lock_acquire+0x1f2/0x410 [ 309.247700][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 309.267316][ C1] RSP: 0018:ffffc9000b4a78a0 EFLAGS: 00000206 [ 309.273412][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3234166cd287fb00 [ 309.281408][ C1] RDX: 0000000000000000 RSI: ffffffff8aaacb40 RDI: ffffffff8afc66c0 [ 309.289388][ C1] RBP: ffffc9000b4a79a8 R08: dffffc0000000000 R09: 1ffffffff21b46a0 [ 309.297366][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a1 R12: 1ffff92001694f20 [ 309.305347][ C1] R13: ffffffff8cd2fbe0 R14: 0000000000000246 R15: dffffc0000000000 [ 309.313342][ C1] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 309.318904][ C1] ? read_lock_is_recursive+0x20/0x20 [ 309.324302][ C1] ? batadv_tvlv_container_ogm_append+0x463/0x4e0 [ 309.330853][ C1] ? batadv_tvlv_container_ogm_append+0x463/0x4e0 [ 309.337321][ C1] batadv_iv_ogm_schedule+0x417/0xe90 [ 309.342718][ C1] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 309.348293][ C1] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 309.353871][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 309.361102][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x731/0x840 [ 309.368154][ C1] ? process_scheduled_works+0x957/0x15b0 [ 309.373894][ C1] process_scheduled_works+0xa45/0x15b0 [ 309.379471][ C1] ? assign_work+0x400/0x400 [ 309.384100][ C1] ? assign_work+0x39e/0x400 [ 309.388719][ C1] worker_thread+0xa55/0xfc0 [ 309.393340][ C1] kthread+0x2fa/0x390 [ 309.397417][ C1] ? pr_cont_work+0x560/0x560 [ 309.402121][ C1] ? kthread_blkcg+0xd0/0xd0 [ 309.406718][ C1] ret_from_fork+0x48/0x80 [ 309.411154][ C1] ? kthread_blkcg+0xd0/0xd0 [ 309.415786][ C1] ret_from_fork_asm+0x11/0x20 [ 309.420604][ C1] [ 309.423632][ C1] rcu: rcu_preempt kthread starved for 10577 jiffies! g23005 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 309.434836][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 309.444830][ C1] rcu: RCU grace-period kthread stack dump: [ 309.450733][ C1] task:rcu_preempt state:R running task stack:26920 pid:17 ppid:2 flags:0x00004000 [ 309.461683][ C1] Call Trace: [ 309.464980][ C1] [ 309.467917][ C1] __schedule+0x14d2/0x44d0 [ 309.472441][ C1] ? _raw_spin_unlock_irqrestore+0x70/0x110 [ 309.478347][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 309.484260][ C1] ? asan.module_dtor+0x20/0x20 [ 309.489134][ C1] ? enqueue_timer+0x225/0x530 [ 309.493901][ C1] ? __mod_timer+0x984/0xdb0 [ 309.498503][ C1] schedule+0xbd/0x170 [ 309.502578][ C1] schedule_timeout+0x160/0x280 [ 309.507436][ C1] ? console_conditional_schedule+0x40/0x40 [ 309.513343][ C1] ? update_process_times+0x1b0/0x1b0 [ 309.518767][ C1] ? prepare_to_swait_event+0x339/0x360 [ 309.524329][ C1] rcu_gp_fqs_loop+0x302/0x1560 [ 309.529193][ C1] ? rcu_gp_init+0x110e/0x1510 [ 309.533969][ C1] ? rcu_gp_kthread+0x380/0x380 [ 309.538825][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 309.544817][ C1] ? rcu_gp_init+0x1510/0x1510 [ 309.549595][ C1] ? rcu_gp_cleanup+0xb4c/0xca0 [ 309.554489][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 309.559700][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 309.564917][ C1] rcu_gp_kthread+0x99/0x380 [ 309.569545][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 309.574670][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 309.579622][ C1] ? __kthread_parkme+0x162/0x1c0 [ 309.584760][ C1] kthread+0x2fa/0x390 [ 309.588837][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 309.593965][ C1] ? kthread_blkcg+0xd0/0xd0 [ 309.598557][ C1] ret_from_fork+0x48/0x80 [ 309.602983][ C1] ? kthread_blkcg+0xd0/0xd0 [ 309.607582][ C1] ret_from_fork_asm+0x11/0x20 [ 309.612462][ C1] [ 309.615482][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 309.621815][ C1] Sending NMI from CPU 1 to CPUs 0: [ 309.627051][ C0] NMI backtrace for cpu 0 [ 309.627074][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.102-syzkaller #0 [ 309.627089][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.627098][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 309.627125][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 e6 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 309.627138][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c6 [ 309.627152][ C0] RAX: 4417a64157b6c100 RBX: ffffffff8161914b RCX: 4417a64157b6c100 [ 309.627164][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 309.627175][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 309.627187][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e4a8828 [ 309.627198][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 309.627213][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 309.627226][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 309.627236][ C0] CR2: 000000110c2b65b9 CR3: 000000002d8b8000 CR4: 00000000003506f0 [ 309.627251][ C0] Call Trace: [ 309.627257][ C0] [ 309.627262][ C0] default_idle+0x13/0x20 [ 309.627304][ C0] default_idle_call+0x6c/0xa0 [ 309.627330][ C0] do_idle+0x1eb/0x510 [ 309.627354][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 309.627373][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 309.627408][ C0] cpu_startup_entry+0x43/0x60 [ 309.627427][ C0] rest_init+0x2e2/0x300 [ 309.627441][ C0] ? time_init+0x40/0x40 [ 309.627464][ C0] arch_call_rest_init+0xe/0x10 [ 309.627490][ C0] start_kernel+0x459/0x4e0 [ 309.627516][ C0] x86_64_start_reservations+0x2a/0x30 [ 309.627538][ C0] x86_64_start_kernel+0x60/0x60 [ 309.627560][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 309.627592][ C0]