last executing test programs: 26m58.237371713s ago: executing program 32 (id=61): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x20008810) socket(0x8000000010, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0x2, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 26m52.61033154s ago: executing program 33 (id=83): syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100005ae4c41096050100f5050102030109021b0001000000000904d60001b5e145000905"], 0x0) 26m38.110844191s ago: executing program 34 (id=110): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2b}, 0x28) 26m36.937431011s ago: executing program 0 (id=113): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) unshare(0x22020600) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) 26m35.145352901s ago: executing program 0 (id=115): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x12) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 26m34.205281284s ago: executing program 0 (id=116): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', 0x0, 0x2012024, 0x0) unlink(&(0x7f0000000000)='./file1\x00') 26m34.06650097s ago: executing program 0 (id=117): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000006540)='./file1\x00', 0x2a08800, &(0x7f0000000140)=ANY=[], 0x4, 0x69f, &(0x7f0000000580)="$eJzs3c1rHOcdB/DvrFay1gVHeXHilkBFDGmpqS1Z2K17idtD8SGU4B5CSy/ClmPhtRMkpSihFPX92kP+gPSgQyGnQu+GtPTU5parTiVQ6CUn3Vxmdna1etmV1tGLnX4+MDvPzPP+m5d9EWIC/N+6cSHNhyly48Lrq+X2xvpce2N97lSd3U5SphtJs7NK8SApPk6up7Pkq+XOunwxqJ8PFq/d/PTzjc86W816qco3htU7mLV6yXSSsXq92/hjtXdrYHvDzfdSRW+GZcDOdwMHJ+3RLmujVP+C1y3wJCg675u7TCWnk0zWnwNS3x0axzu6wzfSXQ4AAACeUs9sZjOrOXPS4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnSf38/6JeGt30dIru8/+b9b7SRJKbjRMe8+iKXurhiY4DAAAAAAAAAA7H1zezmdWc6W4/6vxpvFm9vlC9fiXvZjkLWcrFrGY+K1nJUmaTTPU1NLE6v7KyNJtX9q15ec+al49jtgAAAAAAAADwpfXr3Nj6+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwJimSss6qWF7rpqTSaSSaTTJTl1pJPuumnRNFNtPp2PjyZsQAAAMBjm9xr5yd/H1rnmc1sZjVnutuPiuo7/4vV9+XJvJsHWcliVtLOQm7X36HLb/2NjfW59sb63P2N9bmq45896ui08/3/jjT0qsV0fnvYu+dzVYlW7mSx2nMxt6rB3E6jqlk6V4+nt2zv5FflmFqv1Q44stv1uuzsj/2/Ihy2xqgVpqpK472IzNRjKxt6dngk9j06zaE9zabR++XnhSE9dadUjBjz0916SX6/I+av/fvPPzlgM0egF4lGqkhc7jv7XuxF4dTelb/x14/evNt+cO/uneULR3YaHZed58RcXyReGn72PeGRaI5YfqZ3pnemciM/zI9zIdN5I0tZzM9Tng8Lqe+Mma/Lla9TfVFKdkXq+ratN/YbyUR9XDp30UbO9nJ2j2k+K1nIdE5Vqfm8UtU9k8UUeTu3s5Crudq79K7kSq71HeGzA49wVaG60zZGu+rPf3MrhPnDjp9ph/rHQQuOrvOWWsb12b649t9zp6q8/j1bUXruAO9HI94bm1+rE2Ufv6nWP31CfoTfGYnZvkg8PzwSf6qujeX2g3tLd+ffGdD+2o7tV8e30r87ynfmkZUH5LlM1neS7WdHmfd87y6zPV4T9V9cOnmNXXlnq7yi6F6pP+q7Uq/mcmbznfpKnag/w+1u6XKV99LuvLHuyM/15W37vJW3/3ky8QRgRKe/dXqi9Z/Wv1oftn7butt6ffIHp7576uWJjP9t/HvNmbFXGy8Xf8mH+eXW938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODxLb/3/r35dnthae9EY3DW4SaK+kE+g8o008oRDmM8Rz3BPae8dugt57hn8ViJ7pOrvmg7b14/hjGPJccZ1Uzte1UeaqKcXnfPWLay6kO058NFgS+DSyv337m0/N773168P//WwlsLD8avXLk2c+3K1blLdxbbCzOd15MeJXAUtj4PDCrx0fEOCAAAAAAAAAAAANjXcfynQV930yc4VQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOApdeNCmuMpMjtzcabc3lifa5dLN71Vspmk0UiKXyTFx8n1dJZM9TVXDOrng8VrNz/9fOOzrbaa3fKNYfW6JobmrtVLppOM1esR2xjY3q1B7R1Y0ZthGbDz3cDBSftfAAAA///6S/6H") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', 0x0, 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 26m33.899294951s ago: executing program 0 (id=118): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000000), 0x4, 0x982a, &(0x7f0000009b80)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r0, &(0x7f0000000040)=""/61, 0x3d) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 26m33.330494339s ago: executing program 0 (id=120): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x0, 0x0}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg(r0, 0x0, 0x5f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffff5, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020}, 0xcf9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 26m32.769518848s ago: executing program 35 (id=120): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xc, 0x0, 0x0}, 0x20) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) recvmsg(r0, 0x0, 0x5f00) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) lseek(r2, 0xfffffffffffffff5, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002d80)={0x2020}, 0xcf9) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 26m32.671193882s ago: executing program 2 (id=122): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x0, 0x0}, 0x10) 26m32.348587992s ago: executing program 2 (id=123): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 26m31.280307418s ago: executing program 2 (id=124): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sync_file_range(r2, 0x1, 0x1200000000000, 0x2) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={r2, 0x20, &(0x7f0000001680)={&(0x7f00000005c0)=""/117, 0x75, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001700), 0x221000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x1f, 0x0, &(0x7f0000000280), &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xa9, &(0x7f0000000440)=""/169, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0xb, 0x8001, 0x7ff}, 0x10, r5, r4, 0x2, &(0x7f0000001740)=[r2, 0xffffffffffffffff, r2, r2, r3, r6, r3, r3], &(0x7f0000001780)=[{0x1, 0x1, 0x1, 0x9}, {0x4, 0x5, 0x6, 0xa}], 0x10, 0x9}, 0x94) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063012000000000009500000000000000174cbc18c8c9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000024c0), 0x92443, 0x0) 26m29.972811876s ago: executing program 2 (id=125): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000006540)='./file1\x00', 0x2a08800, &(0x7f0000000140)=ANY=[], 0x4, 0x69f, &(0x7f0000000580)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 26m29.806422888s ago: executing program 2 (id=126): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x337, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect(r0, &(0x7f0000000280)=@hci={0x1f, 0x2, 0x3}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 26m28.424518531s ago: executing program 2 (id=127): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x3, 0x0, [{0x0, 0x4, &(0x7f0000000580)}, {0x0, 0x72, &(0x7f00000005c0)=""/114}, {0x5000, 0x8, &(0x7f0000000640)=""/8}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000f}, 0x94) 26m27.88836238s ago: executing program 36 (id=127): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x3, 0x0, [{0x0, 0x4, &(0x7f0000000580)}, {0x0, 0x72, &(0x7f00000005c0)=""/114}, {0x5000, 0x8, &(0x7f0000000640)=""/8}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000f}, 0x94) 20m59.886779595s ago: executing program 5 (id=757): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) syz_emit_ethernet(0xec, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)={0x1, 0x4, [0x896, 0x1ff, 0x9ad, 0xb0f]}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0xffffffff00000000) 20m58.497432732s ago: executing program 5 (id=759): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 20m54.143852665s ago: executing program 5 (id=765): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile]}}, 0x0, 0x8a}, 0x28) 20m51.338611294s ago: executing program 5 (id=768): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000005c0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m45.552552284s ago: executing program 5 (id=778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x98a, 0x1, "c2"}, 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noquota}, {@noload}]}, 0x3, 0x430, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) 20m37.550691013s ago: executing program 5 (id=788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020207025000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x48051}, 0x240000c4) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 20m22.150530478s ago: executing program 37 (id=788): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020207025000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x48051}, 0x240000c4) r6 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r6, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 19m51.204600376s ago: executing program 7 (id=867): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) read(r0, &(0x7f00000005c0)=""/208, 0xd0) 19m48.810294099s ago: executing program 7 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) 19m47.340962934s ago: executing program 7 (id=874): add_key(&(0x7f0000000140)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m45.744787959s ago: executing program 7 (id=876): open(&(0x7f0000000000)='./file1\x00', 0x14927e, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x5, 0xc, 0x7}, &(0x7f0000000500)=0x20) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000300)={0x0, 0x0, 0x2c, 0x4, 0x104, 0x1}) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 19m44.244756072s ago: executing program 7 (id=877): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f00000005c0)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m40.307253955s ago: executing program 7 (id=885): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000a6ff00", 0x39}], 0x1) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r5, &(0x7f0000000200), 0x4003) 19m25.117928329s ago: executing program 38 (id=885): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x57, 0xc2}}}}}}, 0x0) unshare(0x2c020400) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x48) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x15) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000a6ff00", 0x39}], 0x1) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r5, &(0x7f0000000200), 0x4003) 3m46.864104648s ago: executing program 8 (id=2313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab", 0x4) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {0x0}], 0x2}, 0x0) 3m45.402550217s ago: executing program 8 (id=2315): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0x639) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x2}) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) fcntl$getflags(r7, 0x3) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) r8 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r8, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000000c0)='l', 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000008480000000000000ff0700000300000018000000000000008400000007000000ffffffff00000000"], 0x30, 0x14001}], 0x1, 0x4044040) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m43.812952636s ago: executing program 8 (id=2317): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x30, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x30}}, 0x8000) 3m37.778421439s ago: executing program 8 (id=2325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 3m36.334025586s ago: executing program 8 (id=2329): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000780), 0x1, 0x43c, &(0x7f0000000280)="$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") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 3m34.407846557s ago: executing program 8 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x8000) 3m18.911306498s ago: executing program 39 (id=2334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001080000cd6c0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x34}}, 0x44000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) socket$kcm(0x10, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x44, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x8000) 27.51865929s ago: executing program 6 (id=2762): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc222, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3}}}}}]}}]}}, 0x0) 24.394361978s ago: executing program 6 (id=2777): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x1) rmdir(&(0x7f0000000300)='./control\x00') 24.09827669s ago: executing program 6 (id=2781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000001000000bd79000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) dup3(r3, r2, 0x0) 23.138725241s ago: executing program 6 (id=2784): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad43"], 0x14}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 22.772664663s ago: executing program 6 (id=2786): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x39) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 17.774285233s ago: executing program 6 (id=2797): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 10.863789602s ago: executing program 9 (id=2825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x100000000000000, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 10.503602716s ago: executing program 9 (id=2829): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 10.035794572s ago: executing program 9 (id=2832): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) shmctl$IPC_STAT(0x0, 0x2, 0x0) 9.759634423s ago: executing program 9 (id=2834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000003c00)={[{@nojournal_checksum}, {@nobarrier}, {@noquota}]}, 0xff, 0x454, &(0x7f0000001080)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 8.623610117s ago: executing program 9 (id=2838): socket$nl_route(0x10, 0x3, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 6.874809895s ago: executing program 4 (id=2842): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x20000001) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000200000004000000050000", @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000020085000000030000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) setregid(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000)) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) unshare(0x2040400) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786cab00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) 5.467615867s ago: executing program 4 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_MARK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x8000080) 5.233434274s ago: executing program 4 (id=2848): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00014e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Q'], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x44) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 4.861641461s ago: executing program 4 (id=2850): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000840)=""/262, 0x37, 0x106, 0x1}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3.633121532s ago: executing program 3 (id=2856): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x20, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0) 3.480742609s ago: executing program 3 (id=2857): request_key(&(0x7f00000000c0)='.dead\x00', 0x0, 0x0, 0xfffffffffffffff8) 3.288300695s ago: executing program 3 (id=2859): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0100001000130728bd700000000000ac1e0101000000000000000000000000ac14141b0000000000000000000000004e230001000000030200000084000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fc01000000000000000000000000000000000000000000000300000000000000080000000000000009000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fcffffffffffffff0c000000000000000000000028bd7000000000000200000000000000000000004c0012"], 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.093685914s ago: executing program 3 (id=2860): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@delchain={0x2c, 0x11, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}}, 0x0) 2.075630988s ago: executing program 1 (id=2862): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 1.991689739s ago: executing program 1 (id=2863): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.666478661s ago: executing program 1 (id=2864): r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdc00}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) 1.235849494s ago: executing program 3 (id=2865): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000880), 0x3, 0x2) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="d287d95f02b28f453b33320e8ec0328acf4a2405fd0852307400", 0x1a}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r2, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) dup3(r2, r1, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x0, 0xfffffffbffffffff}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r8, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004}, 0x8110) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000980)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ac9c58"]) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000400)={{0xffffffffffffffff, 0x2, 0x7ff, 0x1, 0x2b0}, 0x6, 0xfffffff9, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x6, 0x6, 0xd}) timer_create(0x3, 0x0, &(0x7f0000044000)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 747.932004ms ago: executing program 4 (id=2866): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x20, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0) 670.522896ms ago: executing program 1 (id=2867): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000017780), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000019fc0)={0xf, 0x8}, 0x10) 554.979625ms ago: executing program 4 (id=2868): r0 = socket$can_j1939(0x1d, 0x2, 0x7) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x45e, 0xdb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x10, 0x9, 0x1, {0x22, 0xee}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x7, 0x8a}}}}}]}}]}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x38, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) 426.663085ms ago: executing program 1 (id=2869): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @ramp={0xe9b3, 0x0, {0x0, 0x9, 0xe07, 0x1ff}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 244.968636ms ago: executing program 3 (id=2870): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001804000000000000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x4, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 190.991241ms ago: executing program 1 (id=2871): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100000000000000030000000000", @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x15c}}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000940}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) io_getevents(0x0, 0x4, 0x0, &(0x7f00000002c0), &(0x7f0000000200)={0x0, 0x3938700}) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x9}, 0x1c) fcntl$notify(0xffffffffffffffff, 0x402, 0x1) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x10, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x63, 0xffff}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) 0s ago: executing program 9 (id=2872): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) kernel console output (not intermixed with test programs): device "/dev/loop9" [ 1442.458963][T18255] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1442.642322][T18246] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 1443.087452][T18026] hsr_slave_1: entered promiscuous mode [ 1443.095980][T18026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.104680][T18026] Cannot create hsr debugfs directory [ 1443.111343][T18246] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1443.124651][T18246] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2228: Failed to acquire dquot type 1 [ 1443.635027][T18246] EXT4-fs (loop6): 1 truncate cleaned up [ 1443.666718][T18246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-00000040ed00 ro without journal. Quota mode: writeback. [ 1444.031971][T18246] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1444.132397][ T5909] kernel write not supported for file bpf-prog (pid: 5909 comm: kworker/1:4) [ 1444.338367][T18246] EXT4-fs warning (device loop6): ext4_multi_mount_protect:332: MMP startup interrupted, failing mount [ 1444.338367][T18246] [ 1445.077496][T18278] loop1: detected capacity change from 0 to 512 [ 1445.846025][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-00000040ed00. [ 1448.445919][T18302] loop6: detected capacity change from 0 to 1024 [ 1448.454011][T18302] hfsplus: Unknown parameter '/dev/ptmx' [ 1449.411655][T18315] loop6: detected capacity change from 0 to 512 [ 1450.599471][ T5909] kernel write not supported for file bpf-prog (pid: 5909 comm: kworker/1:4) [ 1450.893039][T18325] netlink: 'syz.9.2245': attribute type 1 has an invalid length. [ 1451.478192][T18335] loop6: detected capacity change from 0 to 512 [ 1451.521574][T18340] loop1: detected capacity change from 0 to 512 [ 1451.579336][T18335] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.650701][T18335] ext4 filesystem being mounted at /623/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.756974][T18026] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1452.249067][T18358] loop9: detected capacity change from 0 to 1024 [ 1452.257549][T18358] hfsplus: Unknown parameter '/dev/ptmx' [ 1452.772274][T18026] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1452.795673][T18359] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2249: corrupted inode contents [ 1453.243709][T18359] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.2249: mark_inode_dirty error [ 1453.294556][T18359] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2249: corrupted inode contents [ 1453.310559][T18359] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2249: mark_inode_dirty error [ 1453.490043][T18026] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1453.833810][T18026] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1453.858846][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1453.917638][T18370] loop9: detected capacity change from 0 to 4096 [ 1453.963446][T18370] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1454.095812][T18370] ntfs3(loop9): ino=1d, mi_enum_attr [ 1454.101238][T18370] ntfs3(loop9): ino=1d, mi_enum_attr [ 1455.573407][T18391] loop1: detected capacity change from 0 to 22 [ 1455.587975][T18391] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1456.194500][T18391] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1457.415327][T18026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.566572][T18026] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.637723][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.644974][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.123240][T18404] loop8: detected capacity change from 0 to 1024 [ 1458.130949][T18404] hfsplus: Unknown parameter '/dev/ptmx' [ 1458.546185][ T5953] kernel write not supported for file bpf-prog (pid: 5953 comm: kworker/1:7) [ 1458.748578][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.755812][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1458.992747][T18411] loop8: detected capacity change from 0 to 512 [ 1459.062966][T18415] loop6: detected capacity change from 0 to 512 [ 1459.113808][T18415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.255451][T18411] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1459.268884][T18415] ext4 filesystem being mounted at /626/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1459.317023][T18411] ext4 filesystem being mounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1461.356120][T18026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1462.602065][T18423] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2264: corrupted inode contents [ 1462.616947][T18425] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.2262: corrupted inode contents [ 1462.693346][T18423] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.2264: mark_inode_dirty error [ 1462.708503][T18425] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.2262: mark_inode_dirty error [ 1462.725047][T18423] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2264: corrupted inode contents [ 1462.738795][T18425] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.2262: corrupted inode contents [ 1462.754063][T18423] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2264: mark_inode_dirty error [ 1462.767936][T18425] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.2262: mark_inode_dirty error [ 1462.929893][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.138691][ T6461] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.570054][T18026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1464.683810][T18441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'. [ 1464.859768][T18441] bridge_slave_0: left allmulticast mode [ 1464.919370][T18441] bridge_slave_0: left promiscuous mode [ 1464.950089][T18441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.147185][T18441] bridge_slave_1: left allmulticast mode [ 1465.163250][ T5953] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1465.168090][T18441] bridge_slave_1: left promiscuous mode [ 1465.184453][T18441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.323711][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 1465.343866][ T5953] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1465.396782][ T5953] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1465.462408][ T5953] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1465.523588][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.584592][ T5953] usb 2-1: Product: syz [ 1465.611154][ T5953] usb 2-1: Manufacturer: syz [ 1465.644675][ T5953] usb 2-1: SerialNumber: syz [ 1465.987620][T18441] bond0: (slave bond_slave_0): Releasing backup interface [ 1466.045630][T18441] bond0: (slave bond_slave_1): Releasing backup interface [ 1467.048021][T18441] team0: Port device team_slave_0 removed [ 1467.071245][T18441] team0: Port device team_slave_1 removed [ 1467.081706][T18441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.092463][T18441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.209480][T18441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.255510][T18441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.386097][T18026] veth0_vlan: entered promiscuous mode [ 1467.414353][T18026] veth1_vlan: entered promiscuous mode [ 1467.488682][T18465] loop9: detected capacity change from 0 to 512 [ 1467.609619][ T5953] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1467.622926][T18026] veth0_macvtap: entered promiscuous mode [ 1467.855223][T18470] loop6: detected capacity change from 0 to 22 [ 1467.862349][T18470] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1468.385342][T18465] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.2275: bad orphan inode 15 [ 1468.440217][T18465] ext4_test_bit(bit=14, block=5) = 0 [ 1468.603515][T18470] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1468.635246][T18465] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1469.309906][T18026] veth1_macvtap: entered promiscuous mode [ 1469.346012][ T5953] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1469.361829][ T5953] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1469.371872][ T5953] usb 2-1: media controller created [ 1469.412535][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1469.502644][T18026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.577803][T18026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.933480][ T5953] zl10353_read_register: readreg error (reg=127, ret==0) [ 1470.616372][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.621115][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.304875][T18486] loop1: detected capacity change from 0 to 22 [ 1471.312086][T18486] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1471.411971][T18484] netlink: 'syz.6.2277': attribute type 1 has an invalid length. [ 1471.420655][T18484] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2277'. [ 1471.597197][T18486] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1471.677008][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1471.973391][ T5953] usb 2-1: USB disconnect, device number 2 [ 1471.977147][ T3521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.650266][T18494] loop6: detected capacity change from 0 to 4096 [ 1472.687566][T18494] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1473.122976][ T3521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.200418][T18493] ntfs3(loop6): ino=1d, mi_enum_attr [ 1473.205851][T18493] ntfs3(loop6): ino=1d, mi_enum_attr [ 1474.378559][T18503] loop6: detected capacity change from 0 to 4096 [ 1474.616853][T18503] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1474.838056][T18502] ntfs3(loop6): ino=1d, mi_enum_attr [ 1474.844443][T18502] ntfs3(loop6): ino=1d, mi_enum_attr [ 1476.258687][T16681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1476.269866][T16681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1476.280012][T16681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1476.289724][T16681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1476.299038][T16681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1476.699911][ T7593] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.800382][T18523] loop8: detected capacity change from 0 to 512 [ 1477.820173][T18511] lo speed is unknown, defaulting to 1000 [ 1477.975636][T18523] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1478.052521][T18523] ext4 filesystem being mounted at /534/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1478.417343][ T7593] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.443291][ T5845] Bluetooth: hci1: command tx timeout [ 1478.710917][T18528] loop6: detected capacity change from 0 to 65536 [ 1478.762828][T18530] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.2287: corrupted inode contents [ 1478.781396][T18530] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #2: comm syz.8.2287: mark_inode_dirty error [ 1478.796087][T18530] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #2: comm syz.8.2287: corrupted inode contents [ 1478.809649][T18530] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.2287: mark_inode_dirty error [ 1478.922726][T18528] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1479.292228][T18528] XFS (loop6): Ending clean mount [ 1479.365118][ T6461] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.505859][ T7593] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.761313][T18543] overlayfs: missing 'lowerdir' [ 1480.418267][ T6236] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1480.455172][ T7593] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.523224][ T5845] Bluetooth: hci1: command tx timeout [ 1480.690369][T18546] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1481.149693][T18552] loop1: detected capacity change from 0 to 512 [ 1481.432822][T18557] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1481.800563][T18558] loop9: detected capacity change from 0 to 4096 [ 1481.993130][T18558] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1482.150862][T18552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1482.215486][T18558] ntfs3(loop9): ino=1d, mi_enum_attr [ 1482.221706][T18558] ntfs3(loop9): ino=1d, mi_enum_attr [ 1482.241328][T18552] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1482.258426][ T7593] bridge_slave_1: left allmulticast mode [ 1482.290222][ T7593] bridge_slave_1: left promiscuous mode [ 1482.505757][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.858428][ T5845] Bluetooth: hci1: command tx timeout [ 1483.575431][T18570] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2291: corrupted inode contents [ 1483.600447][T18570] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2291: mark_inode_dirty error [ 1483.616251][T18570] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2291: corrupted inode contents [ 1483.631150][T18570] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2291: mark_inode_dirty error [ 1483.694826][ T7593] bridge_slave_0: left allmulticast mode [ 1483.700576][ T7593] bridge_slave_0: left promiscuous mode [ 1484.014432][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.130485][T18578] loop6: detected capacity change from 0 to 512 [ 1484.167696][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.259018][T18578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1484.284668][T18578] ext4 filesystem being mounted at /640/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1484.551200][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.809925][T18589] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2297: corrupted inode contents [ 1484.832719][T18589] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.2297: mark_inode_dirty error [ 1484.855337][T18589] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2297: corrupted inode contents [ 1484.872620][T18589] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2297: mark_inode_dirty error [ 1484.948089][ T5845] Bluetooth: hci1: command tx timeout [ 1485.394804][T18593] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1485.737729][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1485.914738][T18596] loop1: detected capacity change from 0 to 512 [ 1485.949147][T18596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1485.984222][T18596] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1486.410674][T18598] loop8: detected capacity change from 0 to 65536 [ 1486.482364][T18607] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2302: corrupted inode contents [ 1486.491009][T18607] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2302: mark_inode_dirty error [ 1486.500093][T18607] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2302: corrupted inode contents [ 1486.501939][T18607] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2302: mark_inode_dirty error [ 1486.611641][T18598] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1487.289068][T18598] XFS (loop8): Ending clean mount [ 1487.319915][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1487.629356][T18615] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1488.079750][T18617] overlayfs: missing 'lowerdir' [ 1488.696705][T18620] loop6: detected capacity change from 0 to 512 [ 1488.850753][ T6461] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1488.919470][T18620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1489.004303][T18620] ext4 filesystem being mounted at /642/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1490.026789][T18632] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2306: corrupted inode contents [ 1490.045114][T18632] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.2306: mark_inode_dirty error [ 1490.057069][T18632] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2306: corrupted inode contents [ 1490.069380][T18632] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2306: mark_inode_dirty error [ 1490.242756][T18635] loop1: detected capacity change from 0 to 512 [ 1490.367182][T18635] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.2310: bad orphan inode 15 [ 1490.422067][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1490.440342][T18635] ext4_test_bit(bit=14, block=5) = 0 [ 1490.457229][T18635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1490.767495][T18642] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1491.662356][T18648] loop6: detected capacity change from 0 to 512 [ 1491.986279][T18646] loop9: detected capacity change from 0 to 65536 [ 1492.113699][T18655] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.2310: reserved inode found cleared - inode=1 [ 1492.195941][ T5845] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1492.206802][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: kworker/u9:4 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1492.206833][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1492.206850][ T5845] Workqueue: hci3 hci_rx_work [ 1492.206971][ T5845] Call Trace: [ 1492.206982][ T5845] [ 1492.206992][ T5845] dump_stack_lvl+0x189/0x250 [ 1492.207030][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 1492.207057][ T5845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1492.207107][ T5845] sysfs_create_dir_ns+0x259/0x280 [ 1492.207132][ T5845] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1492.207155][ T5845] ? do_raw_spin_unlock+0x122/0x240 [ 1492.207183][ T5845] kobject_add_internal+0x59f/0xb40 [ 1492.207222][ T5845] kobject_add+0x155/0x220 [ 1492.207255][ T5845] ? __pfx_kobject_add+0x10/0x10 [ 1492.207285][ T5845] ? _raw_spin_unlock+0x28/0x50 [ 1492.207311][ T5845] ? get_device_parent+0x366/0x3a0 [ 1492.207340][ T5845] device_add+0x408/0xb50 [ 1492.207370][ T5845] hci_conn_add_sysfs+0xd5/0x1e0 [ 1492.207449][ T5845] le_conn_complete_evt+0xc3a/0x1220 [ 1492.207547][ T5845] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1492.207581][ T5845] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1492.207606][ T5845] ? __asan_memcpy+0x40/0x70 [ 1492.207634][ T5845] ? __pfx___mutex_lock+0x10/0x10 [ 1492.207661][ T5845] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1492.207687][ T5845] ? skb_pull_data+0xfb/0x200 [ 1492.207753][ T5845] hci_le_conn_complete_evt+0x187/0x450 [ 1492.207792][ T5845] hci_event_packet+0x78c/0x1200 [ 1492.207848][ T5845] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1492.207881][ T5845] ? __pfx_hci_event_packet+0x10/0x10 [ 1492.207910][ T5845] ? kcov_remote_start+0x4d3/0x7f0 [ 1492.207933][ T5845] ? lockdep_hardirqs_on+0x80/0x150 [ 1492.207962][ T5845] ? hci_send_to_monitor+0xe2/0x570 [ 1492.207997][ T5845] hci_rx_work+0x46a/0xe80 [ 1492.208032][ T5845] ? process_scheduled_works+0x9ef/0x17b0 [ 1492.208063][ T5845] process_scheduled_works+0xade/0x17b0 [ 1492.208123][ T5845] ? __pfx_process_scheduled_works+0x10/0x10 [ 1492.208171][ T5845] worker_thread+0x8a0/0xda0 [ 1492.208228][ T5845] kthread+0x711/0x8a0 [ 1492.208253][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 1492.208281][ T5845] ? __pfx_kthread+0x10/0x10 [ 1492.208304][ T5845] ? _raw_spin_unlock_irq+0x23/0x50 [ 1492.208326][ T5845] ? lockdep_hardirqs_on+0x9c/0x150 [ 1492.208349][ T5845] ? __pfx_kthread+0x10/0x10 [ 1492.208371][ T5845] ret_from_fork+0x3fc/0x770 [ 1492.208402][ T5845] ? __pfx_ret_from_fork+0x10/0x10 [ 1492.208437][ T5845] ? __switch_to_asm+0x39/0x70 [ 1492.208456][ T5845] ? __switch_to_asm+0x33/0x70 [ 1492.208475][ T5845] ? __pfx_kthread+0x10/0x10 [ 1492.208503][ T5845] ret_from_fork_asm+0x1a/0x30 [ 1492.208542][ T5845] [ 1492.208947][ T5845] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1492.647988][ T5845] Bluetooth: hci3: failed to register connection device [ 1492.663272][T18646] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1492.701519][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1492.727316][T18648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1492.740035][T18646] XFS (loop9): Ending clean mount [ 1492.825759][T18665] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1493.241119][T18648] ext4 filesystem being mounted at /643/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1494.278824][T18667] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2312: corrupted inode contents [ 1494.804018][T18667] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.2312: mark_inode_dirty error [ 1494.818409][T18669] overlayfs: missing 'lowerdir' [ 1494.825832][T18667] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2312: corrupted inode contents [ 1494.867410][T18667] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2312: mark_inode_dirty error [ 1495.330456][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1495.373903][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2317'. [ 1495.399285][T18674] loop1: detected capacity change from 0 to 512 [ 1495.481865][ T6515] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1495.534250][T18674] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.2316: bad orphan inode 15 [ 1495.557321][T18674] ext4_test_bit(bit=14, block=5) = 0 [ 1495.617307][ T7593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.645709][T18674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1495.715155][T18679] loop6: detected capacity change from 0 to 512 [ 1495.719346][ T7593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.889896][T18679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1495.955553][ T5953] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1495.956277][ T7593] bond0 (unregistering): Released all slaves [ 1495.993911][T18679] ext4 filesystem being mounted at /644/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1496.136190][T18683] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.2316: reserved inode found cleared - inode=1 [ 1496.163108][T16681] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1496.208006][ T5953] usb 9-1: Using ep0 maxpacket: 8 [ 1496.235271][ T5953] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1496.771080][ T5953] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1496.796326][ T5953] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1496.820483][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1496.849795][ T5953] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.893630][ T5953] usb 9-1: Product: syz [ 1496.894957][T18673] bridge_slave_0: left allmulticast mode [ 1496.908203][ T5953] usb 9-1: Manufacturer: syz [ 1496.909275][T18684] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2318: corrupted inode contents [ 1496.912838][ T5953] usb 9-1: SerialNumber: syz [ 1496.972260][T18673] bridge_slave_0: left promiscuous mode [ 1496.979407][T18684] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.2318: mark_inode_dirty error [ 1496.995083][T18673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1497.031787][T18684] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2318: corrupted inode contents [ 1497.056729][T18673] bridge_slave_1: left allmulticast mode [ 1497.073721][T18673] bridge_slave_1: left promiscuous mode [ 1497.079549][T18673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.098035][T18684] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2318: mark_inode_dirty error [ 1497.288708][T18673] bond0: (slave bond_slave_0): Releasing backup interface [ 1497.408656][T18673] bond0: (slave bond_slave_1): Releasing backup interface [ 1497.603191][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2320'. [ 1497.773876][T18673] team0: Port device team_slave_0 removed [ 1497.984661][T18673] team0: Port device team_slave_1 removed [ 1498.024472][T18673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1498.030457][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1498.032001][T18673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1498.054985][T18673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1498.062567][T18673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1498.161445][T18511] chnl_net:caif_netlink_parms(): no params data found [ 1498.286271][T18690] batadv_slave_0: mtu less than device minimum [ 1498.493118][ T7593] hsr_slave_0: left promiscuous mode [ 1499.207993][T18700] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1499.448255][ T7593] hsr_slave_1: left promiscuous mode [ 1499.457084][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1499.466062][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1499.494875][ T5953] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1499.532187][ T5953] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1499.576382][ T5953] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1499.616710][ T5953] usb 9-1: media controller created [ 1499.863381][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1499.879916][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.903262][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1500.150001][T18714] loop9: detected capacity change from 0 to 512 [ 1500.160462][ T5953] zl10353_read_register: readreg error (reg=127, ret==0) [ 1500.271199][T18720] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1501.469660][T18714] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.2327: bad orphan inode 15 [ 1501.591076][ T7593] veth1_macvtap: left promiscuous mode [ 1501.613996][T18721] loop6: detected capacity change from 0 to 4096 [ 1501.625593][T18721] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1501.709504][T18714] ext4_test_bit(bit=14, block=5) = 0 [ 1501.737490][ T7593] veth0_macvtap: left promiscuous mode [ 1501.744201][ T7593] veth1_vlan: left promiscuous mode [ 1501.788429][ T7593] veth0_vlan: left promiscuous mode [ 1501.793140][ T5953] usb 9-1: USB disconnect, device number 32 [ 1501.797126][T18714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1501.935700][T18719] ntfs3(loop6): ino=1d, mi_enum_attr [ 1501.941124][T18719] ntfs3(loop6): ino=1d, mi_enum_attr [ 1501.971255][T18726] loop8: detected capacity change from 0 to 512 [ 1502.074683][T18726] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1502.253812][T18731] EXT4-fs error (device loop9): __ext4_new_inode:1073: comm syz.9.2327: reserved inode found cleared - inode=1 [ 1502.700889][T18726] EXT4-fs (loop8): 1 truncate cleaned up [ 1502.723454][T18726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1502.897714][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.975753][ T6461] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.134383][T18736] loop1: detected capacity change from 0 to 512 [ 1503.248192][T18742] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2334'. [ 1503.439939][T18745] loop6: detected capacity change from 0 to 512 [ 1503.495168][T18736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1503.520557][T18736] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1503.527024][T18745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1503.702258][T18745] ext4 filesystem being mounted at /649/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1504.225229][T17734] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1504.377908][T18754] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2333: corrupted inode contents [ 1504.403297][T17734] usb 9-1: Using ep0 maxpacket: 8 [ 1504.422123][T18754] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2333: mark_inode_dirty error [ 1504.436178][T17734] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1504.458316][T18754] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2333: corrupted inode contents [ 1504.470697][T18754] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2333: mark_inode_dirty error [ 1504.527166][T17734] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1504.549013][T17734] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1504.587278][T17734] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.523107][T17734] usb 9-1: Product: syz [ 1505.527324][T17734] usb 9-1: Manufacturer: syz [ 1505.542932][T17734] usb 9-1: SerialNumber: syz [ 1505.548579][T18755] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2335: corrupted inode contents [ 1505.564720][T18755] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.2335: mark_inode_dirty error [ 1505.581184][T18755] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2335: corrupted inode contents [ 1505.593821][T18755] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2335: mark_inode_dirty error [ 1505.920909][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.059783][T18760] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1507.315442][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1507.624218][T18770] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1508.467053][T18774] loop6: detected capacity change from 0 to 512 [ 1508.848563][ T7593] team0 (unregistering): Port device team_slave_1 removed [ 1509.016643][T18774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1509.101188][T18774] ext4 filesystem being mounted at /652/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1509.475525][ T7593] team0 (unregistering): Port device team_slave_0 removed [ 1510.738285][T17734] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1510.753869][T17734] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1510.765356][T17734] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1510.773238][T17734] usb 9-1: media controller created [ 1510.797223][T17734] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1510.829891][T17734] zl10353_read_register: readreg error (reg=127, ret==0) [ 1510.963459][T18796] loop9: detected capacity change from 0 to 22 [ 1511.143952][T18782] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2341: corrupted inode contents [ 1511.171950][T18796] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1511.522012][T18782] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.2341: mark_inode_dirty error [ 1511.548346][T18796] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1511.623150][T18782] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.2341: corrupted inode contents [ 1511.664502][T18782] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2341: mark_inode_dirty error [ 1512.219510][T18801] loop1: detected capacity change from 0 to 4096 [ 1512.228295][T18801] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1512.434568][T18800] ntfs3(loop1): ino=1d, mi_enum_attr [ 1512.439919][T18800] ntfs3(loop1): ino=1d, mi_enum_attr [ 1513.018298][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.641857][T18824] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1516.974727][T18838] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1517.668944][T18846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2360'. [ 1517.882829][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2359'. [ 1518.170754][T18849] batadv_slave_0: mtu less than device minimum [ 1518.518375][T17734] usb 9-1: USB disconnect, device number 33 [ 1518.849578][T18511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.957930][T18511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.143487][T18511] bridge_slave_0: entered allmulticast mode [ 1519.310882][T18511] bridge_slave_0: entered promiscuous mode [ 1519.487108][T18511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1519.525251][T18511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.544491][T18511] bridge_slave_1: entered allmulticast mode [ 1519.592595][T18511] bridge_slave_1: entered promiscuous mode [ 1521.042774][T18881] loop9: detected capacity change from 0 to 65536 [ 1521.189626][T18881] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1521.278569][T18892] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1521.552806][T18881] XFS (loop9): Ending clean mount [ 1521.738375][T16681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1521.748478][T16681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1521.757250][T16681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1521.766765][T16681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1521.775910][T16681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1521.911857][T18899] loop6: detected capacity change from 0 to 2048 [ 1522.194023][T18903] overlayfs: missing 'lowerdir' [ 1522.789250][T18899] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1522.906532][T18511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.913608][ T6515] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1523.010178][T18511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1523.031098][T18910] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1523.796366][T18895] lo speed is unknown, defaulting to 1000 [ 1523.823263][T16681] Bluetooth: hci0: command tx timeout [ 1524.024006][T18511] team0: Port device team_slave_0 added [ 1524.430359][T18511] team0: Port device team_slave_1 added [ 1525.453672][T18945] loop9: detected capacity change from 0 to 512 [ 1525.589772][T18945] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.2372: bad orphan inode 15 [ 1525.600695][T18945] ext4_test_bit(bit=14, block=5) = 0 [ 1525.635612][T18945] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1525.636586][T18511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.748240][T18511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.852564][T18511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.893963][T16681] Bluetooth: hci0: command tx timeout [ 1526.059062][T18959] EXT4-fs error (device loop9): __ext4_new_inode:1073: comm syz.9.2372: reserved inode found cleared - inode=1 [ 1526.773328][T18949] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1527.256683][T18967] loop6: detected capacity change from 0 to 4096 [ 1527.270674][T18969] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1527.753634][T18511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.761327][T18511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.788037][T18511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.129056][T16681] Bluetooth: hci0: command tx timeout [ 1528.353506][T18967] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1528.367610][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.610609][T18977] loop9: detected capacity change from 0 to 512 [ 1528.750259][T18977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.804459][T18977] ext4 filesystem being mounted at /600/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1528.882062][T18511] hsr_slave_0: entered promiscuous mode [ 1529.145256][T18511] hsr_slave_1: entered promiscuous mode [ 1529.891167][T18511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1529.941755][T18511] Cannot create hsr debugfs directory [ 1530.805339][T16681] Bluetooth: hci0: command tx timeout [ 1530.824589][T18988] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.2380: corrupted inode contents [ 1530.867312][T18988] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.2380: mark_inode_dirty error [ 1530.883638][T18988] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.2380: corrupted inode contents [ 1530.898804][T18988] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.2380: mark_inode_dirty error [ 1530.996621][T18992] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1531.039544][ T7593] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.336265][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1532.219293][ T7593] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1532.257485][T19005] loop1: detected capacity change from 0 to 512 [ 1532.370927][T19005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.394225][T19005] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1532.776019][ T7593] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.156272][T19017] loop9: detected capacity change from 0 to 4096 [ 1534.214651][T19016] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2386: corrupted inode contents [ 1534.229860][T19017] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1534.240652][T19016] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.2386: mark_inode_dirty error [ 1534.258909][T19016] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.2386: corrupted inode contents [ 1534.272826][T19016] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2386: mark_inode_dirty error [ 1534.641011][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.839609][ T7593] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.222366][T18895] chnl_net:caif_netlink_parms(): no params data found [ 1536.414220][T19053] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1537.447795][T19059] loop6: detected capacity change from 0 to 4096 [ 1537.498067][T19059] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1537.937930][T19063] loop1: detected capacity change from 0 to 1024 [ 1537.996405][T19065] loop9: detected capacity change from 0 to 1024 [ 1538.004399][T19065] hfsplus: Unknown parameter '/dev/ptmx' [ 1538.026117][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1538.038461][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1538.052017][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1538.060792][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1538.073723][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1539.215127][T19073] hfsplus: xattr searching failed [ 1539.480686][ T992] hfsplus: b-tree write err: -5, ino 4 [ 1539.910189][T19092] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1540.370690][T19094] loop1: detected capacity change from 0 to 4096 [ 1540.405944][ T5845] Bluetooth: hci1: command tx timeout [ 1540.431996][T19094] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1540.740649][T19093] ntfs3(loop1): ino=1d, mi_enum_attr [ 1540.749474][T19093] ntfs3(loop1): ino=1d, mi_enum_attr [ 1541.174106][T19100] loop1: detected capacity change from 0 to 512 [ 1541.216041][T19100] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.2400: bad orphan inode 15 [ 1541.259832][T19100] ext4_test_bit(bit=14, block=5) = 0 [ 1541.283006][T19100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1541.631680][ T5845] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1541.631907][T19107] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.2400: reserved inode found cleared - inode=1 [ 1541.829551][ T7593] bond0 (unregistering): Released all slaves [ 1541.980670][T19064] lo speed is unknown, defaulting to 1000 [ 1542.119623][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.291891][T18895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.339301][T18895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.360249][T19125] loop1: detected capacity change from 0 to 1024 [ 1542.380695][T18895] bridge_slave_0: entered allmulticast mode [ 1542.428193][T18895] bridge_slave_0: entered promiscuous mode [ 1542.441845][ T5845] Bluetooth: hci1: command tx timeout [ 1542.454967][T18895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.463382][T18895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.472098][T18895] bridge_slave_1: entered allmulticast mode [ 1543.127905][T18895] bridge_slave_1: entered promiscuous mode [ 1544.507450][ T7594] hfsplus: b-tree write err: -5, ino 4 [ 1544.516004][ T5845] Bluetooth: hci1: command tx timeout [ 1545.601500][T19156] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1546.164995][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.444802][T19161] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1546.456991][T18895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1546.612539][ T5845] Bluetooth: hci1: command tx timeout [ 1546.634851][T18895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.348292][ T7593] hsr_slave_0: left promiscuous mode [ 1547.380898][ T7593] hsr_slave_1: left promiscuous mode [ 1547.445488][ T7593] veth1_macvtap: left promiscuous mode [ 1547.466816][ T7593] veth0_macvtap: left promiscuous mode [ 1547.472524][ T7593] veth1_vlan: left promiscuous mode [ 1547.493242][ T7593] veth0_vlan: left promiscuous mode [ 1547.921836][T19181] IPVS: set_ctl: invalid protocol: 16868 172.30.1.10:0 [ 1548.075846][T19183] loop1: detected capacity change from 0 to 22 [ 1548.085220][T19183] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1548.103795][T19183] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1549.448324][ T7593] pimreg (unregistering): left allmulticast mode [ 1552.436258][T17734] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1552.763253][T17734] usb 10-1: Using ep0 maxpacket: 32 [ 1552.856262][T17734] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1553.040544][T17734] usb 10-1: config 0 has no interface number 0 [ 1553.051896][T17734] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1553.072708][T17734] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.089763][T17734] usb 10-1: Product: syz [ 1553.110629][T17734] usb 10-1: Manufacturer: syz [ 1553.123103][T17734] usb 10-1: SerialNumber: syz [ 1553.144676][T17734] usb 10-1: config 0 descriptor?? [ 1553.176503][T17734] smsc95xx v2.0.0 [ 1553.180194][T17734] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1553.202814][T17734] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 1553.517794][T17734] usb 10-1: USB disconnect, device number 39 [ 1554.676080][T19249] IPVS: set_ctl: invalid protocol: 16868 172.30.1.10:0 [ 1555.508328][T19256] loop9: detected capacity change from 0 to 512 [ 1555.625229][T19256] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1555.668548][T19256] ext4 filesystem being mounted at /617/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1556.073308][T19267] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.2427: corrupted inode contents [ 1556.089221][T19267] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz.9.2427: mark_inode_dirty error [ 1556.107063][T19267] EXT4-fs error (device loop9): ext4_do_update_inode:5568: inode #2: comm syz.9.2427: corrupted inode contents [ 1556.125622][T19267] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.2427: mark_inode_dirty error [ 1556.741521][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.050567][T19276] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1559.474816][T19294] loop1: detected capacity change from 0 to 22 [ 1559.481941][T19294] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1559.528596][T19294] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1561.942546][T19307] syz.9.2435: attempt to access beyond end of device [ 1561.942546][T19307] nbd9: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1561.956480][T19307] EXT4-fs (nbd9): unable to read superblock [ 1562.164138][T19309] loop6: detected capacity change from 0 to 1024 [ 1562.174605][T19309] hfsplus: Unknown parameter '/dev/ptmx' [ 1563.174017][T19319] loop9: detected capacity change from 0 to 1024 [ 1563.183844][T19319] hfsplus: Unknown parameter '/dev/ptmx' [ 1564.185112][T19323] loop1: detected capacity change from 0 to 1024 [ 1564.838616][T19332] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1565.524241][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1567.870412][T18895] team0: Port device team_slave_0 added [ 1567.880877][T18895] team0: Port device team_slave_1 added [ 1568.348016][T18895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.366923][T18895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.008211][T18895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.088809][T19064] chnl_net:caif_netlink_parms(): no params data found [ 1569.110948][T18895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.145173][T18895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.189296][T18895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.570974][T19374] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1570.519720][T18895] hsr_slave_0: entered promiscuous mode [ 1570.609503][T18895] hsr_slave_1: entered promiscuous mode [ 1570.705673][T18895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1570.965177][T18895] Cannot create hsr debugfs directory [ 1571.229771][ T7593] IPVS: stop unused estimator thread 0... [ 1571.867823][T19396] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1572.445501][T19064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1572.459318][T19064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1572.467721][T19064] bridge_slave_0: entered allmulticast mode [ 1572.543949][T19064] bridge_slave_0: entered promiscuous mode [ 1572.703798][T19064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.711008][T19064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.758335][T19064] bridge_slave_1: entered allmulticast mode [ 1572.793517][T19064] bridge_slave_1: entered promiscuous mode [ 1572.965796][T19405] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1574.029565][ T7593] bridge_slave_1: left allmulticast mode [ 1574.065849][ T7593] bridge_slave_1: left promiscuous mode [ 1574.099940][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.167845][ T7593] bridge_slave_0: left allmulticast mode [ 1574.195397][ T7593] bridge_slave_0: left promiscuous mode [ 1574.211960][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.619717][ T7593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1576.987248][T19435] loop9: detected capacity change from 0 to 1024 [ 1576.994666][T19435] hfsplus: Unknown parameter '/dev/ptmx' [ 1577.014636][T19436] IPVS: set_ctl: invalid protocol: 16868 172.30.1.7:0 [ 1577.224536][ T7593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1577.953903][ T7593] bond0 (unregistering): Released all slaves [ 1578.171068][T19445] loop9: detected capacity change from 0 to 512 [ 1578.334614][T19064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.372077][T19445] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.2467: bad orphan inode 15 [ 1578.377239][T19064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.459204][T19445] ext4_test_bit(bit=14, block=5) = 0 [ 1578.486548][T19445] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.642752][ T7593] hsr_slave_0: left promiscuous mode [ 1578.662707][ T7593] hsr_slave_1: left promiscuous mode [ 1578.687927][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.728739][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1579.002935][T19458] EXT4-fs error (device loop9): __ext4_new_inode:1073: comm syz.9.2467: reserved inode found cleared - inode=1 [ 1579.568549][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.437478][ T7593] team0 (unregistering): Port device team_slave_1 removed [ 1580.976664][T16681] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1581.003634][T16681] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1581.023796][T16681] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1581.061879][ T7593] team0 (unregistering): Port device team_slave_0 removed [ 1581.323469][T16681] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1581.335167][T16681] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1582.382922][T19485] loop1: detected capacity change from 0 to 512 [ 1582.400305][T19486] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1582.532545][T19485] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.2475: bad orphan inode 15 [ 1582.574068][T19485] ext4_test_bit(bit=14, block=5) = 0 [ 1582.581063][T19485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1583.089752][T19492] loop6: detected capacity change from 0 to 1024 [ 1583.101081][T19492] hfsplus: Unknown parameter '/dev/ptmx' [ 1583.393664][ T5845] Bluetooth: hci5: command tx timeout [ 1583.698143][T19064] team0: Port device team_slave_0 added [ 1583.709942][ T5845] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1583.728908][T19064] team0: Port device team_slave_1 added [ 1583.750345][T19497] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.2475: reserved inode found cleared - inode=1 [ 1583.850440][T19471] lo speed is unknown, defaulting to 1000 [ 1584.948338][T19064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.962561][T19064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.021175][T19064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1585.054526][T19064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1585.237182][T19064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.903095][T16681] Bluetooth: hci5: command tx timeout [ 1585.913212][T19488] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1585.930636][T19064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.158071][T19064] hsr_slave_0: entered promiscuous mode [ 1586.184086][T19064] hsr_slave_1: entered promiscuous mode [ 1586.190464][T19064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1586.198978][T19064] Cannot create hsr debugfs directory [ 1586.516968][T19527] loop6: detected capacity change from 0 to 128 [ 1586.629107][T19527] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1586.673121][ T43] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1586.691942][T19527] ext4 filesystem being mounted at /700/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.726176][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.001221][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 1587.008869][T19471] chnl_net:caif_netlink_parms(): no params data found [ 1587.011446][ T43] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1587.120412][ T43] usb 10-1: config 0 has no interface number 0 [ 1587.224431][ T43] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1587.300854][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1587.590215][ T43] usb 10-1: Product: syz [ 1587.595208][ T43] usb 10-1: Manufacturer: syz [ 1587.599907][ T43] usb 10-1: SerialNumber: syz [ 1587.626427][ T43] usb 10-1: config 0 descriptor?? [ 1587.642891][ T43] smsc95xx v2.0.0 [ 1587.651548][ T43] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1587.775369][ T6236] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1587.852507][ T7593] bridge_slave_1: left allmulticast mode [ 1587.858340][ T43] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 1587.917645][ T7593] bridge_slave_1: left promiscuous mode [ 1587.927903][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.954940][T16681] Bluetooth: hci5: command tx timeout [ 1588.637870][T16383] usb 10-1: USB disconnect, device number 40 [ 1588.906239][ T7593] bridge_slave_0: left allmulticast mode [ 1588.911943][ T7593] bridge_slave_0: left promiscuous mode [ 1588.954871][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.061513][T19550] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1589.402427][T19552] loop1: detected capacity change from 0 to 128 [ 1589.696868][T19552] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1589.723307][T19552] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1590.063648][T16681] Bluetooth: hci5: command tx timeout [ 1591.176444][T15752] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1591.601216][ T7593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.341857][T19583] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1592.414449][ T7593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.466493][ T7593] bond0 (unregistering): Released all slaves [ 1592.526511][T19586] loop6: detected capacity change from 0 to 128 [ 1592.598267][T19586] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1592.664364][T19586] ext4 filesystem being mounted at /705/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1593.690022][ T7593] hsr_slave_0: left promiscuous mode [ 1593.829226][ T7593] hsr_slave_1: left promiscuous mode [ 1593.869167][ T6236] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1593.898653][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.910464][T19623] loop1: detected capacity change from 0 to 512 [ 1593.947137][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.003979][T19623] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.2495: bad orphan inode 15 [ 1594.051955][T19623] ext4_test_bit(bit=14, block=5) = 0 [ 1594.060635][T19623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1595.380613][T19638] EXT4-fs error (device loop1): __ext4_new_inode:1073: comm syz.1.2495: reserved inode found cleared - inode=1 [ 1595.392161][T16681] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1596.593224][T19588] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1596.854907][ T7593] team0 (unregistering): Port device team_slave_1 removed [ 1596.901720][ T7593] team0 (unregistering): Port device team_slave_0 removed [ 1597.153920][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1597.358852][T19471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.373277][T19471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.380573][T19471] bridge_slave_0: entered allmulticast mode [ 1597.394486][T19471] bridge_slave_0: entered promiscuous mode [ 1597.405042][T19471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.424495][T19471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.431755][T19471] bridge_slave_1: entered allmulticast mode [ 1597.439966][T19471] bridge_slave_1: entered promiscuous mode [ 1597.559579][T19471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1597.598473][T19471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1599.328776][T19471] team0: Port device team_slave_0 added [ 1599.780335][T19669] loop6: detected capacity change from 0 to 1024 [ 1599.791869][T19669] hfsplus: Unknown parameter '/dev/ptmx' [ 1600.172709][T19471] team0: Port device team_slave_1 added [ 1600.667021][T19682] loop9: detected capacity change from 0 to 256 [ 1600.719265][T19682] FAT-fs (loop9): Directory bread(block 64) failed [ 1600.726489][T19682] FAT-fs (loop9): Directory bread(block 65) failed [ 1600.734000][T19682] FAT-fs (loop9): Directory bread(block 66) failed [ 1600.740641][T19682] FAT-fs (loop9): Directory bread(block 67) failed [ 1600.748372][T19682] FAT-fs (loop9): Directory bread(block 68) failed [ 1600.755751][T19682] FAT-fs (loop9): Directory bread(block 69) failed [ 1600.762784][T19682] FAT-fs (loop9): Directory bread(block 70) failed [ 1600.770577][T19682] FAT-fs (loop9): Directory bread(block 71) failed [ 1600.778382][T19682] FAT-fs (loop9): Directory bread(block 72) failed [ 1600.785608][T19682] FAT-fs (loop9): Directory bread(block 73) failed [ 1602.136974][T19687] loop6: detected capacity change from 0 to 256 [ 1602.869878][T19687] FAT-fs (loop6): Directory bread(block 64) failed [ 1602.876729][T19687] FAT-fs (loop6): Directory bread(block 65) failed [ 1602.883462][T19687] FAT-fs (loop6): Directory bread(block 66) failed [ 1602.890093][T19687] FAT-fs (loop6): Directory bread(block 67) failed [ 1602.897799][T19687] FAT-fs (loop6): Directory bread(block 68) failed [ 1602.904583][T19687] FAT-fs (loop6): Directory bread(block 69) failed [ 1602.911571][T19687] FAT-fs (loop6): Directory bread(block 70) failed [ 1602.918284][T19687] FAT-fs (loop6): Directory bread(block 71) failed [ 1602.925363][T19687] FAT-fs (loop6): Directory bread(block 72) failed [ 1602.931977][T19687] FAT-fs (loop6): Directory bread(block 73) failed [ 1603.620393][T19471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.655795][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1603.978640][T16681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1603.995573][T16681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1604.005441][T16681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1604.015618][T16681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1604.024030][T16681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1604.535855][T19700] loop1: detected capacity change from 0 to 1024 [ 1604.548342][T19700] hfsplus: Unknown parameter '/dev/ptmx' [ 1604.639491][T19471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1604.916859][T19471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.026806][T19471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1605.091480][T19471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.353643][T16681] Bluetooth: hci0: command tx timeout [ 1607.142526][T19471] hsr_slave_0: entered promiscuous mode [ 1607.166255][T19716] loop9: detected capacity change from 0 to 128 [ 1607.177777][T19471] hsr_slave_1: entered promiscuous mode [ 1607.192190][T19471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1607.221149][T19471] Cannot create hsr debugfs directory [ 1607.233292][T19692] lo speed is unknown, defaulting to 1000 [ 1607.233788][ T7593] bridge_slave_1: left allmulticast mode [ 1607.270400][T19716] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1607.289268][ T7593] bridge_slave_1: left promiscuous mode [ 1607.320165][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.340541][ T7593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.348558][T19716] ext4 filesystem being mounted at /645/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1607.560034][ T7593] bridge_slave_0: left allmulticast mode [ 1607.581785][ T7593] bridge_slave_0: left promiscuous mode [ 1607.618202][ T7593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.473257][T16681] Bluetooth: hci0: command tx timeout [ 1608.748573][T19739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1609.351335][ T6515] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1609.573861][ T7593] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1609.628108][ T7593] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1609.709109][ T7593] bond0 (unregistering): Released all slaves [ 1609.982876][T19755] loop1: detected capacity change from 0 to 128 [ 1610.513318][T16681] Bluetooth: hci0: command tx timeout [ 1610.585964][T19755] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1610.686575][T19755] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1612.067237][ T7593] hsr_slave_0: left promiscuous mode [ 1612.121424][ T7593] hsr_slave_1: left promiscuous mode [ 1612.131112][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1612.132496][T19775] loop6: detected capacity change from 0 to 128 [ 1612.217175][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1612.257738][T19775] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1612.522274][T19775] ext4 filesystem being mounted at /720/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1612.593207][ T5845] Bluetooth: hci0: command tx timeout [ 1612.607509][T15752] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1613.729711][ T6236] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1614.059854][T19798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1616.043483][T19825] loop6: detected capacity change from 0 to 256 [ 1616.643978][T19825] FAT-fs (loop6): Directory bread(block 64) failed [ 1616.650618][T19825] FAT-fs (loop6): Directory bread(block 65) failed [ 1616.658077][T19825] FAT-fs (loop6): Directory bread(block 66) failed [ 1616.665189][T19825] FAT-fs (loop6): Directory bread(block 67) failed [ 1616.671917][T19825] FAT-fs (loop6): Directory bread(block 68) failed [ 1616.679154][T19825] FAT-fs (loop6): Directory bread(block 69) failed [ 1616.686734][T19825] FAT-fs (loop6): Directory bread(block 70) failed [ 1616.693830][T19825] FAT-fs (loop6): Directory bread(block 71) failed [ 1616.700440][T19825] FAT-fs (loop6): Directory bread(block 72) failed [ 1616.707612][T19825] FAT-fs (loop6): Directory bread(block 73) failed [ 1617.435985][ T7593] team0 (unregistering): Port device team_slave_1 removed [ 1617.892902][T19833] IPVS: set_ctl: invalid protocol: 16868 172.30.1.2:0 [ 1618.501325][ T7593] team0 (unregistering): Port device team_slave_0 removed [ 1618.949833][T19837] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1619.396970][ T977] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1619.553752][ T977] usb 10-1: Using ep0 maxpacket: 32 [ 1619.595897][ T977] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1619.621176][ T977] usb 10-1: config 0 has no interface number 0 [ 1619.649236][ T977] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1619.650176][T19841] loop6: detected capacity change from 0 to 164 [ 1619.669017][ T977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.694541][ T977] usb 10-1: Product: syz [ 1619.698837][ T977] usb 10-1: Manufacturer: syz [ 1619.739777][ T977] usb 10-1: SerialNumber: syz [ 1619.848547][ T977] usb 10-1: config 0 descriptor?? [ 1619.881389][ T977] smsc95xx v2.0.0 [ 1619.901693][ T977] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1619.924821][T19843] loop1: detected capacity change from 0 to 128 [ 1620.002120][ T977] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 1620.004355][T19843] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1620.212495][T19843] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1620.724877][ T977] usb 10-1: USB disconnect, device number 41 [ 1622.303293][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2549'. [ 1622.432088][T15752] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1623.240293][T19871] IPVS: set_ctl: invalid protocol: 16868 172.30.1.7:0 [ 1624.050051][T19879] loop6: detected capacity change from 0 to 128 [ 1624.141144][T19879] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1624.187626][T19879] ext4 filesystem being mounted at /726/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1625.759747][ T6236] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1628.318384][ T5845] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 1628.430143][ T5845] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 1629.018496][T19937] loop9: detected capacity change from 0 to 22 [ 1629.030419][T19937] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1629.052032][T19937] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1629.849911][T19692] chnl_net:caif_netlink_parms(): no params data found [ 1629.880558][T19948] loop9: detected capacity change from 0 to 128 [ 1629.966901][T19948] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1630.159575][T19948] ext4 filesystem being mounted at /662/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1630.774606][T19958] loop6: detected capacity change from 0 to 164 [ 1632.400142][T19961] rock: directory entry would overflow storage [ 1632.407193][T19961] rock: sig=0x4f50, size=4, remaining=3 [ 1632.413416][T19961] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1632.476419][ T6515] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1632.799262][T19971] loop6: detected capacity change from 0 to 164 [ 1633.889776][T19692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.898413][T19692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.906127][T19692] bridge_slave_0: entered allmulticast mode [ 1633.917324][T19692] bridge_slave_0: entered promiscuous mode [ 1633.953947][T19692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.961118][T19692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.991139][T19692] bridge_slave_1: entered allmulticast mode [ 1634.013138][T17734] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1634.022787][T19692] bridge_slave_1: entered promiscuous mode [ 1634.287231][T19692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.353574][T19692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.385101][T19996] loop6: detected capacity change from 0 to 22 [ 1634.394327][T19996] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1634.407003][T17734] usb 10-1: Using ep0 maxpacket: 32 [ 1634.863734][T19996] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1634.996571][ T5845] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 1635.304130][T17734] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1635.312342][T17734] usb 10-1: config 0 has no interface number 0 [ 1635.355152][T17734] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1635.390044][T17734] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1635.419409][T17734] usb 10-1: Product: syz [ 1635.436172][T17734] usb 10-1: Manufacturer: syz [ 1635.440903][T17734] usb 10-1: SerialNumber: syz [ 1635.685857][T17734] usb 10-1: config 0 descriptor?? [ 1635.710158][T17734] smsc95xx v2.0.0 [ 1636.238793][T17734] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1636.257380][T17734] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -22 [ 1636.289015][T17734] usb 10-1: USB disconnect, device number 42 [ 1636.482050][T19692] team0: Port device team_slave_0 added [ 1637.756480][T20015] loop6: detected capacity change from 0 to 22 [ 1637.764796][T20015] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1637.772958][T20015] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1637.820997][T19692] team0: Port device team_slave_1 added [ 1637.907138][T20020] loop1: detected capacity change from 0 to 164 [ 1638.001949][T19692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1638.010709][T19692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.086576][T19692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.127296][T19692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.143065][T19692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.261447][T19692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.356527][T20029] loop9: detected capacity change from 0 to 128 [ 1639.004937][T20029] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1639.143216][T20029] ext4 filesystem being mounted at /667/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1639.400120][T20036] loop6: detected capacity change from 0 to 2048 [ 1641.031979][T19692] hsr_slave_0: entered promiscuous mode [ 1641.065693][T19692] hsr_slave_1: entered promiscuous mode [ 1641.089812][T19692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1641.110479][ T6515] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1641.142205][T19692] Cannot create hsr debugfs directory [ 1641.488341][T20052] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1642.732059][T20065] loop1: detected capacity change from 0 to 16 [ 1642.776560][T20065] erofs (device loop1): mounted with root inode @ nid 36. [ 1644.971949][T16681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1644.985126][T16681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1645.003578][T16681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1645.027203][T16681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1645.048479][T16681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1645.263864][T20087] loop1: detected capacity change from 0 to 128 [ 1645.312300][T20087] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1645.370332][T20087] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1645.450528][T20091] loop9: detected capacity change from 0 to 16 [ 1645.478464][T20091] erofs (device loop9): mounted with root inode @ nid 36. [ 1646.818805][T20098] loop9: detected capacity change from 0 to 512 [ 1646.882387][T20098] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.2599: bad orphan inode 15 [ 1646.942524][T20098] ext4_test_bit(bit=14, block=5) = 0 [ 1646.957351][T15752] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1646.990400][T20098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1647.323367][T16681] Bluetooth: hci1: command tx timeout [ 1647.514344][T20107] EXT4-fs error (device loop9): __ext4_new_inode:1073: comm syz.9.2599: reserved inode found cleared - inode=1 [ 1648.854857][T20090] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1648.938486][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.000738][T20078] lo speed is unknown, defaulting to 1000 [ 1649.214098][T20116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1649.403364][T16681] Bluetooth: hci1: command tx timeout [ 1650.037308][T20128] loop6: detected capacity change from 0 to 128 [ 1650.120633][T20128] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1650.174090][T20131] loop9: detected capacity change from 0 to 512 [ 1650.194080][T20128] ext4 filesystem being mounted at /743/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.329628][T20131] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.2608: bad orphan inode 15 [ 1650.410080][T20131] ext4_test_bit(bit=14, block=5) = 0 [ 1650.425063][T20131] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1650.529496][T20140] loop1: detected capacity change from 0 to 256 [ 1650.722127][T20140] FAT-fs (loop1): Directory bread(block 64) failed [ 1650.729904][T20140] FAT-fs (loop1): Directory bread(block 65) failed [ 1650.737792][T20140] FAT-fs (loop1): Directory bread(block 66) failed [ 1650.745150][T20140] FAT-fs (loop1): Directory bread(block 67) failed [ 1650.752899][T20140] FAT-fs (loop1): Directory bread(block 68) failed [ 1650.759907][T20140] FAT-fs (loop1): Directory bread(block 69) failed [ 1650.768000][T20140] FAT-fs (loop1): Directory bread(block 70) failed [ 1650.775448][T20140] FAT-fs (loop1): Directory bread(block 71) failed [ 1650.782745][T20140] FAT-fs (loop1): Directory bread(block 72) failed [ 1650.790166][T20140] FAT-fs (loop1): Directory bread(block 73) failed [ 1651.273618][ T6236] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1651.441274][T20147] EXT4-fs error (device loop9): __ext4_new_inode:1073: comm syz.9.2608: reserved inode found cleared - inode=1 [ 1651.533147][T16681] Bluetooth: hci1: command tx timeout [ 1651.963249][T20090] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 1652.058347][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1652.101558][T20149] loop1: detected capacity change from 0 to 164 [ 1652.298748][T19692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1652.760848][T20160] rock: directory entry would overflow storage [ 1652.767824][T20160] rock: sig=0x4f50, size=4, remaining=3 [ 1652.774041][T20160] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1652.878059][T20161] loop6: detected capacity change from 0 to 16 [ 1653.071871][T20161] erofs (device loop6): mounted with root inode @ nid 36. [ 1653.288844][T20164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1653.368133][T19692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1653.603657][T16681] Bluetooth: hci1: command tx timeout [ 1654.211547][T20174] loop9: detected capacity change from 0 to 4096 [ 1654.353075][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1654.369658][T16681] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 1654.401761][T20174] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1654.669772][T20078] chnl_net:caif_netlink_parms(): no params data found [ 1654.733874][T19692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1655.007478][ T992] bridge_slave_1: left allmulticast mode [ 1655.024017][ T992] bridge_slave_1: left promiscuous mode [ 1655.029984][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.061770][ T992] bridge_slave_0: left allmulticast mode [ 1655.163832][ T992] bridge_slave_0: left promiscuous mode [ 1655.182726][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.241461][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1656.507192][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1656.582776][T20192] IPVS: set_ctl: invalid protocol: 16868 172.30.1.2:0 [ 1657.457196][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2618'. [ 1657.791199][ T992] bond0 (unregistering): Released all slaves [ 1657.851423][T19692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1658.199304][ T992] hsr_slave_0: left promiscuous mode [ 1658.229571][ T992] hsr_slave_1: left promiscuous mode [ 1658.243753][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.256001][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1658.765388][ T992] team0 (unregistering): Port device team_slave_1 removed [ 1658.821182][ T992] team0 (unregistering): Port device team_slave_0 removed [ 1659.089252][T20078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.096941][T20078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.104717][T20078] bridge_slave_0: entered allmulticast mode [ 1659.111746][T20078] bridge_slave_0: entered promiscuous mode [ 1659.153901][T20078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.161043][T20078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.172471][T20078] bridge_slave_1: entered allmulticast mode [ 1659.180375][T20078] bridge_slave_1: entered promiscuous mode [ 1659.236063][T20078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.261538][T20078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1659.374494][T20078] team0: Port device team_slave_0 added [ 1659.392937][T20078] team0: Port device team_slave_1 added [ 1659.452777][T20078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1659.462097][T20078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1659.489482][T20078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1659.511009][T20078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1659.521442][T20078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1659.551976][T20078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.788825][T20078] hsr_slave_0: entered promiscuous mode [ 1659.809401][T20078] hsr_slave_1: entered promiscuous mode [ 1659.848974][T20078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1659.866881][T20078] Cannot create hsr debugfs directory [ 1659.875306][T20228] batadv_slave_1: entered promiscuous mode [ 1660.172216][T20241] loop9: detected capacity change from 0 to 128 [ 1660.248866][T20241] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1660.369600][T20241] ext4 filesystem being mounted at /682/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1660.405858][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1660.420271][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1660.431891][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1660.462408][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1660.470903][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1661.520772][ T6515] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1661.661611][T20271] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.2631'. [ 1661.707587][T20271] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.2631'. [ 1661.733642][T20271] netlink: 508 bytes leftover after parsing attributes in process `syz.1.2631'. [ 1661.810474][T20274] loop9: detected capacity change from 0 to 512 [ 1661.837483][T20274] EXT4-fs (loop9): ea_inode feature is not supported for Hurd [ 1661.969037][T20247] lo speed is unknown, defaulting to 1000 [ 1662.106948][T20280] loop1: detected capacity change from 0 to 512 [ 1662.211709][T20280] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2636: bg 0: block 248: padding at end of block bitmap is not set [ 1662.232821][T20280] Quota error (device loop1): write_blk: dquota write failed [ 1662.266079][T20280] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1662.276845][T20280] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2636: Failed to acquire dquot type 1 [ 1662.322145][T20280] EXT4-fs (loop1): 1 truncate cleaned up [ 1662.331192][T20280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1662.470872][T20286] lo speed is unknown, defaulting to 1000 [ 1662.546667][T20280] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1662.605956][ T992] bridge_slave_1: left allmulticast mode [ 1662.616809][ T992] bridge_slave_1: left promiscuous mode [ 1662.873222][ T5845] Bluetooth: hci0: command tx timeout [ 1663.125928][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.338989][ T992] bridge_slave_0: left allmulticast mode [ 1663.340470][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.354507][ T992] bridge_slave_0: left promiscuous mode [ 1663.354733][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.745499][T20308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1663.961379][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.987830][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1664.007926][ T992] bond0 (unregistering): Released all slaves [ 1664.349158][ T992] hsr_slave_0: left promiscuous mode [ 1664.361359][ T992] hsr_slave_1: left promiscuous mode [ 1664.377954][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.397695][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.759989][T20328] loop9: detected capacity change from 0 to 512 [ 1664.788384][T20328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1664.818744][T20328] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.887821][T20328] ext4 filesystem being mounted at /688/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1664.917446][ T5845] Bluetooth: hci0: command tx timeout [ 1664.990777][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.132778][ T992] team0 (unregistering): Port device team_slave_1 removed [ 1665.188605][ T992] team0 (unregistering): Port device team_slave_0 removed [ 1666.565602][T20350] lo speed is unknown, defaulting to 1000 [ 1666.921177][T20247] chnl_net:caif_netlink_parms(): no params data found [ 1666.993397][T16681] Bluetooth: hci0: command tx timeout [ 1667.674482][T20247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.689319][T20247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.697908][T20247] bridge_slave_0: entered allmulticast mode [ 1667.711375][T20247] bridge_slave_0: entered promiscuous mode [ 1667.728170][T20078] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1667.787134][T20247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1667.808913][T20247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.821723][T20247] bridge_slave_1: entered allmulticast mode [ 1667.832357][T20247] bridge_slave_1: entered promiscuous mode [ 1667.911201][T20078] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1667.951972][T20078] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1668.128241][T20078] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1668.174502][ T30] audit: type=1326 audit(1750834752.321:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1668.210280][ T30] audit: type=1326 audit(1750834752.361:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1668.240380][ T30] audit: type=1326 audit(1750834752.361:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1668.277870][T20247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1668.320005][T20247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1668.334109][ T30] audit: type=1326 audit(1750834752.361:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1668.397238][ T30] audit: type=1326 audit(1750834752.361:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1668.428927][ T30] audit: type=1326 audit(1750834752.361:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1668.759136][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.762038][ T30] audit: type=1326 audit(1750834752.361:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1668.804181][T20247] team0: Port device team_slave_0 added [ 1668.805869][T20396] loop9: detected capacity change from 0 to 512 [ 1668.834239][ T30] audit: type=1326 audit(1750834752.361:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1668.861615][T20396] ext4: Unknown parameter 'appraise_type' [ 1668.895529][T20396] futex_wake_op: syz.9.2659 tries to shift op by -1; fix this program [ 1668.914763][ T30] audit: type=1326 audit(1750834752.361:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1669.002679][T20247] team0: Port device team_slave_1 added [ 1669.009715][ T30] audit: type=1326 audit(1750834752.361:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20384 comm="syz.1.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee98e929 code=0x7ffc0000 [ 1669.090542][T16681] Bluetooth: hci0: command tx timeout [ 1669.470736][T20400] loop9: detected capacity change from 0 to 1024 [ 1669.485926][T20400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1669.497913][T20400] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1669.533386][T20400] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm syz.9.2659: Freeing blocks not in datazone - block = 0, count = 4096 [ 1669.552678][T20400] EXT4-fs (loop9): 1 orphan inode deleted [ 1669.563938][T20400] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1669.590664][T20247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1669.638290][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.746461][T20247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.884073][T20247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.938765][T20247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1669.997579][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.057948][T20247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1670.979665][T20247] hsr_slave_0: entered promiscuous mode [ 1671.007579][T20247] hsr_slave_1: entered promiscuous mode [ 1671.014662][T20247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1671.035438][T20247] Cannot create hsr debugfs directory [ 1671.270764][T20414] lo speed is unknown, defaulting to 1000 [ 1671.838398][T20078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.057266][T20078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.099410][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.106610][ T4568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.397156][T20340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.404846][T20340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.515118][T20465] pim6reg1: entered promiscuous mode [ 1672.523678][T20465] pim6reg1: entered allmulticast mode [ 1672.953692][T20480] loop9: detected capacity change from 0 to 128 [ 1672.994938][T20480] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1673.115039][T20473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1673.168609][T20247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1673.272079][T20247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1673.331180][T20247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1673.427886][T20247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1673.616733][T20078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1673.638267][T20502] loop6: detected capacity change from 0 to 512 [ 1673.690549][T20502] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1673.784062][T20502] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1673.814189][T20502] System zones: 1-12 [ 1673.837173][T20502] EXT4-fs error (device loop6): ext4_iget_extra_inode:5035: inode #15: comm syz.6.2684: corrupted in-inode xattr: overlapping e_value [ 1673.950758][T20502] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.2684: couldn't read orphan inode 15 (err -117) [ 1673.970165][T20247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.001330][T20502] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1674.068714][T20502] futex_wake_op: syz.6.2684 tries to shift op by -1; fix this program [ 1674.072351][T20247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.115084][ T7594] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.122272][ T7594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.186995][ T7594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.194246][ T7594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.251303][T20521] 9pnet_fd: p9_fd_create_tcp (20521): problem connecting socket to 127.0.0.1 [ 1674.905134][ T6236] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1675.472249][T20078] veth0_vlan: entered promiscuous mode [ 1676.117664][T20078] veth1_vlan: entered promiscuous mode [ 1676.369958][T20078] veth0_macvtap: entered promiscuous mode [ 1676.401172][T20247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.425882][T20078] veth1_macvtap: entered promiscuous mode [ 1676.531831][T20078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.592721][T20078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.706411][T20559] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1676.752836][T20559] syzkaller0: entered promiscuous mode [ 1676.775330][T20559] syzkaller0: entered allmulticast mode [ 1676.809221][T20247] veth0_vlan: entered promiscuous mode [ 1676.822469][ T7594] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.845075][ T7594] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.430623][T20577] loop9: detected capacity change from 0 to 512 [ 1678.453231][T20577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1678.479576][T20577] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1678.542053][T20577] EXT4-fs (loop9): 1 truncate cleaned up [ 1678.549820][T20577] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1680.274684][T20579] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1680.306229][ T7594] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.315646][ T7594] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.330344][T20573] netlink: 'syz.1.2699': attribute type 3 has an invalid length. [ 1680.340287][T20573] netlink: 'syz.1.2699': attribute type 3 has an invalid length. [ 1680.398353][T20247] veth1_vlan: entered promiscuous mode [ 1680.572337][T20247] veth0_macvtap: entered promiscuous mode [ 1680.630668][T20247] veth1_macvtap: entered promiscuous mode [ 1680.714468][ T4568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.718679][T20247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1680.745385][ T4568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.781347][T20247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.797671][ T6515] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.893735][ T4568] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.939626][T20590] netlink: 'syz.9.2706': attribute type 10 has an invalid length. [ 1680.956228][ T4568] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.965697][T20590] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2706'. [ 1681.016873][ T4568] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.052006][ T4568] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.067853][T20590] dummy0: entered promiscuous mode [ 1681.079270][T20590] bridge0: port 1(dummy0) entered blocking state [ 1681.091168][T20590] bridge0: port 1(dummy0) entered disabled state [ 1681.100732][T20590] dummy0: entered allmulticast mode [ 1681.111549][T20590] bridge0: port 1(dummy0) entered blocking state [ 1681.118113][T20590] bridge0: port 1(dummy0) entered forwarding state [ 1681.139698][T20345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.143397][T20595] random: crng reseeded on system resumption [ 1681.164933][T20345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.211352][T20595] Restarting kernel threads ... [ 1681.250402][T20595] Done restarting kernel threads. [ 1681.417719][T20607] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2709'. [ 1681.446630][ T7594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.495534][ T7594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.589696][T20609] loop4: detected capacity change from 0 to 512 [ 1681.653505][ T7594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1681.661366][ T7594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1681.718238][T20609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1681.749834][T20609] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1682.245311][T20619] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2361: corrupted inode contents [ 1682.272593][T20619] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.2361: mark_inode_dirty error [ 1682.334353][T20619] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.2361: corrupted inode contents [ 1682.387703][T20619] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2361: mark_inode_dirty error [ 1682.864972][T20078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1683.184061][T20623] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1683.249482][T20624] loop4: detected capacity change from 0 to 512 [ 1683.284866][T20627] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1683.373239][T20627] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1683.377370][T20624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1683.439616][T20633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2713'. [ 1683.465143][T20627] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1683.499733][T20633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2713'. [ 1683.513691][T20624] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1683.549423][T20627] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1683.594786][T20633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2713'. [ 1683.622807][T20633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2713'. [ 1683.691562][T20624] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1683.846422][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1683.869616][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1683.886132][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1683.901411][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1683.910064][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1683.915588][T20078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1684.170579][T20636] lo speed is unknown, defaulting to 1000 [ 1684.240068][T20644] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2718'. [ 1684.477075][T20648] lo speed is unknown, defaulting to 1000 [ 1684.514376][T20656] loop4: detected capacity change from 0 to 128 [ 1684.547515][T20656] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1684.576435][T20656] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1684.620472][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1684.620490][ T30] audit: type=1326 audit(1750834768.771:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1684.666540][ T30] audit: type=1326 audit(1750834768.801:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1684.776127][ T30] audit: type=1326 audit(1750834768.811:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1684.951565][ T30] audit: type=1326 audit(1750834768.811:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1684.975201][ T30] audit: type=1326 audit(1750834768.811:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1684.998392][ T30] audit: type=1326 audit(1750834768.811:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1685.021608][ T30] audit: type=1326 audit(1750834768.811:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1685.046290][ T30] audit: type=1326 audit(1750834768.811:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1685.069607][ T30] audit: type=1326 audit(1750834768.811:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1685.092811][ T30] audit: type=1326 audit(1750834768.811:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20654 comm="syz.4.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f758ed8e929 code=0x7ffc0000 [ 1685.416945][T20636] chnl_net:caif_netlink_parms(): no params data found [ 1685.725629][T20078] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1685.761776][T20682] loop1: detected capacity change from 0 to 128 [ 1685.874532][T20682] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1685.942719][T20682] ext4 filesystem being mounted at /267/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1686.034482][T16681] Bluetooth: hci5: command tx timeout [ 1686.050412][T20636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.095732][T20636] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.103835][T20636] bridge_slave_0: entered allmulticast mode [ 1686.111877][T20636] bridge_slave_0: entered promiscuous mode [ 1686.229247][T20636] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.243903][T15752] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1686.257435][T20636] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.265290][T20636] bridge_slave_1: entered allmulticast mode [ 1686.324158][T20636] bridge_slave_1: entered promiscuous mode [ 1686.698354][T20636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1686.872867][T20636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1687.132285][T20636] team0: Port device team_slave_0 added [ 1687.172331][T20636] team0: Port device team_slave_1 added [ 1687.299702][T20636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1687.337844][T20636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.419424][T20702] loop4: detected capacity change from 0 to 512 [ 1687.446101][T20636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1687.459604][T20636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1687.468548][T20702] EXT4-fs: Ignoring removed i_version option [ 1687.500580][T20636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1687.585211][T20636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1687.605512][T20702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1687.908642][T20636] hsr_slave_0: entered promiscuous mode [ 1687.917690][T20744] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2747'. [ 1687.938515][T20636] hsr_slave_1: entered promiscuous mode [ 1687.963906][T20636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1687.971499][T20636] Cannot create hsr debugfs directory [ 1688.068626][T20078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1688.114120][T16681] Bluetooth: hci5: command tx timeout [ 1688.871236][T20636] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1689.024844][T20765] hub 8-0:1.0: USB hub found [ 1689.032145][T20765] hub 8-0:1.0: 1 port detected [ 1689.106052][T20636] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.014976][T20636] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1690.233107][T16681] Bluetooth: hci5: command tx timeout [ 1690.413374][T20636] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1691.258327][T20636] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1691.291348][T20636] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1691.327326][T20636] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1691.362100][T20636] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1691.668337][T20814] macvlan0: entered allmulticast mode [ 1691.678689][T20814] veth1_vlan: entered allmulticast mode [ 1691.706035][T20814] veth1_vlan: left allmulticast mode [ 1691.745611][T20814] macvlan0 (unregistering): left allmulticast mode [ 1691.783747][T20636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1691.839872][T20636] 8021q: adding VLAN 0 to HW filter on device team0 [ 1691.880545][T20344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.887758][T20344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1691.941452][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.948643][ T4568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.991164][T20823] loop3: detected capacity change from 0 to 2048 [ 1692.061702][T20823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1692.277631][T16681] Bluetooth: hci5: command tx timeout [ 1692.307314][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2772'. [ 1692.508310][T20247] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1692.885634][T20636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1692.965710][T20856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2776'. [ 1693.128405][T20860] loop1: detected capacity change from 0 to 256 [ 1693.165773][T20860] vfat: Unknown parameter 'nonumtaûl' [ 1693.562840][T20874] random: crng reseeded on system resumption [ 1694.924036][T20894] loop4: detected capacity change from 0 to 512 [ 1695.150533][T20894] EXT4-fs (loop4): 1 orphan inode deleted [ 1695.172606][T20894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1695.209412][T20894] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1695.778343][ T4568] __quota_error: 217 callbacks suppressed [ 1695.778363][ T4568] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1695.883673][ T4568] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 1696.576711][T20078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1696.773205][T17734] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1696.956543][T17734] usb 2-1: device descriptor read/64, error -71 [ 1697.203182][T17734] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1697.343559][T17734] usb 2-1: device descriptor read/64, error -71 [ 1697.463513][T17734] usb usb2-port1: attempt power cycle [ 1697.823307][T17734] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1697.854236][T17734] usb 2-1: device descriptor read/8, error -71 [ 1698.103147][T17734] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1698.137955][T17734] usb 2-1: device descriptor read/8, error -71 [ 1698.254994][T17734] usb usb2-port1: unable to enumerate USB device [ 1699.411038][T20636] veth0_vlan: entered promiscuous mode [ 1699.441430][T20636] veth1_vlan: entered promiscuous mode [ 1699.568306][T20636] veth0_macvtap: entered promiscuous mode [ 1699.636263][T20636] veth1_macvtap: entered promiscuous mode [ 1699.732243][T20636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1699.805984][T20636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1699.869835][T20345] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.908949][T20345] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.940678][T20345] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1699.969685][T20345] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1700.017653][T20942] loop4: detected capacity change from 0 to 1024 [ 1700.252823][T20942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1700.434356][T20952] loop1: detected capacity change from 0 to 128 [ 1700.962142][T20951] lo speed is unknown, defaulting to 1000 [ 1701.160836][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1701.326772][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1701.379232][T20078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1701.920754][ T3521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.426627][ T3521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.787817][T20970] veth1_macvtap: left promiscuous mode [ 1702.817418][T20970] macsec0: entered promiscuous mode [ 1703.188937][T20980] loop9: detected capacity change from 0 to 2048 [ 1703.455738][ T6027] loop9: p1 < > p4 [ 1703.587777][ T6027] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1703.652579][T20980] loop9: p1 < > p4 [ 1703.682668][T20980] loop9: p4 size 8388608 extends beyond EOD, truncated [ 1704.099819][ T8157] udevd[8157]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1704.120644][ T6027] udevd[6027]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1704.362180][ T6027] udevd[6027]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1704.379012][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1704.392853][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1704.405366][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1704.415337][ T8157] udevd[8157]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 1704.425356][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1704.438221][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1705.494990][T21011] loop1: detected capacity change from 0 to 1024 [ 1705.551159][T21011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1705.642517][T20999] lo speed is unknown, defaulting to 1000 [ 1705.675476][ T30] audit: type=1800 audit(1750834789.821:903): pid=21011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2817" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1705.680060][T21011] Trying to write to read-only block-device loop1 [ 1705.947359][T21024] veth1_macvtap: left promiscuous mode [ 1705.960558][T21024] macsec0: entered promiscuous mode [ 1705.970384][T15752] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.182155][T20344] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.358959][T21033] veth1_macvtap: left promiscuous mode [ 1706.372439][T21033] macsec0: entered promiscuous mode [ 1706.529774][ T5845] Bluetooth: hci4: command tx timeout [ 1706.707718][T20344] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.023319][T21055] serio: Serial port ptm0 [ 1707.052856][T20344] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.494100][T20344] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.101660][T21077] loop9: detected capacity change from 0 to 512 [ 1708.140558][T21077] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1708.261059][T21077] EXT4-fs (loop9): 1 truncate cleaned up [ 1708.275166][T21077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1708.599972][T16681] Bluetooth: hci4: command tx timeout [ 1708.764769][T20636] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1708.862618][T20999] chnl_net:caif_netlink_parms(): no params data found [ 1709.540753][T21098] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1710.568548][T21109] loop4: detected capacity change from 0 to 512 [ 1710.641468][T21109] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1710.673897][T16681] Bluetooth: hci4: command tx timeout [ 1710.723879][T21109] EXT4-fs (loop4): mount failed [ 1711.974134][ T30] audit: type=1326 audit(1750834796.121:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36f78e929 code=0x7ffc0000 [ 1712.015570][T21127] loop3: detected capacity change from 0 to 128 [ 1712.119681][ T30] audit: type=1326 audit(1750834796.161:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb36f78e929 code=0x7ffc0000 [ 1712.192927][ T30] audit: type=1326 audit(1750834796.161:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36f78e929 code=0x7ffc0000 [ 1712.222310][ T30] audit: type=1326 audit(1750834796.161:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb36f78e929 code=0x7ffc0000 [ 1712.290593][ T30] audit: type=1326 audit(1750834796.161:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36f78e929 code=0x7ffc0000 [ 1712.384999][ T30] audit: type=1326 audit(1750834796.161:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fb36f78e929 code=0x7ffc0000 [ 1712.404106][T21138] loop1: detected capacity change from 0 to 512 [ 1712.480649][ T30] audit: type=1326 audit(1750834796.161:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36f78e929 code=0x7ffc0000 [ 1712.555733][ T30] audit: type=1326 audit(1750834796.161:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb36f78e929 code=0x7ffc0000 [ 1712.661777][ T30] audit: type=1326 audit(1750834796.161:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb36f78e963 code=0x7ffc0000 [ 1712.714753][ T30] audit: type=1326 audit(1750834796.161:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21125 comm="syz.3.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb36f78d3df code=0x7ffc0000 [ 1712.754664][T16681] Bluetooth: hci4: command tx timeout [ 1712.959172][T20344] bond0 (unregistering): Released all slaves [ 1713.144130][T21144] lo speed is unknown, defaulting to 1000 [ 1713.220775][T21088] lo speed is unknown, defaulting to 1000 [ 1713.594877][T20999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1713.608703][T20999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1713.625093][T20999] bridge_slave_0: entered allmulticast mode [ 1713.654914][T20999] bridge_slave_0: entered promiscuous mode [ 1713.706023][T20999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.735108][T20999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.742393][T20999] bridge_slave_1: entered allmulticast mode [ 1713.771511][T20999] bridge_slave_1: entered promiscuous mode [ 1714.277842][T20344] hsr_slave_0: left promiscuous mode [ 1714.329746][T20344] hsr_slave_1: left promiscuous mode [ 1714.352190][T21191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1714.362149][T20344] veth1_macvtap: left promiscuous mode [ 1714.369958][T20344] veth0_macvtap: left promiscuous mode [ 1714.376275][T20344] veth1_vlan: left promiscuous mode [ 1714.390240][T20344] veth0_vlan: left promiscuous mode [ 1714.402845][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1714.421816][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1714.431037][T21196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1714.454646][T21197] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2860'. [ 1714.467943][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1714.481213][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 1714.517025][T20344] pimreg (unregistering): left allmulticast mode [ 1716.004580][T20999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1716.019072][T20999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1716.176091][T20999] team0: Port device team_slave_0 added [ 1716.218645][T20999] team0: Port device team_slave_1 added [ 1716.256740][T21206] loop3: detected capacity change from 0 to 128 [ 1716.377367][T21206] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1716.414148][T21206] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1716.565894][T20999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.572869][T20999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1716.660707][T20999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.733522][T20999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.754425][T20999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1716.837225][T20999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.081310][T20247] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1717.158995][T20344] IPVS: stop unused estimator thread 0... [ 1717.219060][T20999] hsr_slave_0: entered promiscuous mode [ 1717.258517][T20999] hsr_slave_1: entered promiscuous mode [ 1717.286833][T20999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1717.315505][T20999] Cannot create hsr debugfs directory [ 1717.336317][T21234] syz_tun: entered allmulticast mode [ 1717.360211][ T30] kauditd_printk_skb: 87 callbacks suppressed [ 1717.360229][ T30] audit: type=1326 audit(1750834801.511:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21236 comm="syz.3.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb36f78e929 code=0x7ffc0000 [ 1717.393180][ C0] ------------[ cut here ]------------ [ 1717.393246][ C0] WARNING: net/ipv4/ipmr.c:2302 at ip_mr_output+0xbb1/0xe70, CPU#0: kauditd/30 [ 1717.393363][ C0] Modules linked in: [ 1717.393422][ C0] CPU: 0 UID: 0 PID: 30 Comm: kauditd Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1717.393448][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1717.393464][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 1717.393487][ C0] Code: df e9 63 f6 ff ff e8 0e 74 be f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 9a 01 4c ff e9 45 f6 ff ff e8 f0 73 be f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 e2 73 be f7 90 0f 0b 90 42 80 3c 2b 00 [ 1717.393507][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 1717.393527][ C0] RAX: ffffffff8a0156d0 RBX: ffff88802f68a000 RCX: ffff88801d6d1e00 [ 1717.393543][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.393558][ C0] RBP: ffffc90000007a10 R08: ffff88801d6d1e00 R09: 0000000000000004 [ 1717.393574][ C0] R10: 0000000000000003 R11: ffffffff8a014b20 R12: 0000000000000010 [ 1717.393589][ C0] R13: dffffc0000000000 R14: ffff888077dbb600 R15: 0000000000000000 [ 1717.393606][ C0] FS: 0000000000000000(0000) GS:ffff888125c25000(0000) knlGS:0000000000000000 [ 1717.393624][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1717.393640][ C0] CR2: 00007fb36d5f5f98 CR3: 0000000079ac8000 CR4: 00000000003526f0 [ 1717.393661][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1717.393675][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1717.393690][ C0] Call Trace: [ 1717.393700][ C0] [ 1717.393720][ C0] ? __pfx_dst_output+0x10/0x10 [ 1717.393776][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1717.393805][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1717.393839][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 1717.393865][ C0] ? skb_dst+0x4f/0xd0 [ 1717.393888][ C0] ? dst_output+0x177/0x1c0 [ 1717.393914][ C0] igmp_send_report+0x89e/0xdb0 [ 1717.394026][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 1717.394058][ C0] ? igmp_start_timer+0x211/0x2b0 [ 1717.394092][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1717.394120][ C0] igmp_timer_expire+0x204/0x510 [ 1717.394150][ C0] call_timer_fn+0x17b/0x5f0 [ 1717.394178][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 1717.394200][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1717.394225][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1717.394259][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1717.394281][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1717.394304][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 1717.394329][ C0] __run_timer_base+0x61a/0x860 [ 1717.394352][ C0] ? ktime_get+0x3e/0x1f0 [ 1717.394385][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1717.394408][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1717.394451][ C0] run_timer_softirq+0xb7/0x180 [ 1717.394478][ C0] handle_softirqs+0x286/0x870 [ 1717.394513][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1717.394551][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1717.394587][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1717.394618][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1717.394650][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1717.394701][ C0] irq_exit_rcu+0x9/0x30 [ 1717.394731][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1717.394758][ C0] [ 1717.394769][ C0] [ 1717.394780][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1717.394807][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 1717.394832][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 55 1b 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 46 1b 1f 00 eb 06 e8 3f 1b 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 2f 83 00 48 8b 1b 48 8b 44 24 [ 1717.394853][ C0] RSP: 0018:ffffc90000a67760 EFLAGS: 00000293 [ 1717.394878][ C0] RAX: 1ffffffff1d37123 RBX: ffffffff8e9b8918 RCX: ffff88801d6d1e00 [ 1717.394897][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.394912][ C0] RBP: ffffc90000a678b0 R08: ffffffff8fa18cf7 R09: 1ffffffff1f4319e [ 1717.394928][ C0] R10: dffffc0000000000 R11: fffffbfff1f4319f R12: dffffc0000000000 [ 1717.394944][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b88c0 [ 1717.394985][ C0] ? console_flush_all+0x13a/0xc40 [ 1717.395018][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1717.395055][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1717.395087][ C0] console_unlock+0xc4/0x270 [ 1717.395119][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1717.395158][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1717.395188][ C0] vprintk_emit+0x5b7/0x7a0 [ 1717.395226][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1717.395259][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1717.395284][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1717.395329][ C0] _printk+0xcf/0x120 [ 1717.395355][ C0] ? __pfx____ratelimit+0x10/0x10 [ 1717.395386][ C0] ? __pfx__printk+0x10/0x10 [ 1717.395415][ C0] ? netlink_has_listeners+0x77/0x3f0 [ 1717.395534][ C0] ? netlink_has_listeners+0x339/0x3f0 [ 1717.395566][ C0] kauditd_hold_skb+0x1c8/0x210 [ 1717.395590][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1717.395611][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1717.395634][ C0] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 1717.395660][ C0] kauditd_send_queue+0x2a1/0x2f0 [ 1717.395718][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1717.395739][ C0] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 1717.395765][ C0] ? kauditd_thread+0xba/0x9a0 [ 1717.395783][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1717.395809][ C0] kauditd_thread+0x74e/0x9a0 [ 1717.395836][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1717.395862][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1717.395889][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1717.395911][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1717.395936][ C0] ? __kthread_parkme+0x7b/0x200 [ 1717.395975][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1717.396014][ C0] kthread+0x711/0x8a0 [ 1717.396041][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1717.396063][ C0] ? __pfx_kthread+0x10/0x10 [ 1717.396088][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1717.396112][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1717.396137][ C0] ? __pfx_kthread+0x10/0x10 [ 1717.396161][ C0] ret_from_fork+0x3fc/0x770 [ 1717.396194][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1717.396228][ C0] ? __switch_to_asm+0x39/0x70 [ 1717.396249][ C0] ? __switch_to_asm+0x33/0x70 [ 1717.396269][ C0] ? __pfx_kthread+0x10/0x10 [ 1717.396292][ C0] ret_from_fork_asm+0x1a/0x30 [ 1717.396331][ C0] [ 1717.396343][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1717.396358][ C0] CPU: 0 UID: 0 PID: 30 Comm: kauditd Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1717.396379][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1717.396392][ C0] Call Trace: [ 1717.396401][ C0] [ 1717.396408][ C0] dump_stack_lvl+0x99/0x250 [ 1717.396433][ C0] ? __asan_memcpy+0x40/0x70 [ 1717.396456][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1717.396482][ C0] ? __pfx__printk+0x10/0x10 [ 1717.396512][ C0] panic+0x2db/0x790 [ 1717.396544][ C0] ? __pfx_panic+0x10/0x10 [ 1717.396586][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1717.396614][ C0] __warn+0x334/0x4c0 [ 1717.396641][ C0] ? ip_mr_output+0xbb1/0xe70 [ 1717.396667][ C0] ? ip_mr_output+0xbb1/0xe70 [ 1717.396696][ C0] report_bug+0x2be/0x4f0 [ 1717.396720][ C0] ? ip_mr_output+0xbb1/0xe70 [ 1717.396741][ C0] ? ip_mr_output+0xbb1/0xe70 [ 1717.396763][ C0] ? ip_mr_output+0xbb3/0xe70 [ 1717.396782][ C0] handle_bug+0x84/0x160 [ 1717.396811][ C0] exc_invalid_op+0x1a/0x50 [ 1717.396839][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1717.396859][ C0] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 1717.396881][ C0] Code: df e9 63 f6 ff ff e8 0e 74 be f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 9a 01 4c ff e9 45 f6 ff ff e8 f0 73 be f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 e2 73 be f7 90 0f 0b 90 42 80 3c 2b 00 [ 1717.396900][ C0] RSP: 0018:ffffc90000007900 EFLAGS: 00010246 [ 1717.396919][ C0] RAX: ffffffff8a0156d0 RBX: ffff88802f68a000 RCX: ffff88801d6d1e00 [ 1717.396936][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.396950][ C0] RBP: ffffc90000007a10 R08: ffff88801d6d1e00 R09: 0000000000000004 [ 1717.396966][ C0] R10: 0000000000000003 R11: ffffffff8a014b20 R12: 0000000000000010 [ 1717.396980][ C0] R13: dffffc0000000000 R14: ffff888077dbb600 R15: 0000000000000000 [ 1717.397001][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 1717.397023][ C0] ? ip_mr_output+0xbb0/0xe70 [ 1717.397051][ C0] ? __pfx_dst_output+0x10/0x10 [ 1717.397073][ C0] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1717.397098][ C0] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1717.397132][ C0] ? __pfx_ip_mr_output+0x10/0x10 [ 1717.397157][ C0] ? skb_dst+0x4f/0xd0 [ 1717.397179][ C0] ? dst_output+0x177/0x1c0 [ 1717.397204][ C0] igmp_send_report+0x89e/0xdb0 [ 1717.397232][ C0] ? __pfx_igmp_send_report+0x10/0x10 [ 1717.397252][ C0] ? igmp_start_timer+0x211/0x2b0 [ 1717.397283][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1717.397310][ C0] igmp_timer_expire+0x204/0x510 [ 1717.397337][ C0] call_timer_fn+0x17b/0x5f0 [ 1717.397363][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 1717.397383][ C0] ? call_timer_fn+0xbe/0x5f0 [ 1717.397407][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1717.397442][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1717.397465][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1717.397488][ C0] ? __pfx_igmp_timer_expire+0x10/0x10 [ 1717.397511][ C0] __run_timer_base+0x61a/0x860 [ 1717.397532][ C0] ? ktime_get+0x3e/0x1f0 [ 1717.397562][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1717.397583][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1717.397621][ C0] run_timer_softirq+0xb7/0x180 [ 1717.397647][ C0] handle_softirqs+0x286/0x870 [ 1717.397685][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1717.397719][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1717.397752][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1717.397778][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1717.397806][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1717.397843][ C0] irq_exit_rcu+0x9/0x30 [ 1717.397868][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1717.397893][ C0] [ 1717.397901][ C0] [ 1717.397911][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1717.397932][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 1717.397953][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 55 1b 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 46 1b 1f 00 eb 06 e8 3f 1b 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 2f 83 00 48 8b 1b 48 8b 44 24 [ 1717.397971][ C0] RSP: 0018:ffffc90000a67760 EFLAGS: 00000293 [ 1717.397989][ C0] RAX: 1ffffffff1d37123 RBX: ffffffff8e9b8918 RCX: ffff88801d6d1e00 [ 1717.398005][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1717.398018][ C0] RBP: ffffc90000a678b0 R08: ffffffff8fa18cf7 R09: 1ffffffff1f4319e [ 1717.398035][ C0] R10: dffffc0000000000 R11: fffffbfff1f4319f R12: dffffc0000000000 [ 1717.398050][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b88c0 [ 1717.398087][ C0] ? console_flush_all+0x13a/0xc40 [ 1717.398114][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1717.398146][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1717.398174][ C0] console_unlock+0xc4/0x270 [ 1717.398207][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1717.398240][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1717.398268][ C0] vprintk_emit+0x5b7/0x7a0 [ 1717.398300][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1717.398327][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1717.398351][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1717.398392][ C0] _printk+0xcf/0x120 [ 1717.398413][ C0] ? __pfx____ratelimit+0x10/0x10 [ 1717.398441][ C0] ? __pfx__printk+0x10/0x10 [ 1717.398467][ C0] ? netlink_has_listeners+0x77/0x3f0 [ 1717.398496][ C0] ? netlink_has_listeners+0x339/0x3f0 [ 1717.398527][ C0] kauditd_hold_skb+0x1c8/0x210 [ 1717.398549][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1717.398569][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1717.398590][ C0] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 1717.398613][ C0] kauditd_send_queue+0x2a1/0x2f0 [ 1717.398638][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1717.398657][ C0] ? __pfx_kauditd_send_multicast_skb+0x10/0x10 [ 1717.398689][ C0] ? kauditd_thread+0xba/0x9a0 [ 1717.398707][ C0] ? __pfx_kauditd_hold_skb+0x10/0x10 [ 1717.398731][ C0] kauditd_thread+0x74e/0x9a0 [ 1717.398755][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1717.398778][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1717.398802][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1717.398823][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1717.398847][ C0] ? __kthread_parkme+0x7b/0x200 [ 1717.398877][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1717.398913][ C0] kthread+0x711/0x8a0 [ 1717.398936][ C0] ? __pfx_kauditd_thread+0x10/0x10 [ 1717.398957][ C0] ? __pfx_kthread+0x10/0x10 [ 1717.398980][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1717.399003][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1717.399026][ C0] ? __pfx_kthread+0x10/0x10 [ 1717.399048][ C0] ret_from_fork+0x3fc/0x770 [ 1717.399078][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1717.399112][ C0] ? __switch_to_asm+0x39/0x70 [ 1717.399131][ C0] ? __switch_to_asm+0x33/0x70 [ 1717.399151][ C0] ? __pfx_kthread+0x10/0x10 [ 1717.399173][ C0] ret_from_fork_asm+0x1a/0x30 [ 1717.399210][ C0] [ 1717.399464][ C0] Kernel Offset: disabled