last executing test programs: 2m22.593494934s ago: executing program 1 (id=2): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$evdev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b000000000002f9078ac1e0001e00000012001880b009c90780100000000000000dbdd9ede7e2313a7"], 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050700000074bb6bcd0000004000000041800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) syz_open_procfs$pagemap(r0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000cc0)}, 0x20) syz_emit_ethernet(0x86, &(0x7f0000000a00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200503afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000000000000000000000000000000751689206c05602c38ea65a59a8d20cf10f4721a02aeae8ba6124599c49203dbc02733cd0d0698f44cdbd3f5d84ad37b5e7af38b258d90d4495f457cc32a88f44c2da18617afbbcd9dab796ca518b8b13841fd947bb1cc1efcf5aaa8c9fa9f7a08f99dbbf8fccae89084ca659132e9578d2c52adfe71c200e"], 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x48, 0x3, 0x0, @loopback, @dev={0xfe, 0x80, '\x00', 0x41}, 0x0, 0x20, 0x7, 0x2}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r5, 0x25, 0x13, @val=@iter={&(0x7f0000000180)=@map_fd=r4, 0x10}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="6ce0cb000000000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000004800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000f90400000000000000fef304f3e2911186874fd800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m21.52971866s ago: executing program 1 (id=7): socket$inet6(0xa, 0x3, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x0, 0x0, 0x7}], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2m21.321727341s ago: executing program 1 (id=8): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000000a40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d302c6572726f72733d636f6e74696e75652c636f6465706167653d313235302c696f636861727365743d63703835322c726f6469722c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c00985adbd740e1c790e7083ad02fee0ad529daf9e562d3405a2988eab245fa5f455bc816d402a2a54f5fb02a30797a22886d1d6440bf7b7afff567fb08aada85ef1e1835786474a63f065f0266834aa60f9151b2df00700a3d77535690f5649e2016273a214d940af1f159a4fbece96f1e52f9e4c01c40663f9fa3f585f4ff39c26a7162d18e0c39204002aab2ad4f3c4e0b96abc67828a01fdcebfa"], 0x1, 0x2aa, &(0x7f0000000780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000010140)={0x2020}, 0x2036) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0xc04, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno']) rename(&(0x7f0000006840)='./file1\x00', &(0x7f0000006640)='./file0/file0\x00') 2m18.576495877s ago: executing program 1 (id=10): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) fallocate(r0, 0x3, 0x5000000, 0x8000c62) 2m14.69982246s ago: executing program 1 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffa84, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0c40, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4517, &(0x7f0000000d40), 0x12, 0x4b3, &(0x7f0000001b00)="$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") 2m10.834388413s ago: executing program 1 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 2m10.596756944s ago: executing program 32 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 1m49.285657279s ago: executing program 2 (id=84): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f0000000740)='./file0/../file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a7c9a640115d99d981b3886420589c6695d4982a83b7906769e737201a3fb7a7804454156569cb03a5be811debc957b5831b89b59d703e74a37c00", 0x25}, 0x48, 0xfffffffffffffffd) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) 1m47.992231456s ago: executing program 2 (id=86): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000001d80)='./file0\x00', 0x400, &(0x7f0000001dc0)={[{@shortname_winnt}, {@numtail}, {@fat=@check_strict}, {@fat=@discard}, {@utf8}, {@fat=@nfs}, {@shortname_win95}, {@shortname_lower}, {@utf8}]}, 0xfd, 0x2a0, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 1m47.36009773s ago: executing program 2 (id=87): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1m47.178086521s ago: executing program 2 (id=89): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) fallocate(r0, 0x3, 0x5000000, 0x8000c62) 1m46.038157378s ago: executing program 2 (id=93): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008002, &(0x7f0000000d40)={[{@grpquota}, {@delalloc}, {@resuid}, {@errors_remount}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x118823, 0x0) 1m45.468863161s ago: executing program 4 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}, 0x1, 0xba01}, 0x0) 1m45.173121223s ago: executing program 4 (id=99): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) 1m44.989924684s ago: executing program 4 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x3}, [], {0x4, 0x3}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x24, 0x1) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x112) setpgid(r0, r0) 1m43.446326893s ago: executing program 4 (id=103): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQuFWp26AmSLSqICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckGMLDG05ckYldE/B4Ro7VsY4Hx2j83ly/P/r18eTaJSuXNv5JquRvLl2fzovn7duaZoYjCp0kcaFHvwsVLaYnShSw/uXjuvcmFi5eePXNu5nTpdOn89IkTx45OPX98+rmexJnGdWP/h/MH97369tXXZ09efefnb5M8/qY4emS808HHK5UeV9dfu+vSyVAfG0JXirVuGsPV/j8axVg9eaPxyid9bRywqSqVSuW+9oeXKsBdLIl+twDoj/yHPp3/5tsWDT3uCNdfrE2A0rhvZlvtyFAUsjLDTfPbXhqPiJNL/3yVbrE59yEAABp8n45/nmk1/itE/X2h/2drKGMRcU9E7ImI4xGxNyLujaiWvT8iHuiy/uZFkrXjn8K1DQW2Tun474Vsbatx/JeP/mKsmOV2V+MfTk6dKZeOZJ/J4RjeluanOtTxw8u/fd7uWP34L93S+vOxYNaOa0PbGt8zN7M4czsx17v+ccT+oVbxJysrAUlE7IuI/Rus48xT3xxsd+zW8XfQg3WmytcRT9TO/1I0xZ9LOq9PTv4vyqUjk/lVsdYvv155o139txV/D6Tnf0fL638l/rGktl57dqZcLl1Y6OZ///LJ9PXKH5+1ndNs9PofSd5q2PfBzOLihamIkeS1WqPr9083lZteLZ/Gf/hQ6/6/J1Y/iQMRkV7ED0bEQxHxcNb2RyLi0Yg41OFT+Omlx97dePybK41/rqvzv5oYieY9rRPFsz9+11DpWDfxp+f/WDV1ONuznu+/9bSr26sZAAAA/qsKEbErksLESrpQmJio/Q3/3thRKM8vLD59av7983O1ZwTGYriQ3+karbsfOpVN6/P8dFP+aHbf+Ivi9mp+Yna+PNfv4GHA7WzT/1N/FvvdOmDTeV4LBpf+D4NL/4fBpf/D4GrR/7f3ox3A1mv1+/9RH9oBbL2m/m/ZDwaI+T8Mro30f98ZcHfo2JdHtq4dwJZa2B63fkheQmJNIgp3RDMkNinR728mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vg3AAD//5US5f8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) fallocate(r0, 0x3, 0x5000000, 0x8000c62) 1m42.185790101s ago: executing program 2 (id=107): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)) rmdir(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000240)={[{@nobh}, {@stripe={'stripe', 0x3d, 0x10000}}, {@dioread_nolock}]}, 0x1, 0x3f0, &(0x7f00000008c0)="$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") sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x2404c801, &(0x7f0000000040)={0xa, 0x4e22, 0x200003, @loopback, 0xfffffff7}, 0x21) unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x218, 0x0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2], 0x7ffffffd, 0x7f}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x118, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote}, @in=@multicast1}, [@address_filter={0x28, 0x1a, {@in=@local, @in=@dev, 0x0, 0x0, 0xee}}]}, 0x118}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) recvmmsg(r3, &(0x7f0000006ec0)=[{{&(0x7f0000000480)=@xdp, 0x80, 0x0}, 0x4}, {{&(0x7f0000002e40)=@hci, 0x80, &(0x7f0000006100)}, 0x101}, {{&(0x7f0000006180)=@generic, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006200)=""/252, 0xfc}, {&(0x7f0000006300)=""/232, 0xe8}, {&(0x7f0000006580)=""/47, 0x2f}], 0x3}, 0x800}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000006ac0)}, {&(0x7f0000006b00)=""/78, 0x4e}, {&(0x7f0000003f40)=""/108, 0x6c}, {&(0x7f0000006c00)=""/173, 0xad}, {&(0x7f0000006cc0)=""/188, 0xbc}, {0x0}], 0x6, &(0x7f0000006e80)=""/53, 0x35}, 0xfff}], 0x5, 0x10000, &(0x7f0000007000)) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007140)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4004004}, 0x0) unshare(0x40000000) 1m41.974521812s ago: executing program 33 (id=107): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)) rmdir(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x0, &(0x7f0000000240)={[{@nobh}, {@stripe={'stripe', 0x3d, 0x10000}}, {@dioread_nolock}]}, 0x1, 0x3f0, &(0x7f00000008c0)="$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") sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x2404c801, &(0x7f0000000040)={0xa, 0x4e22, 0x200003, @loopback, 0xfffffff7}, 0x21) unshare(0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, '\x00', 0x35}, 0x7}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x218, 0x0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2], 0x7ffffffd, 0x7f}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newsa={0x118, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote}, @in=@multicast1}, [@address_filter={0x28, 0x1a, {@in=@local, @in=@dev, 0x0, 0x0, 0xee}}]}, 0x118}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) recvmmsg(r3, &(0x7f0000006ec0)=[{{&(0x7f0000000480)=@xdp, 0x80, 0x0}, 0x4}, {{&(0x7f0000002e40)=@hci, 0x80, &(0x7f0000006100)}, 0x101}, {{&(0x7f0000006180)=@generic, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006200)=""/252, 0xfc}, {&(0x7f0000006300)=""/232, 0xe8}, {&(0x7f0000006580)=""/47, 0x2f}], 0x3}, 0x800}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000006e00)=[{&(0x7f0000006ac0)}, {&(0x7f0000006b00)=""/78, 0x4e}, {&(0x7f0000003f40)=""/108, 0x6c}, {&(0x7f0000006c00)=""/173, 0xad}, {&(0x7f0000006cc0)=""/188, 0xbc}, {0x0}], 0x6, &(0x7f0000006e80)=""/53, 0x35}, 0xfff}], 0x5, 0x10000, &(0x7f0000007000)) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000007200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000007140)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4004004}, 0x0) unshare(0x40000000) 1m41.704864044s ago: executing program 4 (id=110): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000000400"/16, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48}, 0x1, 0x0, 0x0, 0x20009810}, 0x0) 1m38.8771077s ago: executing program 4 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 1m38.353524563s ago: executing program 34 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 1m3.928622234s ago: executing program 0 (id=196): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) read$rfkill(r4, 0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004) 1m2.814619831s ago: executing program 0 (id=197): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x34, 0x0, 0x2}]}) 1m2.578255052s ago: executing program 0 (id=198): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x44, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x36, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000001840)=""/4082, 0xff2) 1m1.547630289s ago: executing program 0 (id=202): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000640)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug}, {@lazytime}, {@nombcache}, {@jqfmt_vfsv1}]}, 0x3, 0x443, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) fallocate(r0, 0x3, 0x5000000, 0x8000c62) 1m0.826430393s ago: executing program 0 (id=205): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m0.280178836s ago: executing program 0 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.924109428s ago: executing program 35 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.858048832s ago: executing program 7 (id=349): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) mlock2(&(0x7f0000a1b000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000480)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@nodiscard}, {@dax_inode}, {@init_itable}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x80000001}}, {@nombcache}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e4, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) getpid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b48090987f70e06d038e7ff7fc6e5539b0d46078b089b37073b6d090890e0878f0e1ac6e7049b334d959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e809ea88008000000000000027b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1dbdb230ae1fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b3804000000bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f6e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f000800080000000000002420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b25361b665a8c97447a3c6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f304b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8cf7d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad15a3a504767b6b45a45957f24d758ed024b3849c1137e2a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eb81f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe7b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a39988b8658a20878b7c1dd7ba02fc42939dde7d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88d0466d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a028ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7bac7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068eb38067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3f0600faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 14.253153755s ago: executing program 6 (id=352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 14.034895527s ago: executing program 6 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000200)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000280)=0x100000000000000, 0x12) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, 0x0) r11 = syz_open_dev$usbfs(0x0, 0xfffffffffffffffe, 0x204001) ioctl$USBDEVFS_RELEASEINTERFACE(r11, 0x80045510, &(0x7f0000000100)=0x3) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r12, &(0x7f0000000000)=0x700, 0x12) 13.207885992s ago: executing program 7 (id=354): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.933763009s ago: executing program 7 (id=358): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x6, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000000)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffd}, 0x48, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r7, r5, 0x0, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e697f90be6d623ceb0eb4912f9f6a31854ec980700000000000000f0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffc}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) 11.836197539s ago: executing program 6 (id=360): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000037"], 0x48}}, 0x0) 9.797854512s ago: executing program 7 (id=364): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000526f97df", @ANYRESOCT], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNGETDEVNETNS(r3, 0x8982, 0x20000500) 9.276729515s ago: executing program 3 (id=367): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000001840)=""/4082, 0xff2) 9.026464726s ago: executing program 7 (id=368): mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) 8.086060751s ago: executing program 3 (id=369): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[], 0x20}}, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) io_setup(0x3fe, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)=' ', 0x3fffff}]) 7.706849184s ago: executing program 7 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000200)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000280)=0x100000000000000, 0x12) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x12, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, 0x0) r11 = syz_open_dev$usbfs(0x0, 0xfffffffffffffffe, 0x204001) ioctl$USBDEVFS_RELEASEINTERFACE(r11, 0x80045510, &(0x7f0000000100)=0x3) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r12, &(0x7f0000000000)=0x700, 0x12) 6.755031029s ago: executing program 8 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000100)="014f768e9a098a1d1041c7ef60da", 0xe}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x4905, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x21, r7, 0x202, &(0x7f0000000000)={0x0}) 6.71581106s ago: executing program 6 (id=373): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) io_setup(0xffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f00000003c0)) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0xc4c03d12, &(0x7f0000000140)={0x3664, 0x9}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000012c0)=ANY=[], 0x110) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/8, 0x8}], 0x1, 0x5c, 0x2) socket$inet6(0xa, 0x1, 0x0) 6.145721323s ago: executing program 3 (id=374): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x6, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000000)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffd}, 0x48, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r7, r5, 0x0, 0x0) r8 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e697f90be6d623ceb0eb4912f9f6a31854ec980700000000000000f0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffc}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r8, r8, 0x0, 0x0) 5.878440205s ago: executing program 5 (id=375): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 5.823761565s ago: executing program 8 (id=376): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x1, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b00)={r0, &(0x7f0000001a40), 0x0}, 0x20) 5.500594687s ago: executing program 8 (id=377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x3}, [], {0x4, 0x3}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x24, 0x1) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x112) setpgid(r0, r0) 4.878300711s ago: executing program 5 (id=378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) unlink(&(0x7f00000007c0)='./cgroup\x00') 4.720165692s ago: executing program 8 (id=379): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = open(0x0, 0x147842, 0x184) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf25, @void, @value}, 0x94) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 4.719792402s ago: executing program 3 (id=380): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f0000001840)=""/4082, 0xff2) 4.087356635s ago: executing program 5 (id=381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 4.026303486s ago: executing program 6 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000100)="014f768e9a098a1d1041c7ef60da", 0xe}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x4905, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x21, r7, 0x202, &(0x7f0000000000)={0x0}) 3.24842797s ago: executing program 3 (id=383): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000037"], 0x48}}, 0x0) 2.954812352s ago: executing program 5 (id=384): sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) munmap(&(0x7f00007fe000/0x800000)=nil, 0x800000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003540)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0xa}}]}, 0x40}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) 2.893872163s ago: executing program 6 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000480)={[{@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@nodiscard}, {@dax_inode}, {@init_itable}, {@delalloc}, {@barrier_val={'barrier', 0x3d, 0x80000001}}, {@nombcache}, {@delalloc}, {@usrquota}]}, 0x10, 0x4e4, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) getpid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) r5 = dup(r1) write$UHID_INPUT(r5, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 2.841917503s ago: executing program 8 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000100)="014f768e9a098a1d1041c7ef60da", 0xe}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x4905, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x21, r7, 0x202, &(0x7f0000000000)={0x0}) 737.159906ms ago: executing program 3 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) syz_clone(0x24001100, 0x0, 0x0, 0x0, 0x0, 0x0) 692.533796ms ago: executing program 5 (id=388): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x6, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 651.175587ms ago: executing program 5 (id=389): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1316b694, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 8 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='sched_switch\x00', r4}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {0x1, 0x3}, [], {0x4, 0x3}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x24, 0x1) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x112) setpgid(r0, r0) kernel console output (not intermixed with test programs): 081 - 0 [ 57.126225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.138968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.147625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.156584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.164839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.186473][ T4169] device veth0_vlan entered promiscuous mode [ 57.212408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.220815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.237611][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.251009][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.263137][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.273942][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.286027][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.311696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.322649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.337247][ T4169] device veth1_vlan entered promiscuous mode [ 57.366857][ T4175] device veth0_macvtap entered promiscuous mode [ 57.374533][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.386314][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.396179][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.406634][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.418964][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.433108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.443439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.452259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.461609][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.470907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.487427][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.487986][ T4175] device veth1_macvtap entered promiscuous mode [ 57.495946][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.510789][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.522006][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.530962][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.540544][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.569468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.578135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.616827][ T4169] device veth0_macvtap entered promiscuous mode [ 57.623881][ T1241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.627827][ T4169] device veth1_macvtap entered promiscuous mode [ 57.642799][ T1241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.647845][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.662800][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.673459][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.685922][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.696147][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.706742][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.718025][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.725997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.733784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.743090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.752518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.761116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.769990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.820628][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.831168][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.841713][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.852631][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.862762][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.874270][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.885579][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.893007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.902227][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.911239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.929814][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.941041][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.951537][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.961996][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.972582][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.983402][ T4214] Bluetooth: hci2: command 0x040f tx timeout [ 57.988939][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.989540][ T4214] Bluetooth: hci3: command 0x040f tx timeout [ 58.005050][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.005625][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 58.021784][ T4214] Bluetooth: hci1: command 0x040f tx timeout [ 58.023452][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.027925][ T4214] Bluetooth: hci0: command 0x040f tx timeout [ 58.039680][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.053347][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.064597][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.065832][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.082221][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.091599][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.100602][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.117439][ T1241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.127994][ T1241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.139877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.151984][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.161526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.170085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.179860][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.190569][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.200811][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.212632][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.223958][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.236007][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.245851][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.256349][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.268082][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.310240][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.324869][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.333636][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.342903][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.356308][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.365548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.424683][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.432730][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.491139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.710248][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.734307][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.464324][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.583142][ T578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.584149][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.601406][ T578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.631197][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.649782][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.658665][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.664539][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.684894][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.710103][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.774470][ T4270] loop1: detected capacity change from 0 to 256 [ 60.049813][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.154469][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.183931][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 60.190183][ T4214] Bluetooth: hci1: command 0x0419 tx timeout [ 60.221126][ T4214] Bluetooth: hci4: command 0x0419 tx timeout [ 60.228480][ T4214] Bluetooth: hci3: command 0x0419 tx timeout [ 60.243493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.251252][ T4214] Bluetooth: hci2: command 0x0419 tx timeout [ 60.864507][ T4326] loop0: detected capacity change from 0 to 128 [ 62.484201][ C0] sched: RT throttling activated [ 63.347194][ T4336] loop1: detected capacity change from 0 to 512 [ 63.410365][ T4338] loop2: detected capacity change from 0 to 16 [ 63.824035][ T4342] loop4: detected capacity change from 0 to 512 [ 64.586665][ T4336] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.605271][ T4338] erofs: (device loop2): mounted with root inode @ nid 36. [ 64.641738][ T4336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.668364][ T26] audit: type=1800 audit(1733175665.461:2): pid=4338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 64.818992][ T4336] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 64.831990][ T4336] System zones: 1-12 [ 64.839671][ T4352] loop2: detected capacity change from 0 to 256 [ 64.857734][ T4342] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 64.880048][ T4342] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.449662][ T4157] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.531180][ T4336] EXT4-fs (loop1): 1 truncate cleaned up [ 65.538364][ T4336] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 65.629902][ T26] audit: type=1800 audit(1733175666.421:3): pid=4342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 65.774430][ T4157] usb 4-1: Using ep0 maxpacket: 8 [ 65.861885][ T26] audit: type=1326 audit(1733175666.651:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc561bb3f19 code=0x7ffc0000 [ 65.879098][ T4358] loop2: detected capacity change from 0 to 256 [ 65.886559][ T4336] EXT4-fs error (device loop1): ext4_discard_preallocations:5123: comm syz.1.10: Error -117 loading buddy information for 4294757492 [ 65.901132][ T4360] loop0: detected capacity change from 0 to 256 [ 65.908658][ T26] audit: type=1326 audit(1733175666.651:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc561bb3f19 code=0x7ffc0000 [ 65.941046][ T4336] EXT4-fs error (device loop1): __ext4_get_inode_loc:4320: comm syz.1.10: Invalid inode table block 1921340072 in block_group 0 [ 65.958244][ T26] audit: type=1326 audit(1733175666.651:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc561bb3f19 code=0x7ffc0000 [ 65.965369][ T4358] ======================================================= [ 65.965369][ T4358] WARNING: The mand mount option has been deprecated and [ 65.965369][ T4358] and is ignored by this kernel. Remove the mand [ 65.965369][ T4358] option from the mount to silence this warning. [ 65.965369][ T4358] ======================================================= [ 65.982129][ T26] audit: type=1326 audit(1733175666.651:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc561bb3f19 code=0x7ffc0000 [ 66.022562][ T4358] exfat: Bad value for 'uid' [ 66.050129][ T4360] exfat: Unknown parameter 'keep_last_dots' [ 66.088259][ T26] audit: type=1326 audit(1733175666.651:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc561bb3f19 code=0x7ffc0000 [ 66.115085][ T26] audit: type=1326 audit(1733175666.651:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc561bb3f19 code=0x7ffc0000 [ 66.151903][ T4336] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 66.189580][ T4336] EXT4-fs error (device loop1): ext4_punch_hole:4112: inode #18: comm syz.1.10: mark_inode_dirty error [ 66.221998][ T26] audit: type=1326 audit(1733175666.651:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc561bb3f19 code=0x7ffc0000 [ 66.245844][ T26] audit: type=1326 audit(1733175666.651:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4357 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc561bb3f19 code=0x7ffc0000 [ 66.254702][ T4157] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 66.313070][ T4167] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 66.533467][ T4360] loop0: detected capacity change from 0 to 512 [ 66.588384][ T4157] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 67.037397][ T4157] usb 4-1: Product: syz [ 67.045366][ T4157] usb 4-1: Manufacturer: syz [ 67.049982][ T4157] usb 4-1: SerialNumber: syz [ 67.058809][ T4157] usb 4-1: config 0 descriptor?? [ 67.086950][ T4167] EXT4-fs error (device loop1): __ext4_get_inode_loc:4320: comm syz-executor: Invalid inode table block 1921340072 in block_group 0 [ 67.106545][ T4360] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 67.132113][ T4360] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 67.151273][ T4167] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 67.204176][ T4360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 67.212688][ T4167] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #18: comm syz-executor: mark_inode_dirty error [ 67.273376][ T4360] System zones: 1-12 [ 67.287152][ T4370] loop4: detected capacity change from 0 to 16 [ 67.313957][ T4157] usb 4-1: can't set config #0, error -71 [ 67.324536][ T4157] usb 4-1: USB disconnect, device number 2 [ 67.356184][ T4360] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.18: corrupted in-inode xattr [ 67.378043][ T4248] EXT4-fs error (device loop1): __ext4_get_inode_loc:4320: comm kworker/u4:6: Invalid inode table block 1921340072 in block_group 0 [ 67.378591][ T4370] erofs: Unknown parameter 'õ' [ 67.449831][ T4360] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.18: couldn't read orphan inode 15 (err -117) [ 67.590789][ T4372] loop3: detected capacity change from 0 to 2048 [ 67.924441][ T4372] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.490817][ T4360] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 69.249015][ T4376] xt_TCPMSS: Only works on TCP SYN packets [ 70.129759][ T4385] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.187384][ T4390] loop2: detected capacity change from 0 to 16 [ 70.414609][ T4390] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.427329][ T4390] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 71.170264][ T4390] erofs: (device loop2): z_erofs_lz4_decompress: failed to decompress -3 in[47, 4049] out[1851] [ 71.225124][ T4390] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 71.347982][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.354563][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.376950][ T4398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.28'. [ 71.606048][ T4403] loop3: detected capacity change from 0 to 16 [ 71.783231][ T4410] binder: BINDER_SET_CONTEXT_MGR already set [ 71.789615][ T4410] binder: 4404:4410 ioctl 4018620d 20000040 returned -16 [ 71.810497][ T4403] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 71.948897][ T4413] binder: 4412:4413 ioctl c0306201 20000180 returned -14 [ 72.308479][ T4420] loop3: detected capacity change from 0 to 1024 [ 72.464390][ T4422] loop2: detected capacity change from 0 to 256 [ 72.520410][ T4420] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,errors=remount-ro,. Quota mode: none. [ 72.614555][ T4420] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.717997][ T4430] loop0: detected capacity change from 0 to 1024 [ 72.776904][ T4430] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.872894][ T4401] chnl_net:caif_netlink_parms(): no params data found [ 73.093667][ T4440] capability: warning: `syz.4.41' uses deprecated v2 capabilities in a way that may be insecure [ 73.157356][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.172828][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.183207][ T4401] device bridge_slave_0 entered promiscuous mode [ 73.184395][ T1108] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.192231][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.204368][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.212380][ T4401] device bridge_slave_1 entered promiscuous mode [ 73.240322][ T4401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.253651][ T4401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.292399][ T4401] team0: Port device team_slave_0 added [ 73.307593][ T4401] team0: Port device team_slave_1 added [ 73.372063][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.382345][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.382372][ T4401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.386457][ T4401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.514277][ T4401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.557303][ T4401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.602482][ T4401] device hsr_slave_0 entered promiscuous mode [ 73.619946][ T4401] device hsr_slave_1 entered promiscuous mode [ 73.634501][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.653055][ T4401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.671130][ T4453] xt_hashlimit: size too large, truncated to 1048576 [ 73.674361][ T1108] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 73.678639][ T4401] Cannot create hsr debugfs directory [ 73.733350][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.755480][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 73.782317][ T1108] usb 1-1: config 0 descriptor?? [ 74.114478][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.285742][ T1108] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 74.316944][ T1108] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 74.524852][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.554489][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.573227][ T13] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 74.582845][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.612838][ T13] usb 5-1: config 0 descriptor?? [ 75.096351][ T13] holtek_kbd 0003:04D9:A055.0002: unexpected long global item [ 75.110377][ T13] holtek_kbd: probe of 0003:04D9:A055.0002 failed with error -22 [ 75.319929][ T13] usb 5-1: USB disconnect, device number 2 [ 75.383894][ T1108] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 75.423839][ T4459] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 75.450640][ T4401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.503956][ T4401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.550554][ T4401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.572688][ T4401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.707283][ T1108] usb 1-1: USB disconnect, device number 2 [ 75.832541][ T4172] Bluetooth: hci1: command 0x041b tx timeout [ 76.060984][ T4401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.241861][ T4401] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.274152][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.294490][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.331896][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.348595][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.361392][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.368566][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.392720][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.406671][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.420864][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.428022][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.445478][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.458568][ T1111] cfg80211: failed to load regulatory.db [ 76.734301][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.807781][ T4296] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.860857][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.910945][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.932570][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.968241][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.001869][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.035772][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.065084][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.088027][ T4478] loop4: detected capacity change from 0 to 128 [ 77.146298][ T4296] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.230875][ T4401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.267843][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.356284][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.385594][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.407329][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.114626][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 78.147040][ T4487] loop2: detected capacity change from 0 to 512 [ 78.191804][ T4296] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.266272][ T4487] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.360998][ T4296] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.462105][ T4487] EXT4-fs (loop2): 1 truncate cleaned up [ 78.477776][ T4487] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.606168][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 80.680291][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.729137][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.107489][ T4401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.672791][ T4531] loop2: detected capacity change from 0 to 128 [ 82.719984][ T4527] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 83.874545][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.883264][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.993441][ T4551] loop0: detected capacity change from 0 to 512 [ 84.336406][ T4551] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.66: invalid indirect mapped block 11 (level 0) [ 84.361814][ T4551] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.66: attempt to clear invalid blocks 1024 len 1 [ 84.379618][ T4551] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 84.396000][ T4551] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.66: invalid indirect mapped block 1819239214 (level 0) [ 84.422175][ T4551] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.66: invalid indirect mapped block 33554432 (level 2) [ 84.451338][ T4551] EXT4-fs (loop0): 1 truncate cleaned up [ 84.457156][ T4551] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x000000000000000e,usrquota,nodelalloc,noinit_itable,max_batch_time=0x00000000000000ee,nodiscard,,errors=continue. Quota mode: writeback. [ 85.659316][ T4401] device veth0_vlan entered promiscuous mode [ 85.685601][ T4401] device veth1_vlan entered promiscuous mode [ 85.730800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.761270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.831306][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.943003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.974998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.015307][ T4566] loop4: detected capacity change from 0 to 1024 [ 86.075409][ T4401] device veth0_macvtap entered promiscuous mode [ 86.114776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.134827][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.192435][ T4401] device veth1_macvtap entered promiscuous mode [ 86.282587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.309706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.339090][ T4566] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 86.390538][ T4569] loop2: detected capacity change from 0 to 512 [ 86.407397][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.439139][ T4569] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 86.457550][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.484403][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.501249][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.511770][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.529388][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.542598][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.573628][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.611928][ T4569] EXT4-fs (loop2): 1 truncate cleaned up [ 86.628402][ T4569] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 86.651828][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.753926][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.812356][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.110262][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.301123][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.320338][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.331227][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.371336][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.412663][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.471229][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.503403][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.549184][ T4401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.593991][ T4401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.642050][ T4401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.693144][ T4401] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.717599][ T4401] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.742791][ T4401] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.772086][ T4401] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.981262][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.003887][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.078489][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.093768][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.181359][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.198883][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.214155][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.224646][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.233394][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.242675][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.266952][ T4594] device pim6reg1 entered promiscuous mode [ 90.362609][ T4613] loop0: detected capacity change from 0 to 128 [ 90.389883][ T4616] loop2: detected capacity change from 0 to 256 [ 90.435373][ T4616] exfat: Deprecated parameter 'namecase' [ 90.464124][ T4616] exfat: Unknown parameter 'keep_last_dots' [ 90.744424][ T4216] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.165680][ T4216] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.241440][ T4216] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.306984][ T4216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.375071][ T4216] usb 5-1: config 0 descriptor?? [ 91.759280][ T4656] loop2: detected capacity change from 0 to 128 [ 91.905669][ T4216] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 91.925085][ T4216] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0003/input/input6 [ 91.925085][ T4656] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.925176][ T4656] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.957915][ T4296] device hsr_slave_0 left promiscuous mode [ 91.970125][ T4296] device hsr_slave_1 left promiscuous mode [ 92.095407][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.211413][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.290759][ T4216] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 92.469886][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.527417][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.537737][ T4296] device bridge_slave_1 left promiscuous mode [ 92.562627][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.669510][ T4656] syz.2.84 (pid 4656) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 92.716228][ T4296] device bridge_slave_0 left promiscuous mode [ 92.763210][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.845847][ T4656] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 92.903198][ T4296] device veth1_macvtap left promiscuous mode [ 92.938996][ T4656] fscrypt (loop2, inode 12): Missing crypto API support for Adiantum (API name: "adiantum(xchacha12,aes)") [ 92.943725][ T4296] device veth0_macvtap left promiscuous mode [ 93.025660][ T4296] device veth1_vlan left promiscuous mode [ 93.046388][ T4296] device veth0_vlan left promiscuous mode [ 93.159811][ T4262] usb 5-1: USB disconnect, device number 3 [ 93.171362][ T4677] loop2: detected capacity change from 0 to 128 [ 93.271582][ T4677] FAT-fs (loop2): Directory bread(block 162) failed [ 93.314287][ T4677] FAT-fs (loop2): Directory bread(block 163) failed [ 93.320950][ T4677] FAT-fs (loop2): Directory bread(block 164) failed [ 93.345589][ T4677] FAT-fs (loop2): Directory bread(block 165) failed [ 93.352251][ T4677] FAT-fs (loop2): Directory bread(block 166) failed [ 93.363132][ T4677] FAT-fs (loop2): Directory bread(block 167) failed [ 93.374338][ T4677] FAT-fs (loop2): Directory bread(block 168) failed [ 93.384731][ T4677] FAT-fs (loop2): Directory bread(block 169) failed [ 93.431173][ T4677] FAT-fs (loop2): Directory bread(block 162) failed [ 93.462475][ T4677] FAT-fs (loop2): Directory bread(block 163) failed [ 93.489749][ T4677] attempt to access beyond end of device [ 93.489749][ T4677] loop2: rw=3, want=232, limit=128 [ 93.523197][ T4677] attempt to access beyond end of device [ 93.523197][ T4677] loop2: rw=2051, want=234, limit=128 [ 93.918499][ T4683] loop2: detected capacity change from 0 to 512 [ 93.954097][ T4686] loop5: detected capacity change from 0 to 128 [ 94.042224][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 94.094841][ T4683] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.171870][ T4683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 94.298790][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 94.336930][ T4683] System zones: 1-12 [ 94.346811][ T4683] EXT4-fs (loop2): 1 truncate cleaned up [ 94.352474][ T4683] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 94.389078][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.940502][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.007519][ T4175] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 95.094642][ T4175] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 95.137809][ T4214] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.146824][ T4175] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 95.197846][ T4175] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 95.265541][ T4175] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 95.290252][ T4175] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 95.319031][ T4296] bond0 (unregistering): Released all slaves [ 95.350954][ T4175] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 95.384469][ T4214] usb 1-1: Using ep0 maxpacket: 16 [ 95.391589][ T4175] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 95.493114][ T4705] loop5: detected capacity change from 0 to 512 [ 95.504787][ T4214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.540119][ T4214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.565234][ T4175] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /22/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 95.605810][ T4705] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 95.622256][ T4709] device ip6tnl1 entered promiscuous mode [ 95.650395][ T4214] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 95.683316][ T4214] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 95.683701][ T4175] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 95.715147][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.730069][ T4214] usb 1-1: config 0 descriptor?? [ 95.735682][ T4705] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.97: iget: bad i_size value: -67835469387268086 [ 95.760759][ T4705] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.97: couldn't read orphan inode 15 (err -117) [ 95.831572][ T4705] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.842951][ T4705] ext2 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.100610][ T4701] loop3: detected capacity change from 0 to 40427 [ 96.503096][ T4695] syz.0.92[4695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.503203][ T4695] syz.0.92[4695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.545457][ T4701] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 96.677368][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.684138][ T4701] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 96.719020][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.725006][ T4701] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 96.759612][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.768278][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.798809][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.814568][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.823041][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.831055][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.839071][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.846637][ T4214] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 96.867594][ T4214] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input7 [ 96.892926][ T4214] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 96.893946][ T4701] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 96.934673][ T4701] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 96.964452][ T4214] usb 1-1: USB disconnect, device number 3 [ 97.235299][ T4701] attempt to access beyond end of device [ 97.235299][ T4701] loop3: rw=2049, want=53376, limit=40427 [ 97.375104][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 97.375118][ T26] audit: type=1800 audit(1733175698.021:55): pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 97.571086][ T4168] attempt to access beyond end of device [ 97.571086][ T4168] loop3: rw=2049, want=45112, limit=40427 [ 97.602817][ T4747] loop4: detected capacity change from 0 to 512 [ 97.682630][ T4751] loop5: detected capacity change from 0 to 128 [ 97.921310][ T4747] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.292208][ T4747] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 98.616920][ T4747] System zones: 1-12 [ 98.649941][ T4747] EXT4-fs (loop4): 1 truncate cleaned up [ 98.662639][ T4747] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 98.996098][ T4169] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /24/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 99.254147][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 99.855695][ T4169] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /24/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 99.924574][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 100.013875][ T4169] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /24/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 100.074630][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 100.155781][ T4169] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /24/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 100.287257][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 100.336299][ T4169] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /24/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 100.374935][ T4169] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 100.731554][ T4787] chnl_net:caif_netlink_parms(): no params data found [ 100.865281][ T4784] loop3: detected capacity change from 0 to 40427 [ 100.938165][ T4784] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 100.945206][ T4784] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 100.969284][ T4784] F2FS-fs (loop3): Found nat_bits in checkpoint [ 101.073299][ T4784] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 101.090452][ T4784] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 101.308902][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.354106][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.434286][ T4787] device bridge_slave_0 entered promiscuous mode [ 101.497243][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.551050][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.570863][ T4787] device bridge_slave_1 entered promiscuous mode [ 102.289278][ T4821] loop0: detected capacity change from 0 to 128 [ 102.295663][ T4262] Bluetooth: hci4: command 0x0409 tx timeout [ 102.327757][ T4787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.365815][ T4787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.548137][ T4787] team0: Port device team_slave_0 added [ 102.578129][ T4787] team0: Port device team_slave_1 added [ 102.622375][ T4821] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.672558][ T4821] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 102.713712][ T4808] loop5: detected capacity change from 0 to 40427 [ 102.714417][ T4821] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.751807][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.821016][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.886035][ T4787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.906664][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.913807][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.947905][ T4787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.965968][ T4842] device pim6reg1 entered promiscuous mode [ 103.069928][ T4808] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 103.084560][ T4808] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 103.779489][ T4808] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 103.816865][ T4787] device hsr_slave_0 entered promiscuous mode [ 103.851550][ T4787] device hsr_slave_1 entered promiscuous mode [ 103.891816][ T4787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.913846][ T4787] Cannot create hsr debugfs directory [ 103.944030][ T4849] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 103.993813][ T4808] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 104.004615][ T4808] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 104.246759][ T26] audit: type=1800 audit(1733175705.041:56): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.112" name="bus" dev="loop5" ino=14 res=0 errno=0 [ 104.270938][ T4808] attempt to access beyond end of device [ 104.270938][ T4808] loop5: rw=2049, want=53376, limit=40427 [ 104.371812][ T4401] attempt to access beyond end of device [ 104.371812][ T4401] loop5: rw=2049, want=45112, limit=40427 [ 104.384259][ T4521] Bluetooth: hci4: command 0x041b tx timeout [ 104.676714][ T4847] chnl_net:caif_netlink_parms(): no params data found [ 104.880523][ T4873] binder: 4865:4873 ioctl 54e3 0 returned -22 [ 104.902834][ T4873] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.914456][ T4873] F2FS-fs (loop7): Unable to read 1th superblock [ 104.922960][ T4873] blk_update_request: I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.934232][ T4873] F2FS-fs (loop7): Unable to read 2th superblock [ 105.482203][ T4172] Bluetooth: hci2: command 0x0409 tx timeout [ 105.774293][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.805517][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.851671][ T4847] device bridge_slave_0 entered promiscuous mode [ 105.894116][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.914694][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.925647][ T4847] device bridge_slave_1 entered promiscuous mode [ 105.959336][ T4787] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 106.013875][ T4787] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.030316][ T4787] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.066030][ T4847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.093050][ T4787] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.122121][ T4847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.873491][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 107.006832][ T4847] team0: Port device team_slave_0 added [ 107.017015][ T4847] team0: Port device team_slave_1 added [ 107.040288][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.061311][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.330058][ T4847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.344630][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.352167][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.380163][ T4216] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.503151][ T4847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.776071][ T4216] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.861541][ T4216] usb 1-1: config 0 has no interfaces? [ 107.943850][ T4215] Bluetooth: hci2: command 0x041b tx timeout [ 107.964321][ T4216] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 107.983615][ T4216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.018283][ T4216] usb 1-1: config 0 descriptor?? [ 108.110077][ T4296] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.201901][ T4847] device hsr_slave_0 entered promiscuous mode [ 108.217534][ T4847] device hsr_slave_1 entered promiscuous mode [ 108.230797][ T4847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.240649][ T4847] Cannot create hsr debugfs directory [ 108.259937][ T4296] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.407779][ T4296] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.472033][ T4919] loop3: detected capacity change from 0 to 128 [ 108.518954][ T4919] EXT4-fs (loop3): Test dummy encryption mode enabled [ 108.536583][ T4296] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.556833][ T4919] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 108.569612][ T4919] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.699873][ T4787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.793285][ T4787] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.053793][ T4926] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 109.063794][ T4926] overlayfs: upper fs does not support tmpfile. [ 109.071885][ T4926] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 109.273572][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.299741][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.324437][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 109.382318][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.400222][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.473213][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.480384][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.534682][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.598217][ T4787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.610408][ T4787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.664030][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.689042][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.749963][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.757165][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.987269][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.177483][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.280794][ T4172] Bluetooth: hci2: command 0x040f tx timeout [ 110.289732][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.299525][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.302321][ T1111] usb 1-1: USB disconnect, device number 4 [ 110.345193][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.378646][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.390880][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.404038][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.413310][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.437228][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.452257][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.460478][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.538756][ T4296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.676858][ T4296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.718188][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.734429][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.786230][ T4787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.464506][ T1111] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.139762][ T4296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.283734][ T4296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.295126][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 112.355025][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.374576][ T1111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.404256][ T1111] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 112.413326][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.483879][ T1111] usb 1-1: config 0 descriptor?? [ 112.578890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.598819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.683768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.706002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.723798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.741816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.785059][ T4787] device veth0_vlan entered promiscuous mode [ 112.912710][ T4787] device veth1_vlan entered promiscuous mode [ 112.940936][ T4847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 112.966937][ T1111] pantherlord 0003:0F30:0111.0005: item fetching failed at offset 6/7 [ 112.984879][ T1111] pantherlord 0003:0F30:0111.0005: parse failed [ 113.001409][ T1111] pantherlord: probe of 0003:0F30:0111.0005 failed with error -22 [ 113.026343][ T4975] loop5: detected capacity change from 0 to 40427 [ 113.046258][ T4847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.075567][ T4847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.130131][ T4847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.178865][ T4975] F2FS-fs (loop5): inline encryption not supported [ 113.194952][ T4990] usb 1-1: USB disconnect, device number 5 [ 113.225224][ T4975] F2FS-fs (loop5): invalid crc value [ 113.230570][ T4975] F2FS-fs (loop5): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 113.288897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 113.298070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 113.308137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.319321][ T4975] F2FS-fs (loop5): Found nat_bits in checkpoint [ 113.328573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.351669][ T4787] device veth0_macvtap entered promiscuous mode [ 113.417167][ T4787] device veth1_macvtap entered promiscuous mode [ 113.481331][ T4975] F2FS-fs (loop5): recover fsync data on readonly fs [ 113.496259][ T4975] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 113.503316][ T4975] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 113.508641][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.522641][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.533625][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.544593][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.555323][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.566181][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.581760][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.593116][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.604281][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.624208][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.641219][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.661777][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.689656][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.718260][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.761054][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.817773][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.859622][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.911699][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.933185][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.944331][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.955699][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.965827][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.976703][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.986835][ T4787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.004629][ T4787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.089338][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.120971][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 114.192767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.223261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 114.326800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 114.328459][ T4248] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.428409][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 114.454440][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 114.471777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.534667][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 114.544224][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 114.553752][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 114.732592][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.743070][ T4787] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.762533][ T4787] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.827122][ T4787] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.856758][ T4787] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.922049][ T4847] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.996146][ T4847] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.014278][ T4847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.294527][ T4262] Bluetooth: hci5: command 0x1003 tx timeout [ 116.301419][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 116.328970][ T4847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.340490][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.353238][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.362262][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.372525][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.386053][ T578] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.393165][ T578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.402319][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.413246][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.781395][ T578] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.788609][ T578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.044932][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 117.054239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 117.137079][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.150026][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.161175][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.170893][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.180419][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.189725][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.199706][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.208604][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.221117][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.229576][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.238265][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.245831][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.253438][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.261990][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.270552][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.313136][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 117.323726][ T5044] device bridge_slave_1 left promiscuous mode [ 117.338623][ T5044] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.373852][ T5044] device bridge_slave_0 left promiscuous mode [ 117.382335][ T5044] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.890858][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 117.901890][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 117.913857][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 117.924586][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 117.935010][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 117.948437][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 117.963150][ T5068] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 118.526478][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.546698][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.604892][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.613045][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.633662][ T4847] device veth0_vlan entered promiscuous mode [ 118.668421][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.678355][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.730548][ T4990] Bluetooth: hci5: command 0x1001 tx timeout [ 118.745337][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.760201][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 118.778271][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.794278][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.863281][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.930207][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.947775][ T4847] device veth1_vlan entered promiscuous mode [ 118.990063][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.011260][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.051258][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.161124][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.203023][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.237253][ T4847] device veth0_macvtap entered promiscuous mode [ 119.306368][ T4847] device veth1_macvtap entered promiscuous mode [ 119.477392][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.523840][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.542417][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.555041][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.573781][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.594396][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.641611][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.663729][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.689041][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.705295][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.723522][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.740666][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.755196][ T5092] binder: BINDER_SET_CONTEXT_MGR already set [ 119.761189][ T5092] binder: 5066:5092 ioctl 4018620d 20000040 returned -16 [ 119.781735][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.796764][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.829817][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.863544][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.899712][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.932973][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.965951][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.009447][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.044490][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.065038][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.095492][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.105964][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.116877][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.128703][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.166291][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.176759][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.186724][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.196092][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.206088][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.216027][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.234554][ T4847] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.243641][ T4847] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.252437][ T4847] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.274545][ T4847] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.351052][ T4296] device hsr_slave_0 left promiscuous mode [ 120.380885][ T4296] device hsr_slave_1 left promiscuous mode [ 120.384364][ T4214] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.396109][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.417567][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.441497][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.470524][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.490740][ T4296] device bridge_slave_1 left promiscuous mode [ 120.501443][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.507131][ T5104] loop6: detected capacity change from 0 to 1024 [ 120.520920][ T4296] device bridge_slave_0 left promiscuous mode [ 120.529336][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.567092][ T4296] device hsr_slave_0 left promiscuous mode [ 120.602389][ T5104] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 120.653248][ T4296] device hsr_slave_1 left promiscuous mode [ 120.663041][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.726978][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.773698][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.782080][ T4262] Bluetooth: hci5: command 0x1009 tx timeout [ 120.790061][ T4214] usb 4-1: Using ep0 maxpacket: 16 [ 120.816019][ T4296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.816074][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.5.159'. [ 120.851642][ T4296] device bridge_slave_1 left promiscuous mode [ 120.881753][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.900160][ T4296] device bridge_slave_0 left promiscuous mode [ 121.438949][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.459106][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.466971][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.612125][ T4214] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.625155][ T4214] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 121.635153][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.652274][ T4214] usb 4-1: config 0 descriptor?? [ 122.219482][ T4296] device veth1_macvtap left promiscuous mode [ 122.225682][ T4296] device veth0_macvtap left promiscuous mode [ 122.240063][ T5136] loop6: detected capacity change from 0 to 16 [ 122.247181][ T4296] device veth1_vlan left promiscuous mode [ 122.253033][ T4296] device veth0_vlan left promiscuous mode [ 122.269096][ T4296] device veth1_macvtap left promiscuous mode [ 122.293117][ T4296] device veth0_macvtap left promiscuous mode [ 122.323998][ T4296] device veth1_vlan left promiscuous mode [ 122.333226][ T4296] device veth0_vlan left promiscuous mode [ 122.861570][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 122.889132][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 122.923516][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.941540][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.070779][ T4296] bond0 (unregistering): Released all slaves [ 123.833901][ T5136] erofs: (device loop6): mounted with root inode @ nid 36. [ 123.853087][ T5135] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 123.928135][ T4214] usbhid 4-1:0.0: can't add hid device: -71 [ 124.127159][ T4296] team0 (unregistering): Port device team_slave_1 removed [ 124.146931][ T4296] team0 (unregistering): Port device team_slave_0 removed [ 124.161560][ T4296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.231323][ T4296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.390127][ T4214] usbhid: probe of 4-1:0.0 failed with error -71 [ 124.402895][ T4214] usb 4-1: USB disconnect, device number 3 [ 124.660158][ T4296] bond0 (unregistering): Released all slaves [ 125.400161][ T5150] loop5: detected capacity change from 0 to 512 [ 125.544823][ T5153] loop6: detected capacity change from 0 to 256 [ 125.594449][ T5150] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.652811][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.662245][ T5150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 125.666840][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.674789][ T5153] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x09cab1dc, utbl_chksum : 0xe619d30d) [ 125.687439][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.802588][ T5150] System zones: 1-12 [ 125.813912][ T5150] EXT4-fs (loop5): 1 truncate cleaned up [ 125.821829][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.829232][ T5150] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 125.867001][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.890695][ T578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.590364][ T5172] loop7: detected capacity change from 0 to 128 [ 126.815138][ T5177] loop6: detected capacity change from 0 to 1024 [ 127.212128][ T5177] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 128.548942][ T5193] loop5: detected capacity change from 0 to 512 [ 128.681393][ T5197] loop3: detected capacity change from 0 to 16 [ 128.757348][ T5193] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 128.810755][ T5197] erofs: (device loop3): mounted with root inode @ nid 36. [ 128.841837][ T5197] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 129.083413][ T5193] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 129.299734][ T5193] EXT4-fs (loop5): Mount option "dioread_lock" incompatible with ext3 [ 129.416557][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 129.439523][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 129.461469][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 129.478578][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 129.496164][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 129.513275][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 129.529934][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 129.902162][ T4248] Bluetooth: hci5: Frame reassembly failed (-84) [ 130.044863][ T5201] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 132.260739][ T4244] Bluetooth: hci5: command 0x1003 tx timeout [ 132.267854][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 132.380708][ T5232] loop3: detected capacity change from 0 to 512 [ 132.527205][ T5232] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.654390][ T5239] loop5: detected capacity change from 0 to 512 [ 132.681561][ T5232] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 132.734339][ T5232] System zones: 1-12 [ 132.759985][ T5239] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 132.775283][ T5232] EXT4-fs (loop3): 1 truncate cleaned up [ 132.780958][ T5232] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 132.802571][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.802650][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.879474][ T5239] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.181: iget: bad i_size value: -67835469387268086 [ 132.965542][ T5239] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.181: couldn't read orphan inode 15 (err -117) [ 133.079650][ T5239] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.178532][ T5239] ext2 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.304613][ T4244] Bluetooth: hci5: command 0x1001 tx timeout [ 134.310976][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 134.464333][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 134.470992][ T5250] loop0: detected capacity change from 0 to 40427 [ 134.569562][ T5250] F2FS-fs (loop0): invalid crc value [ 134.622269][ T5250] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.757692][ T5250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.955876][ T4166] attempt to access beyond end of device [ 134.955876][ T4166] loop0: rw=2049, want=45104, limit=40427 [ 134.975268][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.014274][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.054353][ T21] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 135.135230][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.200926][ T21] usb 6-1: config 0 descriptor?? [ 135.342542][ T5303] loop7: detected capacity change from 0 to 128 [ 135.482665][ T5303] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 135.534398][ T5303] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.706382][ T21] pantherlord 0003:0F30:0111.0006: item fetching failed at offset 6/7 [ 135.737441][ T21] pantherlord 0003:0F30:0111.0006: parse failed [ 135.743743][ T21] pantherlord: probe of 0003:0F30:0111.0006 failed with error -22 [ 135.931413][ T4214] usb 6-1: USB disconnect, device number 2 [ 135.993130][ T5323] loop7: detected capacity change from 0 to 1024 [ 136.453573][ T4521] Bluetooth: hci5: command 0x1009 tx timeout [ 136.570300][ T5338] loop5: detected capacity change from 0 to 256 [ 136.598404][ T5338] exFAT-fs (loop5): failed to read boot sector [ 136.624782][ T5338] exFAT-fs (loop5): failed to recognize exfat type [ 136.635442][ T5317] device pim6reg1 entered promiscuous mode [ 136.660107][ T5320] loop0: detected capacity change from 0 to 40427 [ 136.726915][ T5320] F2FS-fs (loop0): invalid crc value [ 136.732248][ T5320] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 136.798773][ T5320] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.844300][ T4521] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 136.885948][ T5320] F2FS-fs (loop0): recover fsync data on readonly fs [ 136.903861][ T5320] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 136.914113][ T5320] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 136.928171][ T5320] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 137.134449][ T4157] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 137.240850][ T4521] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.270279][ T4521] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.304282][ T4521] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 137.336858][ T4521] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.380853][ T4521] usb 8-1: config 0 descriptor?? [ 137.681123][ T5335] udc-core: couldn't find an available UDC or it's busy [ 137.693509][ T4157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.693618][ T4157] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.693753][ T4157] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 137.693822][ T4157] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.895581][ T5335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 137.921130][ T4157] usb 6-1: config 0 descriptor?? [ 138.274865][ T4521] hid (null): bogus close delimiter [ 138.514492][ T4521] usb 8-1: string descriptor 0 read error: -71 [ 138.564381][ T4521] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 138.583951][ T4521] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 138.602355][ T4521] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 138.616232][ T4521] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 138.623919][ T4521] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 138.660313][ T4521] usb 8-1: USB disconnect, device number 2 [ 138.894345][ T4157] hid-led: probe of 0003:0FC5:B080.0008 failed with error -71 [ 138.921153][ T4157] usb 6-1: USB disconnect, device number 3 [ 139.483318][ T5414] loop0: detected capacity change from 0 to 512 [ 139.520588][ T5414] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.580567][ T5414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 139.603355][ T5414] System zones: 1-12 [ 139.835676][ T5414] EXT4-fs (loop0): 1 truncate cleaned up [ 139.864342][ T5414] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 140.085377][ T5408] loop7: detected capacity change from 0 to 40427 [ 140.129392][ T4166] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 140.172603][ T5408] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 140.183445][ T5408] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 140.244634][ T5408] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 140.295900][ T5406] loop3: detected capacity change from 0 to 40427 [ 140.353645][ T5406] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 140.374367][ T5406] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 140.401707][ T5406] F2FS-fs (loop3): invalid crc value [ 140.421273][ T5408] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 140.429664][ T5406] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.434853][ T5408] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 140.598715][ T5445] loop6: detected capacity change from 0 to 512 [ 140.623867][ T5406] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 140.666431][ T5445] EXT4-fs (loop6): Ignoring removed orlov option [ 140.681019][ T5406] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 140.703701][ T5445] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 140.763915][ T5406] attempt to access beyond end of device [ 140.763915][ T5406] loop3: rw=2051, want=45064, limit=40427 [ 140.789454][ T5406] attempt to access beyond end of device [ 140.789454][ T5406] loop3: rw=2051, want=131072, limit=40427 [ 140.834201][ T5445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0002] [ 140.844015][ T5406] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 140.844058][ T5406] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5 [ 140.887882][ T5445] System zones: 1-12 [ 141.013399][ T5445] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.206: casefold flag without casefold feature [ 141.083170][ T26] audit: type=1800 audit(1733175741.862:57): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.200" name="bus" dev="loop7" ino=14 res=0 errno=0 [ 141.118686][ T5445] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.206: couldn't read orphan inode 15 (err -117) [ 141.156183][ T5445] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,abort,init_itable=0x000000000000006a,debug,noinit_itable,min_batch_time=0x0000000000000000,usrjquota=,orlov,minixdf,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 142.381600][ T5477] loop6: detected capacity change from 0 to 128 [ 143.488215][ T5478] chnl_net:caif_netlink_parms(): no params data found [ 143.762070][ T4847] attempt to access beyond end of device [ 143.762070][ T4847] loop7: rw=2049, want=45112, limit=40427 [ 143.848712][ T5478] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.947378][ T5478] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.032203][ T5478] device bridge_slave_0 entered promiscuous mode [ 144.151258][ T5478] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.197938][ T5478] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.299343][ T5478] device bridge_slave_1 entered promiscuous mode [ 144.524876][ T5478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.535963][ T4157] Bluetooth: hci0: command 0x0409 tx timeout [ 144.581582][ T5478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.741034][ T5478] team0: Port device team_slave_0 added [ 144.770355][ T5478] team0: Port device team_slave_1 added [ 144.788791][ T5524] loop7: detected capacity change from 0 to 512 [ 144.871911][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.904831][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.936354][ T5478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.949131][ T5524] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.216: inode #1: comm syz.7.216: iget: illegal inode # [ 144.977344][ T5524] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.216: error while reading EA inode 1 err=-117 [ 144.986713][ T5478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.003639][ T5524] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 145.017739][ T5524] EXT4-fs error (device loop7): ext4_xattr_inode_iget:404: comm syz.7.216: inode #1: comm syz.7.216: iget: illegal inode # [ 145.031270][ T5478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.135220][ T5524] EXT4-fs error (device loop7): ext4_xattr_inode_iget:409: comm syz.7.216: error while reading EA inode 1 err=-117 [ 145.175904][ T5524] EXT4-fs (loop7): 1 orphan inode deleted [ 145.181885][ T5524] EXT4-fs (loop7): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,nogrpid,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,sysvgroups,usrjquota=,,errors=continue. Quota mode: none. [ 145.479477][ T5478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.886784][ T5524] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 253: comm syz.7.216: bad entry in directory: rec_len is too small for name_len - offset=784, inode=22, rec_len=240, size=1024 fake=0 [ 146.027529][ T5478] device hsr_slave_0 entered promiscuous mode [ 146.044877][ T5478] device hsr_slave_1 entered promiscuous mode [ 146.077728][ T5478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.249037][ T5478] Cannot create hsr debugfs directory [ 146.279216][ T5535] netlink: 'syz.5.222': attribute type 4 has an invalid length. [ 147.023753][ T4244] Bluetooth: hci0: command 0x041b tx timeout [ 147.174475][ T5554] serio: Serial port ptm0 [ 147.800179][ T5478] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 147.851853][ T5478] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 147.917021][ T5478] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 148.050986][ T5478] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 148.349318][ T5587] loop5: detected capacity change from 0 to 128 [ 148.507941][ T5587] EXT4-fs (loop5): Test dummy encryption mode enabled [ 148.540552][ T5587] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 148.573031][ T5587] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.049877][ T5601] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 149.059664][ T5601] overlayfs: upper fs does not support tmpfile. [ 149.066651][ T5601] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 150.323956][ T4990] Bluetooth: hci0: command 0x040f tx timeout [ 150.623717][ T5624] loop5: detected capacity change from 0 to 1024 [ 150.638445][ T5478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.681228][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.697647][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.743813][ T5478] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.781119][ T5624] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.816825][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.844042][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.892084][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.899256][ T4258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.909928][ T5634] device pim6reg1 entered promiscuous mode [ 150.960812][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.981910][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.995911][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 151.011087][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.018224][ T4258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.090957][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.112806][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.144345][ T4214] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 151.494610][ T4214] usb 6-1: Using ep0 maxpacket: 16 [ 151.650808][ T4214] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.684307][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.703174][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.711955][ T4214] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.737274][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.756133][ T4214] usb 6-1: New USB device found, idVendor=0001, idProduct=0000, bcdDevice= 0.00 [ 151.770884][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.789215][ T4214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.794973][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.811408][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.813818][ T4214] usb 6-1: config 0 descriptor?? [ 151.840837][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.896120][ T5478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.955506][ T5478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.963636][ T5656] loop7: detected capacity change from 0 to 128 [ 151.973081][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.983735][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.083834][ T5656] EXT4-fs (loop7): Unrecognized mount option "fowner>00000000000000000000" or missing value [ 152.221840][ T5656] syz.7.242[5656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.221927][ T5656] syz.7.242[5656] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.228532][ T5666] loop3: detected capacity change from 0 to 512 [ 152.293649][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.303473][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.343941][ T5666] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 152.344522][ T5478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.363696][ T5666] EXT4-fs (loop3): Mount option "dax=inode" incompatible with ext2 [ 152.385021][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 152.414452][ T4214] usb 6-1: string descriptor 0 read error: -71 [ 152.436492][ T4214] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 152.466657][ T4214] usb 6-1: USB disconnect, device number 4 [ 153.341989][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.401982][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.632910][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.768059][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.940840][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.973331][ T5697] loop7: detected capacity change from 0 to 512 [ 154.000962][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.030083][ T5701] loop5: detected capacity change from 0 to 512 [ 154.141222][ T5697] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 154.146060][ T5478] device veth0_vlan entered promiscuous mode [ 154.174570][ T5697] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 154.196083][ T5697] EXT4-fs error (device loop7): ext4_acquire_dquot:6197: comm syz.7.248: Failed to acquire dquot type 1 [ 154.224918][ T5478] device veth1_vlan entered promiscuous mode [ 154.264124][ T5697] EXT4-fs (loop7): 1 truncate cleaned up [ 154.288217][ T5697] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.288354][ T5697] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.338865][ T5701] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 154.338973][ T5701] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 154.361345][ T26] audit: type=1800 audit(1733175755.142:58): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.249" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 154.386988][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.548427][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.615691][ T5478] device veth0_macvtap entered promiscuous mode [ 154.637639][ T5478] device veth1_macvtap entered promiscuous mode [ 154.728968][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.775685][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.814617][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.848794][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.884203][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.914191][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.924042][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.975562][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.004403][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.044193][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.054462][ T4990] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 155.085928][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.114994][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.170892][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.263139][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.322848][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.332855][ T4990] usb 6-1: Using ep0 maxpacket: 16 [ 155.348477][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.369466][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.389215][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.408880][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.432925][ T5478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.453899][ T5478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.464785][ T4990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.484202][ T4990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.496317][ T5478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.513696][ T4990] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 155.524030][ T4990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.561810][ T4990] usb 6-1: config 0 descriptor?? [ 155.593459][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.631230][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.639588][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.655270][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.691891][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.948281][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.959932][ T5713] loop3: detected capacity change from 0 to 40427 [ 156.035423][ T5713] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 156.106523][ T5713] F2FS-fs (loop3): invalid crc value [ 156.117064][ T5478] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.126164][ T5478] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.135453][ T5478] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.144351][ T5478] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.186150][ T4990] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 156.203632][ T4990] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 156.215079][ T4990] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 156.221989][ T4990] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 156.229636][ T4990] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 156.233853][ T5713] F2FS-fs (loop3): invalid crc value [ 156.245236][ T4990] ntrig 0003:1B96:0008.0009: unknown main item tag 0x0 [ 156.252311][ T4990] ntrig 0003:1B96:0008.0009: unbalanced collection at end of report description [ 156.264603][ T4990] ntrig 0003:1B96:0008.0009: parse failed [ 156.270383][ T4990] ntrig: probe of 0003:1B96:0008.0009 failed with error -22 [ 156.272903][ T5713] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 156.372643][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.396619][ T4214] usb 6-1: USB disconnect, device number 5 [ 156.422612][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.480107][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 156.525536][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.565674][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.620944][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 156.693328][ T5756] loop7: detected capacity change from 0 to 512 [ 156.764025][ T5756] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 156.834125][ T5756] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.262: iget: bad i_size value: -67835469387268086 [ 156.885208][ T5765] loop8: detected capacity change from 0 to 512 [ 156.898416][ T5756] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.262: couldn't read orphan inode 15 (err -117) [ 156.967739][ T5756] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.011485][ T5765] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 157.034726][ T5765] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.083276][ T5756] ext2 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.107618][ T26] audit: type=1800 audit(1733175757.892:59): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.263" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 159.769846][ T5810] syz.7.268 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 159.890439][ T5810] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 159.907516][ T5808] loop6: detected capacity change from 0 to 512 [ 160.079274][ T5808] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 160.118979][ T5808] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 160.204426][ T5808] EXT4-fs (loop6): Mount option "dioread_lock" incompatible with ext3 [ 160.436205][ T4244] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 160.695027][ T4244] usb 8-1: Using ep0 maxpacket: 16 [ 160.787786][ T5838] loop8: detected capacity change from 0 to 512 [ 160.834898][ T4244] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.981397][ T5838] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 161.105148][ T4244] usb 8-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 161.130261][ T4244] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.183792][ T4244] usb 8-1: Product: syz [ 161.207044][ T4244] usb 8-1: Manufacturer: syz [ 161.234956][ T4244] usb 8-1: SerialNumber: syz [ 161.248064][ T5838] EXT4-fs (loop8): 1 truncate cleaned up [ 161.260220][ T5838] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.298274][ T4244] usb 8-1: config 0 descriptor?? [ 163.205034][ T4244] usb 8-1: can't set config #0, error -71 [ 163.249182][ T4244] usb 8-1: USB disconnect, device number 3 [ 163.320932][ T5868] loop7: detected capacity change from 0 to 512 [ 163.363954][ T5871] loop3: detected capacity change from 0 to 512 [ 163.783505][ T5868] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled [ 163.934386][ T5868] EXT4-fs (loop7): Mount option "dax=inode" incompatible with ext2 [ 164.005275][ T5871] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.046942][ T5871] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.386385][ T5871] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: writeback. [ 164.650511][ T5898] syz.6.291[5898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.650634][ T5898] syz.6.291[5898] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.137856][ T5899] binder: 5890:5899 ioctl 54e3 0 returned -22 [ 165.190317][ T5899] blk_update_request: I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.202299][ T5899] F2FS-fs (loop17): Unable to read 1th superblock [ 165.211673][ T5899] blk_update_request: I/O error, dev loop17, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.223583][ T5899] F2FS-fs (loop17): Unable to read 2th superblock [ 166.240732][ T5906] loop8: detected capacity change from 0 to 512 [ 166.671494][ T5911] loop7: detected capacity change from 0 to 8192 [ 166.939041][ T5906] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 166.978677][ T5911] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.049418][ T5906] EXT4-fs (loop8): 1 truncate cleaned up [ 167.086229][ T5906] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.118329][ T26] audit: type=1800 audit(1733175767.861:60): pid=5911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.293" name="bus" dev="loop7" ino=1048601 res=0 errno=0 [ 168.060327][ T5932] loop5: detected capacity change from 0 to 256 [ 169.023544][ T5955] loop8: detected capacity change from 0 to 256 [ 169.287128][ T5955] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 171.057843][ T5991] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.069230][ T5991] F2FS-fs (loop13): Unable to read 1th superblock [ 171.076736][ T5991] blk_update_request: I/O error, dev loop13, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 171.088056][ T5991] F2FS-fs (loop13): Unable to read 2th superblock [ 171.692219][ T5995] loop5: detected capacity change from 0 to 512 [ 171.762654][ T5995] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 171.987516][ T5995] EXT4-fs (loop5): 1 truncate cleaned up [ 171.993193][ T5995] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.454498][ T6026] loop5: detected capacity change from 0 to 128 [ 174.822063][ T6007] loop6: detected capacity change from 0 to 40427 [ 175.656829][ T6007] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-4) [ 175.818822][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 176.205858][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 176.238931][ T6062] loop3: detected capacity change from 0 to 512 [ 176.438667][ T6062] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 177.018617][ T6062] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.319: iget: bad i_size value: -67835469387268086 [ 177.042495][ T6062] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.319: couldn't read orphan inode 15 (err -117) [ 177.056487][ T6062] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.086052][ T6062] ext2 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.110308][ T6070] loop6: detected capacity change from 0 to 512 [ 177.185707][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 177.258894][ T6070] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 177.323980][ T6070] EXT4-fs (loop6): 1 truncate cleaned up [ 177.345792][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.345897][ T6070] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.364694][ T7] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 177.375757][ T1111] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 177.775694][ T1111] usb 9-1: Using ep0 maxpacket: 16 [ 177.907233][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.006235][ T1111] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 178.336050][ T1111] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 178.381105][ T1111] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.425809][ T1111] usb 9-1: Product: syz [ 178.445788][ T1111] usb 9-1: Manufacturer: syz [ 178.450413][ T1111] usb 9-1: SerialNumber: syz [ 178.515815][ T7] usb 6-1: config 0 descriptor?? [ 178.526687][ T1111] usb 9-1: config 0 descriptor?? [ 178.597279][ T1111] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 178.637259][ T1111] usb 9-1: Detected FT232RL [ 178.856759][ T1111] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 179.025859][ T7] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.000A/input/input8 [ 179.113339][ T6069] loop8: detected capacity change from 0 to 512 [ 179.119463][ T6090] loop3: detected capacity change from 0 to 40427 [ 179.154366][ T7] appleir 0003:05AC:8241.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 179.206729][ T6090] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 179.213095][ T6090] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 179.300569][ T6090] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 179.311978][ T6069] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #3: comm syz.8.320: corrupted inode contents [ 179.318592][ T6069] EXT4-fs error (device loop8): ext4_dirty_inode:6010: inode #3: comm syz.8.320: mark_inode_dirty error [ 179.334175][ T4990] usb 6-1: USB disconnect, device number 6 [ 179.354466][ T6069] EXT4-fs error (device loop8): ext4_do_update_inode:5174: inode #3: comm syz.8.320: corrupted inode contents [ 179.418036][ T6069] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #3: comm syz.8.320: mark_inode_dirty error [ 179.472289][ T6069] Quota error (device loop8): write_blk: dquota write failed [ 179.493962][ T6069] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 179.525747][ T6069] EXT4-fs error (device loop8): ext4_acquire_dquot:6197: comm syz.8.320: Failed to acquire dquot type 0 [ 179.561121][ T6090] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 179.588908][ T6090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 179.657482][ T6069] EXT4-fs (loop8): 1 orphan inode deleted [ 179.663263][ T6069] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 179.693678][ T6069] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.742375][ T6130] syz.6.324[6130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.742470][ T6130] syz.6.324[6130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.939026][ T1111] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 180.096538][ T6137] attempt to access beyond end of device [ 180.096538][ T6137] loop3: rw=2049, want=53376, limit=40427 [ 180.122952][ T26] audit: type=1800 audit(1733175780.851:61): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.322" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 180.434968][ T4157] usb 9-1: USB disconnect, device number 2 [ 180.621403][ T4168] attempt to access beyond end of device [ 180.621403][ T4168] loop3: rw=2049, want=45112, limit=40427 [ 180.625807][ T4157] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 180.643056][ T4157] ftdi_sio 9-1:0.0: device disconnected [ 181.712244][ T6160] loop7: detected capacity change from 0 to 512 [ 181.944509][ T6160] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 182.040388][ T6160] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.332: iget: bad i_size value: -67835469387268086 [ 182.096173][ T6160] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.332: couldn't read orphan inode 15 (err -117) [ 182.178997][ T6160] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.203737][ T6160] ext2 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.676613][ T6182] loop3: detected capacity change from 0 to 16 [ 182.841347][ T6193] device pim6reg1 entered promiscuous mode [ 182.895038][ T6182] erofs: (device loop3): mounted with root inode @ nid 36. [ 182.904600][ T6182] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 183.285104][ T6221] syz.6.344[6221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.285225][ T6221] syz.6.344[6221] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.425825][ T4157] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 183.866335][ T4157] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.018296][ T4157] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.196138][ T4157] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 184.255772][ T4157] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.317962][ T4157] usb 9-1: config 0 descriptor?? [ 184.838519][ T4157] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 184.876158][ T4157] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 184.914794][ T4157] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 185.901626][ T4157] lg-g15 0003:046D:C222.000B: unknown main item tag 0x0 [ 185.912189][ T4157] lg-g15 0003:046D:C222.000B: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0 [ 186.263732][ T6257] loop7: detected capacity change from 0 to 512 [ 186.416523][ T4157] usb 9-1: USB disconnect, device number 3 [ 186.488189][ T6257] EXT4-fs (loop7): Journaled quota options ignored when QUOTA feature is enabled [ 186.540690][ T6267] loop3: detected capacity change from 0 to 512 [ 186.542764][ T6257] EXT4-fs (loop7): Mount option "dax=inode" incompatible with ext2 [ 186.787132][ T6267] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 186.884842][ T6267] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.350: iget: bad i_size value: -67835469387268086 [ 186.900071][ T6267] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.350: couldn't read orphan inode 15 (err -117) [ 186.913620][ T6267] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.924922][ T6267] ext2 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.302574][ T6301] loop6: detected capacity change from 0 to 16 [ 188.941467][ T6301] erofs: (device loop6): mounted with root inode @ nid 36. [ 188.957064][ T6300] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 189.159521][ T6313] syz.3.355[6313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.159612][ T6313] syz.3.355[6313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 191.394583][ T6340] loop5: detected capacity change from 0 to 512 [ 192.121693][ T6340] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 192.885689][ T6340] EXT4-fs (loop5): Mount option "dax=inode" incompatible with ext2 [ 194.241147][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.247584][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.296722][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 196.457896][ T6399] loop7: detected capacity change from 0 to 16 [ 196.664795][ T6401] loop8: detected capacity change from 0 to 512 [ 196.680537][ T6399] erofs: (device loop7): mounted with root inode @ nid 36. [ 196.689682][ T6399] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 197.920261][ T6401] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 198.044112][ T6401] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.182018][ T6426] loop6: detected capacity change from 0 to 512 [ 199.436270][ T6426] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 199.925818][ T6426] EXT4-fs (loop6): Mount option "dax=inode" incompatible with ext2 [ 201.015832][ C0] ------------[ cut here ]------------ [ 201.015901][ C0] [ 201.015908][ C0] ====================================================== [ 201.015914][ C0] WARNING: possible circular locking dependency detected [ 201.015919][ C0] 5.15.173-syzkaller #0 Not tainted [ 201.015929][ C0] ------------------------------------------------------ [ 201.015934][ C0] syz.3.387/6446 is trying to acquire lock: [ 201.015944][ C0] ffffffff8c9fc4b8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 201.016005][ C0] [ 201.016005][ C0] but task is already holding lock: [ 201.016009][ C0] ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 201.016048][ C0] [ 201.016048][ C0] which lock already depends on the new lock. [ 201.016048][ C0] [ 201.016052][ C0] [ 201.016052][ C0] the existing dependency chain (in reverse order) is: [ 201.016057][ C0] [ 201.016057][ C0] -> #3 (&base->lock){-.-.}-{2:2}: [ 201.016076][ C0] lock_acquire+0x1db/0x4f0 [ 201.016091][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 201.016109][ C0] lock_timer_base+0x120/0x260 [ 201.016125][ C0] __mod_timer+0x1d6/0xeb0 [ 201.016141][ C0] queue_delayed_work_on+0x156/0x250 [ 201.016156][ C0] enqueue_task+0x2fe/0x3a0 [ 201.016172][ C0] wake_up_new_task+0x515/0xb60 [ 201.016188][ C0] kernel_clone+0x44e/0x960 [ 201.016202][ C0] kernel_thread+0x168/0x1e0 [ 201.016216][ C0] rest_init+0x21/0x330 [ 201.016231][ C0] start_kernel+0x48c/0x540 [ 201.016245][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 201.016261][ C0] [ 201.016261][ C0] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 201.016281][ C0] lock_acquire+0x1db/0x4f0 [ 201.016294][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 201.016309][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 201.016325][ C0] task_fork_fair+0x5d/0x350 [ 201.016339][ C0] sched_cgroup_fork+0x2d3/0x330 [ 201.016355][ C0] copy_process+0x224a/0x3ef0 [ 201.016369][ C0] kernel_clone+0x210/0x960 [ 201.016383][ C0] kernel_thread+0x168/0x1e0 [ 201.016396][ C0] rest_init+0x21/0x330 [ 201.016410][ C0] start_kernel+0x48c/0x540 [ 201.016432][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 201.016448][ C0] [ 201.016448][ C0] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 201.016467][ C0] lock_acquire+0x1db/0x4f0 [ 201.016480][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 201.016496][ C0] try_to_wake_up+0xae/0x1300 [ 201.016512][ C0] up+0x6e/0x90 [ 201.016525][ C0] __up_console_sem+0x11a/0x1e0 [ 201.016541][ C0] console_unlock+0x1145/0x12b0 [ 201.016554][ C0] vprintk_emit+0xbf/0x150 [ 201.016567][ C0] _printk+0xd1/0x120 [ 201.016582][ C0] batadv_hardif_enable_interface+0x528/0x9e0 [ 201.016602][ C0] batadv_softif_slave_add+0x75/0xf0 [ 201.016619][ C0] do_setlink+0xdd3/0x3d80 [ 201.016635][ C0] rtnl_newlink+0x17d6/0x2070 [ 201.016649][ C0] rtnetlink_rcv_msg+0x993/0xee0 [ 201.016664][ C0] netlink_rcv_skb+0x1cf/0x410 [ 201.016679][ C0] netlink_unicast+0x7b6/0x980 [ 201.016693][ C0] netlink_sendmsg+0xa30/0xd60 [ 201.016708][ C0] __sys_sendto+0x564/0x720 [ 201.016725][ C0] __x64_sys_sendto+0xda/0xf0 [ 201.016739][ C0] do_syscall_64+0x3b/0xb0 [ 201.016752][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.016769][ C0] [ 201.016769][ C0] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 201.016789][ C0] validate_chain+0x1649/0x5930 [ 201.016803][ C0] __lock_acquire+0x1295/0x1ff0 [ 201.016816][ C0] lock_acquire+0x1db/0x4f0 [ 201.016828][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 201.016845][ C0] down_trylock+0x1c/0xa0 [ 201.016859][ C0] __down_trylock_console_sem+0x105/0x250 [ 201.016875][ C0] console_trylock_spinning+0x8a/0x3f0 [ 201.016889][ C0] vprintk_emit+0xa6/0x150 [ 201.016902][ C0] _printk+0xd1/0x120 [ 201.016916][ C0] report_bug+0x1e5/0x2e0 [ 201.016931][ C0] handle_bug+0x3d/0x70 [ 201.016944][ C0] exc_invalid_op+0x16/0x40 [ 201.016957][ C0] asm_exc_invalid_op+0x16/0x20 [ 201.016973][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 201.016988][ C0] bpf_probe_read_user+0x26/0x70 [ 201.017002][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x490 [ 201.017015][ C0] bpf_trace_run3+0x1d1/0x380 [ 201.017029][ C0] __traceiter_timer_start+0x79/0xd0 [ 201.017045][ C0] enqueue_timer+0x3ae/0x540 [ 201.017058][ C0] __mod_timer+0xa60/0xeb0 [ 201.017073][ C0] dsp_cmx_send+0x21bb/0x2240 [ 201.017091][ C0] call_timer_fn+0x16d/0x560 [ 201.017104][ C0] __run_timers+0x67c/0x890 [ 201.017116][ C0] run_timer_softirq+0x63/0xf0 [ 201.017133][ C0] handle_softirqs+0x3a7/0x930 [ 201.017146][ C0] __irq_exit_rcu+0x157/0x240 [ 201.017160][ C0] irq_exit_rcu+0x5/0x20 [ 201.017172][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 201.017188][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 201.017205][ C0] [ 201.017205][ C0] other info that might help us debug this: [ 201.017205][ C0] [ 201.017210][ C0] Chain exists of: [ 201.017210][ C0] (console_sem).lock --> &rq->__lock --> &base->lock [ 201.017210][ C0] [ 201.017233][ C0] Possible unsafe locking scenario: [ 201.017233][ C0] [ 201.017237][ C0] CPU0 CPU1 [ 201.017241][ C0] ---- ---- [ 201.017244][ C0] lock(&base->lock); [ 201.017253][ C0] lock(&rq->__lock); [ 201.017263][ C0] lock(&base->lock); [ 201.017273][ C0] lock((console_sem).lock); [ 201.017282][ C0] [ 201.017282][ C0] *** DEADLOCK *** [ 201.017282][ C0] [ 201.017285][ C0] 4 locks held by syz.3.387/6446: [ 201.017295][ C0] #0: ffffc9000354fb40 ((&dsp_spl_tl)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 201.017331][ C0] #1: ffffffff8d9efff8 (dsp_lock){..-.}-{2:2}, at: dsp_cmx_send+0x22/0x2240 [ 201.017368][ C0] #2: ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 201.017406][ C0] #3: ffffffff8cb1fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 201.017450][ C0] [ 201.017450][ C0] stack backtrace: [ 201.017454][ C0] CPU: 0 PID: 6446 Comm: syz.3.387 Not tainted 5.15.173-syzkaller #0 [ 201.017471][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.017485][ C0] Call Trace: [ 201.017489][ C0] [ 201.017495][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 201.017517][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 201.017541][ C0] ? print_circular_bug+0x12b/0x1a0 [ 201.017558][ C0] check_noncircular+0x2f8/0x3b0 [ 201.017577][ C0] ? add_chain_block+0x850/0x850 [ 201.017593][ C0] ? lockdep_lock+0x11f/0x2a0 [ 201.017614][ C0] validate_chain+0x1649/0x5930 [ 201.017631][ C0] ? unwind_get_return_address+0x49/0x80 [ 201.017656][ C0] ? reacquire_held_locks+0x660/0x660 [ 201.017677][ C0] ? lockdep_lock+0x11f/0x2a0 [ 201.017692][ C0] ? lockdep_unlock+0x166/0x300 [ 201.017706][ C0] ? lockdep_lock+0x2a0/0x2a0 [ 201.017724][ C0] ? mark_lock+0x98/0x340 [ 201.017739][ C0] __lock_acquire+0x1295/0x1ff0 [ 201.017761][ C0] lock_acquire+0x1db/0x4f0 [ 201.017775][ C0] ? down_trylock+0x1c/0xa0 [ 201.017792][ C0] ? vsnprintf+0x1c70/0x1c70 [ 201.017810][ C0] ? read_lock_is_recursive+0x10/0x10 [ 201.017826][ C0] ? memcpy+0x3c/0x60 [ 201.017841][ C0] ? vsnprintf+0x1b93/0x1c70 [ 201.017859][ C0] ? _prb_commit+0x30a/0x3e0 [ 201.017876][ C0] ? prb_reserve+0x1240/0x1240 [ 201.017894][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 201.017910][ C0] ? down_trylock+0x1c/0xa0 [ 201.017927][ C0] ? _raw_spin_lock+0x40/0x40 [ 201.017945][ C0] ? vprintk_store+0xf1b/0x1300 [ 201.017962][ C0] down_trylock+0x1c/0xa0 [ 201.017981][ C0] __down_trylock_console_sem+0x105/0x250 [ 201.017998][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 201.018013][ C0] ? vprintk_emit+0xa6/0x150 [ 201.018027][ C0] ? console_trylock+0x70/0x70 [ 201.018042][ C0] ? validate_chain+0x112/0x5930 [ 201.018061][ C0] ? vprintk_emit+0xa6/0x150 [ 201.018076][ C0] console_trylock_spinning+0x8a/0x3f0 [ 201.018093][ C0] ? vprintk_emit+0x150/0x150 [ 201.018106][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 201.018123][ C0] ? validate_chain+0x112/0x5930 [ 201.018138][ C0] ? reacquire_held_locks+0x660/0x660 [ 201.018158][ C0] vprintk_emit+0xa6/0x150 [ 201.018173][ C0] _printk+0xd1/0x120 [ 201.018191][ C0] ? report_bug+0x16e/0x2e0 [ 201.018207][ C0] ? panic+0x860/0x860 [ 201.018225][ C0] ? find_bug+0x9c/0x350 [ 201.018241][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 201.018257][ C0] report_bug+0x1e5/0x2e0 [ 201.018275][ C0] handle_bug+0x3d/0x70 [ 201.018289][ C0] exc_invalid_op+0x16/0x40 [ 201.018305][ C0] asm_exc_invalid_op+0x16/0x20 [ 201.018321][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 201.018339][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 cb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 201.018353][ C0] RSP: 0000:ffffc9000354f6a0 EFLAGS: 00010046 [ 201.018366][ C0] RAX: ffffffff81aaacec RBX: 0000000000000000 RCX: ffff8880290ad940 [ 201.018379][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.018389][ C0] RBP: dffffc0000000000 R08: ffffffff81aaabfd R09: fffffbfff2131021 [ 201.018401][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 201.018412][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc9000354f708 [ 201.018431][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 201.018446][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 201.018466][ C0] bpf_probe_read_user+0x26/0x70 [ 201.018482][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x490 [ 201.018496][ C0] bpf_trace_run3+0x1d1/0x380 [ 201.018513][ C0] ? bpf_trace_run2+0x340/0x340 [ 201.018531][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 201.018549][ C0] ? _raw_spin_unlock+0x40/0x40 [ 201.018566][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 201.018583][ C0] ? _raw_spin_lock+0x40/0x40 [ 201.018599][ C0] ? __bpf_trace_timer_class+0x20/0x20 [ 201.018616][ C0] __traceiter_timer_start+0x79/0xd0 [ 201.018635][ C0] enqueue_timer+0x3ae/0x540 [ 201.018652][ C0] __mod_timer+0xa60/0xeb0 [ 201.018669][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 201.018688][ C0] ? mod_timer_pending+0x20/0x20 [ 201.018705][ C0] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 201.018722][ C0] ? _raw_read_unlock+0x40/0x40 [ 201.018737][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 201.018755][ C0] ? _raw_spin_lock+0x40/0x40 [ 201.018772][ C0] ? ktime_get+0x242/0x270 [ 201.018789][ C0] dsp_cmx_send+0x21bb/0x2240 [ 201.018807][ C0] ? read_lock_is_recursive+0x10/0x10 [ 201.018824][ C0] ? detach_timer+0x24/0x2f0 [ 201.018845][ C0] call_timer_fn+0x16d/0x560 [ 201.018860][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 201.018878][ C0] ? __run_timers+0x890/0x890 [ 201.018895][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 201.018912][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 201.018927][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 201.018945][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 201.018962][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 201.018979][ C0] __run_timers+0x67c/0x890 [ 201.018998][ C0] ? detach_timer+0x2f0/0x2f0 [ 201.019011][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 201.019030][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 201.019049][ C0] run_timer_softirq+0x63/0xf0 [ 201.019068][ C0] handle_softirqs+0x3a7/0x930 [ 201.019085][ C0] ? __irq_exit_rcu+0x157/0x240 [ 201.019101][ C0] ? do_softirq+0x240/0x240 [ 201.019118][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 201.019137][ C0] __irq_exit_rcu+0x157/0x240 [ 201.019151][ C0] ? irq_exit_rcu+0x20/0x20 [ 201.019170][ C0] irq_exit_rcu+0x5/0x20 [ 201.019183][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 201.019201][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 201.019219][ C0] RIP: 0033:0x7f124a3a3f5c [ 201.019233][ C0] Code: 31 c0 48 81 ce ff ff ff 3f 48 3b 34 c1 0f 84 3b 01 00 00 48 83 c0 01 48 83 f8 04 75 ec 31 f6 80 7c 24 1e 00 0f 85 8e 01 00 00 <41> 83 c7 01 45 3b 78 04 0f 82 6c ff ff ff 80 7b 4e 00 0f 84 17 03 [ 201.019246][ C0] RSP: 002b:00007ffe05b73cf0 EFLAGS: 00000202 [ 201.019259][ C0] RAX: 0000000000000001 RBX: 00007f124b1ba720 RCX: ffffffff81ad20fe [ 201.019270][ C0] RDX: 00000000000000fe RSI: ffffffff81ad20fe RDI: 0000000000000007 [ 201.019281][ C0] RBP: ffffffff81ad20fe R08: 00007f124a68b038 R09: 00007f124a677000 [ 201.019292][ C0] R10: 00007f1249b44008 R11: 0000000000000007 R12: 0000000000000007 [ 201.019302][ C0] R13: 0000000000000000 R14: ffffffff81ad21e3 R15: 0000000000062967 [ 201.019314][ C0] ? release_pages+0x263/0x1f40 [ 201.019331][ C0] ? release_pages+0x17e/0x1f40 [ 201.019348][ C0] ? release_pages+0x17e/0x1f40 [ 201.019364][ C0] ? release_pages+0x17e/0x1f40 [ 201.019382][ C0] [ 202.280690][ C0] WARNING: CPU: 0 PID: 6446 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 202.290086][ C0] Modules linked in: [ 202.293974][ C0] CPU: 0 PID: 6446 Comm: syz.3.387 Not tainted 5.15.173-syzkaller #0 [ 202.302022][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.312069][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 202.318219][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 cb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 202.337808][ C0] RSP: 0000:ffffc9000354f6a0 EFLAGS: 00010046 [ 202.343860][ C0] RAX: ffffffff81aaacec RBX: 0000000000000000 RCX: ffff8880290ad940 [ 202.351989][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.359946][ C0] RBP: dffffc0000000000 R08: ffffffff81aaabfd R09: fffffbfff2131021 [ 202.367899][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 202.375852][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc9000354f708 [ 202.383807][ C0] FS: 0000555582048500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 202.392717][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.399280][ C0] CR2: 00007ffef90df4a8 CR3: 0000000052fcd000 CR4: 00000000003506f0 [ 202.407239][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 202.415199][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 202.423172][ C0] Call Trace: [ 202.426448][ C0] [ 202.429366][ C0] ? __warn+0x15b/0x300 [ 202.433511][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 202.439159][ C0] ? report_bug+0x1b7/0x2e0 [ 202.443654][ C0] ? handle_bug+0x3d/0x70 [ 202.448051][ C0] ? exc_invalid_op+0x16/0x40 [ 202.452708][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 202.457715][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 202.463156][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 202.468683][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 202.474209][ C0] bpf_probe_read_user+0x26/0x70 [ 202.479147][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x490 [ 202.484676][ C0] bpf_trace_run3+0x1d1/0x380 [ 202.489338][ C0] ? bpf_trace_run2+0x340/0x340 [ 202.494173][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 202.500049][ C0] ? _raw_spin_unlock+0x40/0x40 [ 202.504878][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 202.510318][ C0] ? _raw_spin_lock+0x40/0x40 [ 202.514977][ C0] ? __bpf_trace_timer_class+0x20/0x20 [ 202.520417][ C0] __traceiter_timer_start+0x79/0xd0 [ 202.525684][ C0] enqueue_timer+0x3ae/0x540 [ 202.530273][ C0] __mod_timer+0xa60/0xeb0 [ 202.534672][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 202.540894][ C0] ? mod_timer_pending+0x20/0x20 [ 202.545813][ C0] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 202.551688][ C0] ? _raw_read_unlock+0x40/0x40 [ 202.556518][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 202.561969][ C0] ? _raw_spin_lock+0x40/0x40 [ 202.566630][ C0] ? ktime_get+0x242/0x270 [ 202.571027][ C0] dsp_cmx_send+0x21bb/0x2240 [ 202.575690][ C0] ? read_lock_is_recursive+0x10/0x10 [ 202.581042][ C0] ? detach_timer+0x24/0x2f0 [ 202.585615][ C0] call_timer_fn+0x16d/0x560 [ 202.590186][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 202.595279][ C0] ? __run_timers+0x890/0x890 [ 202.599935][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 202.605116][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 202.610292][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 202.615393][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 202.620571][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 202.625663][ C0] __run_timers+0x67c/0x890 [ 202.630154][ C0] ? detach_timer+0x2f0/0x2f0 [ 202.634808][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 202.640792][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 202.646060][ C0] run_timer_softirq+0x63/0xf0 [ 202.650806][ C0] handle_softirqs+0x3a7/0x930 [ 202.655551][ C0] ? __irq_exit_rcu+0x157/0x240 [ 202.660389][ C0] ? do_softirq+0x240/0x240 [ 202.664872][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 202.670056][ C0] __irq_exit_rcu+0x157/0x240 [ 202.674711][ C0] ? irq_exit_rcu+0x20/0x20 [ 202.679195][ C0] irq_exit_rcu+0x5/0x20 [ 202.683423][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 202.689048][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 202.695014][ C0] RIP: 0033:0x7f124a3a3f5c [ 202.699409][ C0] Code: 31 c0 48 81 ce ff ff ff 3f 48 3b 34 c1 0f 84 3b 01 00 00 48 83 c0 01 48 83 f8 04 75 ec 31 f6 80 7c 24 1e 00 0f 85 8e 01 00 00 <41> 83 c7 01 45 3b 78 04 0f 82 6c ff ff ff 80 7b 4e 00 0f 84 17 03 [ 202.719004][ C0] RSP: 002b:00007ffe05b73cf0 EFLAGS: 00000202 [ 202.725051][ C0] RAX: 0000000000000001 RBX: 00007f124b1ba720 RCX: ffffffff81ad20fe [ 202.733002][ C0] RDX: 00000000000000fe RSI: ffffffff81ad20fe RDI: 0000000000000007 [ 202.740956][ C0] RBP: ffffffff81ad20fe R08: 00007f124a68b038 R09: 00007f124a677000 [ 202.748909][ C0] R10: 00007f1249b44008 R11: 0000000000000007 R12: 0000000000000007 [ 202.756862][ C0] R13: 0000000000000000 R14: ffffffff81ad21e3 R15: 0000000000062967 [ 202.764827][ C0] ? release_pages+0x263/0x1f40 [ 202.769695][ C0] ? release_pages+0x17e/0x1f40 [ 202.774550][ C0] ? release_pages+0x17e/0x1f40 [ 202.779394][ C0] ? release_pages+0x17e/0x1f40 [ 202.784255][ C0] [ 202.787282][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 202.794544][ C0] CPU: 0 PID: 6446 Comm: syz.3.387 Not tainted 5.15.173-syzkaller #0 [ 202.802685][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.812725][ C0] Call Trace: [ 202.815991][ C0] [ 202.818916][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 202.823692][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 202.829331][ C0] ? panic+0x860/0x860 [ 202.833394][ C0] ? panic+0x860/0x860 [ 202.837622][ C0] ? copy_from_user_nofault+0x70/0x1c0 [ 202.843085][ C0] ? copy_from_user_nofault+0x70/0x1c0 [ 202.848525][ C0] panic+0x318/0x860 [ 202.852408][ C0] ? __warn+0x16a/0x300 [ 202.856552][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 202.861733][ C0] ? release_pages+0x17e/0x1f40 [ 202.866567][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 202.872097][ C0] __warn+0x2b2/0x300 [ 202.876062][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 202.881588][ C0] report_bug+0x1b7/0x2e0 [ 202.885907][ C0] handle_bug+0x3d/0x70 [ 202.890043][ C0] exc_invalid_op+0x16/0x40 [ 202.894527][ C0] asm_exc_invalid_op+0x16/0x20 [ 202.899371][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 202.905532][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 cb c6 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b4 c6 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 202.925135][ C0] RSP: 0000:ffffc9000354f6a0 EFLAGS: 00010046 [ 202.931201][ C0] RAX: ffffffff81aaacec RBX: 0000000000000000 RCX: ffff8880290ad940 [ 202.939163][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.947118][ C0] RBP: dffffc0000000000 R08: ffffffff81aaabfd R09: fffffbfff2131021 [ 202.955071][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 202.963023][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc9000354f708 [ 202.970980][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 202.976434][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 202.981971][ C0] bpf_probe_read_user+0x26/0x70 [ 202.986907][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0x490 [ 202.992455][ C0] bpf_trace_run3+0x1d1/0x380 [ 202.997134][ C0] ? bpf_trace_run2+0x340/0x340 [ 203.001975][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 203.007878][ C0] ? _raw_spin_unlock+0x40/0x40 [ 203.012739][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 203.018344][ C0] ? _raw_spin_lock+0x40/0x40 [ 203.023019][ C0] ? __bpf_trace_timer_class+0x20/0x20 [ 203.028466][ C0] __traceiter_timer_start+0x79/0xd0 [ 203.033754][ C0] enqueue_timer+0x3ae/0x540 [ 203.038354][ C0] __mod_timer+0xa60/0xeb0 [ 203.042784][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 203.049028][ C0] ? mod_timer_pending+0x20/0x20 [ 203.053962][ C0] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 203.059877][ C0] ? _raw_read_unlock+0x40/0x40 [ 203.064715][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 203.070162][ C0] ? _raw_spin_lock+0x40/0x40 [ 203.074824][ C0] ? ktime_get+0x242/0x270 [ 203.079232][ C0] dsp_cmx_send+0x21bb/0x2240 [ 203.083902][ C0] ? read_lock_is_recursive+0x10/0x10 [ 203.089255][ C0] ? detach_timer+0x24/0x2f0 [ 203.093832][ C0] call_timer_fn+0x16d/0x560 [ 203.098408][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 203.103612][ C0] ? __run_timers+0x890/0x890 [ 203.108273][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 203.113562][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 203.118753][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 203.123866][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 203.129051][ C0] ? dsp_cmx_receive+0x1370/0x1370 [ 203.134150][ C0] __run_timers+0x67c/0x890 [ 203.138650][ C0] ? detach_timer+0x2f0/0x2f0 [ 203.143306][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 203.149290][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 203.154478][ C0] run_timer_softirq+0x63/0xf0 [ 203.159229][ C0] handle_softirqs+0x3a7/0x930 [ 203.163974][ C0] ? __irq_exit_rcu+0x157/0x240 [ 203.168806][ C0] ? do_softirq+0x240/0x240 [ 203.173294][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 203.178479][ C0] __irq_exit_rcu+0x157/0x240 [ 203.183136][ C0] ? irq_exit_rcu+0x20/0x20 [ 203.187622][ C0] irq_exit_rcu+0x5/0x20 [ 203.191860][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 203.197477][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 203.203439][ C0] RIP: 0033:0x7f124a3a3f5c [ 203.207843][ C0] Code: 31 c0 48 81 ce ff ff ff 3f 48 3b 34 c1 0f 84 3b 01 00 00 48 83 c0 01 48 83 f8 04 75 ec 31 f6 80 7c 24 1e 00 0f 85 8e 01 00 00 <41> 83 c7 01 45 3b 78 04 0f 82 6c ff ff ff 80 7b 4e 00 0f 84 17 03 [ 203.227447][ C0] RSP: 002b:00007ffe05b73cf0 EFLAGS: 00000202 [ 203.233511][ C0] RAX: 0000000000000001 RBX: 00007f124b1ba720 RCX: ffffffff81ad20fe [ 203.241494][ C0] RDX: 00000000000000fe RSI: ffffffff81ad20fe RDI: 0000000000000007 [ 203.249452][ C0] RBP: ffffffff81ad20fe R08: 00007f124a68b038 R09: 00007f124a677000 [ 203.257405][ C0] R10: 00007f1249b44008 R11: 0000000000000007 R12: 0000000000000007 [ 203.265445][ C0] R13: 0000000000000000 R14: ffffffff81ad21e3 R15: 0000000000062967 [ 203.273397][ C0] ? release_pages+0x263/0x1f40 [ 203.278237][ C0] ? release_pages+0x17e/0x1f40 [ 203.283066][ C0] ? release_pages+0x17e/0x1f40 [ 203.287894][ C0] ? release_pages+0x17e/0x1f40 [ 203.292729][ C0] [ 203.295946][ C0] Kernel Offset: disabled [ 203.300253][ C0] Rebooting in 86400 seconds..