last executing test programs: 33.705170744s ago: executing program 1 (id=1887): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='cachefiles_ondemand_cread\x00'}, 0x10) sendfile(r1, r0, 0x0, 0x3a) 30.861992863s ago: executing program 1 (id=1899): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000380)={0x0, 0x0, 0x7, {0x7, 0x0, "b27814d066"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 28.650498288s ago: executing program 1 (id=1913): unshare(0x28000600) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d800000019008111e00212ba0d8105040a00000003020000067c55a1bc00090008000699030000000800150002008178a8000500050001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca", 0x84}], 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000200)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)) 28.473683515s ago: executing program 1 (id=1914): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc00, &(0x7f0000000880)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYBLOB="0ce3150a3fe7fb06ee987419dcc049e62687c406de08e5069bd2ce5de5c0c93d98ca9d2b9db4cac9afabc7d31688743966e73ec0830e06671e9676caf017c5a2bcdda23921da922aeaf4344d74a8a39f1584ad52d37b8b71", @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYRES8=0x0, @ANYRES64=0x0, @ANYBLOB="7569643d905d71524d6613c415e10839b8aebc330a7196ada7453b3ac69b748c4314d22ec85487abc5c78285138c51d979f457ee167c34bb9e2d88d15ddf56f006eab8f8b4155bd1aac2a44e1d52ee5402b2bfbc1242ec6930b178d71d374ce907288e233b9cd39d67476fd3ab3c9a84fce295ec770000000000000000002000000000", @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=0x0], 0x21, 0x6190, &(0x7f0000001b00)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f000000c1c0)={0x2020}, 0x2020) 27.294422041s ago: executing program 1 (id=1923): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x0, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x94c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"011920059dae1829c3cb6235d0994341baf3c3201d20a1a818cb23703a12fcf3"}) 26.038378288s ago: executing program 1 (id=1924): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1d1d) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) sysinfo(&(0x7f0000000200)=""/32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x800, 0x0, 0x1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x8}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001b0000000c00018008000100", @ANYRES32=r10], 0x20}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000680)={{{@in=@empty, @in=@private}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000880)=0xe8) sendmsg$nl_route(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001d00020025bd7000ffdbdf251c000000", @ANYRES32=r10, @ANYBLOB="800004001400030008170000ffffff7f000000000800000008000100ac141417060006004e240000"], 0x40}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000580)='afs_make_fs_call\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r12, @ANYBLOB="00000000000000002000128008000100677265001400028006000f00000000000600110000000400"], 0x40}}, 0x0) socket$inet6(0xa, 0x3, 0x9) 10.421939979s ago: executing program 0 (id=1971): openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) io_setup(0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd63a34e786cbc325, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={0x0}}, 0xc844) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') unshare(0x2000400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000080)) 8.544773612s ago: executing program 0 (id=1973): syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001030902"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) socket(0xa, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 8.449058685s ago: executing program 4 (id=1976): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x40045109, &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000100)={0x0, r4}) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) write$eventfd(r4, &(0x7f00000000c0), 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00') read$snapshot(r5, &(0x7f0000000000)=""/140, 0x8c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="6941c43b78eeda4918160798ef967cb9254c327158c51dc69eeda809ba0f2b") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000dc0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6.583627317s ago: executing program 0 (id=1977): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r2 = getpid() timer_create(0x2, &(0x7f0000000200)={0x0, 0x20, 0x0, @tid=r2}, &(0x7f0000000240)) sendmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='binder\x00', 0x48800, &(0x7f00000001c0)='squashfs\x00') sendmsg(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000040)={'ip6gretap0\x00', @local}) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x4, &(0x7f0000004140)=ANY=[], 0x9, 0x1c4, &(0x7f0000000780)="$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") 6.578826517s ago: executing program 2 (id=1978): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) r0 = open(&(0x7f0000000000)='./file2\x00', 0x8001, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x4c00, 0x3) 6.574755747s ago: executing program 3 (id=1979): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@sg0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x14113e, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x810, &(0x7f0000000540)=ANY=[@ANYBLOB="686964652c73657373696f6e3d3078303030303030303030303030303037362c6769643dd90f0000000000000673342769cfb2d0264f659322d416aea740b582072b283cb3b188d70cdc80826d3fa1a06ae8943f278957532d9d40f06f06f10e351cad6f5265cdd8af0b4fba9b2678a1db32b5ca9f5248c1e05bce9fd94904d46fb63338ed7c4beb7732568177782da628", @ANYRESHEX, @ANYBLOB=',check=strict,nojoliet,block=0x0000000000000c00,map=off,check=relaxed,dmode=0x00000000000000ff,\x00'], 0x1, 0x222, &(0x7f0000000300)="$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") r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/147, 0x93}, {0x0}], 0x2) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x32) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000003c0)) r3 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0), 0xd4ba0ff) lsetxattr(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000400)=@known='user.incfs.id\x00', &(0x7f0000000440)='\x00', 0x1, 0x1) unlink(&(0x7f0000000100)='./file0/file1\x00') mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0xa050, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/129, 0x81, 0x3) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) r4 = dup(0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x7c, &(0x7f0000000080), &(0x7f0000000040)=0x8) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file0/file1\x00', &(0x7f00000001c0), 0x1041000, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='pipefs\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000b80)={'#! ', '', [], 0xa, "3b44fdb8f03cb24a4cc474acba00d0dd91aa8b500423957827592422d324bf9957fc4f9e65aa8942e3d2159964508ff15ab494a54920fd274440c6dd8b121e6148194d884addaa185780ccfcc70607a2d69f6d6bc1b027ff3dcf17878f4cb4e3c2694259ae2b9ccc4e8e810576187c6f48cc76b980d95553a9d19c4ac77e5f79cb47f01547009dbe9397047cccd2ee9b62a0248b36b505c71dd3b6ca6e7c67c91b6d2dfad197ecf71217f1af4025d540c43ff5c5c0e59a"}, 0xbb) 6.522221969s ago: executing program 4 (id=1980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x140, r3, 0x10, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x99, 0x4, "be33c92ae68cc15ce43552d112f41cc712c13ee048b5edad3c915bc8be362eb4d8e1a8c21fa9568ce92dd7a2b9d47848520414a4e28662111ab3e10d4d8d6c3f76ced159b1b80571f322094da925b6a67417fb7e9334e5f54d952a7c1aad797df730a217f7a3e49f0d1934984be0fd404a1b94c3efb9d9973da7af451aba680b0729810cc8c4dbea97b156cb563298b89e83766148"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x7c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "8ca4d37ebf01bb46360279a7466bdb0213e691027041a93fc081a0a0aa2984cefd55126cfca0679971e6cf75c402241cf0b892179ada1a92636323ca5cf53221b6293b"}, @ETHTOOL_A_BITSET_BITS={0x30, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+]-^:{\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#\\\x00'}]}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000280)=@framed, &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x15, &(0x7f0000000880)=@raw=[@alu={0x4, 0x0, 0x4, 0x0, 0x3, 0x40}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x58, &(0x7f0000000400)=""/88, 0x41000, 0x2, '\x00', r9, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r10, r5, r5, r4, r11, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x80000000}, 0x90) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "273bb0cae98a3af34ba5c74366b48b841728ed3455e55c173ec02e0ad81a046111d54cba55366c8747fca45d8539eb9218be5ed5cb14eaa1b67d0d3784ffa9d5f0d58201519c016e683dca9737d61ad022c5e00b57116865a2209e7961326ab64b795a2dac6b278cb0334dee412d3b4cc7c10d559bf23d337a725f29d68a40b0b519e8e8e5e50126551e32eb6b4d0a46d68935df0d671b58face36c62c43ef4b5af2a8f907cbf43147e8949bf7ffd1f29d6d0b64a9767a896b1193d5bf741bc61715bd792513d5132462cb382fb60cd10a06cb9f9e18a2781e223d16bf29bfe5b49defb0239ad30a495bed037bc972bd5e2ae180d7e81a3a1de1037fff897567"}]}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@srh={0x0, 0x0, 0xc9}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) vmsplice(r6, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b", 0x16}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r14 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r14, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r14, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r14, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r14, 0x0, 0x8000, 0x0) 6.472702341s ago: executing program 2 (id=1981): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x40200) io_setup(0x8, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)='\t', 0x1}]) write$binfmt_script(r1, &(0x7f0000000e40)={'#! ', './file0'}, 0xb) 6.468705321s ago: executing program 4 (id=1982): openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) io_setup(0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd63a34e786cbc325, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={0x0}}, 0xc844) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') unshare(0x2000400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000080)) 4.596336403s ago: executing program 0 (id=1983): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES8=0x0], 0x3, 0x2a0, &(0x7f00000001c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x32}, 0x0, @in=@multicast2}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 4.586745294s ago: executing program 2 (id=1984): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0xfffffffc, 0x7, 0x7c6f, 0x0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000a6000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r6, &(0x7f0000000000)=ANY=[], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r7, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000030a01020000000000000000010800000900030073797a32000000002c00048008000240172af2e40800014000000002080002401c791e7108000240423930ce08000140000000050900010073797a300000000040000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a3000000000040004"], 0x218}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x10) r8 = io_uring_setup(0x17ba, &(0x7f00000004c0)) io_uring_register$IORING_UNREGISTER_FILES(r8, 0x3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() pselect6(0x40, &(0x7f0000000180)={0x7f, 0xd1, 0x6, 0x3, 0x5, 0x6, 0x2, 0x7ff}, &(0x7f00000001c0)={0x8, 0x2, 0xfffffffffffffffb, 0x2, 0x3f03, 0x8, 0x0, 0x8000}, &(0x7f0000000200)={0xfffffffffffffc00, 0x5, 0x2, 0x4, 0x6, 0xfe2, 0x2, 0x8}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000380)={&(0x7f0000000340)={[0x8000000000000001]}, 0x8}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 4.581004793s ago: executing program 3 (id=1985): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') r1 = memfd_create(&(0x7f00000004c0)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY30xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x15, &(0x7f0000000880)=@raw=[@alu={0x4, 0x0, 0x4, 0x0, 0x3, 0x40}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @exit, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x58, &(0x7f0000000400)=""/88, 0x41000, 0x2, '\x00', r9, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[r10, r5, r5, r4, r11, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x80000000}, 0x90) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newqdisc={0x138, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@srh={0x0, 0x0, 0xc9}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) vmsplice(r6, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b", 0x16}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r14 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r14, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r14, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r14, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r5, 0x0, r14, 0x0, 0x8000, 0x0) 2.377192418s ago: executing program 2 (id=1992): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000005c0)={[{@nogrpid}], [{@uid_gt}, {@dont_hash}, {@euid_lt}]}, 0xee, 0x476, &(0x7f0000000f80)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x5b8, &(0x7f0000000000)="$eJzs27Fre1UUB/Dve0leEvBHdHHUQBcnOziXVqUtBYciOOvqIuImKHlF0UWdXBz8B7p0EJycRfwLRCg6CLqJOKiDvZLkJU3iJEH0B5/P8Dj39N5zbuFmPOHhVia9pLeT7Nd1tYonfyZXLz+bDKeL9aDLzze8dH16djG9rJp1rkp+bpO6qzP/NMkT68KZdtEX/Xx4ff7+Rx+/1aRN+90syadJm5Th6mqLs/mk+dulf69WxflvPbWzrtafuTaPZrSIDtO9st4ineE8at7bu//N0SzH86Asm46b++5JTrZ315kdLKNBfrnLoJ6u/9S9puPl9bYNk1LKYKPM6lcw2Oj2zFffz3LVDLJ1g+4x346T129ffLraqAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP9P6SwWJ3lslFRJf7767LmqXW7qLzPPN/3l+o/NQ/u5Ofpy8s67b9R58+jVb157+4fzn0a/Junl8PyRMhyu972S4capflLfJXl8vG//0pWtttPTXOXrg2+frHspZXKfHyz2fZ60eWF9FgAAAAAAAAAAAAAAAAAAAPZ1enYxvazHq+n6epUvGSXVzoB7+a1Ksjv1Pk6TboL+x5StQfommTyYH/mgWU3Yt0kpD0b/0r/DP/RXAAAA//9/eFSD") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000000), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.32563369s ago: executing program 3 (id=1993): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x40200) io_setup(0x8, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000100)='\t', 0x1}]) write$binfmt_script(r1, &(0x7f0000000e40)={'#! ', './file0'}, 0xb) 237.447461ms ago: executing program 2 (id=1994): bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003080)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x80000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f000000d180), 0x4000000000000eb, 0x0) 236.606401ms ago: executing program 3 (id=1995): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000380)=@sg0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x14113e, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x810, &(0x7f0000000540)=ANY=[@ANYBLOB="686964652c73657373696f6e3d3078303030303030303030303030303037362c6769643dd90f0000000000000673342769cfb2d0264f659322d416aea740b582072b283cb3b188d70cdc80826d3fa1a06ae8943f278957532d9d40f06f06f10e351cad6f5265cdd8af0b4fba9b2678a1db32b5ca9f5248c1e05bce9fd94904d46fb63338ed7c4beb7732568177782da628", @ANYRESHEX, @ANYBLOB=',check=strict,nojoliet,block=0x0000000000000c00,map=off,check=relaxed,dmode=0x00000000000000ff,\x00'], 0x1, 0x222, &(0x7f0000000300)="$eJzs3NFL61YcB/DToVDcy0A2tb5kCsPJVpOIleJTqWmNS9vRVpiPAx2M+bQ9zX9+I2314tVr5aLWK58PtOc0+TY9hZAfOeU0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACh0j6O46QSirx/9lv0ae3j4aD3yP6b431/p3nkc0OolI9QrYb16ab11Q+7vy2ftsLa9NVaqJZNNVx//d03R6tLX928/5EBvYp//r3+6/erq8u/Fz2QBelm/Xw0yHutbhblo0HUbDTivZPOKOrkRTY6H42zXtQeZq3xYBjttH+MkmZzP8rq54Ozfve4VWQ3Gw9/TuO4EZ3Wf81aw9Ggv3daH7VP8qLI+91JptxdZg7LE/GXfByNs1Yviv748+pyf94gy1DylFA6L5TGaZokaZo0DpoHh3G8dG9D/JFwL7H4k5bFeuYrOHy+/2b1HwAAAHi/KpM59vL+f3kyD18JnbzI4kUPCwAAAHhGk1/+18pmueyth4r7fwAAAHhv5q+xm5uo/BQ2pomNi2l7MUvM1vmtdPIiq7cHxVESfrhd7ffw0ZYn0w+7oTZN1Vam7crdI1bLVFI/SsJu2JwmNne2y2Z754Fk+uTkfpkEgPdua049fkr93w2zNa1RrSymYan2QGWNVVYAeCtu/8HmBTuL/o4AwF2qNAAAAAAAAAAAAAAAvH2vsf5PR0fnS+ss+soEvLT/AwAA//9ytdHj") r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000080)=""/147, 0x93}, {0x0}], 0x2) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000000)=0x32) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f00000003c0)) r3 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0), 0xd4ba0ff) lsetxattr(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000400)=@known='user.incfs.id\x00', &(0x7f0000000440)='\x00', 0x1, 0x1) unlink(&(0x7f0000000100)='./file0/file1\x00') mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0xa050, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/129, 0x81, 0x3) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) r4 = dup(0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x7c, &(0x7f0000000080), &(0x7f0000000040)=0x8) mount$bind(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file0/file1\x00', &(0x7f00000001c0), 0x1041000, 0x0) mount(0x0, 0x0, &(0x7f0000000280)='pipefs\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000b80)={'#! ', '', [], 0xa, "3b44fdb8f03cb24a4cc474acba00d0dd91aa8b500423957827592422d324bf9957fc4f9e65aa8942e3d2159964508ff15ab494a54920fd274440c6dd8b121e6148194d884addaa185780ccfcc70607a2d69f6d6bc1b027ff3dcf17878f4cb4e3c2694259ae2b9ccc4e8e810576187c6f48cc76b980d95553a9d19c4ac77e5f79cb47f01547009dbe9397047cccd2ee9b62a0248b36b505c71dd3b6ca6e7c67c91b6d2dfad197ecf71217f1af4025d540c43ff5c5c0e59a"}, 0xbb) 234.804331ms ago: executing program 4 (id=1996): openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) io_setup(0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd63a34e786cbc325, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={0x0}}, 0xc844) io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00') symlinkat(&(0x7f0000000640)='./file1\x00', r5, &(0x7f0000000780)='./file1\x00') unshare(0x2000400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000000080)) 0s ago: executing program 0 (id=1997): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') r1 = memfd_create(&(0x7f00000004c0)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfdHA\xce\x9a\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw\xdeI\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6quc9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf74\x84o\x99\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\x88f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6k\x00\x00+\xa5\xdcxUY3 2. [ 435.055865][ T3742] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 435.076451][T10251] NILFS (loop2): invalid segment: Checksum error in segment payload [ 435.108519][T10251] NILFS (loop2): trying rollback from an earlier position [ 435.138312][ T26] audit: type=1800 audit(1719915556.674:453): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1840" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 435.159692][T10251] NILFS (loop2): invalid segment: Checksum error in segment payload [ 435.192620][T10220] loop0: detected capacity change from 0 to 32768 [ 435.203133][T10251] NILFS (loop2): error -22 while searching super root [ 435.269966][ T26] audit: type=1804 audit(1719915556.794:454): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1840" name="/newroot/23/file0/file1" dev="loop4" ino=30 res=1 errno=0 [ 435.296868][ T3742] usb 2-1: Using ep0 maxpacket: 32 [ 435.438050][ T3742] usb 2-1: config 0 has no interfaces? [ 435.597252][ T3742] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 435.657919][ T3742] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.688838][ T3742] usb 2-1: Product: syz [ 435.710197][ T3742] usb 2-1: Manufacturer: syz [ 435.729650][ T3742] usb 2-1: SerialNumber: syz [ 435.768826][ T3742] usb 2-1: config 0 descriptor?? [ 436.057161][ T4003] usb 2-1: USB disconnect, device number 21 [ 436.341976][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1848'. [ 436.368093][T10269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.460438][T10275] xt_TPROXY: Can be used only with -p tcp or -p udp [ 436.723711][T10280] loop3: detected capacity change from 0 to 4096 [ 436.814669][T10280] ntfs3: loop3: ino=3, Correct links count -> 2. [ 437.370614][T10303] loop3: detected capacity change from 0 to 256 [ 437.536233][ T4003] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 437.588932][T10310] netlink: 'syz.2.1865': attribute type 2 has an invalid length. [ 437.627645][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1865'. [ 437.656385][T10293] chnl_net:caif_netlink_parms(): no params data found [ 437.693944][T10314] loop1: detected capacity change from 0 to 512 [ 437.761827][T10314] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 437.846777][ T4003] usb 5-1: Using ep0 maxpacket: 16 [ 437.873757][T10314] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1866: casefold flag without casefold feature [ 437.915567][T10293] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.929760][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.942696][T10293] device bridge_slave_0 entered promiscuous mode [ 437.952112][T10293] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.952223][T10314] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1866: missing EA_INODE flag [ 437.971158][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.981392][ T4003] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.003052][ T4003] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.017971][T10293] device bridge_slave_1 entered promiscuous mode [ 438.035400][ T4003] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.046677][T10328] loop2: detected capacity change from 0 to 1024 [ 438.055919][ T4003] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 438.067859][T10314] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1866: error while reading EA inode 12 err=-117 [ 438.077674][ T4003] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 438.100140][T10314] EXT4-fs (loop1): 1 orphan inode deleted [ 438.108226][T10314] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,user_xattr,quota,noinit_itable,stripe=0x0000000000000005,max_dir_size_kb=0x00000000000007ff,errors=remount-ro,delalloc,min_batch_time=0x000000007fffffff,noblock_validity,errors=continue,journal_ioprio=0x000000. Quota mode: writeback. [ 438.115895][ T4003] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 438.170043][T10328] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 438.191569][T10328] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value [ 438.286147][ T26] audit: type=1326 audit(1719915559.804:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.2.1869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b4392af19 code=0x0 [ 438.316987][T10293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.353995][T10293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.366428][ T4003] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.380204][ T4003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.388762][ T4003] usb 5-1: Product: syz [ 438.411204][ T4003] usb 5-1: Manufacturer: syz [ 438.417328][ T4003] usb 5-1: SerialNumber: syz [ 438.562814][T10293] team0: Port device team_slave_0 added [ 438.573963][T10293] team0: Port device team_slave_1 added [ 438.701863][T10339] loop1: detected capacity change from 0 to 4096 [ 438.709428][ T4003] cdc_ncm 5-1:1.0: bind() failure [ 438.717645][T10293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.726446][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.753403][T10293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.757458][ T4003] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 438.789689][ T4003] cdc_ncm 5-1:1.1: bind() failure [ 438.815634][ T4003] usb 5-1: USB disconnect, device number 14 [ 438.833889][ T26] audit: type=1800 audit(1719915560.354:456): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1871" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 438.868160][T10342] device hsr_slave_0 left promiscuous mode [ 438.889320][T10342] device hsr_slave_1 left promiscuous mode [ 438.898938][ T26] audit: type=1804 audit(1719915560.424:457): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1871" name="/newroot/31/file0/file1" dev="loop1" ino=30 res=1 errno=0 [ 438.985593][T10293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.014065][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.040859][ T4004] Bluetooth: hci3: command 0x0409 tx timeout [ 439.047532][T10293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.193798][T10293] device hsr_slave_0 entered promiscuous mode [ 439.276297][T10293] device hsr_slave_1 entered promiscuous mode [ 439.298265][T10350] netlink: 'syz.3.1876': attribute type 2 has an invalid length. [ 439.306138][T10354] loop4: detected capacity change from 0 to 256 [ 439.312876][T10293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.324679][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1876'. [ 439.338697][T10293] Cannot create hsr debugfs directory [ 439.742309][T10293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.751379][T10364] loop1: detected capacity change from 0 to 2048 [ 439.776105][ T4912] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 439.900544][T10364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 439.928887][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.929657][T10293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.935404][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.980223][ T26] audit: type=1800 audit(1719915561.504:458): pid=10364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1882" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 440.011322][T10368] loop4: detected capacity change from 0 to 4096 [ 440.019420][ T4912] usb 4-1: Using ep0 maxpacket: 16 [ 440.110178][T10368] ntfs3: loop4: ino=3, Correct links count -> 2. [ 440.136182][ T4912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 440.147605][T10293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.198475][ T4912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 440.249427][ T4912] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 440.250259][T10293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.268726][ T4912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.303008][ T4912] usb 4-1: config 0 descriptor?? [ 440.559561][T10360] udc-core: couldn't find an available UDC or it's busy [ 440.578447][T10293] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 440.586012][T10360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 440.649203][T10293] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 440.704790][T10293] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 440.769818][T10293] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 440.831752][T10360] udc-core: couldn't find an available UDC or it's busy [ 440.876332][T10360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 440.926646][ T4912] hid (null): bogus close delimiter [ 440.933034][ T4912] hid (null): report_id 6674 is invalid [ 440.956375][ T4912] hid (null): report_id 0 is invalid [ 440.990151][ T4912] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 441.015990][ T4912] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 441.037731][T10293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.046248][ T4912] hid-generic 0003:0158:0100.0011: bogus close delimiter [ 441.053575][ T4912] hid-generic 0003:0158:0100.0011: item 0 0 2 10 parsing failed [ 441.077803][T10382] netlink: 'syz.4.1890': attribute type 2 has an invalid length. [ 441.087482][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 441.098128][ T4912] hid-generic: probe of 0003:0158:0100.0011 failed with error -22 [ 441.098709][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.123993][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1890'. [ 441.130323][ T4912] usb 4-1: USB disconnect, device number 14 [ 441.154605][T10293] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.179199][ T3525] Bluetooth: hci3: command 0x041b tx timeout [ 441.196376][ T4003] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 441.209521][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.227219][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.248936][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.256435][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.305716][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 441.314646][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.357621][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.376415][ T3248] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.384074][ T3248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.413929][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.476280][ T4003] usb 2-1: Using ep0 maxpacket: 16 [ 441.485327][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.505200][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.545890][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.555121][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.597976][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.617608][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.626317][ T4003] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.646874][ T4003] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.666755][ T4003] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 441.666773][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.667547][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.695890][ T4003] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 441.746314][ T4003] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 441.754870][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.784320][ T4003] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 441.963584][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.976667][ T4003] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 441.986394][T10293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.021224][ T4003] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.196819][ T4003] usb 2-1: Product: syz [ 442.294032][ T4003] usb 2-1: Manufacturer: syz [ 442.404562][ T4003] usb 2-1: SerialNumber: syz [ 442.826269][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.833998][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.900729][T10293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.947078][ T4003] cdc_ncm 2-1:1.0: bind() failure [ 442.969968][ T4003] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 442.997083][ T4003] cdc_ncm 2-1:1.1: bind() failure [ 443.017018][ T4003] usb 2-1: USB disconnect, device number 22 [ 443.040255][T10293] device veth0_vlan entered promiscuous mode [ 443.062026][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 443.071903][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.126833][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 443.136826][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.155870][T10293] device veth1_vlan entered promiscuous mode [ 443.168531][T10407] netlink: 'syz.4.1898': attribute type 12 has an invalid length. [ 443.178748][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.190085][T10407] netlink: 'syz.4.1898': attribute type 29 has an invalid length. [ 443.199858][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.209457][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 443.226004][ T3248] Bluetooth: hci3: command 0x040f tx timeout [ 443.232588][T10407] netlink: 'syz.4.1898': attribute type 29 has an invalid length. [ 443.263200][T10408] netlink: 'syz.4.1898': attribute type 29 has an invalid length. [ 443.284708][T10293] device veth0_macvtap entered promiscuous mode [ 443.313240][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 443.333464][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 443.353780][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 443.379763][T10293] device veth1_macvtap entered promiscuous mode [ 443.417929][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.442342][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.474209][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.495800][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.526407][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.544625][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.592881][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.656072][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.675361][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.710583][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.720719][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.732144][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.743894][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.773583][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.793907][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.823846][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.847454][T10293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.859970][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.890687][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.928816][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.939726][ T4913] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 443.985837][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.018263][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.044172][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.065211][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.088379][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.110311][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.134050][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.155335][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.179050][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.185214][T10413] loop4: detected capacity change from 0 to 32768 [ 444.196004][ T4913] usb 2-1: Using ep0 maxpacket: 8 [ 444.201348][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.213459][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.224390][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.235079][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.247542][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.258718][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.268605][T10293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.279184][T10293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.291596][T10293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.326116][ T4913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.336100][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.349276][ T4913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.365411][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.382727][ T4913] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 444.391632][T10293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.434385][T10293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.444458][ T4913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.454728][T10293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.468217][T10293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.483350][ T4913] usb 2-1: config 0 descriptor?? [ 444.891175][T10427] fuse: Unknown parameter 'ÿÿ0xffffffffffffffff' [ 444.950458][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.958238][ T4913] steelseries_srws1 0003:1038:1410.0012: unknown main item tag 0xd [ 444.973863][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.995971][ T4913] steelseries_srws1 0003:1038:1410.0012: item fetching failed at offset 6/7 [ 445.019260][ T4913] steelseries_srws1 0003:1038:1410.0012: parse failed [ 445.031233][ T4913] steelseries_srws1: probe of 0003:1038:1410.0012 failed with error -22 [ 445.176738][ T4003] usb 2-1: USB disconnect, device number 23 [ 445.201372][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.294138][ T3917] Bluetooth: hci3: command 0x0419 tx timeout [ 445.527065][ T3857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.556107][ T3857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.617478][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.052411][T10453] loop3: detected capacity change from 0 to 256 [ 446.090742][T10449] device hsr_slave_0 left promiscuous mode [ 446.134724][T10456] loop0: detected capacity change from 0 to 512 [ 446.137634][T10453] FAT-fs (loop3): Directory bread(block 64) failed [ 446.172057][T10449] device hsr_slave_1 left promiscuous mode [ 446.181142][T10453] FAT-fs (loop3): Directory bread(block 65) failed [ 446.206770][T10453] FAT-fs (loop3): Directory bread(block 66) failed [ 446.224105][T10453] FAT-fs (loop3): Directory bread(block 67) failed [ 446.240103][T10456] EXT4-fs (loop0): Ignoring removed orlov option [ 446.291579][T10456] EXT4-fs (loop0): 1 truncate cleaned up [ 446.294590][T10453] FAT-fs (loop3): Directory bread(block 68) failed [ 446.304475][T10456] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,quota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,orlov,i_version,data_err=ignore,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 446.345986][T10453] FAT-fs (loop3): Directory bread(block 69) failed [ 446.382144][T10453] FAT-fs (loop3): Directory bread(block 70) failed [ 446.413478][T10456] EXT4-fs error (device loop0): ext4_free_branches:1043: inode #13: block 234881024: comm syz.0.1917: Read failure [ 446.456684][T10453] FAT-fs (loop3): Directory bread(block 71) failed [ 446.464114][T10456] EXT4-fs (loop0): Remounting filesystem read-only [ 446.480165][T10453] FAT-fs (loop3): Directory bread(block 72) failed [ 446.504002][T10453] FAT-fs (loop3): Directory bread(block 73) failed [ 446.522988][T10293] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 446.650517][T10293] EXT4-fs error (device loop0): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 446.714260][T10293] EXT4-fs error (device loop0): ext4_lookup:1855: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature. [ 446.747714][ T26] audit: type=1804 audit(1719915568.264:459): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1916" name="/newroot/115/file0/cgroup.controllers" dev="loop3" ino=1048731 res=1 errno=0 [ 446.756672][T10453] attempt to access beyond end of device [ 446.756672][T10453] loop3: rw=2049, want=1228, limit=256 [ 446.995854][ T3741] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 447.013816][T10452] loop1: detected capacity change from 0 to 32768 [ 447.080585][T10439] chnl_net:caif_netlink_parms(): no params data found [ 447.245977][ T3741] usb 3-1: Using ep0 maxpacket: 16 [ 447.365989][ T3741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 447.378942][T10439] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.385852][ T3741] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 447.396607][ T3741] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 447.405982][ T3741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.406448][T10439] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.417122][ T3741] usb 3-1: config 0 descriptor?? [ 447.427320][ T3739] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 447.438683][T10439] device bridge_slave_0 entered promiscuous mode [ 447.487925][ T810] device hsr_slave_0 left promiscuous mode [ 447.494542][ T810] device hsr_slave_1 left promiscuous mode [ 447.502182][ T810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.510313][ T810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.522412][ T810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.530833][ T810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.540863][ T810] device bridge_slave_1 left promiscuous mode [ 447.550171][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.561748][ T810] device bridge_slave_0 left promiscuous mode [ 447.568454][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.585477][ T810] device veth1_macvtap left promiscuous mode [ 447.592171][ T810] device veth0_macvtap left promiscuous mode [ 447.599289][ T810] device veth1_vlan left promiscuous mode [ 447.605210][ T810] device veth0_vlan left promiscuous mode [ 447.665909][ T3739] usb 4-1: Using ep0 maxpacket: 8 [ 447.672463][T10461] udc-core: couldn't find an available UDC or it's busy [ 447.687324][T10461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.786953][ T3739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.798789][ T3739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.809253][ T3739] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 447.818415][ T3739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.829068][ T3739] usb 4-1: config 0 descriptor?? [ 447.907218][T10461] udc-core: couldn't find an available UDC or it's busy [ 447.914286][T10461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 447.922884][ T3917] Bluetooth: hci2: command 0x0409 tx timeout [ 447.946538][ T3741] hid (null): bogus close delimiter [ 447.952971][ T3741] hid (null): report_id 6674 is invalid [ 447.959412][ T3741] hid (null): report_id 0 is invalid [ 447.967942][ T3741] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 447.976215][ T3741] hid-generic 0003:0158:0100.0013: unknown main item tag 0x0 [ 447.984979][ T3741] hid-generic 0003:0158:0100.0013: bogus close delimiter [ 447.992397][ T3741] hid-generic 0003:0158:0100.0013: item 0 0 2 10 parsing failed [ 447.994326][ T810] team0 (unregistering): Port device team_slave_1 removed [ 448.001612][ T3741] hid-generic: probe of 0003:0158:0100.0013 failed with error -22 [ 448.043140][ T810] team0 (unregistering): Port device team_slave_0 removed [ 448.059110][ T810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.080354][ T810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.173100][ T3917] usb 3-1: USB disconnect, device number 15 [ 448.214158][ T810] bond0 (unregistering): Released all slaves [ 448.266727][T10439] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.276123][T10439] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.284548][T10439] device bridge_slave_1 entered promiscuous mode [ 448.319697][ T3739] steelseries_srws1 0003:1038:1410.0014: unknown main item tag 0xd [ 448.338146][ T3739] steelseries_srws1 0003:1038:1410.0014: item fetching failed at offset 6/7 [ 448.348130][ T3739] steelseries_srws1 0003:1038:1410.0014: parse failed [ 448.355074][ T3739] steelseries_srws1: probe of 0003:1038:1410.0014 failed with error -22 [ 448.401703][T10439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.452958][T10439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.573853][ T3739] usb 4-1: USB disconnect, device number 15 [ 448.629147][T10439] team0: Port device team_slave_0 added [ 448.641318][T10439] team0: Port device team_slave_1 added [ 448.708093][T10439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.715165][T10439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.816250][T10439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.878059][T10439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.899090][T10439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.948582][T10439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.063589][T10439] device hsr_slave_0 entered promiscuous mode [ 449.081213][T10439] device hsr_slave_1 entered promiscuous mode [ 449.096026][T10439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.113940][T10439] Cannot create hsr debugfs directory [ 449.409933][T10439] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.492951][T10439] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.523772][T10476] chnl_net:caif_netlink_parms(): no params data found [ 449.587934][T10439] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.759556][T10439] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.931782][T10476] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.955957][T10476] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.985994][T10476] device bridge_slave_0 entered promiscuous mode [ 449.996009][ T3742] Bluetooth: hci2: command 0x041b tx timeout [ 450.008852][T10476] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.037872][T10476] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.067150][T10476] device bridge_slave_1 entered promiscuous mode [ 450.208003][T10476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.242806][T10476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.283276][T10439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 450.340304][T10439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 450.373294][T10476] team0: Port device team_slave_0 added [ 450.398527][T10439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 450.432079][T10476] team0: Port device team_slave_1 added [ 450.445553][T10439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 450.599145][T10476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.606568][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.643138][T10476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.690550][T10476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.723655][T10476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.754083][T10476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.876122][ T3742] Bluetooth: hci1: command 0x0409 tx timeout [ 450.886302][T10476] device hsr_slave_0 entered promiscuous mode [ 450.893839][T10476] device hsr_slave_1 entered promiscuous mode [ 450.901124][T10476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.909034][T10476] Cannot create hsr debugfs directory [ 450.939396][T10439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.978564][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.987391][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 451.003987][T10439] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.038400][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 451.048183][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 451.057448][ T3742] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.064634][ T3742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.073326][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 451.082769][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 451.091895][ T3742] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.099023][ T3742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.157806][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 451.175405][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 451.185224][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 451.217622][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 451.245321][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 451.284909][T10516] loop3: detected capacity change from 0 to 1024 [ 451.297052][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 451.351931][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 451.387275][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 451.404971][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 451.429327][T10516] EXT4-fs (loop3): Test dummy encryption mode enabled [ 451.438639][T10516] EXT4-fs (loop3): Ignoring removed orlov option [ 451.456383][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 451.486530][T10516] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 451.506326][T10518] netlink: 'syz.2.1938': attribute type 7 has an invalid length. [ 451.569173][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 451.585280][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 451.631097][T10439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.662324][T10476] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.738848][T10476] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.834883][T10476] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.882054][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.891785][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.905263][T10439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.948826][T10476] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.079254][ T3741] Bluetooth: hci2: command 0x040f tx timeout [ 452.138544][ T810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.145437][T10534] loop3: detected capacity change from 0 to 132 [ 452.224589][ T810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.294138][T10532] loop2: detected capacity change from 0 to 4096 [ 452.303520][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.313493][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.359767][ T810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.430339][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 452.440206][ T26] audit: type=1800 audit(1719915573.964:460): pid=10532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1939" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 452.447982][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.500927][T10536] loop3: detected capacity change from 0 to 2048 [ 452.515560][T10439] device veth0_vlan entered promiscuous mode [ 452.523167][ T26] audit: type=1804 audit(1719915573.994:461): pid=10532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1939" name="/newroot/200/file0/file1" dev="loop2" ino=30 res=1 errno=0 [ 452.553351][ T810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.584633][T10536] Alternate GPT is invalid, using primary GPT. [ 452.596094][T10536] loop3: p1 p2 p3 [ 452.596575][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.613005][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 452.632706][T10439] device veth1_vlan entered promiscuous mode [ 452.785291][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 452.794707][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 452.805221][T10439] device veth0_macvtap entered promiscuous mode [ 452.877503][T10439] device veth1_macvtap entered promiscuous mode [ 452.908075][T10476] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 452.955930][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.965877][ T4912] Bluetooth: hci1: command 0x041b tx timeout [ 452.995787][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.005723][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.090676][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.145326][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.175960][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.195818][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.215792][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.255826][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.267330][T10546] loop2: detected capacity change from 0 to 4096 [ 453.280589][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.319523][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.333274][T10546] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 453.349766][T10546] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 453.355786][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.372493][T10546] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 453.386176][T10546] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 453.406976][T10546] ntfs: volume version 3.1. [ 453.411691][T10546] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 453.413155][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.449366][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.479728][T10439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.487238][T10476] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.488808][T10546] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 453.517883][T10546] ntfs: (device loop2): ntfs_check_logfile(): Error mapping $LogFile page (index 0). [ 453.528303][T10546] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 453.550585][T10476] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.630651][T10476] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.678589][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 453.688941][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 453.700159][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.709505][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.721681][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.735516][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.773974][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.784941][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.795241][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.806762][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.817049][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.827687][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.839763][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.850733][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.860769][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.872051][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.882095][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.892654][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.903130][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.913883][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.924310][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.935174][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.948998][T10439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.049688][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 454.059123][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 454.075105][T10439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.083992][T10439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.092843][T10439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.102546][T10439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.165906][ T4912] Bluetooth: hci2: command 0x0419 tx timeout [ 454.406549][ T9859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.423528][ T9859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.528578][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 454.589608][ T3627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.592593][T10476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.607691][ T3627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.618192][T10570] loop3: detected capacity change from 0 to 256 [ 454.649007][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.683564][T10476] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.734693][T10570] FAT-fs (loop3): Directory bread(block 64) failed [ 454.741957][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 454.757167][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 454.775056][T10570] FAT-fs (loop3): Directory bread(block 65) failed [ 454.784083][T10570] FAT-fs (loop3): Directory bread(block 66) failed [ 454.803305][T10570] FAT-fs (loop3): Directory bread(block 67) failed [ 454.817790][T10570] FAT-fs (loop3): Directory bread(block 68) failed [ 454.829307][T10570] FAT-fs (loop3): Directory bread(block 69) failed [ 454.846200][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 454.855572][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 454.864517][T10570] FAT-fs (loop3): Directory bread(block 70) failed [ 454.871310][T10570] FAT-fs (loop3): Directory bread(block 71) failed [ 454.879054][ T4912] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.886298][ T4912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.895154][T10570] FAT-fs (loop3): Directory bread(block 72) failed [ 454.901826][T10570] FAT-fs (loop3): Directory bread(block 73) failed [ 454.908955][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 454.926530][ T4912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 454.945362][ T4912] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.952533][ T4912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.989167][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 454.998152][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 455.026481][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 455.046226][T10570] attempt to access beyond end of device [ 455.046226][T10570] loop3: rw=2049, want=1228, limit=256 [ 455.058218][ T4912] Bluetooth: hci1: command 0x040f tx timeout [ 455.076306][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 455.089009][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 455.099000][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 455.109892][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 455.119109][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 455.127955][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.202288][T10476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.232282][T10476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 455.241083][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 455.250276][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 455.260495][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.498194][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 455.511982][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 455.553775][T10476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.578750][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 455.589691][ T4004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.661792][T10476] device veth0_vlan entered promiscuous mode [ 455.671409][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 455.697082][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.732778][T10476] device veth1_vlan entered promiscuous mode [ 455.860488][T10604] loop2: detected capacity change from 0 to 512 [ 455.876857][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.885320][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.923989][ T3248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 455.944315][T10598] netlink: 'syz.3.1947': attribute type 7 has an invalid length. [ 456.060521][T10476] device veth0_macvtap entered promiscuous mode [ 456.078826][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.089972][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.097088][T10606] loop4: detected capacity change from 0 to 4096 [ 456.109582][T10604] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 456.143222][T10604] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038 (0x7fffffff) [ 456.144994][T10476] device veth1_macvtap entered promiscuous mode [ 456.174180][T10604] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz.2.1948: corrupted inode contents [ 456.180544][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 456.197066][ T3917] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.267307][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.275249][T10604] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #2: comm syz.2.1948: mark_inode_dirty error [ 456.304228][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.316244][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.329280][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.339639][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.351405][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.360989][T10604] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz.2.1948: corrupted inode contents [ 456.362711][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.406695][T10604] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1948: mark_inode_dirty error [ 456.434911][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.445957][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.458007][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.468319][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.479943][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.490823][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.503478][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.514713][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 456.536176][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.564880][T10604] input: syz0 as /devices/virtual/input/input16 [ 456.584431][T10476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.616650][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.637762][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.668795][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.693546][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.710078][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.721107][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.731207][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.741714][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.751694][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.762546][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.772441][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.782950][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.792830][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.803982][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.814388][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.826355][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.836440][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.846911][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.856833][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.867425][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.878131][T10476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.888650][T10476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.900694][T10476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.958834][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.986782][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.000862][T10476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.045897][T10476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.066027][T10476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.074850][T10476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.116270][ T4374] Bluetooth: hci1: command 0x0419 tx timeout [ 457.327728][T10626] loop2: detected capacity change from 0 to 8 [ 457.356024][ T4374] Bluetooth: hci0: command 0x0406 tx timeout [ 457.378923][T10626] SQUASHFS error: Failed to read block 0x62: -5 [ 457.385541][T10626] squashfs image failed sanity check [ 457.465860][ T3739] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 457.513055][ T810] device hsr_slave_0 left promiscuous mode [ 457.541486][ T810] device hsr_slave_1 left promiscuous mode [ 457.549131][ T810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.557382][ T810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.569349][ T810] device bridge_slave_1 left promiscuous mode [ 457.585942][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.594980][ T810] device bridge_slave_0 left promiscuous mode [ 457.618121][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.646884][ T810] device hsr_slave_0 left promiscuous mode [ 457.662484][ T810] device hsr_slave_1 left promiscuous mode [ 457.676963][ T810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.684500][ T810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.695625][ T810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.703604][ T810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.717351][ T810] device bridge_slave_1 left promiscuous mode [ 457.723670][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.739070][ T810] device bridge_slave_0 left promiscuous mode [ 457.745351][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.761567][ T810] device hsr_slave_0 left promiscuous mode [ 457.768648][ T810] device hsr_slave_1 left promiscuous mode [ 457.775260][ T810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.783807][ T810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.794348][ T810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.802976][ T810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.813386][ T810] device bridge_slave_1 left promiscuous mode [ 457.820175][ T810] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.830094][ T810] device bridge_slave_0 left promiscuous mode [ 457.839590][ T810] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.862627][ T810] device veth1_macvtap left promiscuous mode [ 457.869143][ T810] device veth0_macvtap left promiscuous mode [ 457.875207][ T810] device veth1_vlan left promiscuous mode [ 457.881187][ T810] device veth0_vlan left promiscuous mode [ 457.890146][ T810] device veth1_macvtap left promiscuous mode [ 457.896692][ T810] device veth0_macvtap left promiscuous mode [ 457.902954][ T810] device veth1_vlan left promiscuous mode [ 457.909224][ T810] device veth0_vlan left promiscuous mode [ 457.919982][ T810] device veth1_macvtap left promiscuous mode [ 457.929544][ T810] device veth0_macvtap left promiscuous mode [ 457.936189][ T810] device veth1_vlan left promiscuous mode [ 457.942016][ T810] device veth0_vlan left promiscuous mode [ 457.996546][ T3739] usb 4-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=a1.c0 [ 458.012076][ T3739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.021797][ T3739] usb 4-1: Product: syz [ 458.026537][ T3739] usb 4-1: Manufacturer: syz [ 458.031307][ T3739] usb 4-1: SerialNumber: syz [ 458.046706][ T3739] usb 4-1: config 0 descriptor?? [ 458.306144][ T3739] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in warm state. [ 458.340666][ T3739] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 458.366835][ T3739] dvbdev: DVB: registering new adapter (AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)) [ 458.376892][ T3739] usb 4-1: media controller created [ 458.399648][ T3739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.558102][ T810] team0 (unregistering): Port device team_slave_1 removed [ 458.579807][ T810] team0 (unregistering): Port device team_slave_0 removed [ 458.595224][ T810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.613305][ T810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.719758][ T810] bond0 (unregistering): Released all slaves [ 458.974247][ T810] team0 (unregistering): Port device team_slave_1 removed [ 458.975995][ T3739] az6027: usb out operation failed. (-71) [ 458.995365][ T810] team0 (unregistering): Port device team_slave_0 removed [ 458.999831][ T3739] stb0899_attach: Driver disabled by Kconfig [ 459.014764][ T810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.019250][ T3739] az6027: no front-end attached [ 459.019250][ T3739] [ 459.042638][ T810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.056084][ T3739] az6027: usb out operation failed. (-71) [ 459.063674][ T3739] dvb-usb: no frontend was attached by 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' [ 459.095945][ T3739] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 459.116183][ T4004] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 459.125369][ T3739] dvb-usb: schedule remote query interval to 400 msecs. [ 459.132795][ T3739] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully initialized and connected. [ 459.168934][ T3739] usb 4-1: USB disconnect, device number 16 [ 459.233709][ T810] bond0 (unregistering): Released all slaves [ 459.266818][ T3739] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully deinitialized and disconnected. [ 459.375915][ T4004] usb 5-1: Using ep0 maxpacket: 16 [ 459.497917][ T810] team0 (unregistering): Port device team_slave_1 removed [ 459.506557][ T4004] usb 5-1: config 0 has no interfaces? [ 459.526116][ T810] team0 (unregistering): Port device team_slave_0 removed [ 459.541831][ T810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.566250][ T810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.596620][ T4004] usb 5-1: config 0 has no interfaces? [ 459.671064][ T810] bond0 (unregistering): Released all slaves [ 459.687320][ T4004] usb 5-1: config 0 has no interfaces? [ 459.726217][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.749941][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.771160][ T3914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 459.796663][ T4004] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.817997][ T4004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 459.840149][ T4004] usb 5-1: SerialNumber: syz [ 459.851749][ T4004] usb 5-1: config 0 descriptor?? [ 459.869039][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.879272][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.947947][ T3739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 460.131314][T10645] udc-core: couldn't find an available UDC or it's busy [ 460.138424][T10645] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 460.276256][T10668] loop3: detected capacity change from 0 to 512 [ 460.500360][ T4004] usb 5-1: USB disconnect, device number 15 [ 460.554086][T10668] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 460.596756][T10668] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038 (0x7fffffff) [ 460.672716][T10668] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz.3.1959: corrupted inode contents [ 460.697446][T10668] EXT4-fs error (device loop3): ext4_dirty_inode:5993: inode #2: comm syz.3.1959: mark_inode_dirty error [ 460.746515][T10668] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz.3.1959: corrupted inode contents [ 460.803100][T10668] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.1959: mark_inode_dirty error [ 460.969427][T10668] input: syz0 as /devices/virtual/input/input18 [ 461.921755][T10709] netlink: 'syz.4.1963': attribute type 2 has an invalid length. [ 462.055147][T10713] loop0: detected capacity change from 0 to 8 [ 462.171592][T10713] SQUASHFS error: Failed to read block 0x62: -5 [ 462.191425][T10718] loop4: detected capacity change from 0 to 132 [ 462.198348][T10713] squashfs image failed sanity check [ 462.552411][T10723] loop4: detected capacity change from 0 to 2048 [ 462.639064][T10723] Alternate GPT is invalid, using primary GPT. [ 462.661290][T10723] loop4: p1 p2 p3 [ 464.115997][ T3739] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 464.806370][ T3739] usb 3-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=a1.c0 [ 464.945952][ T3739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.995089][ T3739] usb 3-1: Product: syz [ 465.025606][ T3739] usb 3-1: Manufacturer: syz [ 465.045916][ T3739] usb 3-1: SerialNumber: syz [ 465.096416][ T3739] usb 3-1: config 0 descriptor?? [ 465.396010][ T3739] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in warm state. [ 465.436440][ T3739] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 465.476158][ T3739] dvbdev: DVB: registering new adapter (AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)) [ 465.495416][ T3739] usb 3-1: media controller created [ 465.529578][ T3739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.076406][ T3739] az6027: usb out operation failed. (-71) [ 466.082719][ T3739] stb0899_attach: Driver disabled by Kconfig [ 466.099992][ T3739] az6027: no front-end attached [ 466.099992][ T3739] [ 466.132173][ T3739] az6027: usb out operation failed. (-71) [ 466.145884][ T3248] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 466.148458][ T3739] dvb-usb: no frontend was attached by 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' [ 466.167476][ T3739] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 466.210064][ T3739] dvb-usb: schedule remote query interval to 400 msecs. [ 466.217679][ T3739] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully initialized and connected. [ 466.242663][ T3739] usb 3-1: USB disconnect, device number 16 [ 466.331702][ T3739] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully deinitialized and disconnected. [ 466.406181][ T3248] usb 1-1: Using ep0 maxpacket: 16 [ 466.536002][ T3248] usb 1-1: config 0 has no interfaces? [ 466.626164][ T3248] usb 1-1: config 0 has no interfaces? [ 466.716123][ T3248] usb 1-1: config 0 has no interfaces? [ 466.809807][ T3248] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 466.819022][ T3248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 466.827552][ T3248] usb 1-1: SerialNumber: syz [ 466.834099][ T3248] usb 1-1: config 0 descriptor?? [ 467.086196][T10771] udc-core: couldn't find an available UDC or it's busy [ 467.093187][T10771] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 467.170204][ T3739] usb 1-1: USB disconnect, device number 9 [ 467.847417][T10786] loop5: detected capacity change from 0 to 524288000 [ 467.867206][T10787] loop3: detected capacity change from 0 to 132 [ 467.876376][T10783] loop0: detected capacity change from 0 to 8 [ 467.923663][T10783] SQUASHFS error: Failed to read block 0x62: -5 [ 467.935707][T10783] squashfs image failed sanity check [ 469.048210][T10797] loop3: detected capacity change from 0 to 2048 [ 469.124441][ T5343] Alternate GPT is invalid, using primary GPT. [ 469.143490][ T5343] loop3: p1 p2 p3 [ 469.169182][T10797] Alternate GPT is invalid, using primary GPT. [ 469.175552][T10797] loop3: p1 p2 p3 [ 469.867782][T10803] loop0: detected capacity change from 0 to 512 [ 469.946141][T10803] FAT-fs (loop0): bogus sectors per cluster 69 [ 469.960143][T10803] FAT-fs (loop0): Can't find a valid FAT filesystem [ 470.196070][ T3248] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 470.256184][ T3741] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 470.506050][ T3741] usb 4-1: Using ep0 maxpacket: 16 [ 470.626237][ T3741] usb 4-1: config 0 has no interfaces? [ 470.707015][ T3741] usb 4-1: config 0 has no interfaces? [ 470.766147][ T3248] usb 5-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice=a1.c0 [ 470.775442][ T3248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.783885][ T3248] usb 5-1: Product: syz [ 470.786029][ T3741] usb 4-1: config 0 has no interfaces? [ 470.788623][ T3248] usb 5-1: Manufacturer: syz [ 470.799171][ T3248] usb 5-1: SerialNumber: syz [ 470.806072][ T3248] usb 5-1: config 0 descriptor?? [ 470.866088][ T3741] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.875150][ T3741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.889824][ T3741] usb 4-1: SerialNumber: syz [ 470.898883][ T3741] usb 4-1: config 0 descriptor?? [ 471.066112][ T3248] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in warm state. [ 471.082175][ T3248] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.116207][ T3248] dvbdev: DVB: registering new adapter (AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)) [ 471.124993][ T3248] usb 5-1: media controller created [ 471.145480][ T3248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.168427][T10815] udc-core: couldn't find an available UDC or it's busy [ 471.182298][T10815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 471.307478][ T3739] usb 4-1: USB disconnect, device number 17 [ 471.746085][ T3248] az6027: usb out operation failed. (-71) [ 471.752305][ T3248] stb0899_attach: Driver disabled by Kconfig [ 471.763294][ T3248] az6027: no front-end attached [ 471.763294][ T3248] [ 471.789788][ T3248] az6027: usb out operation failed. (-71) [ 471.796857][ T3248] dvb-usb: no frontend was attached by 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' [ 471.809266][ T3248] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 471.824909][ T3248] dvb-usb: schedule remote query interval to 400 msecs. [ 471.832271][ T3248] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully initialized and connected. [ 471.846125][ T3248] usb 5-1: USB disconnect, device number 16 [ 471.921423][ T3248] dvb-usb: AZUREWAVE DVB-S/S2 USB2.0 (AZ6027) successfully deinitialized and disconnected. [ 472.010321][T10836] loop0: detected capacity change from 0 to 512 [ 472.093358][T10842] loop2: detected capacity change from 0 to 512 [ 472.165431][T10842] EXT4-fs (loop2): Unrecognized mount option "uid>00000000000000000000" or missing value [ 472.207001][T10836] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 472.218924][T10836] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 472.255072][T10836] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz.0.1989: corrupted inode contents [ 472.267871][T10836] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #2: comm syz.0.1989: mark_inode_dirty error [ 472.280841][T10836] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz.0.1989: corrupted inode contents [ 472.306437][T10836] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1989: mark_inode_dirty error [ 472.413142][T10842] loop2: detected capacity change from 0 to 2048 [ 472.474447][T10836] input: syz0 as /devices/virtual/input/input21 [ 472.485492][T10842] loop2: p3 < > p4 < > [ 472.491329][T10842] loop2: partition table partially beyond EOD, truncated [ 472.510065][T10842] loop2: p3 start 4284289 is beyond EOD, truncated [ 474.199373][T10869] loop3: detected capacity change from 0 to 132 remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=1 req=1925 state=1 status=1 (errno 9: Bad file descriptor)