last executing test programs: 4m33.303999715s ago: executing program 32 (id=13): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r1, r0, 0x0, 0x40001) 4m25.097851157s ago: executing program 2 (id=27): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) 4m24.760503187s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) dup(r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth0_to_bond\x00', 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b", 0x27}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) timerfd_create(0x8, 0x80000) 4m23.110314443s ago: executing program 2 (id=31): syz_usb_connect(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a0001000180c200ecffffff08000f"], 0x3c}}, 0x0) 4m19.60146217s ago: executing program 2 (id=39): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)=""/139, 0x8b) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x10, 0x0) 4m18.74948485s ago: executing program 2 (id=43): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000000a80)=ANY=[], 0x1, 0x24a, &(0x7f0000001140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) 4m17.71994391s ago: executing program 2 (id=47): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000640)='console\x00'}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x5}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0xa8, 0x110, 0x0, {0x0, 0x28e}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_pktinfo={{0x18, 0x0, 0x34, {0x0, @empty, @private}}}], 0x18}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4m6.980141821s ago: executing program 1 (id=69): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast2, @in=@loopback, 0x4f20, 0xd5, 0x4e20, 0x0, 0x2}, {0x0, 0x813, 0x2, 0x0, 0x0, 0x4}, {0xfffffffffffffff7}, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x6c}, 0xa, @in6=@private2, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 4m6.561548306s ago: executing program 1 (id=70): syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000300)='./file1\x00', 0x36bc07489eb8b1ec, &(0x7f0000000580)={[{@data_err_ignore}, {@nouser_xattr}, {@i_version}, {@jqfmt_vfsv0}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x8000000000000000}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x30, 0x64, 0x38, 0x61, 0x66, 0x63], 0x2d, [0x63, 0x61, 0x66, 0x32], 0x2d, [0x38, 0x38, 0x61, 0x3], 0x2d, [0x38, 0x32, 0x62], 0x2d, [0x61, 0x66, 0x32, 0x33, 0x36, 0x66, 0x66, 0x31]}}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffff801}}]}, 0x1, 0x254, &(0x7f00000006c0)="$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") creat(&(0x7f0000000340)='./file1\x00', 0x11) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x10000, 0xb0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1, 0x0, 0x8000000) 4m4.709771375s ago: executing program 1 (id=73): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./bus\x00', 0x50, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES8=0x0, @ANYRES8=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT=0x0, @ANYBLOB="28296bba3d52dffb772ec67f7b6f1151ba3aacab513b5122c8aa64607d7ee4f5ee883df834bfd681fcec0935eb06eb564f33d91481eb06a5cb275e0ee9a2392c4455aae28223b51859d8eb34f0f05985dd29d8e15ccfcaccba", @ANYRES32=0x0], 0x52, 0x63e, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x1}], 0x1, 0x6e45, 0x80, 0x0) 4m2.385094071s ago: executing program 1 (id=76): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x764, &(0x7f0000000f80)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000280)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\v4\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,\xcd1'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4m2.23388979s ago: executing program 33 (id=47): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000640)='console\x00'}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x5}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x190, 0x168, 0x10, 0x388, 0xb, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x3a, 0xb6, 0x0, 0x20}, 0x6000000, 0xa8, 0x110, 0x0, {0x0, 0x28e}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_pktinfo={{0x18, 0x0, 0x34, {0x0, @empty, @private}}}], 0x18}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 3m59.279503424s ago: executing program 1 (id=82): syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000300)='./file1\x00', 0x36bc07489eb8b1ec, &(0x7f0000000580)={[{@data_err_ignore}, {@nouser_xattr}, {@i_version}, {@jqfmt_vfsv0}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x8000000000000000}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x30, 0x64, 0x38, 0x61, 0x66, 0x63], 0x2d, [0x63, 0x61, 0x66, 0x32], 0x2d, [0x38, 0x38, 0x61, 0x3], 0x2d, [0x38, 0x32, 0x62], 0x2d, [0x61, 0x66, 0x32, 0x33, 0x36, 0x66, 0x66, 0x31]}}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffff801}}]}, 0x1, 0x254, &(0x7f00000006c0)="$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") creat(&(0x7f0000000340)='./file1\x00', 0x11) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x10000, 0xb0) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1, 0x0, 0x8000000) 3m58.396219416s ago: executing program 1 (id=85): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r2, r1, 0x0, 0x40001) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 3m56.420402262s ago: executing program 34 (id=85): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r2, r1, 0x0, 0x40001) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) 1m47.797461822s ago: executing program 3 (id=367): r0 = socket$unix(0x1, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000abaff9), 0x10) 1m38.585830353s ago: executing program 3 (id=391): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(0x0, &(0x7f0000000880)=""/139, 0x8b) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x10, 0x0) 1m36.220007872s ago: executing program 3 (id=394): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014976ab94c1fb10628c46d2e681cdb9e5c1a31965c61e0df52c5e"}) 1m35.973776036s ago: executing program 3 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000340)=ANY=[], 0x290) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, 0x0, 0x0) 1m34.949954196s ago: executing program 3 (id=397): socket$inet6(0xa, 0x3, 0x8000000003c) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)={0x4c, r3, 0xe2b, 0x70bd2e, 0x25dfdbfc, {{}, {@val={0x8}, @val={0x0, 0x99, {0x8, 0x53}}}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4040084}, 0x20000000) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x2402008c) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x202, 0x0) fanotify_mark(r6, 0x1, 0x4800003e, r5, 0x0) dup2(r6, r5) inotify_init1(0x80800) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0xa9c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) 1m33.142305442s ago: executing program 5 (id=403): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000007c0)={@desc={0x1, 0x0, @desc1}}) 1m31.999419759s ago: executing program 5 (id=405): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(0x0, &(0x7f0000000880)=""/139, 0x8b) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x10, 0x0) 1m30.911939313s ago: executing program 5 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000024) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bb80), 0x0, 0x40000) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r2}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r1, &(0x7f0000000000), &(0x7f0000000780)=@udp6=r2}, 0x20) r3 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@msize={'msize', 0x3d, 0x7ff}}, {@ignoreqv}, {@afid={'afid', 0x3d, 0xfffffffffffffffd}}, {@cachetag={'cachetag', 0x3d, 'rfdno'}}, {@cache_readahead}, {@access_any}]}}) 1m28.40601612s ago: executing program 5 (id=412): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@min_batch_time={'min_batch_time', 0x3d, 0x200}}, {@auto_da_alloc}, {@bsdgroups}, {@delalloc}, {@init_itable}, {@nodiscard}, {@nodiscard}, {@grpid}]}, 0x1, 0x566, &(0x7f0000001b00)="$eJzs3cFvI1cZAPBvJnE2u5uSFBCCStCKttqtYJNNQ9sIISgXOFUCyn0JiTeKYser2CmbqGJTceJaIYHEiRNH/gCkqgduSAghVYIL4oAKAiHYwgEJ6KCxx03WGSferWM3m99PmvV7zzPve2+sPM+z344DOLeeiIgXI2IiIp6JiNmiPC22G3lmv7PfO3dfXc23JLLs5b8nkRRl3bry/GREXO4cEtMR8Y2vRnw7ORq3ubu3uVKrVbeL/EKrfmuhubt3baO+sl5dr24tLS0+v/zC8nPT17PCoSj3b66b+OlXvvjGZ7/zxxt/vfrdvKYvfCwq0dOPfvYfIG6ntZX2uejKz9H2A9T1QTXZ7iEAAGdBfo3/4Yj4dPv6fzYm2ldzPSbG0TIAAABgWLIvzcR/k4gMAAAAeGilETETSTpfrAWYiTSdKj4b+GhcSmuNZuszNxs7W2v5cxFzUUlvbtSq14u1wnNRSfL8YrHGtpt/tie/FBGPRsQPZi+28/OrjdramD/7AAAAgPPics/8/1+zaTt9spL/JwAAAAB8cM31zQAAAAAPC1N+AAAAePj1zP/vjKsdAAAAwKn42ksv5VvW/f3rtVd2dzYbr1xbqzY35+s7q/Orje1b8+uNxnr7nn31k+qrNRq3PhdbO7cXWtVma6G5u3ej3tjZat3YuOcnsAEAAIARevTxN3+XRMT+5y+2tyjuAwhwjz+NuwHAME10ExfG2w5g9NzFG86vyv3sPHV67QDGJznheYt3AADg7LvyiaPf/3en+ff12QBw5hy71uf7b4+uIQDAyLyv7/9NEOBMqxysAATOoTQiPtRJ9l0F3Pf7/18PGiXLIn4ze7jE5QMAAIzWTHtL0vliHjATaTo/H/FIRDoXleTmRq16vZgf/Ha2ciHPL7aP/OWJa4YBAAAAAAAAAAAAAAAAAAAAAAAAgI4sSyLrVVJU5sJguwEAAABjFpH+JYlo38v/yuxTMwefDHTu7j+V/Hs2/lwU/fjlH95eabW2F/Pyf7R/y2sqIlo/Ksqf7fvzYQAAAMCwJft9n+rM04vHxZG2CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBz4J27r652t1HG/duXI2KuLP5kTLcfp6MSEZf+mcTkoeOSiJgYQvz91yLi42+UxE/i3SzL5opWlMW/OLT4Zf1P8tMS/eKnEXF5CPHhPHszH39eLPv7S+OJ9mP5399ksb1f/ce/9L3xb6LP+PPIkdrqpTEee+tnC33jvxbx2GT5+NONn/SJ/+SR2v6TZdnRGN/65t5ev/jZTyKulL7/JPfEWmjVby00d/eubdRX1qvr1a2lpcXnl19Yfm75+sLNjVq1+Lc0xuuf/Pm7x/X/Ukn8P/y+M/4e1/+n+lXa439v3b77kU6yUhb/6pOl77/TcRA/Oxw/H/snJiOeLtJ5W6500/ud9GGfyt9njun/Wp/zf9Lrf3XA/j/z9e+9PeCuAMAINHf3Nldqter2MYnpIyW/GuCo00q8/nTEcCr8xfT4evHgiexO55UbaOf8cvB021N50MPzq9WDkm6vTjgqn16M8IRno4n1eGxORK243u95vbqlA1Y4dfI5HDDRM1D0TiCyjjunOjoBAADDdHDRP+6WAAAAAAAAAAAAAAAAAAAAwPk1itub9cbsdy9iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBx+n8AAAD//z5m26o=") syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @empty, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000180)={[{@user_xattr}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_err_ignore, 0x0}, {@journal_dev}, {@oldalloc}, {@grpjquota}, {@mblk_io_submit}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}, {@grpid}, {@i_version}, {@acl}], [{@dont_hash}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f6, &(0x7f0000000700)="$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") 1m28.133464916s ago: executing program 3 (id=413): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40488b1}, 0x20040080) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x15, 0x0, 0x0, 0xfffff00c}]}, 0x10) write$UHID_INPUT(r4, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e04046d0c"], 0x7) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 1m21.984425687s ago: executing program 5 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1f5) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x25c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x12}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x2]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x140e}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0xd8, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcb45}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000002b00000000000000000000000000380001000000000000000300000000000000000000000000000000000000000000009f0000000000000000080000000000000002000000000000"], 0x78) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2000800) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000000)='\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1m20.273665758s ago: executing program 6 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x7bf4, 0x80}, &(0x7f0000002480), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002380)={0x1, 0x1, 0x0, &(0x7f00000000c0)=[{0x0}], 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) ioprio_set$pid(0x1, r0, 0x4000) 1m19.780549157s ago: executing program 5 (id=428): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) tkill(0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a40), 0x0) fstat(r3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40002161, 0x0) 1m18.686585321s ago: executing program 6 (id=430): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008440) process_mrelease(0xffffffffffffffff, 0x0) getpgrp(r1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) msgget(0x3, 0x710) msgget(0x2, 0x624) msgctl$IPC_RMID(0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}, 0xd0}) 1m17.191839828s ago: executing program 6 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) dup(r0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet_tcp_buf(r5, 0x6, 0x21, &(0x7f0000000200)="24fc911e918c74ad7a0e599e17a90ecabe833ca12054887f4142a64471dbe048", 0x20) getsockopt$inet_tcp_buf(r5, 0x6, 0x21, 0x0, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth0_to_bond\x00', 0x10) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b0009008000", 0x2c}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}]}, 0x10) sendmmsg$inet(r8, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) timerfd_create(0x8, 0x80000) 1m15.990796669s ago: executing program 6 (id=435): rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc4fffffe) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000001000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) r5 = getpgid(r4) setpgid(0x0, r5) lstat(0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x100240d, 0x0) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 1m12.72980574s ago: executing program 6 (id=439): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000073111f0000000000630a00ff000000009500000000000000b003000000e54d9a4320c267fb3605f6c3f687dcfe09064db290cb1e5db93406c6a38b2b345f8f3c747a79a06ef7917f53fef4d0e04e3b462e606c8bb1d523659dfd3f5e898b83540000c2c680a56b7cf106b2"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) splice(r0, 0x0, r1, &(0x7f00000007c0)=0xa, 0x4, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) syslog(0x4, &(0x7f00000001c0)=""/72, 0x48) gettid() r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1m12.72954151s ago: executing program 35 (id=413): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40488b1}, 0x20040080) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, 0x0, 0x0) bind$inet(r3, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x4000000}}], 0x400000000000172, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x15, 0x0, 0x0, 0xfffff00c}]}, 0x10) write$UHID_INPUT(r4, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e04046d0c"], 0x7) mkdir(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 1m8.921899794s ago: executing program 6 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @aes128, 0x1, '\x00', @b}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)='T', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)='_H', 0x2}], 0x1}}], 0x2, 0xc8000) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='nilfs2\x00', 0x0, 0x0) 1m7.205468305s ago: executing program 36 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @aes128, 0x1, '\x00', @b}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[], 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)='T', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)='_H', 0x2}], 0x1}}], 0x2, 0xc8000) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='nilfs2\x00', 0x0, 0x0) 1m4.537725392s ago: executing program 37 (id=428): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="00181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) gettid() r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001440)=ANY=[], 0xffffff6a) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) tkill(0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a40), 0x0) fstat(r3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40002161, 0x0) 15.053235806s ago: executing program 9 (id=532): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) fcntl$setown(r4, 0x8, 0x0) r5 = fsopen(&(0x7f00000002c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') getdents(r7, &(0x7f00000004c0)=""/248, 0xf8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 14.922071774s ago: executing program 8 (id=533): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000000)) 14.226362595s ago: executing program 8 (id=534): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xc3, 0x28000, 0xe21c, 0x200000, 0xfd, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x6, 0x5, 0x6}]}}, @qdisc_kind_options=@q_gred={{}, {0x0, 0x2, [@TCA_GRED_PARMS={0x0, 0x1, {0x6fac45a7, 0xb5, 0x6, 0x8, 0x8, 0x8001, 0x20000, 0x3, 0x62, 0x5, 0x12, 0x8, 0x5, 0x9, 0x7ff, 0xfffffffd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000140)=@raw=[@generic={0x90, 0x9, 0xd, 0x0, 0x690}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x19, &(0x7f0000000200)=""/25, 0x41000, 0x1, '\x00', r7, 0x1c, r2, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x1fe96, r2, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r9, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x8300, 0x0, 0x0, 0x4, 0x9, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 14.087942323s ago: executing program 9 (id=535): syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000300)='./file1\x00', 0x36bc07489eb8b1ec, &(0x7f0000000580)={[{@data_err_ignore}, {@nouser_xattr}, {@i_version}, {@jqfmt_vfsv0}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x8000000000000000}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x30, 0x64, 0x38, 0x61, 0x66, 0x63], 0x2d, [0x63, 0x61, 0x66, 0x32], 0x2d, [0x38, 0x38, 0x61, 0x3], 0x2d, [0x38, 0x32, 0x62], 0x2d, [0x61, 0x66, 0x32, 0x33, 0x36, 0x66, 0x66, 0x31]}}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffff801}}]}, 0x1, 0x254, &(0x7f00000006c0)="$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") creat(&(0x7f0000000340)='./file1\x00', 0x11) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x10000, 0xb0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1, 0x0, 0x8000000) 13.533691286s ago: executing program 7 (id=536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0xffffffffffffffad, 0x12) 12.456718889s ago: executing program 7 (id=537): mkdir(0x0, 0x184) r0 = open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000009c0)='./control\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x242, &(0x7f0000000540)="$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") readv(r0, &(0x7f0000000480)=[{&(0x7f00000008c0)=""/197, 0xc5}, {&(0x7f0000000400)=""/120, 0x78}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000007c0)=""/234, 0xea) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) pselect6(0x40, &(0x7f0000000040)={0x4, 0x8000, 0x1, 0x5, 0x7ff, 0x4, 0x5, 0x6}, &(0x7f0000000080)={0x4, 0x3, 0x3, 0x5, 0x2, 0x6, 0x40}, &(0x7f00000000c0)={0x9, 0x0, 0x1, 0x4, 0x6, 0xffff, 0x7, 0x1}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r2}, 0x38) unlink(&(0x7f00000001c0)='./control/file0\x00') 12.362516454s ago: executing program 8 (id=538): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400122a2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x739d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.70050069s ago: executing program 8 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000e00)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000580)={0x40000000, 0x2, "8f93863a1dd4df4c38226f24bcd08c1d06a3f7f6b5d2f7bb1bcf5c99f1e10b60", 0x200000000000000b, 0xd9de, 0x3, 0x1, 0xd, 0xc6e0, 0x1, 0x800, [0x5, 0xb1b4, 0x7f, 0xffc]}) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000900)=[0x5, 0x9, 0x0]) 8.51308474s ago: executing program 4 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$vcsa(0xffffffffffffff9c, 0x0, 0x400080, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1f5) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x238, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x12}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x2]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x140e}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0xd8, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcb45}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000002b00000000000000000000000000380001000000000000000300000000000000000000000000000000000000000000009f0000000000000000080000000000000002000000000000"], 0x78) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2000800) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000000)='\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091bb0ff3d030000000000008701000000000000bc26000000000000bf67000000000000150300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 8.506136851s ago: executing program 8 (id=544): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) fcntl$setown(r4, 0x8, 0x0) r5 = fsopen(&(0x7f00000002c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') getdents(r7, &(0x7f00000004c0)=""/248, 0xf8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.737804165s ago: executing program 0 (id=546): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2, 0x0, 0x20007fffffff}, 0x18) exit(0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x3f, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000000)={{0xe07, 0x4}, 0x6b}, 0x10) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x2000) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000040)={0x0, 'batadv_slave_0\x00', {0x3}}) socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0x2, @empty, 0x0, 0x2}, 0x20) connect$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x80, 0x6}, 0x20) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f00000024c0)={0xa, 0x7, 0x0, @loopback}, 0x20) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getsockopt$inet6_mreq(r1, 0x29, 0x6, 0x0, &(0x7f0000000780)) 7.505772949s ago: executing program 4 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @broadcast}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) renameat2(r3, &(0x7f0000000000)='./file1\x00', r3, 0x0, 0x4) sendfile(r4, r3, 0x0, 0x578410eb) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000240)={0x980000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 6.493303838s ago: executing program 0 (id=548): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) 6.250147223s ago: executing program 0 (id=549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2014800, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 5.903624183s ago: executing program 4 (id=550): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0'}, 0xb) 5.898179893s ago: executing program 7 (id=551): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffd9f, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)={0x80001, 0x0, 0x26}, 0x18) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r5, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e22,fowner<', @ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYRESDEC=0x0]) r7 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133e, 0xffffffff], [{0xffffffff, 0x7}, {0x31, 0x85}, {0x20, 0x7ff}, {0x1, 0x8}, {0x40, 0x7}, {}, {}, {}, {0x2000000, 0x20000}, {}, {0x1, 0x8}, {0x0, 0x8000000}]}) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f000004c000/0x1000)=nil, 0x1000, 0x1000001, 0x28011, 0xffffffffffffffff, 0x4b08d000) 5.7846833s ago: executing program 9 (id=552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400122a2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x739d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.153899236s ago: executing program 9 (id=553): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local}, 0xc) 3.985849936s ago: executing program 7 (id=554): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000073111f0000000000630a00ff000000009500000000000000b003000000e54d9a4320c267fb3605f6c3f687dcfe09064db290cb1e5db93406c6a38b2b345f8f3c747a79a06ef7917f53fef4d0e04e3b462e606c8bb1d523659dfd3f5e898b83540000c2c680a56b7cf106b2"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2002, 0x0) splice(r0, 0x0, r1, &(0x7f00000007c0)=0xa, 0x4, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) syslog(0x4, &(0x7f00000001c0)=""/72, 0x48) gettid() r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x6010, &(0x7f0000000740)={[{@barrier}, {@jqfmt_vfsold}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4ca, &(0x7f0000000e40)="$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") syz_mount_image$fuse(&(0x7f00000005c0), &(0x7f0000000700)='./file0\x00', 0x20, &(0x7f0000000740)=ANY=[], 0x1, 0x0, 0x0) 3.980102676s ago: executing program 8 (id=555): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1000024) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bb80), 0x0, 0x40000) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x81, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f00000004c0), &(0x7f0000000400)=@udp6=r3}, 0x3f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r2, &(0x7f0000000000), &(0x7f0000000780)=@udp6=r3}, 0x20) r4 = dup(0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@msize={'msize', 0x3d, 0x7ff}}, {@ignoreqv}, {@afid={'afid', 0x3d, 0xfffffffffffffffd}}, {@cachetag={'cachetag', 0x3d, 'rfdno'}}, {@cache_readahead}, {@access_any}]}}) 3.9099076s ago: executing program 4 (id=556): r0 = socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000abaff9), 0x10) 3.426133029s ago: executing program 0 (id=557): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x0, 0x61, 0x1}}) 3.205552101s ago: executing program 7 (id=558): syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000200000000000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, 0x0, &(0x7f0000000540)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000840)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r5) r6 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r6, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 3.193263522s ago: executing program 9 (id=559): syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) semget$private(0x0, 0x4000000009, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_OPENQRY(r2, 0x4b4c, &(0x7f0000000080)) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000140)={0x1b0001, 0x0, [0x9, 0x0, 0x8, 0x75, 0x25a, 0x0, 0x500, 0xffffffffffff7945]}) fstat(0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xe7e778b4449e4ac4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x2f, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x2, 0x4e24, @rand_addr=0x64010102}, 0x3ae1fb07b65935cc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x8, 0xfd}) r7 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0) 3.103260247s ago: executing program 0 (id=560): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x3b16, 0x1, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setgroups(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f00000004c0)={0x1, 0x6, 0x7d, &(0x7f0000000600)=""/125}) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7ffff000) fallocate(r3, 0x0, 0x0, 0x1001f0) 2.015772742s ago: executing program 0 (id=561): mkdir(0x0, 0x184) r0 = open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xa40c3, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000009c0)='./control\x00', 0x2200054, &(0x7f0000000140)={[{@minixdf}, {@nodelalloc}]}, 0x1, 0x242, &(0x7f0000000540)="$eJzs3T9oM2UcB/DvXRJf+75BX3URBBVERAvldRNcXheFgpQiIqhQEXFRWqG2uLVOLg46q3RyKeJmdZQiFBdFcKraoS6CFocWBx0il2u11oh/UnPifT5wyV3yPM/vOS7fJ1mOBGity0muJukkmU7SS1KcbnB7vV0+PtyY2llIBoNHvi+G7erj2km/S0nWk9yXZLss8lw3Wd16Yv+H3YfuenWld+fbW49PTfQkjx3s7z189NbcK+/N3rv66effzhW5mv5vzuv8FSNe6xbJjf9Gsf+Iotv0DPgr5l9694sq9zcluWOY/17K1BfvteVrtnu5580/6vv6d5/dMsm5AudvMOhV34HrA6B1yiT9FOVMknq/LGdm6t/wX3Yuls8vLb84/ezSyuIzTa9UwHnpJ3sPfnDh/Utn8v9Np84/8P9V5f/R+c2vqv2jTtOzASapyv/0U2t3R/6hdeQf2kv+ob3kH9pL/qG95B/aS/6hveQf2kv+ob3+Tv4/mtCcgMk4nX8AoF0GF5q+AxloStPrDwAAAAAAAAAAAAAAAAAA8HsbUzsLJ9ukan78RnLwQJLuqPqd4f8RJ9cOHy8eFlWzXxR1t7E8eduYA/xq8fAfdHqn4buvr/u62fqf3Nps/bXFZP3lJFe63bOfv8H1449/w5+833t6/BrjuP+xZuv/tNls/dnd5MNq/bkyav0pc/PwefT606+u35j1X/hxzAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmJ8DAAD//7lGcFk=") readv(r0, &(0x7f0000000480)=[{&(0x7f00000008c0)=""/197, 0xc5}, {&(0x7f0000000400)=""/120, 0x78}], 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f00000007c0)=""/234, 0xea) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) pselect6(0x40, &(0x7f0000000040)={0x4, 0x8000, 0x1, 0x5, 0x7ff, 0x4, 0x5, 0x6}, &(0x7f0000000080)={0x4, 0x3, 0x3, 0x5, 0x2, 0x6, 0x40}, &(0x7f00000000c0)={0x9, 0x0, 0x1, 0x4, 0x6, 0xffff, 0x7, 0x1}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x6]}, 0x8}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r2}, 0x38) unlink(&(0x7f00000001c0)='./control/file0\x00') 1.203324709s ago: executing program 9 (id=562): syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000300)='./file1\x00', 0x36bc07489eb8b1ec, &(0x7f0000000580)={[{@data_err_ignore}, {@nouser_xattr}, {@i_version}, {@jqfmt_vfsv0}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x8000000000000000}}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x38, 0x30, 0x64, 0x38, 0x61, 0x66, 0x63], 0x2d, [0x63, 0x61, 0x66, 0x32], 0x2d, [0x38, 0x38, 0x61, 0x3], 0x2d, [0x38, 0x32, 0x62], 0x2d, [0x61, 0x66, 0x32, 0x33, 0x36, 0x66, 0x66, 0x31]}}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffff801}}]}, 0x1, 0x254, &(0x7f00000006c0)="$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") creat(&(0x7f0000000340)='./file1\x00', 0x11) syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='mnt/encrypted_dir\x00', 0x10000, 0xb0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/63, 0x3f}], 0x1, 0x0, 0x8000000) 1.041653539s ago: executing program 4 (id=563): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20008000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400122a2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x739d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 80.675035ms ago: executing program 4 (id=564): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x501) fcntl$setstatus(r0, 0x4, 0x2000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 7 (id=565): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = fsopen(&(0x7f00000002c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') getdents(r5, &(0x7f00000004c0)=""/248, 0xf8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.073230][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.118115][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.150203][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.208637][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.238368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.248590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.309988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.338418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.165959][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.185987][ T5116] binder: 5113:5116 unknown command 0 [ 158.191439][ T5116] binder: 5113:5116 ioctl c0306201 4000000003c0 returned -22 [ 158.206297][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.225215][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.255211][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.285191][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.305208][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.325392][ T4798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.353546][ T4798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.402688][ T4798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.441598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.462210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.489739][ T4798] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.513535][ T4798] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.530137][ T4798] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.540419][ T4798] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.774167][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.804006][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.841715][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.869495][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.922486][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.982154][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.115533][ T4707] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 159.917641][ T4707] usb 7-1: Using ep0 maxpacket: 16 [ 161.159030][ T4707] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.175377][ T4707] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 161.263819][ T5134] loop5: detected capacity change from 0 to 256 [ 161.295327][ T4707] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.304996][ T4707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 161.315610][ T4707] usb 7-1: SerialNumber: syz [ 161.371333][ T5134] FAT-fs (loop5): Directory bread(block 64) failed [ 161.385973][ T5134] FAT-fs (loop5): Directory bread(block 65) failed [ 161.393128][ T5134] FAT-fs (loop5): Directory bread(block 66) failed [ 161.522137][ T5134] FAT-fs (loop5): Directory bread(block 67) failed [ 161.550057][ T4707] usb 7-1: USB disconnect, device number 2 [ 161.558241][ T5134] FAT-fs (loop5): Directory bread(block 68) failed [ 161.564847][ T5134] FAT-fs (loop5): Directory bread(block 69) failed [ 161.571745][ T5134] FAT-fs (loop5): Directory bread(block 70) failed [ 161.605478][ T5134] FAT-fs (loop5): Directory bread(block 71) failed [ 161.614290][ T5139] loop3: detected capacity change from 0 to 2048 [ 161.630172][ T5134] FAT-fs (loop5): Directory bread(block 72) failed [ 161.640734][ T5134] FAT-fs (loop5): Directory bread(block 73) failed [ 161.703869][ T5139] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.919489][ T5139] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 161.956295][ T5139] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 162.058522][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 162.219379][ T5155] loop3: detected capacity change from 0 to 1024 [ 162.299339][ T5155] EXT4-fs: Ignoring removed oldalloc option [ 162.322046][ T5155] EXT4-fs: Ignoring removed bh option [ 162.388348][ T5155] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.880184][ T5163] loop0: detected capacity change from 0 to 512 [ 162.899623][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 163.036400][ T5163] EXT4-fs (loop0): 1 orphan inode deleted [ 163.042881][ T5163] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.070953][ T11] __quota_error: 4 callbacks suppressed [ 163.070970][ T11] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 163.140693][ T5173] loop3: detected capacity change from 0 to 512 [ 163.169372][ T5163] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.207027][ T5173] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.156: inode #1: comm syz.3.156: iget: illegal inode # [ 163.220655][ T11] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:1: Failed to release dquot type 1 [ 163.302669][ T5173] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.156: error while reading EA inode 1 err=-117 [ 163.342613][ T5173] EXT4-fs (loop3): 1 orphan inode deleted [ 163.375626][ T4733] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 163.409149][ T5173] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 163.410590][ T4733] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:17: Failed to release dquot type 1 [ 163.518916][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 163.608975][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 164.035261][ T4293] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 164.225217][ T4293] usb 4-1: Using ep0 maxpacket: 16 [ 164.234139][ T4293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.276901][ T4293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.312671][ T4293] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 164.348091][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.402920][ T4293] usb 4-1: config 0 descriptor?? [ 164.957577][ T4293] elan 0003:04F3:0755.0001: failed to start in urb: -90 [ 165.025565][ T4293] elan 0003:04F3:0755.0001: hidraw0: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 165.161861][ T4293] usb 4-1: USB disconnect, device number 4 [ 167.448972][ T5206] loop0: detected capacity change from 0 to 128 [ 167.456313][ T5206] EXT4-fs: Ignoring removed orlov option [ 167.494682][ T5206] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.569058][ T5206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 167.579067][ T5206] ext4 filesystem being mounted at /45/control supports timestamps until 2038-01-19 (0x7fffffff) [ 167.660811][ T5218] loop6: detected capacity change from 0 to 256 [ 167.694986][ T5218] FAT-fs (loop6): Directory bread(block 64) failed [ 167.788329][ T5218] FAT-fs (loop6): Directory bread(block 65) failed [ 167.788895][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 167.794992][ T5218] FAT-fs (loop6): Directory bread(block 66) failed [ 167.843047][ T5218] FAT-fs (loop6): Directory bread(block 67) failed [ 167.883095][ T5218] FAT-fs (loop6): Directory bread(block 68) failed [ 167.923321][ T5218] FAT-fs (loop6): Directory bread(block 69) failed [ 167.930615][ T5218] FAT-fs (loop6): Directory bread(block 70) failed [ 167.951336][ T5218] FAT-fs (loop6): Directory bread(block 71) failed [ 167.963045][ T5218] FAT-fs (loop6): Directory bread(block 72) failed [ 167.992254][ T5218] FAT-fs (loop6): Directory bread(block 73) failed [ 172.224480][ T5250] loop6: detected capacity change from 0 to 1024 [ 172.417684][ T4293] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 173.927204][ T4293] usb 6-1: Using ep0 maxpacket: 8 [ 173.961761][ T4293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.995445][ T4293] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 174.015461][ T4293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.042113][ T4293] usb 6-1: config 0 descriptor?? [ 175.213140][ T4293] nintendo 0003:057E:200E.0002: unbalanced delimiter at end of report description [ 175.249458][ T5270] loop0: detected capacity change from 0 to 256 [ 175.256311][ T4293] nintendo 0003:057E:200E.0002: HID parse failed [ 175.330636][ T5270] FAT-fs (loop0): Directory bread(block 64) failed [ 175.331780][ T4293] nintendo 0003:057E:200E.0002: probe - fail = -22 [ 175.345797][ T5270] FAT-fs (loop0): Directory bread(block 65) failed [ 175.355326][ T5270] FAT-fs (loop0): Directory bread(block 66) failed [ 175.355722][ T4293] nintendo: probe of 0003:057E:200E.0002 failed with error -22 [ 175.383049][ T5270] FAT-fs (loop0): Directory bread(block 67) failed [ 175.413552][ T5270] FAT-fs (loop0): Directory bread(block 68) failed [ 175.417004][ T4293] usb 6-1: USB disconnect, device number 2 [ 175.423608][ T5270] FAT-fs (loop0): Directory bread(block 69) failed [ 175.464298][ T5270] FAT-fs (loop0): Directory bread(block 70) failed [ 175.494626][ T5270] FAT-fs (loop0): Directory bread(block 71) failed [ 175.515614][ T5270] FAT-fs (loop0): Directory bread(block 72) failed [ 175.542520][ T5270] FAT-fs (loop0): Directory bread(block 73) failed [ 176.420981][ T5276] device wireguard0 entered promiscuous mode [ 176.713224][ T5287] netlink: 'syz.5.193': attribute type 1 has an invalid length. [ 176.745553][ T5287] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.193'. [ 177.871278][ T4295] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 178.314342][ T4295] usb 8-1: Using ep0 maxpacket: 16 [ 178.336277][ T4295] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 178.345041][ T4295] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.384779][ T4295] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 178.403993][ T4295] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.779480][ T4295] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.796941][ T4295] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.815716][ T4295] usb 8-1: Product: syz [ 179.819932][ T4295] usb 8-1: Manufacturer: syz [ 179.824546][ T4295] usb 8-1: SerialNumber: syz [ 180.044775][ T5306] overlayfs: overlapping lowerdir path [ 180.214456][ T4295] usb 8-1: can't set config #1, error -71 [ 180.222488][ T4295] usb 8-1: USB disconnect, device number 2 [ 180.406950][ T5308] loop7: detected capacity change from 0 to 2048 [ 180.476988][ T5308] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.416261][ T5325] loop7: detected capacity change from 0 to 1764 [ 184.714647][ T5330] loop5: detected capacity change from 0 to 256 [ 184.798210][ T5330] FAT-fs (loop5): Directory bread(block 64) failed [ 184.798250][ T5330] FAT-fs (loop5): Directory bread(block 65) failed [ 184.798321][ T5330] FAT-fs (loop5): Directory bread(block 66) failed [ 184.798347][ T5330] FAT-fs (loop5): Directory bread(block 67) failed [ 184.798413][ T5330] FAT-fs (loop5): Directory bread(block 68) failed [ 184.798437][ T5330] FAT-fs (loop5): Directory bread(block 69) failed [ 184.798502][ T5330] FAT-fs (loop5): Directory bread(block 70) failed [ 184.798527][ T5330] FAT-fs (loop5): Directory bread(block 71) failed [ 184.798585][ T5330] FAT-fs (loop5): Directory bread(block 72) failed [ 184.798609][ T5330] FAT-fs (loop5): Directory bread(block 73) failed [ 185.495663][ T5345] loop0: detected capacity change from 0 to 128 [ 185.820413][ T5345] syz.0.212: attempt to access beyond end of device [ 185.820413][ T5345] loop0: rw=2049, sector=241, nr_sectors = 136 limit=128 [ 186.879055][ T4380] kworker/u4:9: attempt to access beyond end of device [ 186.879055][ T4380] loop0: rw=1, sector=377, nr_sectors = 664 limit=128 [ 186.974044][ T5355] device veth3 entered promiscuous mode [ 191.809198][ T5372] loop3: detected capacity change from 0 to 256 [ 193.034910][ T5375] loop7: detected capacity change from 0 to 1024 [ 193.071767][ T5375] EXT4-fs: Ignoring removed orlov option [ 193.103832][ T5375] EXT4-fs (loop7): Test dummy encryption mode enabled [ 193.125384][ T4263] Bluetooth: Unknown LE signaling command 0x09 [ 193.131647][ T4263] Bluetooth: Wrong link type (-22) [ 193.197858][ T5375] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 193.242480][ T5385] loop0: detected capacity change from 0 to 256 [ 193.340835][ T5385] FAT-fs (loop0): Directory bread(block 64) failed [ 193.388550][ T5385] FAT-fs (loop0): Directory bread(block 65) failed [ 193.415393][ T4263] Bluetooth: hci3: command 0x0406 tx timeout [ 193.421728][ T4263] Bluetooth: hci4: command 0x0406 tx timeout [ 193.492349][ T5385] FAT-fs (loop0): Directory bread(block 66) failed [ 193.499859][ T5385] FAT-fs (loop0): Directory bread(block 67) failed [ 193.506671][ T5385] FAT-fs (loop0): Directory bread(block 68) failed [ 193.513663][ T5385] FAT-fs (loop0): Directory bread(block 69) failed [ 193.520468][ T5385] FAT-fs (loop0): Directory bread(block 70) failed [ 193.527080][ T5385] FAT-fs (loop0): Directory bread(block 71) failed [ 193.533785][ T5385] FAT-fs (loop0): Directory bread(block 72) failed [ 193.540584][ T5385] FAT-fs (loop0): Directory bread(block 73) failed [ 193.649708][ T4798] EXT4-fs (loop7): unmounting filesystem. [ 194.394789][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.401184][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.449907][ T5394] loop7: detected capacity change from 0 to 128 [ 194.508204][ T5397] loop6: detected capacity change from 0 to 512 [ 194.536318][ T5399] loop3: detected capacity change from 0 to 512 [ 194.546004][ T5397] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 194.583138][ T5397] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 194.649327][ T5399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.672641][ T5397] EXT4-fs (loop6): 1 truncate cleaned up [ 194.785979][ T5394] syz.7.226: attempt to access beyond end of device [ 194.785979][ T5394] loop7: rw=2049, sector=241, nr_sectors = 136 limit=128 [ 194.815279][ T5397] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 195.202998][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 195.329789][ T5409] loop5: detected capacity change from 0 to 128 [ 195.392449][ T4697] kworker/u4:16: attempt to access beyond end of device [ 195.392449][ T4697] loop7: rw=1, sector=377, nr_sectors = 664 limit=128 [ 195.574471][ T4747] EXT4-fs (loop6): unmounting filesystem. [ 195.671838][ T5409] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 195.699702][ T5409] ext4 filesystem being mounted at /37/control supports timestamps until 2038-01-19 (0x7fffffff) [ 196.035396][ T5419] loop3: detected capacity change from 0 to 512 [ 196.995715][ T5422] tipc: Started in network mode [ 197.000733][ T5422] tipc: Node identity , cluster identity 4711 [ 197.006948][ T5422] tipc: Failed to obtain node identity [ 197.012545][ T5422] tipc: Enabling of bearer rejected, failed to enable media [ 197.706759][ T5420] overlayfs: overlapping lowerdir path [ 198.284808][ T5419] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.666217][ T5419] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.679672][ T4385] EXT4-fs (loop5): unmounting filesystem. [ 198.762274][ T5419] netlink: 'syz.3.232': attribute type 2 has an invalid length. [ 198.893232][ T5430] sp0: Synchronizing with TNC [ 199.236971][ T5429] loop0: detected capacity change from 0 to 4096 [ 199.273039][ T5429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.311263][ T5429] EXT4-fs (loop0): shut down requested (0) [ 199.324362][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 200.908845][ T4707] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.991876][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 201.635298][ T4707] usb 6-1: Using ep0 maxpacket: 32 [ 201.643171][ T4707] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 201.698805][ T4707] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 201.714829][ T5457] loop0: detected capacity change from 0 to 512 [ 201.756631][ T4707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.764681][ T4707] usb 6-1: Product: syz [ 201.815882][ T5457] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee01c, mo2=0002] [ 201.871365][ T5457] System zones: 1-12 [ 201.878848][ T4707] usb 6-1: Manufacturer: syz [ 201.896202][ T4707] usb 6-1: SerialNumber: syz [ 201.899481][ T5457] EXT4-fs (loop0): orphan cleanup on readonly fs [ 201.902514][ T4707] usb 6-1: config 0 descriptor?? [ 201.913583][ T5438] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 201.956684][ T5457] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.242: bg 0: block 328: padding at end of block bitmap is not set [ 201.995574][ T5457] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 202.005559][ T5457] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.242: invalid indirect mapped block 65280 (level 0) [ 202.173810][ T5457] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.242: attempt to clear invalid blocks 33619980 len 1 [ 202.233749][ T5457] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.242: invalid indirect mapped block 1819239214 (level 0) [ 202.254004][ T5457] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.242: invalid indirect mapped block 1819239214 (level 1) [ 202.274881][ T5457] EXT4-fs (loop0): 1 orphan inode deleted [ 202.280758][ T5457] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 202.284190][ T4289] usb 6-1: USB disconnect, device number 3 [ 203.098072][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 203.245974][ T5469] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.247'. [ 203.309719][ T5472] loop3: detected capacity change from 0 to 128 [ 203.382699][ T5473] netlink: 28 bytes leftover after parsing attributes in process `syz.6.245'. [ 203.399036][ T5473] overlayfs: overlapping lowerdir path [ 203.984950][ T5476] loop0: detected capacity change from 0 to 1024 [ 204.142430][ T5476] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 204.524903][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 206.615557][ T4251] Bluetooth: hci2: command 0x0406 tx timeout [ 206.679952][ T5509] loop7: detected capacity change from 0 to 1764 [ 207.195890][ T5514] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.259'. [ 207.288117][ T4366] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.368466][ T4291] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 207.429362][ T4366] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.563389][ T4366] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.588501][ T4291] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.606723][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.619171][ T5519] loop0: detected capacity change from 0 to 256 [ 207.651165][ T4291] usb 4-1: config 0 descriptor?? [ 207.668339][ T4291] cp210x 4-1:0.0: cp210x converter detected [ 207.678130][ T4347] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.163218][ T4291] usb 4-1: cp210x converter now attached to ttyUSB0 [ 208.198750][ T4366] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.622555][ T5524] loop7: detected capacity change from 0 to 128 [ 208.677859][ T4291] usb 4-1: USB disconnect, device number 5 [ 208.698648][ T4291] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.719569][ T4291] cp210x 4-1:0.0: device disconnected [ 208.884279][ T5526] loop0: detected capacity change from 0 to 128 [ 208.956155][ T5526] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 208.969739][ T5526] ext4 filesystem being mounted at /64/control supports timestamps until 2038-01-19 (0x7fffffff) [ 209.332355][ T5524] syz.7.262: attempt to access beyond end of device [ 209.332355][ T5524] loop7: rw=2049, sector=137, nr_sectors = 136 limit=128 [ 209.602570][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 209.718562][ T4349] kworker/u4:7: attempt to access beyond end of device [ 209.718562][ T4349] loop7: rw=1, sector=273, nr_sectors = 768 limit=128 [ 209.722553][ T5533] loop6: detected capacity change from 0 to 2048 [ 209.768579][ T5535] loop0: detected capacity change from 0 to 1024 [ 211.013679][ T5533] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 211.045732][ T5533] UDF-fs: Scanning with blocksize 512 failed [ 211.064444][ T4263] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.074546][ T4263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.083083][ T4263] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.104460][ T4260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.113276][ T4260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.121857][ T4260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.154649][ T5535] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 211.215018][ T5547] device wireguard0 entered promiscuous mode [ 211.248435][ T5533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.758511][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 212.126974][ T5554] loop0: detected capacity change from 0 to 16 [ 212.181547][ T5554] erofs: (device loop0): mounted with root inode @ nid 36. [ 212.785282][ T4707] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.975438][ T4707] usb 1-1: Using ep0 maxpacket: 8 [ 212.982475][ T4707] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 213.022165][ T4707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.120397][ T4707] usb 1-1: config 0 descriptor?? [ 213.191557][ T4260] Bluetooth: hci2: command 0x0409 tx timeout [ 213.220761][ T5536] chnl_net:caif_netlink_parms(): no params data found [ 213.340837][ T4707] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 213.494036][ T5577] loop7: detected capacity change from 0 to 128 [ 213.582064][ T5580] loop6: detected capacity change from 0 to 1024 [ 213.611344][ T5577] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 213.628256][ T5584] loop3: detected capacity change from 0 to 1024 [ 213.635702][ T5584] EXT4-fs: Ignoring removed orlov option [ 213.659420][ T5577] ext4 filesystem being mounted at /31/control supports timestamps until 2038-01-19 (0x7fffffff) [ 213.683347][ T5584] EXT4-fs (loop3): Test dummy encryption mode enabled [ 213.708105][ T5580] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 213.742940][ T5580] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.753364][ T4707] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 213.753501][ T4707] asix: probe of 1-1:0.0 failed with error -61 [ 213.765645][ T5584] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 214.290530][ T27] audit: type=1800 audit(1739961171.804:217): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.277" name="bus" dev="loop6" ino=15 res=0 errno=0 [ 214.373201][ T5536] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.384617][ T5536] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.393111][ T5536] device bridge_slave_0 entered promiscuous mode [ 214.468054][ T4747] EXT4-fs (loop6): unmounting filesystem. [ 214.666987][ T27] audit: type=1326 audit(1739961172.164:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6118cde9 code=0x7ffc0000 [ 216.127430][ T4263] Bluetooth: hci2: command 0x041b tx timeout [ 216.177952][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 216.195894][ T5536] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.203351][ T5536] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.206698][ T129] usb 1-1: USB disconnect, device number 9 [ 216.271780][ T5536] device bridge_slave_1 entered promiscuous mode [ 216.287665][ T4798] EXT4-fs (loop7): unmounting filesystem. [ 216.289376][ T27] audit: type=1326 audit(1739961172.164:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6118cde9 code=0x7ffc0000 [ 216.399842][ T4366] device hsr_slave_0 left promiscuous mode [ 216.415485][ T27] audit: type=1326 audit(1739961172.164:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf6118cde9 code=0x7ffc0000 [ 216.438191][ T4366] device hsr_slave_1 left promiscuous mode [ 216.452525][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.481638][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.512408][ T27] audit: type=1326 audit(1739961172.174:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6118cde9 code=0x7ffc0000 [ 216.536312][ T4366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.543859][ T4366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.563283][ T4366] device bridge_slave_1 left promiscuous mode [ 216.571151][ T4366] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.590422][ T4366] device bridge_slave_0 left promiscuous mode [ 216.610456][ T27] audit: type=1326 audit(1739961172.174:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6118cde9 code=0x7ffc0000 [ 216.625380][ T4366] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.729539][ T4366] device veth1_macvtap left promiscuous mode [ 216.753586][ T4366] device veth0_macvtap left promiscuous mode [ 216.792544][ T4366] device veth1_vlan left promiscuous mode [ 216.804073][ T27] audit: type=1326 audit(1739961172.174:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf6118cde9 code=0x7ffc0000 [ 216.827271][ T27] audit: type=1326 audit(1739961172.174:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6118cde9 code=0x7ffc0000 [ 216.849952][ T4366] device veth0_vlan left promiscuous mode [ 216.866342][ T5605] loop7: detected capacity change from 0 to 8192 [ 216.870819][ T27] audit: type=1326 audit(1739961172.174:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf6118cde9 code=0x7ffc0000 [ 217.228197][ T27] audit: type=1326 audit(1739961172.174:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5583 comm="syz.3.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf6118cde9 code=0x7ffc0000 [ 218.286630][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 218.588801][ T5628] loop6: detected capacity change from 0 to 512 [ 218.647497][ T5628] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 218.687031][ T5628] EXT4-fs (loop6): 1 truncate cleaned up [ 218.694338][ T5628] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 219.257014][ T4747] EXT4-fs (loop6): unmounting filesystem. [ 219.376163][ T5638] loop6: detected capacity change from 0 to 256 [ 220.997805][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 223.989841][ T5650] cgroup: subsys name conflicts with all [ 224.120731][ T4366] team0 (unregistering): Port device team_slave_1 removed [ 224.267773][ T4366] team0 (unregistering): Port device team_slave_0 removed [ 224.412915][ T4366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.575711][ T4366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.927370][ T4366] bond0 (unregistering): Released all slaves [ 227.219024][ T5536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.232053][ T5617] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.286'. [ 227.247688][ T5673] tipc: Started in network mode [ 227.252608][ T5673] tipc: Node identity , cluster identity 4711 [ 227.258765][ T5673] tipc: Failed to obtain node identity [ 227.264322][ T5673] tipc: Enabling of bearer rejected, failed to enable media [ 227.281740][ T5536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.456382][ T5536] team0: Port device team_slave_0 added [ 227.902693][ T5536] team0: Port device team_slave_1 added [ 228.836465][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.843463][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.844748][ T5698] loop0: detected capacity change from 0 to 128 [ 228.885805][ T5536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.052407][ T5536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.090408][ T5536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.266688][ T5536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.390856][ T5536] device hsr_slave_0 entered promiscuous mode [ 231.423207][ T5536] device hsr_slave_1 entered promiscuous mode [ 231.470923][ T5714] loop6: detected capacity change from 0 to 256 [ 231.534548][ T5714] exfat: Deprecated parameter 'utf8' [ 231.545935][ T5714] exfat: Deprecated parameter 'namecase' [ 231.553360][ T5714] exfat: Deprecated parameter 'utf8' [ 231.597292][ T5714] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 231.671772][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 231.671787][ T27] audit: type=1800 audit(1739961189.184:232): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.314" name="file1" dev="loop6" ino=1048622 res=0 errno=0 [ 231.700300][ T4295] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 231.885411][ T4295] usb 1-1: Using ep0 maxpacket: 32 [ 231.892723][ T4295] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 231.945375][ T4295] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 231.967367][ T5716] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.316'. [ 231.989180][ T5718] loop3: detected capacity change from 0 to 128 [ 231.999227][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.024285][ T4295] hub 1-1:4.0: USB hub found [ 232.116362][ T5718] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 232.134994][ T5718] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 232.203330][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 232.225317][ T4295] hub 1-1:4.0: 2 ports detected [ 232.230458][ T4295] usb 1-1: selecting invalid altsetting 1 [ 232.240941][ T4295] hub 1-1:4.0: Using single TT (err -22) [ 232.429374][ T4295] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 232.444484][ T4295] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 232.564492][ T5725] tipc: Started in network mode [ 232.569562][ T5725] tipc: Node identity , cluster identity 4711 [ 232.576265][ T5725] tipc: Failed to obtain node identity [ 232.581866][ T5725] tipc: Enabling of bearer rejected, failed to enable media [ 233.157102][ T5536] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.201250][ T5536] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.226060][ T4295] usb 1-1: USB disconnect, device number 10 [ 233.294767][ T5536] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.327712][ T5536] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.649146][ T5738] loop3: detected capacity change from 0 to 1024 [ 233.706919][ T5536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.723572][ T4347] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.762929][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.774507][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.788764][ T5536] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.804882][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.829274][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.851358][ T5556] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.858715][ T5556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.899163][ T5738] loop3: detected capacity change from 0 to 512 [ 233.934390][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.945004][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.954198][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.966112][ T5556] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.973511][ T5556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.997144][ T5738] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 233.997400][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 234.031539][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 234.033072][ T5738] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.040957][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.156504][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 234.229445][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 234.261476][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.346789][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.384103][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 234.398098][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 234.577795][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 234.592808][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 234.630244][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.276196][ T5536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.306229][ T5748] loop3: detected capacity change from 0 to 512 [ 235.356704][ T5748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.372255][ T5748] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.733585][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 236.524676][ T5763] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.327'. [ 236.701007][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.713984][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.751832][ T5536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.118205][ T5780] tipc: Started in network mode [ 237.123175][ T5780] tipc: Node identity , cluster identity 4711 [ 237.129468][ T5780] tipc: Failed to obtain node identity [ 237.135080][ T5780] tipc: Enabling of bearer rejected, failed to enable media [ 238.790664][ T5784] loop6: detected capacity change from 0 to 1024 [ 238.826241][ T5784] EXT4-fs: Ignoring removed oldalloc option [ 238.954100][ T5784] EXT4-fs: Ignoring removed i_version option [ 239.029771][ T5784] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 239.113468][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 239.123601][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 239.155653][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 239.164839][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 239.180624][ T5536] device veth0_vlan entered promiscuous mode [ 239.188469][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 239.197881][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 239.212535][ T5536] device veth1_vlan entered promiscuous mode [ 239.290738][ T4747] EXT4-fs (loop6): unmounting filesystem. [ 239.307533][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 239.326544][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 239.782826][ T5801] loop0: detected capacity change from 0 to 512 [ 239.805599][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 239.814547][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 239.825109][ T5536] device veth0_macvtap entered promiscuous mode [ 239.867490][ T5536] device veth1_macvtap entered promiscuous mode [ 239.874346][ T5415] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.956294][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.014343][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.052086][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.078134][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.097084][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.121974][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.140873][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.163483][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.194101][ T5536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.230499][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.274573][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.306653][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.317203][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.327136][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.338408][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.349148][ T5536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.361056][ T5536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.478126][ T5536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.653686][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 240.756462][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 240.979079][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 241.011190][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 241.056292][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 241.095128][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 241.160303][ T5816] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.340'. [ 241.197111][ T5536] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.312218][ T5536] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.372356][ T5536] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.382445][ T5536] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.228468][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.255061][ T5830] loop3: detected capacity change from 0 to 1024 [ 242.283824][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.308127][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.333656][ T4380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.360027][ T4380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.455674][ T4260] Bluetooth: hci0: command 0x0406 tx timeout [ 242.858607][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.743229][ T5849] loop3: detected capacity change from 0 to 1024 [ 243.847504][ T5852] netlink: 28 bytes leftover after parsing attributes in process `syz.5.260'. [ 243.863805][ T5852] overlayfs: overlapping lowerdir path [ 243.996205][ T5849] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 244.418620][ T5849] EXT4-fs error (device loop3): ext4_xattr_ibody_get:603: inode #2: comm syz.3.348: corrupted in-inode xattr [ 244.621847][ T5854] device wireguard0 entered promiscuous mode [ 244.634388][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 244.674290][ T5858] fuse: Unknown parameter '00000000000000000000' [ 245.525326][ T5873] IPVS: set_ctl: invalid protocol: 2 172.20.20.31:20004 [ 247.205307][ T4293] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 247.341732][ T5889] capability: warning: `syz.7.360' uses deprecated v2 capabilities in a way that may be insecure [ 247.468488][ T4293] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 247.486303][ T4293] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.530805][ T4293] usb 6-1: config 0 has no interface number 0 [ 247.554134][ T4293] usb 6-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 247.575544][ T4263] Bluetooth: hci1: command 0x0406 tx timeout [ 247.588557][ T4293] usb 6-1: config 0 interface 186 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.657855][ T4293] usb 6-1: New USB device found, idVendor=05ac, idProduct=8600, bcdDevice=d0.28 [ 247.693269][ T4293] usb 6-1: New USB device strings: Mfr=1, Product=217, SerialNumber=3 [ 247.721368][ T4293] usb 6-1: Product: syz [ 247.727683][ T4293] usb 6-1: Manufacturer: syz [ 247.823920][ T4293] usb 6-1: SerialNumber: syz [ 247.838725][ T4293] usb 6-1: config 0 descriptor?? [ 247.862727][ T4293] usb 6-1: Found UVC 0.00 device syz (05ac:8600) [ 247.936601][ T5901] netlink: 28 bytes leftover after parsing attributes in process `syz.0.363'. [ 247.947379][ T5901] overlayfs: overlapping lowerdir path [ 247.997582][ T4293] usb 6-1: No valid video chain found. [ 248.361736][ T4293] usb 6-1: USB disconnect, device number 4 [ 248.679877][ T5886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.026530][ T5905] overlayfs: unrecognized mount option "/" or missing value [ 249.188710][ T5909] fuse: Unknown parameter '00000000000000000000' [ 249.886977][ T5917] IPVS: set_ctl: invalid protocol: 2 172.20.20.31:20004 [ 251.070932][ T5923] loop6: detected capacity change from 0 to 2048 [ 251.123903][ T5923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.221835][ T5928] loop0: detected capacity change from 0 to 512 [ 251.349033][ T5928] ext4: Unknown parameter 'seclabel' [ 252.661797][ T5942] tipc: Started in network mode [ 252.666777][ T5942] tipc: Node identity , cluster identity 4711 [ 252.672911][ T5942] tipc: Failed to obtain node identity [ 252.678707][ T5942] tipc: Enabling of bearer rejected, failed to enable media [ 253.761723][ T5948] overlayfs: unrecognized mount option "/" or missing value [ 254.025405][ T5956] Invalid ELF header magic: != ELF [ 255.289339][ T5959] fuse: Unknown parameter '00000000000000000000' [ 255.317466][ T5961] loop6: detected capacity change from 0 to 128 [ 255.750369][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.775242][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.877035][ T5961] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 255.922520][ T5961] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 256.289701][ T5966] netlink: 8 bytes leftover after parsing attributes in process `syz.6.381'. [ 256.937205][ T4747] EXT4-fs (loop6): unmounting filesystem. [ 257.024404][ T5968] loop7: detected capacity change from 0 to 1024 [ 257.325935][ T5968] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 257.340050][ T5968] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.311439][ T4798] EXT4-fs (loop7): unmounting filesystem. [ 259.984442][ T5990] fuse: Unknown parameter '00000000000000000000' [ 260.002473][ T5988] overlayfs: overlapping lowerdir path [ 261.791806][ T6002] netlink: 28 bytes leftover after parsing attributes in process `syz.5.396'. [ 261.802363][ T6002] overlayfs: overlapping lowerdir path [ 263.845108][ T6018] loop5: detected capacity change from 0 to 128 [ 263.924790][ T6018] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 264.069624][ T6018] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.857321][ T6027] loop7: detected capacity change from 0 to 2048 [ 264.891347][ T5536] EXT4-fs (loop5): unmounting filesystem. [ 265.089388][ T6037] fuse: Unknown parameter '00000000000000000000' [ 265.098968][ T6027] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 265.346810][ T6043] overlayfs: overlapping lowerdir path [ 266.203886][ T4798] EXT4-fs (loop7): unmounting filesystem. [ 266.317794][ T4295] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 266.583101][ T4295] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.690795][ T4295] usb 1-1: not running at top speed; connect to a high speed hub [ 266.929213][ T6029] netlink: 48 bytes leftover after parsing attributes in process `syz.3.397'. [ 266.952760][ T4295] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.977468][ T6029] loop3: detected capacity change from 0 to 512 [ 267.126244][ T4295] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 267.135663][ T4295] usb 1-1: config 1 has no interface number 1 [ 267.141807][ T4295] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 267.212644][ T4295] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 267.222065][ T4295] usb 1-1: config 1 interface 2 has no altsetting 0 [ 267.907620][ T4295] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.985245][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.996872][ T6029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 268.006321][ T6029] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 268.095712][ T4295] usb 1-1: Product: syz [ 268.113760][ T4295] usb 1-1: Manufacturer: syz [ 268.142821][ T4295] usb 1-1: SerialNumber: syz [ 268.204577][ T4295] usb 1-1: can't set config #1, error -71 [ 268.242918][ T4295] usb 1-1: USB disconnect, device number 11 [ 268.447484][ T6062] loop6: detected capacity change from 0 to 256 [ 268.468643][ T6061] loop7: detected capacity change from 0 to 128 [ 268.564824][ T6062] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e6c, utbl_chksum : 0xe619d30d) [ 268.826133][ T6061] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 268.836738][ T4256] EXT4-fs error (device loop3): ext4_readdir:260: inode #12: block 32: comm syz-executor: path /83/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 268.866016][ T6071] loop5: detected capacity change from 0 to 512 [ 268.917640][ T6061] ext4 filesystem being mounted at /49/control supports timestamps until 2038-01-19 (0x7fffffff) [ 268.930106][ T6071] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 269.555697][ T6062] netlink: 172 bytes leftover after parsing attributes in process `syz.6.411'. [ 269.565106][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.411'. [ 269.574010][ T6062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.411'. [ 269.640745][ T6074] loop5: detected capacity change from 0 to 512 [ 269.727176][ T6074] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 269.764850][ T4798] EXT4-fs (loop7): unmounting filesystem. [ 269.814852][ T6074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 269.976261][ T6074] EXT4-fs (loop5): orphan cleanup on readonly fs [ 270.051377][ T6074] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.412: attempt to clear invalid blocks 1024 len 1 [ 271.828443][ T6074] EXT4-fs (loop5): Remounting filesystem read-only [ 271.895778][ T27] audit: type=1326 audit(1739961229.414:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 271.938451][ T6087] loop0: detected capacity change from 0 to 512 [ 271.954221][ T27] audit: type=1326 audit(1739961229.434:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 271.957558][ T6074] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.412: bg 0: block 361: padding at end of block bitmap is not set [ 271.998098][ T6087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ee01c, mo2=0002] [ 272.018676][ T6087] System zones: 1-12 [ 272.029384][ T27] audit: type=1326 audit(1739961229.434:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 272.056154][ T6087] EXT4-fs (loop0): orphan cleanup on readonly fs [ 272.071613][ T6085] binder: 6084:6085 ioctl c0306201 400000000380 returned -14 [ 272.225670][ T6074] EXT4-fs (loop5): Remounting filesystem read-only [ 272.232255][ T6074] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 272.232559][ T6087] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.418: bg 0: block 328: padding at end of block bitmap is not set [ 272.265322][ T27] audit: type=1326 audit(1739961229.444:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 272.353958][ T6093] tipc: Started in network mode [ 272.359025][ T6093] tipc: Node identity , cluster identity 4711 [ 272.365220][ T6093] tipc: Failed to obtain node identity [ 272.370846][ T6093] tipc: Enabling of bearer rejected, failed to enable media [ 272.395451][ T27] audit: type=1326 audit(1739961229.444:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 272.418615][ T27] audit: type=1326 audit(1739961229.444:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 272.991448][ T27] audit: type=1326 audit(1739961229.444:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 273.008149][ T6087] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 273.013999][ T6074] EXT4-fs (loop5): Remounting filesystem read-only [ 273.055100][ T6087] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.418: invalid indirect mapped block 65280 (level 0) [ 273.075898][ T27] audit: type=1326 audit(1739961229.444:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 273.075905][ T6087] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.418: attempt to clear invalid blocks 33619980 len 1 [ 273.085709][ T6087] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.418: invalid indirect mapped block 1819239214 (level 0) [ 273.135333][ T6074] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.412: invalid indirect mapped block 1811939328 (level 0) [ 273.149107][ T27] audit: type=1326 audit(1739961229.444:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 273.168413][ T6074] EXT4-fs (loop5): Remounting filesystem read-only [ 273.233643][ T6074] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.412: invalid indirect mapped block 2185560079 (level 1) [ 273.241789][ T6095] fuse: Unknown parameter '00000000000000000000' [ 273.263861][ T6087] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.418: invalid indirect mapped block 1819239214 (level 1) [ 273.295330][ T27] audit: type=1326 audit(1739961229.444:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6084 comm="syz.6.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602bb8cde9 code=0x7ffc0000 [ 273.308862][ T6087] EXT4-fs (loop0): 1 orphan inode deleted [ 273.341327][ T6074] EXT4-fs (loop5): Remounting filesystem read-only [ 273.355286][ T6087] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 273.398050][ T6074] EXT4-fs (loop5): 1 truncate cleaned up [ 273.699353][ T6074] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 273.737987][ T6087] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 2: comm syz.0.418: lblock 0 mapped to illegal pblock 2 (length 1) [ 273.775976][ T6087] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.418: error -117 reading directory block [ 273.844214][ T6100] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 2: comm syz.0.418: lblock 0 mapped to illegal pblock 2 (length 1) [ 275.165409][ T6100] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.418: error -117 reading directory block [ 275.189953][ T5536] EXT4-fs (loop5): unmounting filesystem. [ 275.398586][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 275.978497][ T6112] loop0: detected capacity change from 0 to 128 [ 275.999288][ T6096] tty tty34: ldisc open failed (-12), clearing slot 33 [ 276.098730][ T6112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 276.128219][ T6112] ext4 filesystem being mounted at /103/control supports timestamps until 2038-01-19 (0x7fffffff) [ 276.450500][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 282.521490][ T6162] futex_wake_op: syz.6.435 tries to shift op by -1; fix this program [ 284.363063][ T6173] fuse: Unknown parameter '00000000000000000000' [ 285.222192][ T75] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.502605][ T6179] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 285.502605][ T6179] program syz.0.441 not setting count and/or reply_len properly [ 287.510611][ T27] kauditd_printk_skb: 41 callbacks suppressed [ 287.510626][ T27] audit: type=1326 audit(1739961245.024:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 287.602510][ T75] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.642190][ T6187] binder: 6186:6187 ioctl c0306201 400000000380 returned -14 [ 287.675353][ T27] audit: type=1326 audit(1739961245.024:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 287.719547][ T4260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.730839][ T4260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.739836][ T4260] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.748880][ T4260] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.756537][ T4260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.765350][ T4260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.003316][ T75] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.194173][ T27] audit: type=1326 audit(1739961245.024:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 288.575450][ T27] audit: type=1326 audit(1739961245.024:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 288.787254][ T6196] loop7: detected capacity change from 0 to 128 [ 288.825936][ T27] audit: type=1326 audit(1739961245.024:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 289.452395][ T27] audit: type=1326 audit(1739961245.024:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 289.486904][ T75] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.584377][ T27] audit: type=1326 audit(1739961245.024:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 289.817928][ T4260] Bluetooth: hci0: command 0x0409 tx timeout [ 289.864699][ T27] audit: type=1326 audit(1739961245.024:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 290.757361][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 290.934244][ T27] audit: type=1326 audit(1739961245.064:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 290.997668][ T27] audit: type=1326 audit(1739961245.064:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.7.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 291.655340][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 291.668461][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 291.705934][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 291.764402][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 291.812193][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 291.895495][ T4263] Bluetooth: hci0: command 0x041b tx timeout [ 292.026722][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 292.118816][ T6217] netlink: 20 bytes leftover after parsing attributes in process `syz.7.451'. [ 292.233808][ T6189] chnl_net:caif_netlink_parms(): no params data found [ 292.579475][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.586721][ T4368] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 292.604770][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.613276][ T6189] device bridge_slave_0 entered promiscuous mode [ 292.676745][ T6230] tmpfs: Unknown parameter 'usrquota_inode_hardlimit' [ 293.396314][ T4368] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 293.413545][ T4368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.424611][ T4368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.435642][ T4368] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 293.436176][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.448872][ T4368] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 293.459227][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.474062][ T6189] device bridge_slave_1 entered promiscuous mode [ 293.478489][ T4368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.481786][ T6231] netlink: 'syz.7.454': attribute type 39 has an invalid length. [ 293.516977][ T4368] usb 1-1: config 0 descriptor?? [ 293.580699][ T6232] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 293.589026][ T6232] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 293.597546][ T6232] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 293.662835][ T4260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 293.674447][ T4260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 293.685383][ T4260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 293.693327][ T4260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 293.703456][ T4260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 293.711337][ T4260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.047478][ T6189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.114050][ T6189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.119015][ T4251] Bluetooth: hci0: command 0x040f tx timeout [ 294.136097][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 294.167632][ T4368] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 294.180304][ T4368] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 294.187975][ T4368] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 294.195610][ T4368] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 294.203084][ T4368] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 294.210695][ T4368] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 294.219577][ T4368] holtek_kbd 0003:04D9:A055.0003: unknown main item tag 0x0 [ 294.252256][ T4368] holtek_kbd 0003:04D9:A055.0003: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.0-1/input0 [ 294.354878][ T127] usb 1-1: USB disconnect, device number 12 [ 294.374504][ T6212] chnl_net:caif_netlink_parms(): no params data found [ 294.508525][ T6189] team0: Port device team_slave_0 added [ 294.564506][ T6189] team0: Port device team_slave_1 added [ 294.751169][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.758422][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.790825][ T6189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.168392][ T6189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.238169][ T6189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.403829][ T6189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.467124][ T6254] loop0: detected capacity change from 0 to 128 [ 295.509919][ T4347] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.816444][ T4263] Bluetooth: hci2: command 0x0409 tx timeout [ 296.186461][ T6212] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.201422][ T6212] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.215260][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 296.215343][ T4251] Bluetooth: hci3: command 0x041b tx timeout [ 296.269326][ T6212] device bridge_slave_0 entered promiscuous mode [ 296.280355][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 296.280366][ T27] audit: type=1326 audit(1739961253.794:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.7.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 296.309572][ T27] audit: type=1326 audit(1739961253.824:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.7.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 296.331876][ T27] audit: type=1326 audit(1739961253.824:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.7.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 296.354229][ T27] audit: type=1326 audit(1739961253.824:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.7.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 296.386275][ T75] device hsr_slave_0 left promiscuous mode [ 296.387512][ T27] audit: type=1326 audit(1739961253.824:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.7.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 296.414342][ T27] audit: type=1326 audit(1739961253.824:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.7.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 296.445497][ T6259] binder: 6256:6259 ioctl c0306201 400000000380 returned -14 [ 296.453004][ T27] audit: type=1326 audit(1739961253.824:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.7.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 296.477901][ T75] device hsr_slave_1 left promiscuous mode [ 296.488169][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.515455][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.520993][ T27] audit: type=1326 audit(1739961253.824:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.7.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 296.553384][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.592784][ T27] audit: type=1326 audit(1739961253.824:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.7.460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 296.603122][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.630583][ T75] device bridge_slave_1 left promiscuous mode [ 297.168467][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.218110][ T75] device bridge_slave_0 left promiscuous mode [ 297.236141][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.291039][ T75] device veth1_macvtap left promiscuous mode [ 297.297568][ T75] device veth0_macvtap left promiscuous mode [ 297.303935][ T75] device veth1_vlan left promiscuous mode [ 297.311892][ T75] device veth0_vlan left promiscuous mode [ 297.895270][ T4251] Bluetooth: hci2: command 0x041b tx timeout [ 298.021572][ T6262] loop0: detected capacity change from 0 to 512 [ 298.028830][ T6262] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.041202][ T6262] EXT4-fs error (device loop0): ext4_get_journal_inode:5723: comm syz.0.461: inode #16777216: comm syz.0.461: iget: illegal inode # [ 298.058392][ T6262] EXT4-fs (loop0): no journal found [ 298.063651][ T6262] EXT4-fs (loop0): can't get journal size [ 298.071471][ T6262] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 298.082145][ T6262] EXT4-fs (loop0): failed to initialize system zone (-22) [ 298.089458][ T6262] EXT4-fs (loop0): mount failed [ 298.162818][ T4347] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.299304][ T4260] Bluetooth: hci3: command 0x040f tx timeout [ 298.601169][ T75] team0 (unregistering): Port device team_slave_1 removed [ 298.669997][ T75] team0 (unregistering): Port device team_slave_0 removed [ 298.756228][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.812146][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.530924][ T75] bond0 (unregistering): Released all slaves [ 299.983993][ T6189] device hsr_slave_0 entered promiscuous mode [ 299.998843][ T6189] device hsr_slave_1 entered promiscuous mode [ 300.005271][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 300.025365][ T6189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.035747][ T6189] Cannot create hsr debugfs directory [ 300.115407][ T6212] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.122544][ T6212] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.144599][ T6212] device bridge_slave_1 entered promiscuous mode [ 300.260590][ T6212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.262950][ T6212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.358612][ T6212] team0: Port device team_slave_0 added [ 300.375742][ T4251] Bluetooth: hci3: command 0x0419 tx timeout [ 300.393660][ T6235] chnl_net:caif_netlink_parms(): no params data found [ 300.400663][ T127] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 300.420476][ T6212] team0: Port device team_slave_1 added [ 300.509607][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.516989][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.550023][ T6212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.588736][ T6212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.599760][ T6212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.626450][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 300.647829][ T6212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.661346][ T127] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 300.681421][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.695288][ T127] usb 1-1: Product: syz [ 300.699501][ T127] usb 1-1: Manufacturer: syz [ 300.714578][ T127] usb 1-1: SerialNumber: syz [ 300.730522][ T127] usb 1-1: config 0 descriptor?? [ 301.589952][ T127] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 301.668486][ T6212] device hsr_slave_0 entered promiscuous mode [ 301.681602][ T6212] device hsr_slave_1 entered promiscuous mode [ 301.689159][ T6212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.708088][ T6212] Cannot create hsr debugfs directory [ 301.719908][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.727351][ T6235] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.737886][ T6235] device bridge_slave_0 entered promiscuous mode [ 301.778801][ T6290] loop7: detected capacity change from 0 to 128 [ 301.864855][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.875493][ T6235] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.891681][ T6235] device bridge_slave_1 entered promiscuous mode [ 302.056664][ T4251] Bluetooth: hci2: command 0x0419 tx timeout [ 302.601782][ T6235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.657522][ T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.702753][ T6189] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 302.716462][ T6235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.779892][ T6189] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 302.817628][ T6189] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 303.577100][ T127] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 303.602529][ T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.622183][ T127] usb 1-1: USB disconnect, device number 13 [ 303.773732][ T6212] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 303.786961][ T6212] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 303.806994][ T6212] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 303.824977][ T6212] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 303.948007][ T6212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.978104][ T6212] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.041315][ T6212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.061475][ T6212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.206452][ T6189] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 304.293435][ T6235] team0: Port device team_slave_0 added [ 304.339290][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 304.353185][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 304.385109][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 304.405545][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 304.414112][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.421282][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.429707][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.438638][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 304.447265][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.454371][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.463048][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.477072][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.486264][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.496946][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.512423][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.521650][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.530946][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.539737][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.548833][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.560795][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.646727][ T75] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.746259][ T6235] team0: Port device team_slave_1 added [ 304.822271][ T127] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 305.009718][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.095943][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 305.112648][ T127] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 305.159694][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 305.174124][ T5912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.220063][ T127] usb 1-1: config 0 has no interface number 0 [ 305.240730][ T127] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 305.242410][ T75] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.260860][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.260905][ T127] usb 1-1: Product: syz [ 305.260919][ T127] usb 1-1: Manufacturer: syz [ 305.260932][ T127] usb 1-1: SerialNumber: syz [ 305.276640][ T127] usb 1-1: config 0 descriptor?? [ 305.359041][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.383032][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.436636][ T6235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.474752][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.524601][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.537179][ T127] msi2500 1-1:0.246: Registered as swradio24 [ 305.543239][ T127] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 305.544182][ T6235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.571137][ T6235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.584832][ T127] usb 1-1: USB disconnect, device number 14 [ 305.652905][ T6235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.704921][ T6212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.740429][ T6322] 9pnet_fd: Insufficient options for proto=fd [ 305.809608][ T6235] device hsr_slave_0 entered promiscuous mode [ 305.817710][ T6235] device hsr_slave_1 entered promiscuous mode [ 305.824608][ T6235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.832701][ T6235] Cannot create hsr debugfs directory [ 305.843713][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.989686][ T6189] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.141012][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.163851][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 306.283504][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.394378][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 306.513082][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.603175][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.610409][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.808751][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 306.826679][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.877651][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.884854][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.035836][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.045385][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.054282][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.064310][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.853492][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.166146][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.174290][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.451027][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.577808][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 309.615756][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 309.647536][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 309.730992][ T6349] binder: 6345:6349 ioctl 4018620d 0 returned -22 [ 309.792531][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.038289][ T6212] device veth0_vlan entered promiscuous mode [ 310.229100][ T6189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 310.249887][ T6189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 310.416848][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.443109][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 310.456674][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.484434][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 310.493921][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.504192][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 310.513088][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.522279][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.539742][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.554021][ T4697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 310.632180][ T6212] device veth1_vlan entered promiscuous mode [ 311.434484][ T6212] device veth0_macvtap entered promiscuous mode [ 311.449827][ T6212] device veth1_macvtap entered promiscuous mode [ 311.487176][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.509900][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.528679][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.690622][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.702615][ T27] audit: type=1326 audit(1739961269.224:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 311.709254][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.748041][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.764668][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.782422][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.803596][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.814483][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.834597][ T27] audit: type=1326 audit(1739961269.244:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 311.864705][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.888600][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.904720][ T27] audit: type=1326 audit(1739961269.244:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 311.965856][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.973018][ T27] audit: type=1326 audit(1739961269.244:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 311.985729][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.003447][ T27] audit: type=1326 audit(1739961269.244:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 312.024781][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.071593][ T6363] ptrace attach of "./syz-executor exec"[4798] was attempted by " eth0 #®uàûu0*óiÝÙÆ‡Þ¿_ ößk¿.\x22¦À#pÍ/¦ò¼yL…aµ»~+>¼“ø«š3…l{@!2¶!®÷9kˆ\x0b8I$ýQ=rØÀØ\x09/vÓ§ØJý”#KTÝÓá¾_$A=zî½/X¾mOX)s”Þ¾_ˆN¸Þë)ÍÅ6m\x0a\x0b¾ë»‘zÂ|d\x1bÒùyx²\x1bLTrwˆ|0\x09Æâœí\x5cØ[È ó¬]V:üÞ\x07xïþ.TTÏ¿õ€a%ÜQ³CuTÌê‘èØYZyæ!‰œÑ¦7Švs²\x07þ³j*­IÌéª{]ï·òî*ù5JtÐsĪÈ~²ò0½fÛ®Gãûï”ï:Q\x1b㣤}ï`eÍL«Û\x0dòyŸg1ô\x09i/!ñ,Œuª¿~)”\x1b2“†çšòj¨–¦¢üN¯Th³\x1bo:è\x0bq7SäHóL œ—Bªq¹(öƒ±[„aF›ÚëÄ*q²’ Œv¬ AN¹ªà—Te˜Lþ—+uÓ^±ðà½\x07»åsha ë„™ÆñÕLD¨7 DQŠ2!8,¼%$ñòÖœyìKÚÅÜúÝöÆ´œ’…°¢%:ðô0´¦d´äLWÕ÷l\x1bþÞ\x0bh—=m‚.¬\x0bhþ„Q}ƒ8/ƒëP¾Ö+:ÎE\x5c•Ô¬’‡×˜—ãì­Õ¬€C„Rˆr^gºQ( [ 312.781234][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.895808][ T27] audit: type=1326 audit(1739961269.244:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 312.940695][ T27] audit: type=1326 audit(1739961269.244:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 312.962914][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.978666][ T27] audit: type=1326 audit(1739961269.244:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 313.012975][ T27] audit: type=1326 audit(1739961269.244:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 313.044631][ T27] audit: type=1326 audit(1739961269.244:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6359 comm="syz.7.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 313.077007][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.090909][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.101663][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.116809][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.134640][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.146205][ T6212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.157042][ T6212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.168767][ T6212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.933719][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 314.035724][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.397460][ T6372] device vlan0 entered promiscuous mode [ 314.421500][ T6374] loop0: detected capacity change from 0 to 128 [ 314.476421][ T6372] team0: Port device vlan0 added [ 314.507192][ T6212] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.540513][ T6212] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.551608][ T6212] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.580495][ T6212] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.613551][ T6189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.622907][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 314.633991][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 314.902821][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.935840][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.147126][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 315.934687][ T4575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.960060][ T4575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.094273][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 316.251029][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.276950][ T4575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.462725][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.492262][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.596540][ T6235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.642093][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.660111][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.415880][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.422246][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.560253][ T6235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.603043][ T6235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.655063][ T6189] device veth0_vlan entered promiscuous mode [ 317.762537][ T6235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.811477][ T6189] device veth1_vlan entered promiscuous mode [ 317.983113][ T6408] loop7: detected capacity change from 0 to 1024 [ 318.007466][ T6189] device veth0_macvtap entered promiscuous mode [ 318.046526][ T6408] EXT4-fs: Ignoring removed orlov option [ 318.056986][ T6408] EXT4-fs (loop7): Test dummy encryption mode enabled [ 318.093276][ T6408] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 318.254475][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.286224][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.303436][ T6189] device veth1_macvtap entered promiscuous mode [ 318.444361][ T27] kauditd_printk_skb: 31 callbacks suppressed [ 318.444420][ T27] audit: type=1326 audit(1739961275.944:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 318.484663][ T27] audit: type=1326 audit(1739961275.944:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 318.524827][ T27] audit: type=1326 audit(1739961275.944:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 318.623426][ T27] audit: type=1326 audit(1739961275.944:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 318.865262][ T27] audit: type=1326 audit(1739961275.944:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 318.914862][ T27] audit: type=1326 audit(1739961275.954:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 318.942001][ T27] audit: type=1326 audit(1739961275.954:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 318.978132][ T27] audit: type=1326 audit(1739961275.954:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 318.985474][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.001222][ T27] audit: type=1326 audit(1739961275.954:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 319.043075][ T4798] EXT4-fs (loop7): unmounting filesystem. [ 319.058791][ T27] audit: type=1326 audit(1739961275.954:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6407 comm="syz.7.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17b118cde9 code=0x7ffc0000 [ 319.089814][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.144730][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.163722][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.175004][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.194650][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.206385][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.227919][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.250225][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.260832][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.270956][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.281489][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.293019][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.770727][ T93] block nbd7: Attempted send on invalid socket [ 319.777746][ T93] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.808508][ T93] block nbd7: Attempted send on invalid socket [ 319.816605][ T93] I/O error, dev nbd7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.832832][ T6419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 319.915887][ T93] block nbd7: Attempted send on invalid socket [ 319.922701][ T93] I/O error, dev nbd7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.933995][ T6419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 319.951395][ T93] block nbd7: Attempted send on invalid socket [ 319.957782][ T93] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 319.983783][ T93] block nbd7: Attempted send on invalid socket [ 319.990199][ T93] I/O error, dev nbd7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.035614][ T6419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 320.049050][ T52] block nbd7: Attempted send on invalid socket [ 320.055848][ T52] I/O error, dev nbd7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.065778][ T6419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 320.095878][ T93] block nbd7: Attempted send on invalid socket [ 320.102136][ T93] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.114418][ T93] block nbd7: Attempted send on invalid socket [ 320.120663][ T93] I/O error, dev nbd7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.131497][ T6419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 320.161568][ T93] block nbd7: Attempted send on invalid socket [ 320.167877][ T93] I/O error, dev nbd7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.177340][ T6419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 320.187301][ T93] block nbd7: Attempted send on invalid socket [ 320.193463][ T93] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 320.205226][ T6419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 320.225337][ T6419] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 320.234851][ T6419] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 320.277139][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.300241][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.320531][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.404435][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.425252][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.455364][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.481375][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.497836][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.622096][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.648210][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.668678][ T6189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.679498][ T6189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.691032][ T6189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.725181][ T6423] device bridge0 entered promiscuous mode [ 321.733089][ T6423] bridge0: port 3(macsec1) entered blocking state [ 321.742595][ T6423] bridge0: port 3(macsec1) entered disabled state [ 321.754593][ T6423] device bridge0 left promiscuous mode [ 321.795407][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.812039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.824435][ T6189] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.839117][ T6189] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.859994][ T6189] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.874800][ T6189] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.928050][ T4325] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 322.033581][ T6235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.101913][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 322.117262][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.125534][ T4325] usb 10-1: Using ep0 maxpacket: 32 [ 322.153530][ T4325] usb 10-1: config 0 has an invalid interface number: 228 but max is 0 [ 322.185339][ T4325] usb 10-1: config 0 has no interface number 0 [ 322.191584][ T4325] usb 10-1: config 0 interface 228 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 322.233389][ T4325] usb 10-1: config 0 interface 228 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 322.270466][ T4325] usb 10-1: config 0 interface 228 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 322.311821][ T4325] usb 10-1: config 0 interface 228 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 323.196679][ T4325] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0003, bcdDevice=6d.ad [ 323.206107][ T4325] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.214514][ T4325] usb 10-1: Product: syz [ 323.219572][ T4325] usb 10-1: Manufacturer: syz [ 323.224280][ T4325] usb 10-1: SerialNumber: syz [ 323.233619][ T4325] usb 10-1: config 0 descriptor?? [ 323.239555][ T6429] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 323.270567][ T6429] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 323.289902][ T6235] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.312407][ T4745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.327621][ T4745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.344632][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 323.364488][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.785516][ T6427] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 323.811867][ T4325] kvaser_usb 10-1:0.228: Cannot get usb endpoint(s) [ 323.864775][ T4325] usb 10-1: USB disconnect, device number 2 [ 323.864808][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.877971][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.925805][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.947289][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 323.964770][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 323.974751][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.987012][ T6427] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 323.992930][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.004296][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.005506][ T6427] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 324.021437][ T6427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.050597][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.080087][ T6427] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 324.159308][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.168874][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 324.180647][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 324.213321][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 324.230526][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.242996][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.252634][ T75] device hsr_slave_0 left promiscuous mode [ 324.259857][ T75] device hsr_slave_1 left promiscuous mode [ 324.268390][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.276014][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.289179][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.297613][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.305285][ T75] device bridge_slave_1 left promiscuous mode [ 324.311525][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.320278][ T75] device bridge_slave_0 left promiscuous mode [ 324.327652][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.340647][ T75] device hsr_slave_0 left promiscuous mode [ 324.347043][ T75] device hsr_slave_1 left promiscuous mode [ 324.354961][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.371298][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.384636][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.392516][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.401535][ T75] device bridge_slave_1 left promiscuous mode [ 324.408106][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.417012][ T75] device bridge_slave_0 left promiscuous mode [ 324.423785][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.459754][ T75] device veth1_macvtap left promiscuous mode [ 324.466058][ T75] device veth0_macvtap left promiscuous mode [ 324.472119][ T75] device veth1_vlan left promiscuous mode [ 324.478402][ T75] device veth0_vlan left promiscuous mode [ 324.487995][ T75] device veth1_macvtap left promiscuous mode [ 324.494060][ T75] device veth0_macvtap left promiscuous mode [ 324.500250][ T75] device veth1_vlan left promiscuous mode [ 324.506802][ T75] device veth0_vlan left promiscuous mode [ 326.217484][ T6427] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 326.725457][ T6427] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 326.745214][ T6427] stv0680 1-1:4.0: last error: 105, command = 0x33 [ 326.829127][ T6427] usb 1-1: USB disconnect, device number 15 [ 327.376998][ T75] team0 (unregistering): Port device team_slave_1 removed [ 328.119316][ T6456] loop0: detected capacity change from 0 to 128 [ 328.193716][ T6456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 328.271988][ T6456] ext4 filesystem being mounted at /134/control supports timestamps until 2038-01-19 (0x7fffffff) [ 328.287612][ T75] team0 (unregistering): Port device team_slave_0 removed [ 328.852715][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.946475][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 328.983761][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.695326][ T4293] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 329.974112][ T4293] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 330.098609][ T4293] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.382730][ T4293] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.398437][ T4293] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.449652][ T4293] usb 10-1: config 0 descriptor?? [ 330.476118][ T4293] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 332.347923][ T6427] usb 10-1: USB disconnect, device number 3 [ 332.649085][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 332.649101][ T27] audit: type=1326 audit(1739961290.164:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.9.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c58cde9 code=0x7ffc0000 [ 332.862324][ T75] bond0 (unregistering): Released all slaves [ 332.896762][ T27] audit: type=1326 audit(1739961290.164:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.9.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c58cde9 code=0x7ffc0000 [ 332.919422][ T6486] binder: 6484:6486 ioctl c0306201 400000000380 returned -14 [ 333.034682][ T27] audit: type=1326 audit(1739961290.234:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.9.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f0e5c58cde9 code=0x7ffc0000 [ 333.066489][ T27] audit: type=1326 audit(1739961290.234:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.9.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c58cde9 code=0x7ffc0000 [ 333.096938][ T27] audit: type=1326 audit(1739961290.234:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.9.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c58cde9 code=0x7ffc0000 [ 333.185588][ T27] audit: type=1326 audit(1739961290.234:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.9.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f0e5c58cde9 code=0x7ffc0000 [ 333.225316][ T27] audit: type=1326 audit(1739961290.234:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.9.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c58cde9 code=0x7ffc0000 [ 334.125535][ T27] audit: type=1326 audit(1739961290.234:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.9.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c58cde9 code=0x7ffc0000 [ 334.199728][ T27] audit: type=1326 audit(1739961290.234:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6484 comm="syz.9.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0e5c58cde9 code=0x7ffc0000 [ 334.644929][ T6498] loop0: detected capacity change from 0 to 128 [ 334.692533][ T6498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 334.710591][ T6498] ext4 filesystem being mounted at /142/control supports timestamps until 2038-01-19 (0x7fffffff) [ 335.254708][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 336.043811][ T75] team0 (unregistering): Port device team_slave_1 removed [ 336.124647][ T75] team0 (unregistering): Port device team_slave_0 removed [ 336.182082][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.258344][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.986167][ T75] bond0 (unregistering): Released all slaves [ 337.051074][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 337.064399][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 337.073977][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 337.092382][ T6235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.134470][ T6235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 337.239944][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 337.263121][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 337.283826][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 337.301600][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 337.332664][ T5531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 337.369055][ T6513] smc: net device bond0 applied user defined pnetid SYZ0 [ 337.404264][ T6513] smc: net device bond0 erased user defined pnetid SYZ0 [ 337.787669][ T6235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.820617][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 337.835309][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 337.923706][ T6534] loop9: detected capacity change from 0 to 128 [ 338.796241][ T6534] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 338.816051][ T6534] ext4 filesystem being mounted at /7/control supports timestamps until 2038-01-19 (0x7fffffff) [ 339.649752][ T6212] EXT4-fs (loop9): unmounting filesystem. [ 339.934345][ T6552] bridge0: port 3(vlan2) entered blocking state [ 339.964827][ T6552] bridge0: port 3(vlan2) entered disabled state [ 340.075045][ T6550] device team0 entered promiscuous mode [ 340.104444][ T6550] device team_slave_0 entered promiscuous mode [ 340.125535][ T6550] device team_slave_1 entered promiscuous mode [ 340.197162][ T6552] Bluetooth: MGMT ver 1.22 [ 340.245410][ T6549] device team0 left promiscuous mode [ 340.251063][ T6549] device team_slave_0 left promiscuous mode [ 340.278372][ T27] audit: type=1326 audit(1739961297.794:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.300569][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.332314][ T27] audit: type=1326 audit(1739961297.794:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.385521][ T27] audit: type=1326 audit(1739961297.824:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.424417][ T6564] binder: 6561:6564 ioctl c0306201 400000000380 returned -14 [ 340.435411][ T27] audit: type=1326 audit(1739961297.824:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.469947][ T6549] device team_slave_1 left promiscuous mode [ 340.490436][ T27] audit: type=1326 audit(1739961297.824:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.540608][ T27] audit: type=1326 audit(1739961297.824:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.609421][ T27] audit: type=1326 audit(1739961297.824:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.631652][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.680183][ T27] audit: type=1326 audit(1739961297.824:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.702388][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.770690][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 340.786110][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 340.794418][ T27] audit: type=1326 audit(1739961297.824:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.845284][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 340.866031][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 340.881537][ T27] audit: type=1326 audit(1739961298.074:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.8.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f1038cde9 code=0x7ffc0000 [ 340.927407][ T6235] device veth0_vlan entered promiscuous mode [ 340.957122][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 340.966506][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 340.978692][ T6235] device veth1_vlan entered promiscuous mode [ 341.077492][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 341.918815][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.942731][ T4653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 342.495021][ T6235] device veth0_macvtap entered promiscuous mode [ 342.542767][ T6235] device veth1_macvtap entered promiscuous mode [ 342.618819][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.639825][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.650867][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.661903][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.706223][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.717434][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.734256][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.772177][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.932049][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.968663][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.988761][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 343.009162][ T6584] loop9: detected capacity change from 0 to 128 [ 343.033304][ T6581] netlink: 'syz.8.534': attribute type 5 has an invalid length. [ 343.083021][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.094545][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.127746][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.139206][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.154863][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.171408][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.182609][ T6235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.197634][ T6235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.213015][ T6235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.225961][ T4347] blk_print_req_error: 2 callbacks suppressed [ 343.225978][ T4347] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.269670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.293900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.364425][ T6235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.385872][ T6235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.399457][ T6235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.426131][ T6235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.549348][ T6592] loop7: detected capacity change from 0 to 128 [ 344.573092][ T4653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.596791][ T4653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.647629][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 344.663806][ T5556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.674529][ T5556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.691657][ T5556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 344.711572][ T6592] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 344.736049][ T6592] ext4 filesystem being mounted at /95/control supports timestamps until 2038-01-19 (0x7fffffff) [ 346.771660][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 346.771674][ T27] audit: type=1326 audit(1739961304.284:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 346.871908][ T6608] binder: 6607:6608 ioctl c0306201 400000000380 returned -14 [ 346.913842][ T27] audit: type=1326 audit(1739961304.284:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 347.066686][ T27] audit: type=1326 audit(1739961304.284:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 347.132611][ T27] audit: type=1326 audit(1739961304.284:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 347.155464][ T27] audit: type=1326 audit(1739961304.284:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 347.199988][ T27] audit: type=1326 audit(1739961304.284:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 347.280408][ T27] audit: type=1326 audit(1739961304.284:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 347.308219][ T27] audit: type=1326 audit(1739961304.284:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 348.378506][ T27] audit: type=1326 audit(1739961304.284:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 348.402683][ T27] audit: type=1326 audit(1739961304.284:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6607 comm="syz.4.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8dd78cde9 code=0x7ffc0000 [ 349.922349][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.959561][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.971757][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.988311][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.998885][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.009572][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.019476][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.030866][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.040778][ T6631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.051276][ T6631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.033668][ T4798] EXT4-fs (loop7): unmounting filesystem. [ 353.216792][ T6661] loop7: detected capacity change from 0 to 512 [ 353.615334][ T4347] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 355.039364][ T6683] loop0: detected capacity change from 0 to 128 [ 355.137899][ T6683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 355.161505][ T6683] ext4 filesystem being mounted at /153/control supports timestamps until 2038-01-19 (0x7fffffff) [ 355.787641][ T6688] loop9: detected capacity change from 0 to 128 [ 356.917439][ T6694] [ 356.919787][ T6694] ===================================================== [ 356.926700][ T6694] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 356.934134][ T6694] 6.1.128-syzkaller #0 Not tainted [ 356.939222][ T6694] ----------------------------------------------------- [ 356.946148][ T6694] syz.4.564/6694 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 356.953672][ T6694] ffff88802fa9d0c0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x196/0x4d0 [ 356.962356][ T6694] [ 356.962356][ T6694] and this task is already holding: [ 356.969702][ T6694] ffff88802a2d6230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xc1/0x330 [ 356.979351][ T6694] which would create a new lock dependency: [ 356.985232][ T6694] (&dev->event_lock#2){-...}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 356.993143][ T6694] [ 356.993143][ T6694] but this new dependency connects a HARDIRQ-irq-safe lock: [ 357.002607][ T6694] (&dev->event_lock#2){-...}-{2:2} [ 357.002630][ T6694] [ 357.002630][ T6694] ... which became HARDIRQ-irq-safe at: [ 357.015510][ T6694] lock_acquire+0x1f8/0x5a0 [ 357.020113][ T6694] _raw_spin_lock_irqsave+0xd1/0x120 [ 357.025470][ T6694] input_event+0x8d/0xd0 [ 357.029784][ T6694] psmouse_report_standard_packet+0x50/0x200 [ 357.035837][ T6694] psmouse_process_byte+0x45b/0x640 [ 357.041135][ T6694] psmouse_handle_byte+0x46/0x4b0 [ 357.046242][ T6694] psmouse_interrupt+0x697/0x10a0 [ 357.051422][ T6694] serio_interrupt+0x88/0x130 [ 357.056195][ T6694] i8042_interrupt+0x357/0x750 [ 357.061062][ T6694] __handle_irq_event_percpu+0x2a8/0xb20 [ 357.066772][ T6694] handle_irq_event+0x85/0x1e0 [ 357.071631][ T6694] handle_edge_irq+0x245/0xbf0 [ 357.076470][ T6694] __common_interrupt+0xd7/0x1f0 [ 357.081480][ T6694] common_interrupt+0xae/0xd0 [ 357.086234][ T6694] asm_common_interrupt+0x22/0x40 [ 357.091336][ T6694] queue_work_on+0x1f4/0x250 [ 357.095999][ T6694] call_usermodehelper_exec+0x272/0x480 [ 357.101618][ T6694] kobject_uevent_env+0x6a5/0x8c0 [ 357.106738][ T6694] driver_register+0x35b/0x3a0 [ 357.111592][ T6694] usb_register_driver+0x206/0x3d0 [ 357.116780][ T6694] do_one_initcall+0x265/0x8f0 [ 357.121639][ T6694] do_initcall_level+0x157/0x207 [ 357.126653][ T6694] do_initcalls+0x49/0x86 [ 357.131053][ T6694] kernel_init_freeable+0x45c/0x60f [ 357.136322][ T6694] kernel_init+0x19/0x290 [ 357.140723][ T6694] ret_from_fork+0x1f/0x30 [ 357.145233][ T6694] [ 357.145233][ T6694] to a HARDIRQ-irq-unsafe lock: [ 357.152243][ T6694] (tasklist_lock){.+.+}-{2:2} [ 357.152261][ T6694] [ 357.152261][ T6694] ... which became HARDIRQ-irq-unsafe at: [ 357.164867][ T6694] ... [ 357.164873][ T6694] lock_acquire+0x1f8/0x5a0 [ 357.172014][ T6694] _raw_read_lock+0x32/0x40 [ 357.176595][ T6694] do_wait+0x2c6/0xb80 [ 357.180736][ T6694] kernel_wait+0xe5/0x230 [ 357.185139][ T6694] call_usermodehelper_exec_work+0xb5/0x220 [ 357.191130][ T6694] process_one_work+0x917/0x1260 [ 357.196142][ T6694] worker_thread+0xa47/0x1200 [ 357.200907][ T6694] kthread+0x28d/0x320 [ 357.205042][ T6694] ret_from_fork+0x1f/0x30 [ 357.209530][ T6694] [ 357.209530][ T6694] other info that might help us debug this: [ 357.209530][ T6694] [ 357.219741][ T6694] Chain exists of: [ 357.219741][ T6694] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 357.219741][ T6694] [ 357.232683][ T6694] Possible interrupt unsafe locking scenario: [ 357.232683][ T6694] [ 357.240988][ T6694] CPU0 CPU1 [ 357.246364][ T6694] ---- ---- [ 357.251708][ T6694] lock(tasklist_lock); [ 357.255955][ T6694] local_irq_disable(); [ 357.262696][ T6694] lock(&dev->event_lock#2); [ 357.269876][ T6694] lock(&new->fa_lock); [ 357.276630][ T6694] [ 357.280093][ T6694] lock(&dev->event_lock#2); [ 357.284962][ T6694] [ 357.284962][ T6694] *** DEADLOCK *** [ 357.284962][ T6694] [ 357.293110][ T6694] 6 locks held by syz.4.564/6694: [ 357.298118][ T6694] #0: ffff88802aada110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x26d/0x7c0 [ 357.307275][ T6694] #1: ffff88802a2d6230 (&dev->event_lock#2){-...}-{2:2}, at: input_inject_event+0xc1/0x330 [ 357.317353][ T6694] #2: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd1/0x330 [ 357.326993][ T6694] #3: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x12a0 [ 357.336637][ T6694] #4: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x2a/0xc80 [ 357.346726][ T6694] #5: ffffffff8d32e680 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x51/0x4d0 [ 357.356038][ T6694] [ 357.356038][ T6694] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 357.366448][ T6694] -> (&dev->event_lock#2){-...}-{2:2} { [ 357.371992][ T6694] IN-HARDIRQ-W at: [ 357.375953][ T6694] lock_acquire+0x1f8/0x5a0 [ 357.382093][ T6694] _raw_spin_lock_irqsave+0xd1/0x120 [ 357.389016][ T6694] input_event+0x8d/0xd0 [ 357.394893][ T6694] psmouse_report_standard_packet+0x50/0x200 [ 357.402516][ T6694] psmouse_process_byte+0x45b/0x640 [ 357.409371][ T6694] psmouse_handle_byte+0x46/0x4b0 [ 357.416043][ T6694] psmouse_interrupt+0x697/0x10a0 [ 357.422709][ T6694] serio_interrupt+0x88/0x130 [ 357.429023][ T6694] i8042_interrupt+0x357/0x750 [ 357.435430][ T6694] __handle_irq_event_percpu+0x2a8/0xb20 [ 357.442698][ T6694] handle_irq_event+0x85/0x1e0 [ 357.449114][ T6694] handle_edge_irq+0x245/0xbf0 [ 357.455532][ T6694] __common_interrupt+0xd7/0x1f0 [ 357.462114][ T6694] common_interrupt+0xae/0xd0 [ 357.468453][ T6694] asm_common_interrupt+0x22/0x40 [ 357.475109][ T6694] queue_work_on+0x1f4/0x250 [ 357.481332][ T6694] call_usermodehelper_exec+0x272/0x480 [ 357.488533][ T6694] kobject_uevent_env+0x6a5/0x8c0 [ 357.495195][ T6694] driver_register+0x35b/0x3a0 [ 357.501629][ T6694] usb_register_driver+0x206/0x3d0 [ 357.508383][ T6694] do_one_initcall+0x265/0x8f0 [ 357.514782][ T6694] do_initcall_level+0x157/0x207 [ 357.521393][ T6694] do_initcalls+0x49/0x86 [ 357.527399][ T6694] kernel_init_freeable+0x45c/0x60f [ 357.534241][ T6694] kernel_init+0x19/0x290 [ 357.540206][ T6694] ret_from_fork+0x1f/0x30 [ 357.546272][ T6694] INITIAL USE at: [ 357.550146][ T6694] lock_acquire+0x1f8/0x5a0 [ 357.556214][ T6694] _raw_spin_lock_irqsave+0xd1/0x120 [ 357.563047][ T6694] input_inject_event+0xc1/0x330 [ 357.569533][ T6694] led_trigger_event+0x130/0x210 [ 357.576021][ T6694] kbd_led_trigger_activate+0xb9/0x100 [ 357.583025][ T6694] led_trigger_set+0x55a/0x970 [ 357.589335][ T6694] led_trigger_set_default+0x1c2/0x200 [ 357.596348][ T6694] led_classdev_register_ext+0x5ee/0x800 [ 357.603528][ T6694] input_leds_connect+0x48f/0x630 [ 357.610153][ T6694] input_register_device+0xd65/0x1250 [ 357.617076][ T6694] atkbd_connect+0x79d/0x9e0 [ 357.623217][ T6694] serio_driver_probe+0x74/0x90 [ 357.629718][ T6694] really_probe+0x2ab/0xcb0 [ 357.635786][ T6694] __driver_probe_device+0x1a2/0x3d0 [ 357.642628][ T6694] driver_probe_device+0x50/0x420 [ 357.649210][ T6694] __driver_attach+0x458/0x6f0 [ 357.655521][ T6694] bus_for_each_dev+0x17c/0x1f0 [ 357.661923][ T6694] serio_handle_event+0x56a/0x8f0 [ 357.668499][ T6694] process_one_work+0x917/0x1260 [ 357.674999][ T6694] worker_thread+0xa47/0x1200 [ 357.681231][ T6694] kthread+0x28d/0x320 [ 357.686848][ T6694] ret_from_fork+0x1f/0x30 [ 357.692829][ T6694] } [ 357.695310][ T6694] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 357.704324][ T6694] [ 357.704324][ T6694] the dependencies between the lock to be acquired [ 357.704332][ T6694] and HARDIRQ-irq-unsafe lock: [ 357.717846][ T6694] -> (tasklist_lock){.+.+}-{2:2} { [ 357.723123][ T6694] HARDIRQ-ON-R at: [ 357.727273][ T6694] lock_acquire+0x1f8/0x5a0 [ 357.733848][ T6694] _raw_read_lock+0x32/0x40 [ 357.740336][ T6694] do_wait+0x2c6/0xb80 [ 357.746387][ T6694] kernel_wait+0xe5/0x230 [ 357.752699][ T6694] call_usermodehelper_exec_work+0xb5/0x220 [ 357.760576][ T6694] process_one_work+0x917/0x1260 [ 357.767494][ T6694] worker_thread+0xa47/0x1200 [ 357.774152][ T6694] kthread+0x28d/0x320 [ 357.780205][ T6694] ret_from_fork+0x1f/0x30 [ 357.786615][ T6694] SOFTIRQ-ON-R at: [ 357.790750][ T6694] lock_acquire+0x1f8/0x5a0 [ 357.797235][ T6694] _raw_read_lock+0x32/0x40 [ 357.803719][ T6694] do_wait+0x2c6/0xb80 [ 357.809782][ T6694] kernel_wait+0xe5/0x230 [ 357.816098][ T6694] call_usermodehelper_exec_work+0xb5/0x220 [ 357.823972][ T6694] process_one_work+0x917/0x1260 [ 357.830889][ T6694] worker_thread+0xa47/0x1200 [ 357.837563][ T6694] kthread+0x28d/0x320 [ 357.843610][ T6694] ret_from_fork+0x1f/0x30 [ 357.850006][ T6694] INITIAL USE at: [ 357.854051][ T6694] lock_acquire+0x1f8/0x5a0 [ 357.860448][ T6694] _raw_write_lock_irq+0xcf/0x110 [ 357.867371][ T6694] copy_process+0x24f6/0x40a0 [ 357.873948][ T6694] kernel_clone+0x222/0x920 [ 357.880356][ T6694] user_mode_thread+0x12e/0x190 [ 357.887130][ T6694] rest_init+0x23/0x300 [ 357.893182][ T6694] start_kernel+0x0/0x53f [ 357.899412][ T6694] start_kernel+0x496/0x53f [ 357.905820][ T6694] secondary_startup_64_no_verify+0xcf/0xdb [ 357.913638][ T6694] INITIAL READ USE at: [ 357.918126][ T6694] lock_acquire+0x1f8/0x5a0 [ 357.924979][ T6694] _raw_read_lock+0x32/0x40 [ 357.931816][ T6694] do_wait+0x2c6/0xb80 [ 357.938221][ T6694] kernel_wait+0xe5/0x230 [ 357.944882][ T6694] call_usermodehelper_exec_work+0xb5/0x220 [ 357.953126][ T6694] process_one_work+0x917/0x1260 [ 357.960394][ T6694] worker_thread+0xa47/0x1200 [ 357.967402][ T6694] kthread+0x28d/0x320 [ 357.973794][ T6694] ret_from_fork+0x1f/0x30 [ 357.980539][ T6694] } [ 357.983193][ T6694] ... key at: [] tasklist_lock+0x18/0x40 [ 357.991077][ T6694] ... acquired at: [ 357.995034][ T6694] lock_acquire+0x1f8/0x5a0 [ 357.999723][ T6694] _raw_read_lock+0x32/0x40 [ 358.004394][ T6694] send_sigurg+0xea/0x3b0 [ 358.008878][ T6694] sk_send_sigurg+0x6a/0xb0 [ 358.013541][ T6694] queue_oob+0x81a/0xaf0 [ 358.017941][ T6694] unix_stream_sendmsg+0xe10/0x1070 [ 358.023295][ T6694] ____sys_sendmsg+0x5d3/0x9a0 [ 358.028214][ T6694] __sys_sendmmsg+0x3ab/0x730 [ 358.033078][ T6694] __x64_sys_sendmmsg+0x9c/0xb0 [ 358.038103][ T6694] do_syscall_64+0x3b/0xb0 [ 358.042678][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.048725][ T6694] [ 358.051031][ T6694] -> (&f->f_owner.lock){....}-{2:2} { [ 358.056509][ T6694] INITIAL USE at: [ 358.060493][ T6694] lock_acquire+0x1f8/0x5a0 [ 358.066736][ T6694] _raw_write_lock_irq+0xcf/0x110 [ 358.073585][ T6694] __f_setown+0x38/0x350 [ 358.079559][ T6694] f_setown+0x144/0x1f0 [ 358.085445][ T6694] do_fcntl+0x128/0x1500 [ 358.091417][ T6694] __se_sys_fcntl+0xd5/0x1b0 [ 358.097745][ T6694] do_syscall_64+0x3b/0xb0 [ 358.103889][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.111519][ T6694] INITIAL READ USE at: [ 358.115930][ T6694] lock_acquire+0x1f8/0x5a0 [ 358.122597][ T6694] _raw_read_lock_irqsave+0xd9/0x120 [ 358.130125][ T6694] send_sigurg+0x25/0x3b0 [ 358.136614][ T6694] sk_send_sigurg+0x6a/0xb0 [ 358.143277][ T6694] tcp_check_urg+0x202/0x740 [ 358.150022][ T6694] tcp_urg+0x154/0x440 [ 358.156269][ T6694] tcp_rcv_established+0xe58/0x1f00 [ 358.163646][ T6694] tcp_v4_do_rcv+0x487/0xb00 [ 358.170408][ T6694] __release_sock+0x198/0x4b0 [ 358.177260][ T6694] release_sock+0x5d/0x1c0 [ 358.183852][ T6694] tcp_sendmsg+0x36/0x40 [ 358.190259][ T6694] __sys_sendto+0x480/0x600 [ 358.196929][ T6694] __x64_sys_sendto+0xda/0xf0 [ 358.203764][ T6694] do_syscall_64+0x3b/0xb0 [ 358.210339][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.218411][ T6694] } [ 358.220979][ T6694] ... key at: [] __alloc_file.__key+0x0/0x10 [ 358.229133][ T6694] ... acquired at: [ 358.233010][ T6694] lock_acquire+0x1f8/0x5a0 [ 358.237677][ T6694] _raw_read_lock_irqsave+0xd9/0x120 [ 358.243125][ T6694] send_sigio+0x2f/0x360 [ 358.247522][ T6694] kill_fasync+0x232/0x4d0 [ 358.252096][ T6694] lease_break_callback+0x22/0x30 [ 358.257300][ T6694] __break_lease+0x4d1/0x1550 [ 358.262135][ T6694] vfs_truncate+0x267/0x3a0 [ 358.266799][ T6694] do_sys_truncate+0xda/0x190 [ 358.271649][ T6694] do_syscall_64+0x3b/0xb0 [ 358.276239][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.282288][ T6694] [ 358.284593][ T6694] -> (&new->fa_lock){....}-{2:2} { [ 358.289701][ T6694] INITIAL USE at: [ 358.293588][ T6694] lock_acquire+0x1f8/0x5a0 [ 358.299646][ T6694] _raw_write_lock_irq+0xcf/0x110 [ 358.306235][ T6694] fasync_remove_entry+0xfb/0x1d0 [ 358.312816][ T6694] lease_modify+0x19c/0x380 [ 358.318878][ T6694] locks_remove_file+0x5d3/0x1040 [ 358.325543][ T6694] __fput+0x363/0x8d0 [ 358.331085][ T6694] task_work_run+0x246/0x300 [ 358.337236][ T6694] exit_to_user_mode_loop+0xde/0x100 [ 358.344137][ T6694] exit_to_user_mode_prepare+0xb1/0x140 [ 358.351242][ T6694] syscall_exit_to_user_mode+0x60/0x270 [ 358.358357][ T6694] do_syscall_64+0x47/0xb0 [ 358.364338][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.371797][ T6694] INITIAL READ USE at: [ 358.376110][ T6694] lock_acquire+0x1f8/0x5a0 [ 358.382600][ T6694] _raw_read_lock_irqsave+0xd9/0x120 [ 358.389869][ T6694] kill_fasync+0x196/0x4d0 [ 358.396281][ T6694] lease_break_callback+0x22/0x30 [ 358.403295][ T6694] __break_lease+0x4d1/0x1550 [ 358.409960][ T6694] vfs_truncate+0x267/0x3a0 [ 358.416493][ T6694] do_sys_truncate+0xda/0x190 [ 358.423169][ T6694] do_syscall_64+0x3b/0xb0 [ 358.429577][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.437456][ T6694] } [ 358.439937][ T6694] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 358.448650][ T6694] ... acquired at: [ 358.452433][ T6694] lock_acquire+0x1f8/0x5a0 [ 358.457095][ T6694] _raw_read_lock_irqsave+0xd9/0x120 [ 358.462547][ T6694] kill_fasync+0x196/0x4d0 [ 358.467137][ T6694] mousedev_notify_readers+0x719/0xc80 [ 358.472757][ T6694] mousedev_event+0x554/0x1260 [ 358.477677][ T6694] input_pass_values+0x9ee/0x12a0 [ 358.482862][ T6694] input_event_dispose+0x366/0x650 [ 358.488133][ T6694] input_handle_event+0x97d/0xb00 [ 358.493314][ T6694] input_inject_event+0x224/0x330 [ 358.498501][ T6694] evdev_write+0x668/0x7c0 [ 358.503080][ T6694] vfs_write+0x2d9/0xbc0 [ 358.507493][ T6694] ksys_write+0x19c/0x2c0 [ 358.511976][ T6694] do_syscall_64+0x3b/0xb0 [ 358.516564][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.522622][ T6694] [ 358.524937][ T6694] [ 358.524937][ T6694] stack backtrace: [ 358.530818][ T6694] CPU: 0 PID: 6694 Comm: syz.4.564 Not tainted 6.1.128-syzkaller #0 [ 358.538795][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 358.548863][ T6694] Call Trace: [ 358.552128][ T6694] [ 358.555096][ T6694] dump_stack_lvl+0x1e3/0x2cb [ 358.559766][ T6694] ? nf_tcp_handle_invalid+0x642/0x642 [ 358.565221][ T6694] ? panic+0x764/0x764 [ 358.569275][ T6694] ? print_shortest_lock_dependencies+0xee/0x150 [ 358.575594][ T6694] validate_chain+0x4d16/0x5950 [ 358.580518][ T6694] ? reacquire_held_locks+0x660/0x660 [ 358.585892][ T6694] ? register_lock_class+0x100/0x990 [ 358.591173][ T6694] ? is_dynamic_key+0x260/0x260 [ 358.596027][ T6694] ? mark_lock+0x9a/0x340 [ 358.600408][ T6694] __lock_acquire+0x125b/0x1f80 [ 358.605259][ T6694] lock_acquire+0x1f8/0x5a0 [ 358.609765][ T6694] ? kill_fasync+0x196/0x4d0 [ 358.614353][ T6694] ? read_lock_is_recursive+0x10/0x10 [ 358.619715][ T6694] ? read_lock_is_recursive+0x10/0x10 [ 358.625098][ T6694] _raw_read_lock_irqsave+0xd9/0x120 [ 358.630375][ T6694] ? kill_fasync+0x196/0x4d0 [ 358.634948][ T6694] ? _raw_read_lock+0x40/0x40 [ 358.639628][ T6694] kill_fasync+0x196/0x4d0 [ 358.644068][ T6694] ? kill_fasync+0x51/0x4d0 [ 358.648557][ T6694] mousedev_notify_readers+0x719/0xc80 [ 358.654018][ T6694] ? mousedev_notify_readers+0x2a/0xc80 [ 358.659569][ T6694] mousedev_event+0x554/0x1260 [ 358.664320][ T6694] ? mousedev_packet+0x9f0/0x9f0 [ 358.669243][ T6694] input_pass_values+0x9ee/0x12a0 [ 358.674297][ T6694] ? input_pass_values+0xa3/0x12a0 [ 358.679422][ T6694] input_event_dispose+0x366/0x650 [ 358.684534][ T6694] input_handle_event+0x97d/0xb00 [ 358.689569][ T6694] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 358.695037][ T6694] ? userio_device_write+0x1f0/0x1f0 [ 358.700325][ T6694] input_inject_event+0x224/0x330 [ 358.705364][ T6694] ? input_inject_event+0xd1/0x330 [ 358.710474][ T6694] evdev_write+0x668/0x7c0 [ 358.714894][ T6694] ? evdev_read+0xe00/0xe00 [ 358.719385][ T6694] ? end_current_label_crit_section+0x147/0x170 [ 358.725614][ T6694] ? common_file_perm+0x17d/0x1d0 [ 358.730631][ T6694] ? fsnotify_perm+0x64/0x590 [ 358.735299][ T6694] ? security_file_permission+0x75/0xa0 [ 358.740843][ T6694] ? evdev_read+0xe00/0xe00 [ 358.745336][ T6694] vfs_write+0x2d9/0xbc0 [ 358.749581][ T6694] ? do_sys_openat2+0x1f9/0x4f0 [ 358.754424][ T6694] ? file_end_write+0x250/0x250 [ 358.759260][ T6694] ? __fget_files+0x28/0x4a0 [ 358.763833][ T6694] ? __fget_files+0x435/0x4a0 [ 358.768497][ T6694] ? __fget_files+0x28/0x4a0 [ 358.773105][ T6694] ? __fdget_pos+0x1db/0x360 [ 358.777717][ T6694] ? ksys_write+0x77/0x2c0 [ 358.782120][ T6694] ksys_write+0x19c/0x2c0 [ 358.786472][ T6694] ? print_irqtrace_events+0x210/0x210 [ 358.791936][ T6694] ? __ia32_sys_read+0x80/0x80 [ 358.796690][ T6694] ? syscall_enter_from_user_mode+0x2e/0x230 [ 358.802654][ T6694] ? lockdep_hardirqs_on+0x94/0x130 [ 358.807835][ T6694] ? syscall_enter_from_user_mode+0x2e/0x230 [ 358.813814][ T6694] do_syscall_64+0x3b/0xb0 [ 358.818239][ T6694] ? clear_bhb_loop+0x45/0xa0 [ 358.822901][ T6694] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.828780][ T6694] RIP: 0033:0x7fe8dd78cde9 [ 358.833196][ T6694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.852808][ T6694] RSP: 002b:00007fe8de681038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 358.861236][ T6694] RAX: ffffffffffffffda RBX: 00007fe8dd9a5fa0 RCX: 00007fe8dd78cde9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 358.869205][ T6694] RDX: 0000000000000918 RSI: 0000400000000040 RDI: 0000000000000004 [ 358.877173][ T6694] RBP: 00007fe8dd80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 358.885132][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.893098][ T6694] R13: 0000000000000000 R14: 00007fe8dd9a5fa0 R15: 00007ffeb20f99c8 [ 358.901086][ T6694] [ 359.419733][ T4653] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.489812][ T4653] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.553372][ T4653] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.612176][ T4653] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.757233][ T6683] EXT4-fs (loop0): unmounting filesystem. [ 360.598684][ T4653] device hsr_slave_0 left promiscuous mode [ 360.604948][ T4653] device hsr_slave_1 left promiscuous mode [ 360.611319][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.619222][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.626997][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.634417][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.642056][ T4653] device bridge_slave_1 left promiscuous mode [ 360.648453][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.656387][ T4653] device bridge_slave_0 left promiscuous mode [ 360.662548][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.672178][ T4653] device veth1_macvtap left promiscuous mode [ 360.678480][ T4653] device veth0_macvtap left promiscuous mode [ 360.684518][ T4653] device veth1_vlan left promiscuous mode [ 360.690383][ T4653] device veth0_vlan left promiscuous mode [ 360.806567][ T4653] team0 (unregistering): Port device team_slave_1 removed [ 360.818077][ T4653] team0 (unregistering): Port device team_slave_0 removed [ 360.843523][ T4653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.871447][ T4653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.914646][ T4653] bond0 (unregistering): Released all slaves [ 361.330680][ T4653] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.378375][ T4653] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.418009][ T4653] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.458732][ T4653] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.521790][ T4653] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.558395][ T4653] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.618182][ T4653] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.668035][ T4653] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.750519][ T4653] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.808350][ T4653] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.857584][ T4653] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.908375][ T4653] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.981341][ T4653] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.027600][ T4653] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.068101][ T4653] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.127873][ T4653] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.179595][ T4653] device hsr_slave_0 left promiscuous mode [ 363.186252][ T4653] device hsr_slave_1 left promiscuous mode [ 363.192467][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.199923][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.207551][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.214944][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.222572][ T4653] device bridge_slave_1 left promiscuous mode [ 363.229136][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.236947][ T4653] device bridge_slave_0 left promiscuous mode [ 363.243115][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.252970][ T4653] device hsr_slave_0 left promiscuous mode [ 363.259448][ T4653] device hsr_slave_1 left promiscuous mode [ 363.265693][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.273102][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.280830][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.288252][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.295926][ T4653] device bridge_slave_1 left promiscuous mode [ 363.302075][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.309906][ T4653] device bridge_slave_0 left promiscuous mode [ 363.316110][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.326216][ T4653] device hsr_slave_0 left promiscuous mode [ 363.332363][ T4653] device hsr_slave_1 left promiscuous mode [ 363.338839][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.346332][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.354063][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.361512][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.369287][ T4653] device bridge_slave_1 left promiscuous mode [ 363.375563][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.383310][ T4653] device bridge_slave_0 left promiscuous mode [ 363.389719][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.399587][ T4653] device hsr_slave_0 left promiscuous mode [ 363.405952][ T4653] device hsr_slave_1 left promiscuous mode [ 363.412101][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.419668][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.427282][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.434676][ T4653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.442409][ T4653] device bridge_slave_1 left promiscuous mode [ 363.448748][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.457323][ T4653] device bridge_slave_0 left promiscuous mode [ 363.463495][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.475015][ T4653] device veth1_macvtap left promiscuous mode [ 363.481269][ T4653] device veth0_macvtap left promiscuous mode [ 363.487669][ T4653] device veth1_vlan left promiscuous mode [ 363.493444][ T4653] device veth0_vlan left promiscuous mode [ 363.499893][ T4653] device veth1_macvtap left promiscuous mode [ 363.506073][ T4653] device veth0_macvtap left promiscuous mode [ 363.512091][ T4653] device veth1_vlan left promiscuous mode [ 363.517942][ T4653] device veth0_vlan left promiscuous mode [ 363.524244][ T4653] device veth1_macvtap left promiscuous mode [ 363.530504][ T4653] device veth0_macvtap left promiscuous mode [ 363.536705][ T4653] device veth1_vlan left promiscuous mode [ 363.542528][ T4653] device veth0_vlan left promiscuous mode [ 363.548964][ T4653] device veth1_macvtap left promiscuous mode [ 363.555013][ T4653] device veth0_macvtap left promiscuous mode [ 363.561165][ T4653] device veth1_vlan left promiscuous mode [ 363.567176][ T4653] device veth0_vlan left promiscuous mode [ 363.761637][ T4653] team0 (unregistering): Port device team_slave_1 removed [ 363.787970][ T4653] team0 (unregistering): Port device team_slave_0 removed [ 363.810543][ T4653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.834472][ T4653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.873468][ T4653] bond0 (unregistering): Released all slaves [ 363.957160][ T4653] team0 (unregistering): Port device team_slave_1 removed [ 363.981546][ T4653] team0 (unregistering): Port device team_slave_0 removed [ 364.019725][ T4653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.043587][ T4653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.084020][ T4653] bond0 (unregistering): Released all slaves [ 364.166836][ T4653] team0 (unregistering): Port device team_slave_1 removed [ 364.191993][ T4653] team0 (unregistering): Port device team_slave_0 removed [ 364.216865][ T4653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.240979][ T4653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.280966][ T4653] bond0 (unregistering): Released all slaves [ 364.338260][ T4653] team0 (unregistering): Port device vlan0 removed [ 364.406572][ T4653] team0 (unregistering): Port device team_slave_1 removed [ 364.429816][ T4653] team0 (unregistering): Port device team_slave_0 removed [ 364.440105][ T4653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.451887][ T4653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.493724][ T4653] bond0 (unregistering): Released all slaves