last executing test programs: 2m27.131582042s ago: executing program 1 (id=100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x7, 0x86be}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x800) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB], 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x0, 0x0) 2m24.168755641s ago: executing program 1 (id=106): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x18, 0x413, 0x0, 0x25dfdbfb, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x44}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000}, {0x0, 0x0, 0x0, 0x5}, {}, 0xfffffffe, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x4840) 2m22.970469809s ago: executing program 1 (id=109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) getdents(r3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m22.546650601s ago: executing program 4 (id=112): socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x18, 0x7, 0x80000001) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r3, 0x0, 0x1}, 0x18) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000440)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'lblc\x00', 0x1, 0x2, 0x6f}, 0x2c) modify_ldt$write(0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lblc\x00', 0x4, 0x8, 0x77}, {@local, 0x4e21, 0x2, 0x400000cd, 0x12d5f, 0xd}}, 0x44) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f00000002c0)={{0x0, 0x3}, 0x1, 0x2, 0x44, {0x5, 0x6}, 0x3, 0x3e7}) 2m21.460704968s ago: executing program 4 (id=114): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 2m19.451001261s ago: executing program 4 (id=120): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, &(0x7f0000002640)) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2043}}}, 0x7) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r6, 0x101, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8045}, 0x4004040) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x13, r2, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20010}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2m18.505623428s ago: executing program 1 (id=124): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240), 0x3, 0x45b, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTJL217dfYq0vfVGjVQy+JE1atQcvioIHBcFLPcYkLbXbRpoIthStIvUoBcGjeBT8CzzpRdST4FXvUijSi9XTyuzOdF+6u0nTTabNfj4w2eeZeWbn+c4zz+4z82QDGFjj2Z8kYmdE/B4Ro/Vsa4Hx+sv1axfm/rl2YS6JavWtv5Jaub+vXZgrihb77cgzE2lE+mkS+zscd+nc+VOzlcrC2Tw/tXz6vamlc+efPXl69sTCiYUzM0ePHjk8/cLzM8/1Jc57srru+3DxwN7X3r78xtyxy+/8/G1SxN8WR5+M99r4RLXa58OVa1dTOhlexQ5D61gZVi1rhqy5Rmr9fzSGotF4o/HqJ6VWDlhX1VyXzRerwCaWRNk1AMpRfNFn97/FsnGjj/Jdfal+A5TFfT1f6luGI83LjLTd3/bTeEQcu/jvV9kS6/McAgCgxffZ+OeZTuO/NO5vKvf/2FqbGxrL51J2R8S9EbEnIu6LqJV9ICIe7HSQHhMC7ZMkN49/0itrj25l2fjvxXxuq3X8V4z+Ymwoz+2qxT+SHD9ZWThUOycREzGyNctP9zjGD6/89nm3bc3jv2zJjl+MBfN6XBne2rrP/Ozy7O3E3OzqxxH7hjvFn9yYCUgiYm9E7FvjMU4+9c2BbttWjr+H1cwzraD6dcST9fa/GG3xF5Le85NT/4vKwqGp4qq42S+/Xnqz2/FvK/4+yNp/e8fr/0b8Y0nzfO3Srbx7vXdf+uOzrvc0k2u6/hsrtuSvH8wuL5+djtiSvF6vdPP6mca+Rb4on8U/cbBz/98djTOxPyKyi/ihiHg4Ih7Jo3s0Ih6LiIM9zsJPLz/+bq8zVHb7z7e1/1hrkbb2byS2RPuazomhUz9+1/qOjeTqPv+O1FIT+Zra59+XveNaTb1u9WoGAACAu1UaETsjSSdvpNN0crL+P/x7YntaWVxafvr44vtn5uu/ERiLkbR40jXa9Dx0Or+tL/IzbfnD+XPjL4a21fKTc4uV+bKDhwG3o0v/z/zpNxqw+fVhHg24S+n/MLj0fxhc+j8Mrg79f1sZ9QA2Xqfv/49KqAew8dr6v2k/GCDu/2Fw6f8wuJr7f1JiPYANtbQtVv6R/GZIVKvV6h1Qjc2TiPSOqEZ/Esk694KdZQd464myP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6478AAAD//+Jk61o=") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x841c00, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) utimes(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) rmdir(0x0) creat(0x0, 0x90) r1 = dup(0xffffffffffffffff) bind$bt_l2cap(r1, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400)=@known='user.incfs.metadata\x00') 2m17.721939823s ago: executing program 4 (id=126): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0xfe, 0x269, &(0x7f0000000780)="$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") mkdirat(r0, 0x0, 0xfc) syz_emit_ethernet(0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x20, &(0x7f0000000a00)=ANY=[], 0x10, 0x1c4, &(0x7f0000000440)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2m17.248756356s ago: executing program 1 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {}, {0xffe0, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m16.806164909s ago: executing program 4 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00009bb000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0xaaaaaaaaaaaab9f, 0x61, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000280)=@x86={0x1, 0x6, 0xc7, 0x0, 0x7f, 0x6, 0xc6, 0x0, 0x82, 0xf7, 0xff, 0x2, 0x0, 0xfffffffd, 0x7, 0x6, 0xf7, 0xe, 0x6, '\x00', 0x9, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m16.139395883s ago: executing program 1 (id=132): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2m15.383037628s ago: executing program 32 (id=132): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 2m8.321586303s ago: executing program 4 (id=150): socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x18, 0x7, 0x80000001) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r3, 0x0, 0x1}, 0x18) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000440)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'lblc\x00', 0x1, 0x2, 0x6f}, 0x2c) modify_ldt$write(0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lblc\x00', 0x4, 0x8, 0x77}, {@local, 0x4e21, 0x2, 0x400000cd, 0x12d5f, 0xd}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f00000002c0)={{0x0, 0x3}, 0x1, 0x2, 0x44, {0x5, 0x6}, 0x3, 0x3e7}) 2m8.086356765s ago: executing program 33 (id=150): socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x18, 0x7, 0x80000001) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r3, 0x0, 0x1}, 0x18) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000440)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'lblc\x00', 0x1, 0x2, 0x6f}, 0x2c) modify_ldt$write(0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lblc\x00', 0x4, 0x8, 0x77}, {@local, 0x4e21, 0x2, 0x400000cd, 0x12d5f, 0xd}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f00000002c0)={{0x0, 0x3}, 0x1, 0x2, 0x44, {0x5, 0x6}, 0x3, 0x3e7}) 1m41.182407768s ago: executing program 3 (id=227): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e22, 0x5b, @mcast1}, 0x1c) 1m40.98484278s ago: executing program 3 (id=229): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @random="40cdd5ae7ea4"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10c, 0x0, 0x0, &(0x7f0000000180)) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1m39.653581528s ago: executing program 3 (id=234): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r3 = syz_open_procfs(r0, &(0x7f0000000100)='net/udplite6\x00') read$FUSE(r3, &(0x7f0000002f40)={0x2020}, 0x2020) 1m38.413116196s ago: executing program 3 (id=236): syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x5}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={0xffffffffffffffff, r1}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) 1m36.873128926s ago: executing program 3 (id=239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x400000000000150, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = msgget(0x0, 0x2c4) rseq(&(0x7f0000000180), 0x20, 0x0, 0x0) msgsnd(r4, &(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x2000, 0x0) msgctl$IPC_RMID(r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40085}, 0x0) 1m33.459752088s ago: executing program 3 (id=251): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x55b, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000280)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@minixdf}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x459, &(0x7f0000000900)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd00", 0x22) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) 1m17.955315617s ago: executing program 34 (id=251): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000280)={[{@noblock_validity}, {@dioread_lock}, {@nobh}, {@minixdf}, {@acl}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x459, &(0x7f0000000900)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd00", 0x22) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x36f0516f) 1m1.110859186s ago: executing program 5 (id=325): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x8, 0x64, 0x0}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@secondary) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) r5 = dup3(r0, r1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000100)={0x87, 0x2, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0xff, 0xc, [0x8]}}]}, 0x20) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) 55.101103975s ago: executing program 5 (id=339): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map, 0x5, 0x1, 0xd76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='+pid'], 0x6) syz_clone(0xc000000, &(0x7f0000000200)="48534bf23059f9eb9beb274051dac98d21b96d8fa1a83ff77acdb18b7bbfb3802836c03f", 0x24, &(0x7f0000000280), &(0x7f0000000400), &(0x7f0000000500)="13ef99f6ebaf376bd48bbff903c128f83e79e70847a5fc9048b9e7726ea8ae3e8bfb965e4c482aa1479f9e9b5f83d7ad29625a10d37e49c57e52535d83c109cf440c0e4f1a0c8f386c50c448a4b3f03a2213331551ef9dad99f03053368295c3fe2a5663e54ea7c1e6288f70dcc732c0bd69c3dd59a4ae0b2d4a27a9d94b426a8b78aab02848e3dfa09a600cbe0ac188e30c180f28fdbd98ce3081ac6aacce6289fa80d0c075ba18b0f681765b13c41efd8efd6f98") 55.058139845s ago: executing program 5 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'netdevsim0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xfdef) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 52.7215561s ago: executing program 5 (id=344): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@nombcache}, {@barrier_val={'barrier', 0x3d, 0x3ff}}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@data_ordered}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00c9000201b14d"], 0x22) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) open(0x0, 0x1c1242, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 50.805155963s ago: executing program 5 (id=348): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) syz_emit_vhci(0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x8002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) 49.492761901s ago: executing program 5 (id=349): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={r6, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) bind$tipc(r0, 0x0, 0x0) 42.149497828s ago: executing program 6 (id=366): r0 = io_uring_setup(0x75f2, &(0x7f0000000040)={0x0, 0x340a, 0x800, 0x1, 0x323}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 41.88129237s ago: executing program 6 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000407, &(0x7f00000008c0)={[{@i_version}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5eb, &(0x7f0000000dc0)="$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") 40.23462607s ago: executing program 6 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0xffe0, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 35.794472159s ago: executing program 6 (id=377): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000003c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r4, @ANYRESHEX=r2, @ANYBLOB="1e1456b97f43020078423fad8569494e28e58bd88d6b502cfe943956d9f8efde4f8659ce67cc37b7e1d988638175e2db1b654dccc1a203850b09873b0184822257d4c12aaf0b5efe2105301b585b58256d90fffa59ece5882178fb533b8ed99c4c2c6d1ba6d7f5dac0cad0eaeee76479fb488f67037b1b2a880c53fe952d632ba034c8d2758f1bd92565024144b0862cb3639c534e323806be01dd7a6252a5999b81aa1f34d13acf872bbbfc5bb3bd8b2cfe4db9838e94", @ANYRESOCT=r4], 0x81, 0x14f5, &(0x7f0000001580)="$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") syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r5], 0x40c}}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 33.904720121s ago: executing program 35 (id=349): r0 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={r6, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) bind$tipc(r0, 0x0, 0x0) 33.899906561s ago: executing program 6 (id=383): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) 32.385135051s ago: executing program 6 (id=385): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x3, 0x100, 0xee21, 0x8000, 0xfffffff8, 0x0, 0x0, 0x25, 0x7, 0x244, 0x101, 0x1, 0xed, 0xfb}) 32.128155163s ago: executing program 36 (id=385): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, &(0x7f0000000040)={0x3, 0x100, 0xee21, 0x8000, 0xfffffff8, 0x0, 0x0, 0x25, 0x7, 0x244, 0x101, 0x1, 0xed, 0xfb}) 19.478556964s ago: executing program 2 (id=409): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000140)={0x20, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 16.216771985s ago: executing program 2 (id=413): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = gettid() unshare(0x22020600) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 15.299956031s ago: executing program 2 (id=416): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f00000012c0)="$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") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x57ad) 14.997483803s ago: executing program 0 (id=418): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) listen(0xffffffffffffffff, 0xfff) close_range(r0, 0xffffffffffffffff, 0x0) 14.832557904s ago: executing program 0 (id=419): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}]) 14.630285545s ago: executing program 2 (id=421): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xfffe, [0x200000, 0xffdfffff], 0x1}, 0x10) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000480)=""/254, 0xfe}, 0x53b}], 0x1, 0x40010100, &(0x7f0000000580)) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000680)="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", 0x112}], 0x1) r2 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000080)=0xfffffffffffffeda) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000140)=0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$TCFLSH(r3, 0x400455c8, 0x4) 13.721582402s ago: executing program 0 (id=422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)) stat(0x0, &(0x7f00000003c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 13.005754366s ago: executing program 0 (id=424): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000040)={0xfffe, [0x200000, 0xffdfffff], 0x1}, 0x10) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000480)=""/254, 0xfe}, 0x53b}], 0x1, 0x40010100, &(0x7f0000000580)) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000680)="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", 0x112}], 0x1) r2 = accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000080)=0xfffffffffffffeda) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000140)=0x3) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$TCFLSH(r3, 0x400455c8, 0x4) 10.187658534s ago: executing program 7 (id=430): dup(0xffffffffffffffff) r0 = io_uring_setup(0x486c, &(0x7f00000005c0)={0x0, 0x972e, 0x2, 0x1, 0x235}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 9.627553138s ago: executing program 7 (id=432): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x2eda) r4 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 8.942548932s ago: executing program 7 (id=433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)) stat(0x0, &(0x7f00000003c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 6.976632645s ago: executing program 8 (id=437): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f0000000200)={[{@grpquota}, {@user_xattr}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 6.772210356s ago: executing program 9 (id=438): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x229, &(0x7f0000000000)="$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") llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6.618413497s ago: executing program 8 (id=439): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r1 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socket$isdn(0x22, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000200)='ubifs\x00', 0x1) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001dc0), 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto(r1, &(0x7f00000006c0)="120000001200e796e99d10ef007b00000000", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r8 = dup(r0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r9, &(0x7f0000000500)=[{&(0x7f0000000080)="fe1443d038447e1b2b19fa7dd58259bb8142dc67428bd676884880e4d510768f8bc0933432624375982ebf2c34b1b70b420a52fe451563", 0x37}], 0x1) ioctl$SG_BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0xedd, 0x75, 0x2, 0x4010002, 0x7}) write$vhost_msg(r8, &(0x7f0000000380)={0x1, {0x0, 0x0, 0x0, 0x3, 0x1}}, 0x48) 6.593009937s ago: executing program 9 (id=440): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x2, 0x1f5, &(0x7f00000002c0)="$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") write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r0 = syz_open_procfs(0x0, 0x0) read$FUSE(r0, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x8) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="fdba1224ef2a829525ded658d91855d08ec1d28da36c968f6d0f2f83ae4e045a6319d24bbf7ada106db0b0938558e4a6691bb4838a24ccb0e61181f3b626bcc5eb70c809668cfea38c07734eff416b20a20406441c4052dfc1aa2a9f7fee484630fe04d88c45a099a5d6eb81984d2f904dc0263828dd215ace537edea0c5b7b132dd7fc4c9a44041fe0ea4fe8656f695785fa5e7f39f3eb05a4df9d9a3e8e28f4b627a646be7add16f256534d4a4a05800000000000000001b4a2743ca62445ea4825726fe01db2632", @ANYRES32, @ANYRESOCT], 0x4, 0x2d0, &(0x7f0000000740)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip6_tables_matches\x00') r2 = fanotify_init(0x0, 0x80000) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x54) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r2, 0x1, 0x40001019, r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents(r1, 0x0, 0x0) 5.460336735s ago: executing program 8 (id=441): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8010) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) ioctl$SNDCTL_SYNTH_INFO(r1, 0xc08c5102, &(0x7f0000000300)={"8589d519005b4b1cee225185740b12df911877325503af8c1e903c279166", 0x2, 0x2, 0x401, 0x4, 0xfffff829, 0x7, 0x3, 0x3, [0x7, 0x101, 0xd1, 0x5, 0xfffff800, 0xff, 0xfff, 0x3, 0x100, 0x5, 0x5, 0x9, 0x0, 0x10000, 0x3ff, 0x7, 0x2, 0x5, 0x2]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x103) mount$cgroup(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@name={'name', 0x3d, 'user_.'}}, {@name={'name', 0x3d, 'user_.'}}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000480)={@random="00000000d465", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 5.442593015s ago: executing program 7 (id=442): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f00000012c0)="$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") open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) ftruncate(r1, 0x57ad) 4.772546399s ago: executing program 9 (id=443): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x2eda) r4 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 4.64469049s ago: executing program 8 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1000407, &(0x7f00000008c0)={[{@i_version}, {@norecovery}, {@orlov}, {@oldalloc}]}, 0x0, 0x5eb, &(0x7f0000000dc0)="$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") 4.068715804s ago: executing program 9 (id=445): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.08524081s ago: executing program 7 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$UHID_INPUT(r2, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaab0c, 0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.99202992s ago: executing program 9 (id=447): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00'}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) gettid() unshare(0x22020600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r2, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) 1.582320579s ago: executing program 9 (id=448): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb5, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x40, 0x80, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0x3a, {0x9, 0x21, 0x3ff, 0x7, 0x1, {0x22, 0xfe2}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x2, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x8, 0x2, 0x3, 0x10, 0x5}, 0xdb, &(0x7f0000000400)={0x5, 0xf, 0xdb, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "f7eec32a534b307715c105f190e99b79"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x6, 0xf}, @generic={0x9c, 0x10, 0x2, "3446a896442df669a0b13a1b2632a7900a4c80a5d8d4f5951f6a194f8b6e5a6b68d5f28f71beb16b49927c0eaddfd5cbd4c7a2985bd387f0dc41d248c77e8c52eecf60475d06b99d8da55fd428392c464e80cabade522cb1ee8a37b2ffa020eb74e55e2e2a4639b92dfcf08b3fd91711208d9abf141e5f6a56da82a71f332e272e51d8f4d7e7339d74a003009d0d5f26c03b3dca1c2c321ad9"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8c, 0x7, 0x6, 0x515c, 0x42}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "6d87da9e380d0ea44c85b6ea7573ae4e"}]}}) close(0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) shutdown(r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", '\x00\x00\t\x00', "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x400) 1.56127615s ago: executing program 2 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a00f2"], 0x2c}}, 0x0) 1.43731379s ago: executing program 0 (id=450): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000002940)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 1.331442931s ago: executing program 8 (id=451): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r1 = socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socket$isdn(0x22, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000240)={[{'noacl'}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000200)='ubifs\x00', 0x1) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001dc0), 0x4, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r6}, './file1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto(r1, &(0x7f00000006c0)="120000001200e796e99d10ef007b00000000", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r8 = dup(r0) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r9, &(0x7f0000000500)=[{&(0x7f0000000080)="fe1443d038447e1b2b19fa7dd58259bb8142dc67428bd676884880e4d510768f8bc0933432624375982ebf2c34b1b70b420a52fe451563", 0x37}], 0x1) ioctl$SG_BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0xedd, 0x75, 0x2, 0x4010002, 0x7}) write$vhost_msg(r8, &(0x7f0000000380)={0x1, {0x0, 0x0, 0x0, 0x3, 0x1}}, 0x48) 1.246990842s ago: executing program 0 (id=452): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r1, &(0x7f0000002080)=""/4108, 0x100c) getdents64(r1, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)) stat(0x0, &(0x7f00000003c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 1.197249042s ago: executing program 2 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6ca0985e51e7993e, 0x8031, 0xffffffffffffffff, 0x2d6fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0\x00') setxattr$trusted_overlay_opaque(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) 1.147703112s ago: executing program 7 (id=454): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, r1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) get_robust_list(r2, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000e5", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf2546000000"], 0x14}}, 0x48800) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101900, 0xdc) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r5, &(0x7f0000000000)='\"', 0x1) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) unlink(&(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000240)='./file1\x00') 0s ago: executing program 8 (id=455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0xc0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000001c0)=r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="980100001a000100000000000000000000000000000000000000ffff00000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000010000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0001000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000000c00080008000800000000001c0004000000000000000000fc01000000000000000000000000000108001600000000004c00120061656769733132386c2d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c00"], 0x198}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r5, 0x16, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r7}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000008, 0x10, 0xffffffffffffffff, 0xa5913000) getsockopt$sock_timeval(r8, 0x1, 0x14, 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): oth: hci2: command 0x040f tx timeout [ 66.766405][ T4221] Bluetooth: hci1: command 0x040f tx timeout [ 66.792020][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.804185][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.816031][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.821412][ T4221] Bluetooth: hci0: command 0x040f tx timeout [ 66.827288][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.843532][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.854376][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.866419][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.915832][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.926971][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.935550][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.944403][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.952403][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.961127][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.972457][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.983325][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.993275][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.006508][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.016684][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.027493][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.039077][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.076406][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.086037][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.094991][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.105354][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.116365][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.128892][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.137661][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.146459][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.178938][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.179802][ T4175] device veth0_macvtap entered promiscuous mode [ 67.196136][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.208584][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.220405][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.237879][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.246842][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.268839][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.276272][ T4175] device veth1_macvtap entered promiscuous mode [ 67.284036][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.301639][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.310803][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.339431][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.351192][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.361637][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.373516][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.383780][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.394555][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.404722][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.415509][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.426953][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.441614][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.451693][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.486632][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.497473][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.508309][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.519063][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.529604][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.540161][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.550221][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.560686][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.572182][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.598007][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.605101][ T4229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.610286][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.624054][ T4229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.628040][ T4175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.642072][ T4175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.651245][ T4175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.661072][ T4175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.687915][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.705017][ T415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.715614][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.733486][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.743032][ T415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.762116][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.785302][ T4218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.874271][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.882315][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.909393][ T4229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.911215][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.939949][ T4229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.969293][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.994576][ T415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.032272][ T415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.051594][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.071434][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.099724][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.139441][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.413462][ T4263] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'. [ 69.159905][ T4219] Bluetooth: hci1: command 0x0419 tx timeout [ 69.166497][ T4219] Bluetooth: hci2: command 0x0419 tx timeout [ 69.173899][ T4219] Bluetooth: hci3: command 0x0419 tx timeout [ 69.180055][ T4219] Bluetooth: hci4: command 0x0419 tx timeout [ 69.186917][ T1335] Bluetooth: hci0: command 0x0419 tx timeout [ 69.557468][ T4275] device syzkaller0 entered promiscuous mode [ 70.656164][ T4294] netlink: 'syz.3.13': attribute type 6 has an invalid length. [ 71.149170][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 71.182533][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 71.197509][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! [ 71.212537][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.222537][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.233508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.242555][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 71.251571][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.262534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.272549][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 71.704311][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.711347][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.790388][ T4306] Zero length message leads to an empty skb [ 72.040341][ T4308] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17'. [ 74.256029][ T4325] device syzkaller0 entered promiscuous mode [ 76.003547][ T26] audit: type=1326 audit(1741600515.413:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4334 comm="syz.0.28" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa73175169 code=0x0 [ 76.370301][ T4350] netlink: 44 bytes leftover after parsing attributes in process `syz.0.29'. [ 78.767321][ T26] audit: type=1326 audit(1741600519.403:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4371 comm="syz.0.39" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa73175169 code=0x0 [ 79.823322][ T4398] netlink: 44 bytes leftover after parsing attributes in process `syz.0.44'. [ 81.888566][ T13] cfg80211: failed to load regulatory.db [ 82.355385][ T26] audit: type=1326 audit(1741600522.993:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4414 comm="syz.2.54" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d4d95e169 code=0x0 [ 83.874325][ T4450] loop4: detected capacity change from 0 to 512 [ 84.001858][ T4450] loop4: detected capacity change from 0 to 512 [ 84.369063][ T4450] EXT4-fs (loop4): Ignoring removed nobh option [ 84.741618][ T4462] loop2: detected capacity change from 0 to 1024 [ 84.757358][ T4450] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 84.777566][ T4450] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 84.792436][ T4450] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #13: comm syz.4.66: casefold flag without casefold feature [ 84.825800][ T4450] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.66: couldn't read orphan inode 13 (err -117) [ 84.854225][ T4450] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue. Quota mode: writeback. [ 85.083505][ T26] audit: type=1326 audit(1741600525.723:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4463 comm="syz.0.70" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa73175169 code=0x0 [ 85.918616][ T4487] loop0: detected capacity change from 0 to 256 [ 86.174040][ T2283] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.823662][ T4487] ======================================================= [ 86.823662][ T4487] WARNING: The mand mount option has been deprecated and [ 86.823662][ T4487] and is ignored by this kernel. Remove the mand [ 86.823662][ T4487] option from the mount to silence this warning. [ 86.823662][ T4487] ======================================================= [ 86.894141][ T13] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.958173][ T4487] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.981830][ T4487] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 86.992666][ T2283] usb 5-1: Using ep0 maxpacket: 16 [ 87.039453][ T4487] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 87.182819][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 87.269888][ T2283] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 87.330829][ T2283] usb 5-1: config 0 has no interface number 0 [ 87.344498][ T2283] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 87.354648][ T2283] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 87.415586][ T2283] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 87.763154][ T2283] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 87.976297][ T13] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 87.985187][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.995770][ T13] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.023121][ T2283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.040129][ T2283] usb 5-1: Product: syz [ 88.079865][ T2283] usb 5-1: Manufacturer: syz [ 88.105291][ T2283] usb 5-1: SerialNumber: syz [ 88.165141][ T2283] usb 5-1: config 0 descriptor?? [ 88.213569][ T4473] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.221006][ T4473] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.392862][ T13] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 88.416560][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.426960][ T2283] usb 5-1: USB disconnect, device number 2 [ 88.453696][ T13] usb 2-1: Product: syz [ 88.479482][ T26] audit: type=1326 audit(1741600529.113:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84e8b9169 code=0x7ffc0000 [ 88.483983][ T13] usb 2-1: Manufacturer: syz [ 88.562779][ T4522] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 88.657178][ T26] audit: type=1326 audit(1741600529.113:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc84e8b9169 code=0x7ffc0000 [ 88.851957][ T26] audit: type=1326 audit(1741600529.113:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84e8b9169 code=0x7ffc0000 [ 88.941856][ T13] usb 2-1: SerialNumber: syz [ 89.002762][ T13] usb 2-1: can't set config #1, error -71 [ 89.013863][ T13] usb 2-1: USB disconnect, device number 2 [ 89.492585][ T26] audit: type=1326 audit(1741600529.173:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84e8b9169 code=0x7ffc0000 [ 89.598421][ T4534] loop0: detected capacity change from 0 to 512 [ 89.655895][ T4533] syzkaller0: create flow: hash 2226727086 index 1 [ 89.691647][ T26] audit: type=1326 audit(1741600529.263:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fc84e8b9169 code=0x7ffc0000 [ 89.714178][ T26] audit: type=1326 audit(1741600529.263:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84e8b9169 code=0x7ffc0000 [ 89.736456][ T26] audit: type=1326 audit(1741600529.263:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.4.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc84e8b9169 code=0x7ffc0000 [ 89.770007][ T4534] EXT4-fs (loop0): Ignoring removed nobh option [ 89.821880][ T4534] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 89.880193][ T4534] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 89.906271][ T1108] syzkaller0: tun_net_xmit 76 [ 89.913322][ T1108] syzkaller0: tun_net_xmit 48 [ 89.936220][ T4534] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.90: Corrupt directory, running e2fsck is recommended [ 89.974986][ T4534] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 89.988408][ T4534] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.90: corrupted in-inode xattr [ 90.011692][ T4534] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.90: couldn't read orphan inode 15 (err -117) [ 90.024582][ T4525] syzkaller0: delete flow: hash 2226727086 index 1 [ 90.056327][ T4540] loop4: detected capacity change from 0 to 256 [ 90.078230][ T4534] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,nogrpid,jqfmt=vfsold,auto_da_alloc,grpjquota=.journal_checksum,max_batch_time=0x000000000000000e,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 90.164567][ T4534] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.194891][ T4540] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.243540][ T4534] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 90.342685][ T4534] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.90: Corrupt directory, running e2fsck is recommended [ 90.420144][ T4545] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.462726][ T4545] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 90.512739][ T4545] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.90: Corrupt directory, running e2fsck is recommended [ 90.645147][ T4534] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.693280][ T4534] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 90.723411][ T4534] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.90: Corrupt directory, running e2fsck is recommended [ 90.775102][ T4545] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 91.793117][ T4565] loop4: detected capacity change from 0 to 1024 [ 91.862069][ T4565] hfsplus: unable to parse mount options [ 92.568751][ T4568] loop0: detected capacity change from 0 to 8192 [ 93.945848][ T4581] loop3: detected capacity change from 0 to 1024 [ 94.012017][ T4581] EXT4-fs (loop3): Ignoring removed bh option [ 94.095928][ T4581] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 94.108265][ T4568] process 'syz.0.99' launched './file1' with NULL argv: empty string added [ 94.187275][ T4573] loop4: detected capacity change from 0 to 256 [ 94.332884][ T4573] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 94.385861][ T4573] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 94.449780][ T4573] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 94.465883][ T4573] UDF-fs: Scanning with blocksize 512 failed [ 94.504509][ T4573] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 94.589422][ T4573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.864765][ T4595] netlink: 68 bytes leftover after parsing attributes in process `syz.1.106'. [ 95.412559][ T4252] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.682754][ T4252] usb 4-1: device descriptor read/64, error -71 [ 95.712104][ T4597] loop0: detected capacity change from 0 to 128 [ 95.902412][ T4601] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.961768][ T4597] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.982701][ T4252] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 96.088957][ T4597] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.292564][ T4252] usb 4-1: device descriptor read/64, error -71 [ 96.540073][ T4252] usb usb4-port1: attempt power cycle [ 99.137758][ T4639] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 100.417246][ T4657] loop1: detected capacity change from 0 to 512 [ 100.544229][ T4657] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.618292][ T4657] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.771277][ T4657] EXT4-fs (loop1): 1 orphan inode deleted [ 100.791855][ T4661] loop0: detected capacity change from 0 to 256 [ 100.861146][ T4657] EXT4-fs (loop1): 1 truncate cleaned up [ 100.890247][ T4657] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.953986][ T4661] FAT-fs (loop0): Unrecognized mount option "non•mtail=0" or missing value [ 101.071674][ T4665] loop4: detected capacity change from 0 to 128 [ 101.130528][ T4666] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 101.428717][ T4665] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 101.464254][ T4665] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.488501][ T4172] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 101.602252][ T4172] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 101.705411][ T4172] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 101.744710][ T4665] EXT4-fs error (device loop4): ext4_validate_block_bitmap:420: comm syz.4.126: bg 0: bad block bitmap checksum [ 101.922431][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 0 [ 102.036382][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 1024 [ 102.136388][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 2048 [ 102.214910][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 3072 [ 102.301639][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 4096 [ 102.391655][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 5120 [ 102.407063][ T4252] Bluetooth: hci5: command 0x1003 tx timeout [ 102.417269][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 102.462211][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 6144 [ 102.509552][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 7168 [ 102.560709][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 8192 [ 102.700554][ T4322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.851810][ T4322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.030669][ T4322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.136508][ T4322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.614508][ T4687] loop0: detected capacity change from 0 to 1024 [ 103.852636][ T4687] EXT4-fs (loop0): Ignoring removed oldalloc option [ 103.972765][ T4687] EXT4-fs (loop0): Ignoring removed bh option [ 104.127991][ T4697] loop2: detected capacity change from 0 to 1024 [ 104.482616][ T4252] Bluetooth: hci5: command 0x1001 tx timeout [ 104.493237][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 104.656766][ T4697] EXT4-fs (loop2): Ignoring removed orlov option [ 104.663305][ T4697] EXT4-fs (loop2): Ignoring removed oldalloc option [ 104.677453][ T4697] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.688525][ T4697] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 104.721034][ T4697] EXT4-fs (loop2): invalid journal inode [ 104.727443][ T4697] EXT4-fs (loop2): can't get journal size [ 104.780607][ T4697] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 104.851257][ T4687] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,quota,debug_want_extra_isize=0x0000000000000080,oldalloc,nodioread_nolock,usrquota,noauto_da_alloc,bh,dioread_lock,noinit_itable,,errors=continue. Quota mode: writeback. [ 105.355309][ T4688] chnl_net:caif_netlink_parms(): no params data found [ 105.398657][ T4708] loop2: detected capacity change from 0 to 2048 [ 105.502417][ T4708] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 105.643650][ T4688] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.650800][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.744393][ T4688] device bridge_slave_0 entered promiscuous mode [ 105.763116][ T4252] Bluetooth: hci0: command 0x0409 tx timeout [ 105.833909][ T4688] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.841011][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.873699][ T4688] device bridge_slave_1 entered promiscuous mode [ 106.006422][ T4688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.026236][ T4688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.882981][ T4174] EXT4-fs error: 1134 callbacks suppressed [ 106.882999][ T4174] EXT4-fs error (device loop4): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 107.063681][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 0 [ 107.113790][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 1024 [ 107.157182][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 2048 [ 107.220283][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 3072 [ 107.259259][ T4285] Bluetooth: hci5: command 0x1009 tx timeout [ 107.331483][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 4096 [ 107.584457][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 5120 [ 107.738754][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 6144 [ 107.787107][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 7168 [ 107.842618][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 107.953528][ T4174] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path /27/file0/lost+found: directory fails checksum at offset 8192 [ 108.208919][ T4688] team0: Port device team_slave_0 added [ 108.244037][ T4688] team0: Port device team_slave_1 added [ 109.033224][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.043832][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.092044][ T4688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.251775][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.262568][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.478808][ T4688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.990821][ T2283] Bluetooth: hci0: command 0x040f tx timeout [ 110.365336][ T4688] device hsr_slave_0 entered promiscuous mode [ 110.383914][ T4767] mmap: syz.0.149 (4767): VmData 37466112 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 110.443178][ T4688] device hsr_slave_1 entered promiscuous mode [ 110.482762][ T4688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.517373][ T4688] Cannot create hsr debugfs directory [ 110.617974][ T4322] device hsr_slave_0 left promiscuous mode [ 110.646577][ T4322] device hsr_slave_1 left promiscuous mode [ 110.654556][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.662118][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.671987][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.707244][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.725534][ T4322] device bridge_slave_1 left promiscuous mode [ 110.746366][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.809874][ T4322] device bridge_slave_0 left promiscuous mode [ 110.825560][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.864207][ T4322] device veth1_macvtap left promiscuous mode [ 110.873816][ T4322] device veth0_macvtap left promiscuous mode [ 110.880010][ T4322] device veth1_vlan left promiscuous mode [ 110.916935][ T4322] device veth0_vlan left promiscuous mode [ 111.101519][ T4285] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.352669][ T4285] usb 3-1: Using ep0 maxpacket: 16 [ 111.472801][ T4285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 111.484126][ T4784] syz.3.156 uses obsolete (PF_INET,SOCK_PACKET) [ 111.492834][ T4285] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 111.509702][ T4285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.529893][ T4285] usb 3-1: config 0 descriptor?? [ 111.579278][ T4285] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 111.806010][ T4776] udc-core: couldn't find an available UDC or it's busy [ 111.813044][ T4776] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 111.832681][ T3531] bcm5974 3-1:0.0: could not read from device [ 112.115137][ T4251] Bluetooth: hci0: command 0x0419 tx timeout [ 112.162787][ T3531] bcm5974 3-1:0.0: could not read from device [ 112.205487][ T4285] usb 3-1: USB disconnect, device number 2 [ 112.212706][ T4792] bcm5974 3-1:0.0: could not read from device [ 112.246631][ T3531] bcm5974 3-1:0.0: could not read from device [ 112.274347][ T3531] bcm5974 3-1:0.0: could not read from device [ 112.366803][ T4322] team0 (unregistering): Port device team_slave_1 removed [ 112.399076][ T4322] team0 (unregistering): Port device team_slave_0 removed [ 112.551847][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.571290][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.705798][ T4322] bond0 (unregistering): Released all slaves [ 113.053855][ T4688] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.073952][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 113.123404][ T4688] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.201189][ T4688] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.225445][ T4688] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.749156][ T4870] loop3: detected capacity change from 0 to 512 [ 115.129677][ T4251] Bluetooth: hci2: command 0x041b tx timeout [ 115.318569][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.377952][ T4890] loop0: detected capacity change from 0 to 1024 [ 115.394033][ T4779] chnl_net:caif_netlink_parms(): no params data found [ 115.435169][ T4870] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.437118][ T4873] loop2: detected capacity change from 0 to 4096 [ 115.458332][ T4870] ext4 filesystem being mounted at /34/file6 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.476136][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.493248][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.544775][ T4688] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.572842][ T4873] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.696395][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.707282][ T4908] EXT4-fs error (device loop3): __ext4_new_inode:1286: comm syz.3.166: failed to insert inode 16: doubly allocated? [ 115.722412][ T4890] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.739956][ T4873] EXT4-fs (loop2): shut down requested (1) [ 115.746800][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.755918][ T4890] EXT4-fs (loop0): Test dummy encryption mode enabled [ 115.764820][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.771939][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.780915][ T4873] fs-verity: sha256 using implementation "sha256-avx2" [ 115.794064][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.826779][ T4890] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,stripe=0x0000000000000007,commit=0x0000000000000005,test_dummy_encryption,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,grpid,,errors=continue. Quota mode: writeback. [ 115.868019][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.939781][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.946920][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.976353][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.049176][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.108704][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.165711][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.177579][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.181970][ T4917] loop2: detected capacity change from 0 to 256 [ 116.254601][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.277519][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.298890][ T4921] loop0: detected capacity change from 0 to 1024 [ 116.321274][ T4917] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9d80cab, utbl_chksum : 0xe619d30d) [ 116.343654][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.368192][ T4917] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 116.383107][ T4176] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.386974][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.411430][ T4921] EXT4-fs (loop0): Ignoring removed orlov option [ 116.431213][ T4921] EXT4-fs (loop0): Ignoring removed oldalloc option [ 116.451518][ T4921] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.453104][ T4917] exFAT-fs (loop2): Filesystem has been set read-only [ 116.480402][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.482819][ T4921] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 116.507397][ T4921] EXT4-fs (loop0): invalid journal inode [ 116.514125][ T4921] EXT4-fs (loop0): can't get journal size [ 116.535840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.537394][ T4921] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 116.553537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.585700][ T4688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.652624][ T4176] usb 4-1: Using ep0 maxpacket: 16 [ 116.683510][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.690599][ T4779] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.759809][ T4779] device bridge_slave_0 entered promiscuous mode [ 116.796899][ T4176] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 116.822674][ T4176] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 116.851142][ T4176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.880769][ T4176] usb 4-1: config 0 descriptor?? [ 116.886840][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.902951][ T4779] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.923165][ T4779] device bridge_slave_1 entered promiscuous mode [ 116.985948][ T4176] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 117.294099][ T4252] Bluetooth: hci2: command 0x040f tx timeout [ 117.311070][ T4914] udc-core: couldn't find an available UDC or it's busy [ 117.380762][ T4914] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.538085][ T4176] usb 4-1: USB disconnect, device number 5 [ 117.589711][ T4779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.631810][ T4779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.438194][ T4779] team0: Port device team_slave_0 added [ 118.504458][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.512066][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.570834][ T4688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.595814][ T4954] loop2: detected capacity change from 0 to 256 [ 118.615198][ T4779] team0: Port device team_slave_1 added [ 118.716470][ T4960] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 118.731889][ T4779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.747056][ T4954] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 118.768980][ T4779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.807348][ T4954] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 118.831260][ T4954] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 118.862529][ T4779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.883986][ T26] audit: type=1800 audit(1741600559.523:13): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.176" name="file1" dev="loop2" ino=1048596 res=0 errno=0 [ 118.929938][ T4779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.946145][ T4779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.036999][ T4779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.230125][ T4779] device hsr_slave_0 entered promiscuous mode [ 119.270887][ T4779] device hsr_slave_1 entered promiscuous mode [ 119.300593][ T4779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.322353][ T4968] loop2: detected capacity change from 0 to 2048 [ 119.340000][ T4779] Cannot create hsr debugfs directory [ 119.362944][ T4252] Bluetooth: hci2: command 0x0419 tx timeout [ 119.413548][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.437505][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.496589][ T4968] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 119.553942][ T4968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.601036][ T4688] device veth0_vlan entered promiscuous mode [ 119.616982][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.663167][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.713307][ T4688] device veth1_vlan entered promiscuous mode [ 119.803213][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.812006][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.894196][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.931451][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.981464][ T4688] device veth0_macvtap entered promiscuous mode [ 120.055465][ T4688] device veth1_macvtap entered promiscuous mode [ 120.111467][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.136419][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.154650][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.189859][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.221645][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.246934][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.267978][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.298353][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.360648][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.395880][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.433330][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.499296][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.513524][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.601523][ T4997] loop0: detected capacity change from 0 to 1024 [ 120.623868][ T4779] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 120.671833][ T4779] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 120.718472][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.070596][ T4504] hfsplus: b-tree write err: -5, ino 8 [ 121.086147][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.126788][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.181100][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.227114][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.283972][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.294306][ T4688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.305027][ T4688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.316520][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.332705][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.342157][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.379880][ T4779] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.454126][ T4688] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.472625][ T4688] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.481417][ T4688] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.493072][ T4688] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.519368][ T4779] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.628809][ T5004] loop3: detected capacity change from 0 to 8192 [ 121.704903][ T5004] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.763143][ T5010] kvm: MONITOR instruction emulated as NOP! [ 121.870740][ T4322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.885459][ T4322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.199346][ T4779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.244266][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.613232][ T4875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.637366][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.659096][ T4875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.669459][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.698525][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.897981][ T4779] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.914524][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.923971][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.932892][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.939969][ T4322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.199518][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 123.361952][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 123.636380][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 123.693117][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.700256][ T4322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.821370][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 123.874030][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 123.914026][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 123.943645][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 123.975332][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.034278][ T5053] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 124.180567][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.081668][ T5051] sched: RT throttling activated [ 125.105136][ T5056] loop5: detected capacity change from 0 to 2048 [ 125.176970][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.199620][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.644992][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 125.824409][ T4779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 125.851933][ T5056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.927908][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.958353][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.017729][ T5063] loop2: detected capacity change from 0 to 1024 [ 126.065644][ T5063] EXT4-fs (loop2): Ignoring removed orlov option [ 126.082280][ T5063] EXT4-fs (loop2): Ignoring removed oldalloc option [ 126.092778][ T5063] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 126.188681][ T5063] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 126.254724][ T5063] EXT4-fs (loop2): invalid journal inode [ 126.270751][ T5063] EXT4-fs (loop2): can't get journal size [ 126.301279][ T5063] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 126.350595][ T5076] loop5: detected capacity change from 0 to 128 [ 126.416437][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.452774][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.476624][ T4779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.997087][ T5096] loop2: detected capacity change from 0 to 1024 [ 127.084370][ T5096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.196512][ T26] audit: type=1800 audit(1741600567.803:14): pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.202" name="file1" dev="loop2" ino=839 res=0 errno=0 [ 127.921724][ T5100] loop0: detected capacity change from 0 to 1024 [ 128.072632][ T5100] EXT4-fs (loop0): Ignoring removed nobh option [ 128.144052][ T5100] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,stripe=0x0000000000000ece,minixdf,,errors=continue. Quota mode: writeback. [ 128.253648][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.263886][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 129.170664][ T4779] device veth0_vlan entered promiscuous mode [ 129.246552][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 129.305431][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.218356][ T5131] loop0: detected capacity change from 0 to 1024 [ 131.288957][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.850697][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.523578][ T4779] device veth1_vlan entered promiscuous mode [ 132.644803][ T5133] loop3: detected capacity change from 0 to 764 [ 132.727939][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.734397][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.750955][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.797223][ T5133] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 132.807141][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.844196][ T5141] 9pnet: Insufficient options for proto=fd [ 132.906342][ T4779] device veth0_macvtap entered promiscuous mode [ 132.944222][ T4779] device veth1_macvtap entered promiscuous mode [ 133.093942][ T4188] Bluetooth: Wrong link type (-71) [ 133.110746][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.133446][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.205197][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.230681][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.244070][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.331964][ T5155] capability: warning: `syz.2.210' uses 32-bit capabilities (legacy support in use) [ 133.476617][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.487259][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.499126][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.509644][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.380756][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.425405][ T4779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.614039][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.622364][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.653398][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.715025][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.726467][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.736800][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.748235][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.758214][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.946485][ T5173] loop3: detected capacity change from 0 to 1024 [ 135.895136][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.983985][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.164970][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.238355][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.249016][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.260437][ T4779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.409753][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 136.426551][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 136.445699][ T4779] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.755373][ T4779] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.793452][ T4779] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.826167][ T4779] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.207368][ T5190] loop2: detected capacity change from 0 to 1024 [ 137.253403][ T5193] loop0: detected capacity change from 0 to 1024 [ 137.272885][ T4635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.301344][ T4635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.325453][ T5190] EXT4-fs (loop2): Ignoring removed bh option [ 137.343592][ T5190] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 137.380036][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.387986][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.404209][ T5193] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 137.462563][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.474495][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.514803][ T5190] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 137.719687][ T5208] binder: 5206:5208 ioctl 4018620d 0 returned -22 [ 138.412833][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 138.822953][ T5236] loop5: detected capacity change from 0 to 1024 [ 138.904900][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 139.109920][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 139.809544][ T7] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 139.819624][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 140.287768][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.302151][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.311116][ T7] usb 1-1: SerialNumber: syz [ 140.323137][ T5217] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 140.707401][ T5249] loop3: detected capacity change from 0 to 2048 [ 140.736379][ T7] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 140.765262][ T7] usb 1-1: USB disconnect, device number 2 [ 140.810928][ T5249] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.914405][ T5258] netlink: 'syz.2.238': attribute type 1 has an invalid length. [ 141.922182][ T5258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.238'. [ 141.931815][ T5256] loop0: detected capacity change from 0 to 1024 [ 142.061378][ T5256] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 142.083497][ T5256] journal_init_common: Cannot get buffer for journal superblock [ 142.102787][ T5256] EXT4-fs (loop0): Could not load journal inode [ 143.755715][ T5291] loop0: detected capacity change from 0 to 1024 [ 144.553484][ T5294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.246'. [ 145.310780][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 145.457864][ T5310] loop3: detected capacity change from 0 to 1024 [ 145.758285][ T5310] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.769304][ T7] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 146.174023][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.622961][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.755970][ T7] usb 1-1: New USB device strings: Mfr=23, Product=2, SerialNumber=3 [ 146.901360][ T5332] loop2: detected capacity change from 0 to 1024 [ 147.566700][ T7] usb 1-1: Product: syz [ 147.582655][ T7] usb 1-1: Manufacturer: syz [ 147.587453][ T7] usb 1-1: SerialNumber: syz [ 147.595579][ T7] usb 1-1: config 0 descriptor?? [ 147.699579][ T7] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 147.886935][ T4253] udevd[4253]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.978082][ T1324] usb 1-1: USB disconnect, device number 3 [ 148.573343][ T5343] loop2: detected capacity change from 0 to 2048 [ 150.108634][ T5343] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.652631][ T4555] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.682574][ T4219] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 152.932608][ T4219] usb 6-1: Using ep0 maxpacket: 16 [ 152.992600][ T4555] usb 3-1: Using ep0 maxpacket: 16 [ 153.052797][ T4219] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 153.077775][ T4219] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 153.123001][ T4555] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 153.135027][ T4219] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 153.173025][ T4555] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.224798][ T4555] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.312841][ T4219] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 153.337080][ T4219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.368541][ T4219] usb 6-1: SerialNumber: syz [ 153.942894][ T4555] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.393316][ T4219] usb-storage 6-1:1.0: USB Mass Storage device detected [ 154.423598][ T4555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.435307][ T4219] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 154.518120][ T4219] usb 6-1: USB disconnect, device number 2 [ 154.524330][ T4555] usb 3-1: Product: syz [ 154.552696][ T1335] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 154.692691][ T4555] usb 3-1: Manufacturer: syz [ 154.697333][ T4555] usb 3-1: SerialNumber: syz [ 154.847818][ T5404] loop6: detected capacity change from 0 to 1024 [ 155.482715][ T1335] usb 1-1: Using ep0 maxpacket: 8 [ 155.828886][ T26] audit: type=1326 audit(1741600596.373:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5402 comm="syz.5.268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f202926b169 code=0x0 [ 155.863965][ T4555] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 156.115051][ T1335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 156.126469][ T1335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.142904][ T1335] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.159798][ T1335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 156.171054][ T1335] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 156.181552][ T1335] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 156.196496][ T1335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.298103][ T1335] usb 1-1: config 0 descriptor?? [ 156.312964][ T4863] hfsplus: b-tree write err: -5, ino 4 [ 156.323506][ T5393] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 156.528703][ T1335] usb 1-1: USB disconnect, device number 4 [ 157.808083][ T5424] loop6: detected capacity change from 0 to 128 [ 157.868188][ T5433] loop2: detected capacity change from 0 to 256 [ 157.943339][ T4555] usb 3-1: USB disconnect, device number 3 [ 157.952772][ T5433] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.989221][ T5433] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 158.065943][ T5433] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 158.242152][ T5440] loop0: detected capacity change from 0 to 1024 [ 158.368254][ T5444] loop6: detected capacity change from 0 to 164 [ 158.475294][ T5444] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 158.551187][ T4694] udevd[4694]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.643099][ T5440] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 158.725488][ T5452] loop2: detected capacity change from 0 to 256 [ 158.982638][ T5452] FAT-fs (loop2): Directory bread(block 64) failed [ 159.110899][ T5452] FAT-fs (loop2): Directory bread(block 65) failed [ 159.170405][ T5452] FAT-fs (loop2): Directory bread(block 66) failed [ 159.307458][ T5452] FAT-fs (loop2): Directory bread(block 67) failed [ 159.323855][ T5452] FAT-fs (loop2): Directory bread(block 68) failed [ 159.330398][ T5452] FAT-fs (loop2): Directory bread(block 69) failed [ 159.477457][ T5452] FAT-fs (loop2): Directory bread(block 70) failed [ 159.560923][ T5452] FAT-fs (loop2): Directory bread(block 71) failed [ 159.672953][ T5452] FAT-fs (loop2): Directory bread(block 72) failed [ 159.679522][ T5452] FAT-fs (loop2): Directory bread(block 73) failed [ 160.838254][ T26] audit: type=1800 audit(1741600601.473:16): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.277" name="file1" dev="loop2" ino=1048602 res=0 errno=0 [ 160.869693][ T5452] attempt to access beyond end of device [ 160.869693][ T5452] loop2: rw=2049, want=1288, limit=256 [ 161.017045][ T4635] attempt to access beyond end of device [ 161.017045][ T4635] loop2: rw=1, want=1280, limit=256 [ 163.426340][ T5498] loop2: detected capacity change from 0 to 1024 [ 163.455961][ T5499] loop5: detected capacity change from 0 to 2048 [ 163.465652][ T4555] Bluetooth: hci6: command 0x0409 tx timeout [ 163.547234][ T5499] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 163.575224][ T5499] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.676317][ T5498] EXT4-fs (loop2): Ignoring removed orlov option [ 163.682838][ T5498] EXT4-fs (loop2): Ignoring removed oldalloc option [ 163.693821][ T5498] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 163.704743][ T5498] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 163.717219][ T5498] EXT4-fs (loop2): invalid journal inode [ 163.723382][ T5498] EXT4-fs (loop2): can't get journal size [ 163.819081][ T5498] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 163.845604][ T5480] chnl_net:caif_netlink_parms(): no params data found [ 164.073572][ T5506] loop0: detected capacity change from 0 to 1024 [ 164.303711][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.365861][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.6.288'. [ 164.377802][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.442698][ T5480] device bridge_slave_0 entered promiscuous mode [ 164.505075][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.545614][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.610320][ T5480] device bridge_slave_1 entered promiscuous mode [ 164.839173][ T5480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.935336][ T5480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.220078][ T5480] team0: Port device team_slave_0 added [ 165.328596][ T5480] team0: Port device team_slave_1 added [ 165.522613][ T4285] Bluetooth: hci6: command 0x041b tx timeout [ 165.568332][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.622512][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.801375][ T5480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.902615][ T5480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.936834][ T5480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.174705][ T5480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.540008][ T5480] device hsr_slave_0 entered promiscuous mode [ 166.624294][ T5480] device hsr_slave_1 entered promiscuous mode [ 166.845413][ T5548] loop0: detected capacity change from 0 to 1024 [ 167.006702][ T5549] loop2: detected capacity change from 0 to 1024 [ 167.732004][ T4285] Bluetooth: hci6: command 0x040f tx timeout [ 167.745341][ T5480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.772647][ T5480] Cannot create hsr debugfs directory [ 167.840820][ T5549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 167.866717][ T26] audit: type=1800 audit(1741600608.503:17): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.293" name="file1" dev="loop2" ino=839 res=0 errno=0 [ 168.240185][ T5558] loop5: detected capacity change from 0 to 1024 [ 168.462736][ T5558] hfsplus: found bad thread record in catalog [ 168.469184][ T5558] hfsplus: catalog searching failed [ 169.158145][ T4238] hfsplus: b-tree write err: -5, ino 4 [ 169.185426][ T4266] hfsplus: found bad thread record in catalog [ 169.192057][ T4266] hfsplus: found bad thread record in catalog [ 169.606899][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.743651][ T5572] netlink: 20 bytes leftover after parsing attributes in process `syz.5.298'. [ 169.772669][ T4285] Bluetooth: hci6: command 0x0419 tx timeout [ 169.883138][ T5575] loop2: detected capacity change from 0 to 128 [ 169.907433][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.945727][ T5575] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 170.114646][ T5575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.131568][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.130279][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.456858][ T5600] virtio-fs: tag <(null)> not found [ 171.473754][ T5600] loop7: detected capacity change from 0 to 16384 [ 172.273315][ T5608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.306'. [ 172.375170][ T5480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 172.406826][ T5480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 172.452331][ T5480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 172.752363][ T5480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 173.253430][ T5629] loop2: detected capacity change from 0 to 1024 [ 173.466155][ T5629] hfsplus: found bad thread record in catalog [ 173.472320][ T5629] hfsplus: catalog searching failed [ 173.964400][ T5633] loop6: detected capacity change from 0 to 512 [ 173.997669][ T4504] hfsplus: found bad thread record in catalog [ 174.032561][ T4504] hfsplus: found bad thread record in catalog [ 174.078609][ T5633] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 174.144063][ T5480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.199273][ T5480] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.207015][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 174.267856][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.936737][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.979911][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.014758][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.021885][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.384670][ T5656] loop0: detected capacity change from 0 to 128 [ 176.393990][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.576044][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.584852][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.594691][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.601774][ T4266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.702609][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.718664][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.744003][ T5656] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 176.803541][ T5656] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.992001][ T5656] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.0.319: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 177.052777][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.095148][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.095946][ T5671] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 20: comm syz.0.319: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 177.190883][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.256608][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.285501][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.322876][ T5671] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem [ 177.386127][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.404983][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.439334][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.478806][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.540172][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.813036][ T5685] input: syz1 as /devices/virtual/input/input7 [ 178.122397][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.150113][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.202713][ T5480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.248036][ T9] device hsr_slave_0 left promiscuous mode [ 178.292114][ T9] device hsr_slave_1 left promiscuous mode [ 178.354893][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.400938][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.457688][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.486704][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.517378][ T9] device bridge_slave_1 left promiscuous mode [ 178.545327][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.585292][ T9] device bridge_slave_0 left promiscuous mode [ 178.601853][ T5703] loop0: detected capacity change from 0 to 2048 [ 178.615463][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.680033][ T9] device veth1_macvtap left promiscuous mode [ 178.714404][ T9] device veth0_macvtap left promiscuous mode [ 178.736847][ T9] device veth1_vlan left promiscuous mode [ 178.753085][ T9] device veth0_vlan left promiscuous mode [ 179.352861][ T5705] cgroup: name respecified [ 182.983663][ T9] team0 (unregistering): Port device team_slave_1 removed [ 183.006983][ T9] team0 (unregistering): Port device team_slave_0 removed [ 183.041988][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.105801][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.220720][ T5735] loop6: detected capacity change from 0 to 1024 [ 183.306472][ T5735] EXT4-fs (loop6): Ignoring removed bh option [ 183.340387][ T9] bond0 (unregistering): Released all slaves [ 183.357797][ T5735] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,max_batch_time=0x0000000000000007,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 183.851131][ T5755] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 183.924059][ T5756] cgroup: name respecified [ 184.002923][ T4251] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 184.282715][ T4251] usb 3-1: Using ep0 maxpacket: 8 [ 184.413630][ T4251] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.429093][ T4251] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.815549][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.866809][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.196958][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.243850][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.423078][ T4251] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 185.470632][ T5480] device veth0_vlan entered promiscuous mode [ 185.524697][ T4251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.533008][ T4251] usb 3-1: Product: syz [ 185.537202][ T4251] usb 3-1: Manufacturer: syz [ 185.541815][ T4251] usb 3-1: SerialNumber: syz [ 185.547119][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.548954][ T4251] usb 3-1: config 0 descriptor?? [ 185.575838][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.630532][ T5480] device veth1_vlan entered promiscuous mode [ 185.853157][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 185.930829][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 185.948292][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.979720][ T5480] device veth0_macvtap entered promiscuous mode [ 186.002824][ T4555] Bluetooth: hci3: command 0x0406 tx timeout [ 186.009115][ T4555] Bluetooth: hci1: command 0x0406 tx timeout [ 186.016783][ T5480] device veth1_macvtap entered promiscuous mode [ 186.108313][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.159807][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.192548][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.221303][ T5783] loop5: detected capacity change from 0 to 1024 [ 186.222605][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.268110][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.309491][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.333017][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.367625][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.398797][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.440683][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.491168][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.510730][ T1335] usb 3-1: USB disconnect, device number 4 [ 186.535240][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 186.583665][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 186.623683][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 186.653077][ T5783] EXT4-fs (loop5): Test dummy encryption mode enabled [ 186.672904][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 186.694382][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.742597][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.812622][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.909734][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.924554][ T5783] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,barrier=0x00000000000003ff,stripe=0x0000000000000007,discard,data=ordered,debug_want_extra_isize=0x0000000000000084,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 186.965092][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.102543][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.179359][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.190076][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.203398][ T4189] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 187.213558][ T4189] CPU: 0 PID: 4189 Comm: kworker/u5:6 Not tainted 5.15.178-syzkaller #0 [ 187.221912][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.231988][ T4189] Workqueue: hci0 hci_rx_work [ 187.236809][ T4189] Call Trace: [ 187.240100][ T4189] [ 187.243043][ T4189] dump_stack_lvl+0x1e3/0x2d0 [ 187.247740][ T4189] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 187.253384][ T4189] ? panic+0x860/0x860 [ 187.257486][ T4189] ? sysfs_create_dir_ns+0x282/0x390 [ 187.262804][ T4189] sysfs_create_dir_ns+0x2c6/0x390 [ 187.267939][ T4189] ? sysfs_warn_dup+0xa0/0xa0 [ 187.272634][ T4189] ? do_raw_spin_unlock+0x137/0x8b0 [ 187.277860][ T4189] kobject_add_internal+0x6e0/0xe00 [ 187.283094][ T4189] kobject_add+0x14e/0x210 [ 187.287541][ T4189] ? device_add+0x3c2/0xfd0 [ 187.292069][ T4189] ? kobject_init+0x1d0/0x1d0 [ 187.296770][ T4189] ? __raw_spin_lock_init+0x41/0x100 [ 187.299903][ T5480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.302079][ T4189] ? get_device_parent+0x128/0x400 [ 187.317590][ T4189] device_add+0x476/0xfd0 [ 187.321951][ T4189] hci_conn_add_sysfs+0xe4/0x1f0 [ 187.326911][ T4189] le_conn_complete_evt+0xc15/0x1500 [ 187.332226][ T4189] ? cs_le_create_conn+0x5f0/0x5f0 [ 187.337379][ T4189] hci_le_meta_evt+0xd86/0x3f50 [ 187.342258][ T4189] ? __lock_acquire+0x1ff0/0x1ff0 [ 187.347313][ T4189] ? __mutex_lock_common+0x444/0x25a0 [ 187.352713][ T4189] ? hci_remote_host_features_evt+0x280/0x280 [ 187.358798][ T4189] ? __mutex_unlock_slowpath+0x218/0x750 [ 187.364446][ T4189] ? hci_event_packet+0x3b4/0x1550 [ 187.369583][ T4189] ? mutex_unlock+0x10/0x10 [ 187.374110][ T4189] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 187.380115][ T4189] ? print_irqtrace_events+0x210/0x210 [ 187.385595][ T4189] hci_event_packet+0xc41/0x1550 [ 187.390559][ T4189] ? rcu_lock_release+0x20/0x20 [ 187.395439][ T4189] ? hci_send_to_monitor+0x99/0x4d0 [ 187.400667][ T4189] hci_rx_work+0x237/0xa10 [ 187.403035][ T5480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.405110][ T4189] process_one_work+0x8a1/0x10c0 [ 187.405157][ T4189] ? worker_detach_from_pool+0x260/0x260 [ 187.425514][ T4189] ? _raw_spin_lock_irqsave+0x120/0x120 [ 187.431095][ T4189] ? kthread_data+0x4e/0xc0 [ 187.435628][ T4189] ? wq_worker_running+0x97/0x170 [ 187.440689][ T4189] worker_thread+0xaca/0x1280 [ 187.445417][ T4189] kthread+0x3f6/0x4f0 [ 187.449507][ T4189] ? rcu_lock_release+0x20/0x20 [ 187.454376][ T4189] ? kthread_blkcg+0xd0/0xd0 [ 187.459333][ T4189] ret_from_fork+0x1f/0x30 [ 187.463780][ T4189] [ 187.469116][ T4189] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 187.483577][ T4189] Bluetooth: hci0: failed to register connection device [ 187.498135][ T5480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.514331][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 187.544348][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.609375][ T5480] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.653663][ T5797] loop6: detected capacity change from 0 to 512 [ 187.722769][ T5480] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.731513][ T5480] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.792550][ T5480] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.936284][ T5797] EXT4-fs (loop6): Ignoring removed nobh option [ 188.039542][ T5797] EXT4-fs (loop6): Ignoring removed nobh option [ 188.062309][ T5797] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 188.107029][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.133027][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.217672][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 188.246825][ T4872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.283720][ T5797] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 188.323049][ T4872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.338848][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.530055][ T5797] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.347: invalid indirect mapped block 2683928664 (level 1) [ 189.123330][ T4219] Bluetooth: hci2: command 0x0406 tx timeout [ 189.170511][ T5797] EXT4-fs (loop6): 1 truncate cleaned up [ 189.262743][ T5797] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,nobh,minixdf,nobh,usrjquota=.grpquota,nodiscard,jqfmt=vfsv0,noload,,,errors=continue. Quota mode: writeback. [ 191.842592][ T5804] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 192.786821][ T5859] loop7: detected capacity change from 0 to 1024 [ 192.847966][ T5859] EXT4-fs (loop7): Ignoring removed orlov option [ 192.854518][ T5859] EXT4-fs (loop7): Ignoring removed oldalloc option [ 192.865033][ T5859] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 192.876256][ T5859] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 192.914520][ T5859] EXT4-fs (loop7): invalid journal inode [ 192.920610][ T5859] EXT4-fs (loop7): can't get journal size [ 193.108529][ T5859] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 194.749745][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.763478][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.777483][ T5884] loop7: detected capacity change from 0 to 1024 [ 196.209474][ T5884] hfsplus: found bad thread record in catalog [ 196.215704][ T5884] hfsplus: catalog searching failed [ 196.547656][ T4867] hfsplus: found bad thread record in catalog [ 196.562699][ T4867] hfsplus: found bad thread record in catalog [ 197.426909][ T5903] loop6: detected capacity change from 0 to 1024 [ 198.159631][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.207573][ T5903] EXT4-fs (loop6): Ignoring removed orlov option [ 198.214017][ T5903] EXT4-fs (loop6): Ignoring removed oldalloc option [ 198.224259][ T5903] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 198.236560][ T5903] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 198.246519][ T5903] EXT4-fs (loop6): invalid journal inode [ 198.252240][ T5903] EXT4-fs (loop6): can't get journal size [ 198.265228][ T5905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.370'. [ 198.280507][ T5903] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback. [ 198.368281][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.477604][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.481647][ T5918] loop7: detected capacity change from 0 to 2048 [ 201.621596][ T5926] netlink: 44 bytes leftover after parsing attributes in process `syz.2.374'. [ 201.717865][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.571728][ T5944] loop0: detected capacity change from 0 to 1024 [ 203.861995][ T5943] hfsplus: found bad thread record in catalog [ 203.868278][ T5943] hfsplus: catalog searching failed [ 203.958271][ T5952] loop7: detected capacity change from 0 to 512 [ 203.967223][ T5949] loop6: detected capacity change from 0 to 256 [ 204.090726][ T4867] hfsplus: found bad thread record in catalog [ 204.102356][ T4867] hfsplus: found bad thread record in catalog [ 204.132695][ T5952] EXT4-fs (loop7): Ignoring removed orlov option [ 204.157025][ T5949] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 204.178815][ T5952] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 204.233372][ T5952] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 204.303726][ T4189] Bluetooth: Wrong link type (-22) [ 204.340099][ T5957] netlink: 136 bytes leftover after parsing attributes in process `syz.6.377'. [ 204.384168][ T5957] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 204.583021][ T5959] loop2: detected capacity change from 0 to 1024 [ 204.705871][ T5959] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 204.823532][ T5959] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e12d, mo2=0002] [ 204.832397][ T5959] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 204.910944][ T5959] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,errors=remount-ro,. Quota mode: writeback. [ 207.272321][ T5977] chnl_net:caif_netlink_parms(): no params data found [ 207.350603][ T9] device hsr_slave_0 left promiscuous mode [ 207.364096][ T9] device hsr_slave_1 left promiscuous mode [ 207.375264][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.390358][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.403140][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.410888][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.429973][ T9] device bridge_slave_1 left promiscuous mode [ 207.437784][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.477733][ T9] device bridge_slave_0 left promiscuous mode [ 207.510285][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.543530][ T9] device veth1_macvtap left promiscuous mode [ 207.566254][ T9] device veth0_macvtap left promiscuous mode [ 207.575762][ T9] device veth1_vlan left promiscuous mode [ 207.581782][ T9] device veth0_vlan left promiscuous mode [ 208.328901][ T2283] Bluetooth: hci2: command 0x0409 tx timeout [ 208.349704][ T9] team0 (unregistering): Port device team_slave_1 removed [ 208.383820][ T9] team0 (unregistering): Port device team_slave_0 removed [ 208.420834][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.456344][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.679541][ T9] bond0 (unregistering): Released all slaves [ 209.102065][ T6014] loop7: detected capacity change from 0 to 8 [ 209.363202][ T4251] Bluetooth: hci0: command 0x0409 tx timeout [ 209.903489][ T6014] SQUASHFS error: zlib decompression failed, data probably corrupt [ 209.911813][ T6014] SQUASHFS error: Failed to read block 0x9b: -5 [ 209.918182][ T6014] SQUASHFS error: Unable to read metadata cache entry [99] [ 209.925473][ T6014] SQUASHFS error: Unable to read inode 0x127 [ 210.277670][ T6023] loop2: detected capacity change from 0 to 1024 [ 210.538076][ T2283] Bluetooth: hci2: command 0x041b tx timeout [ 210.936282][ T6021] hfsplus: found bad thread record in catalog [ 210.936327][ T6021] hfsplus: catalog searching failed [ 210.945191][ T6022] loop0: detected capacity change from 0 to 164 [ 211.013559][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.049410][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.060407][ T5977] device bridge_slave_0 entered promiscuous mode [ 211.125844][ T4351] hfsplus: found bad thread record in catalog [ 211.193920][ T4351] hfsplus: found bad thread record in catalog [ 211.358166][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.453375][ T2283] Bluetooth: hci0: command 0x041b tx timeout [ 211.532966][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.556544][ T5977] device bridge_slave_1 entered promiscuous mode [ 211.921118][ T6030] loop0: detected capacity change from 0 to 256 [ 212.020536][ T5977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.076499][ T5977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.079097][ T6033] loop7: detected capacity change from 0 to 2048 [ 212.203068][ T5977] team0: Port device team_slave_0 added [ 212.216895][ T6030] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.229605][ T6033] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.242909][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 212.300757][ T5977] team0: Port device team_slave_1 added [ 212.317602][ T6030] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 212.425476][ T6030] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 212.683417][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.703663][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.705206][ T4352] Bluetooth: hci4: Frame reassembly failed (-84) [ 212.734555][ T5994] device bridge_slave_0 entered promiscuous mode [ 212.763711][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.773735][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.813105][ T6058] loop2: detected capacity change from 0 to 2048 [ 212.831261][ T5977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.854888][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.871362][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.916375][ T6058] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,bsddf,,errors=continue. Quota mode: none. [ 212.943341][ T6058] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.985363][ T5994] device bridge_slave_1 entered promiscuous mode [ 212.995385][ T6064] loop0: detected capacity change from 0 to 2048 [ 213.053471][ T4555] Bluetooth: hci2: command 0x040f tx timeout [ 213.087577][ T5977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.150127][ T5977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.196855][ T5977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.199021][ T6064] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 213.241140][ T6065] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.397: bg 0: block 345: padding at end of block bitmap is not set [ 213.522599][ T4555] Bluetooth: hci0: command 0x040f tx timeout [ 213.682873][ T4504] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28 [ 213.709611][ T4504] EXT4-fs (loop2): This should not happen!! Data will be lost [ 213.709611][ T4504] [ 213.729648][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.749375][ T4504] EXT4-fs (loop2): Total free blocks count 0 [ 213.758319][ T6069] xt_socket: unknown flags 0x58 [ 213.776099][ T4504] EXT4-fs (loop2): Free/Dirty block details [ 213.782290][ T4504] EXT4-fs (loop2): free_blocks=0 [ 213.787587][ T4504] EXT4-fs (loop2): dirty_blocks=16 [ 213.794052][ T4504] EXT4-fs (loop2): Block reservation details [ 213.800264][ T4504] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 214.015676][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.091191][ T5977] device hsr_slave_0 entered promiscuous mode [ 214.119214][ T5977] device hsr_slave_1 entered promiscuous mode [ 214.223258][ T5994] team0: Port device team_slave_0 added [ 214.293323][ T5994] team0: Port device team_slave_1 added [ 214.408686][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.452333][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.561600][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.673762][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.680749][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.768258][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.035278][ T4221] Bluetooth: hci4: command 0x1003 tx timeout [ 215.052909][ T4188] Bluetooth: hci4: sending frame failed (-49) [ 215.088081][ T5994] device hsr_slave_0 entered promiscuous mode [ 215.122647][ T4221] Bluetooth: hci2: command 0x0419 tx timeout [ 215.139689][ T5994] device hsr_slave_1 entered promiscuous mode [ 215.162805][ T5994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.190748][ T5994] Cannot create hsr debugfs directory [ 215.729658][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 216.731286][ T6099] loop0: detected capacity change from 0 to 1024 [ 217.508575][ T2283] Bluetooth: hci4: command 0x1001 tx timeout [ 217.555334][ T4188] Bluetooth: hci4: sending frame failed (-49) [ 217.627494][ T6096] hfsplus: found bad thread record in catalog [ 217.635291][ T6096] hfsplus: catalog searching failed [ 217.885680][ T415] hfsplus: found bad thread record in catalog [ 217.897201][ T415] hfsplus: found bad thread record in catalog [ 217.908124][ T6102] loop2: detected capacity change from 0 to 1024 [ 217.932528][ T5977] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 218.001123][ T5977] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 218.063183][ T5977] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 218.088151][ T6102] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 218.115754][ T5977] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 218.963757][ T5994] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 218.989092][ T5994] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 219.086622][ T5994] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 219.116576][ T5994] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 219.199497][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.254720][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.276610][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.309022][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.330186][ T6128] loop0: detected capacity change from 0 to 1024 [ 219.366037][ T9] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.425604][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.438935][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.448169][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.451036][ T6128] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present [ 219.455289][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.455949][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.484486][ T6128] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 219.495140][ T6128] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.407: Failed to acquire dquot type 0 [ 219.503535][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.512189][ T6128] EXT4-fs (loop0): 1 truncate cleaned up [ 219.520036][ T6128] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 219.540237][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.547358][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.556071][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.584146][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.612781][ T4219] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 219.622905][ T4251] Bluetooth: hci4: command 0x1009 tx timeout [ 219.632265][ T9] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.679436][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.709361][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.743137][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.768053][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.802335][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.813632][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.822700][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.831310][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.842186][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.872911][ T4219] usb 3-1: Using ep0 maxpacket: 8 [ 219.982144][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.991435][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.992844][ T4219] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 220.008543][ T4219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.019182][ T9] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.027659][ T4219] usb 3-1: config 0 descriptor?? [ 220.292813][ T4219] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 220.325323][ T5977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.339125][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.349862][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.365606][ T9] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.385707][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.413457][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.433281][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.452127][ T4869] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.459262][ T4869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.498814][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.517568][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.541136][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.561403][ T4869] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.568545][ T4869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.585930][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.606154][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.694473][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.822030][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.899785][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.927363][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.935192][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.956739][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.992969][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.010158][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.030051][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.511102][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.537028][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.559301][ T5994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.579995][ T5994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.600865][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.620471][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.629561][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.668649][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.712095][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.737417][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.764482][ T4219] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 221.775132][ T4219] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 221.796088][ T4219] asix: probe of 3-1:0.0 failed with error -71 [ 221.810789][ T4219] usb 3-1: USB disconnect, device number 5 [ 221.863847][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.980458][ T5977] device veth0_vlan entered promiscuous mode [ 222.065299][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.079824][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.090061][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.103794][ T4863] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.516691][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.562704][ T4877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.588519][ T5977] device veth1_vlan entered promiscuous mode [ 222.614399][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.776346][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.788724][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.847025][ T5977] device veth0_macvtap entered promiscuous mode [ 222.877388][ T5977] device veth1_macvtap entered promiscuous mode [ 222.950167][ T6198] loop0: detected capacity change from 0 to 1024 [ 222.992756][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.003490][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.020851][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.050257][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.062201][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.077396][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.089391][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.100420][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.110899][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.122019][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.134254][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.143812][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.152849][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.161488][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.199788][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.274475][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.304046][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.326044][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.337470][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.352879][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.364291][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.374323][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.385109][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.395829][ T5977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.406611][ T5977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.421521][ T5977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.446710][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.481064][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.638768][ T6211] loop2: detected capacity change from 0 to 1024 [ 223.697935][ T5977] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.727723][ T5977] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.750478][ T5977] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.779127][ T5977] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.796346][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.810131][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.830919][ T6211] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 223.869284][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.954892][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.009001][ T5994] device veth0_vlan entered promiscuous mode [ 224.036937][ T5994] device veth1_vlan entered promiscuous mode [ 224.104933][ T5994] device veth0_macvtap entered promiscuous mode [ 224.156321][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.166564][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.183911][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.192194][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.205518][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.217618][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.230728][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.613221][ T6231] loop7: detected capacity change from 0 to 128 [ 225.617847][ T5994] device veth1_macvtap entered promiscuous mode [ 225.674230][ T6231] EXT4-fs (loop7): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 225.750619][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.770660][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.786074][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.797416][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.811801][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.822676][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.833538][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.845004][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.856179][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.872251][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.893073][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.932985][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.944959][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.957602][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.017820][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.055989][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.108242][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.129396][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.145308][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.167722][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.178760][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.189987][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.201087][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.211428][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.222365][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.233089][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.244081][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.256489][ T5994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.269811][ T5994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.281201][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.297327][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.307298][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.316196][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.345675][ T5994] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.355664][ T5994] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.365838][ T5994] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.374647][ T5994] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.395818][ T4867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.409411][ T4867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.437945][ T415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.588684][ T6253] loop8: detected capacity change from 0 to 164 [ 226.608823][ T415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.622662][ T415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.656189][ T6253] Unable to read rock-ridge attributes [ 226.698209][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.731589][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.890246][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.903380][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.991750][ T6259] Unable to read rock-ridge attributes [ 227.613476][ T4283] Bluetooth: hci4: command 0x1003 tx timeout [ 227.620118][ T4181] Bluetooth: hci4: sending frame failed (-49) [ 227.669057][ T6266] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.941149][ T2283] Bluetooth: hci5: command 0x1003 tx timeout [ 228.156800][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 229.109716][ T13] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 229.682997][ T4252] Bluetooth: hci4: command 0x1001 tx timeout [ 229.689129][ T4181] Bluetooth: hci4: sending frame failed (-49) [ 230.424598][ T4555] Bluetooth: hci5: command 0x1001 tx timeout [ 230.496412][ T4181] Bluetooth: hci5: sending frame failed (-49) [ 230.642769][ T13] usb 9-1: Using ep0 maxpacket: 16 [ 230.672727][ T9] device hsr_slave_0 left promiscuous mode [ 230.690464][ T9] device hsr_slave_1 left promiscuous mode [ 230.701111][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.715983][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.729158][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.740802][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.760440][ T9] device bridge_slave_1 left promiscuous mode [ 230.762924][ T13] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 230.776468][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.809335][ T13] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 230.820602][ T9] device bridge_slave_0 left promiscuous mode [ 230.832076][ T13] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.838731][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.856469][ T13] usb 9-1: config 0 descriptor?? [ 230.879692][ T9] device hsr_slave_0 left promiscuous mode [ 230.896553][ T9] device hsr_slave_1 left promiscuous mode [ 230.897550][ T13] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input8 [ 230.918663][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.928895][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.943674][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.951452][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.960708][ T9] device bridge_slave_1 left promiscuous mode [ 230.967905][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.980952][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.003004][ T9] device veth1_macvtap left promiscuous mode [ 231.009162][ T9] device veth0_macvtap left promiscuous mode [ 231.016017][ T9] device veth1_vlan left promiscuous mode [ 231.021968][ T9] device veth0_vlan left promiscuous mode [ 231.030318][ T9] device veth1_macvtap left promiscuous mode [ 231.036601][ T9] device veth0_macvtap left promiscuous mode [ 231.043226][ T9] device veth1_vlan left promiscuous mode [ 231.049082][ T9] device veth0_vlan left promiscuous mode [ 231.099133][ T6281] udc-core: couldn't find an available UDC or it's busy [ 231.124464][ T6281] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 231.152654][ T3531] bcm5974 9-1:0.0: could not read from device [ 231.170346][ T13] usb 9-1: USB disconnect, device number 2 [ 231.182777][ T6281] bcm5974 9-1:0.0: could not read from device [ 231.429828][ T9] team0 (unregistering): Port device team_slave_1 removed [ 231.463419][ T9] team0 (unregistering): Port device team_slave_0 removed [ 231.478685][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.494174][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.585188][ T9] bond0 (unregistering): Released all slaves [ 231.772701][ T6304] Bluetooth: hci4: command 0x1009 tx timeout [ 231.834927][ T6325] loop8: detected capacity change from 0 to 512 [ 231.889340][ T9] team0 (unregistering): Port device team_slave_1 removed [ 231.921531][ T9] team0 (unregistering): Port device team_slave_0 removed [ 231.948604][ T6325] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,user_xattr,minixdf,,errors=continue. Quota mode: writeback. [ 231.968644][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.976207][ T6330] loop9: detected capacity change from 0 to 16 [ 231.978204][ T6325] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.004825][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.042767][ T6330] erofs: (device loop9): mounted with root inode @ nid 36. [ 232.117486][ T9] bond0 (unregistering): Released all slaves [ 232.279175][ T6334] loop9: detected capacity change from 0 to 16 [ 232.414865][ T6334] erofs: (device loop9): mounted with root inode @ nid 36. [ 232.554139][ T6336] blktrace: Concurrent blktraces are not allowed on nullb0 [ 233.278404][ T4555] Bluetooth: hci5: command 0x1009 tx timeout [ 233.430232][ T6340] loop7: detected capacity change from 0 to 1024 [ 233.999330][ T6340] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: writeback. [ 235.561349][ T6364] loop8: detected capacity change from 0 to 1024 [ 237.059154][ T6364] EXT4-fs (loop8): Ignoring removed orlov option [ 237.065659][ T6364] EXT4-fs (loop8): Ignoring removed oldalloc option [ 237.100136][ T6364] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 237.111118][ T6364] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 237.125800][ T6364] EXT4-fs (loop8): invalid journal inode [ 237.131579][ T6364] EXT4-fs (loop8): can't get journal size [ 237.141023][ T6364] EXT4-fs: failed to create workqueue [ 237.146623][ T6364] EXT4-fs (loop8): mount failed [ 237.309613][ T6385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'. [ 237.311761][ T6383] kvm: emulating exchange as write [ 237.917537][ T13] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 237.976088][ T6402] blktrace: Concurrent blktraces are not allowed on nullb0 [ 237.977865][ T6403] loop2: detected capacity change from 0 to 1024 [ 238.776742][ T6399] loop7: detected capacity change from 0 to 2048 [ 238.807390][ T13] usb 10-1: Using ep0 maxpacket: 16 [ 238.976481][ T6399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.002855][ T13] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 239.044896][ T13] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 239.072144][ T13] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.099418][ T6404] ------------[ cut here ]------------ [ 239.131398][ T6404] WARNING: CPU: 0 PID: 6404 at fs/inode.c:307 drop_nlink+0xbb/0x100 [ 239.169071][ T6403] hfsplus: found bad thread record in catalog [ 239.175524][ T6403] hfsplus: catalog searching failed [ 239.199522][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz.8.455'. [ 239.466816][ T13] usb 10-1: config 0 descriptor?? [ 239.467054][ T6404] Modules linked in: [ 239.577443][ T6404] CPU: 0 PID: 6404 Comm: syz.7.454 Not tainted 5.15.178-syzkaller #0 [ 239.584895][ T4869] hfsplus: found bad thread record in catalog [ 239.620660][ T13] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input9 [ 239.748707][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.754562][ T4869] hfsplus: found bad thread record in catalog [ 239.766649][ T6404] RIP: 0010:drop_nlink+0xbb/0x100 [ 239.771989][ T6404] Code: 49 8b 1e 48 8d bb c8 07 00 00 be 08 00 00 00 e8 3b a4 ed ff f0 48 ff 83 c8 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 25 ba a3 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 239.832793][ T6404] RSP: 0018:ffffc9000336f650 EFLAGS: 00010283 [ 239.896334][ T6404] RAX: ffffffff81dccb6b RBX: 1ffff1100e7b8502 RCX: 0000000000080000 [ 239.910613][ T6404] RDX: ffffc90016a84000 RSI: 00000000000122c1 RDI: 00000000000122c2 [ 239.927691][ T6404] RBP: 0000000000000000 R08: ffffffff81dccaef R09: fffffbfff2131851 [ 239.943511][ T6404] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888073dc2810 [ 239.975169][ T6404] R13: 0000000067ceb7a7 R14: ffff888073dc27c8 R15: dffffc0000000000 [ 239.977102][ T6382] udc-core: couldn't find an available UDC or it's busy [ 240.001476][ T6404] FS: 00007ffba591d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 240.073763][ T6382] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 240.084891][ T6404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.091937][ T6404] CR2: 00007ff5f17ba000 CR3: 00000000648cc000 CR4: 00000000003506f0 [ 240.103544][ T6404] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.130852][ T4555] usb 10-1: USB disconnect, device number 2 [ 240.139247][ T3531] bcm5974 10-1:0.0: could not read from device [ 240.186041][ T6404] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.196321][ T6404] Call Trace: [ 240.199946][ T6404] [ 240.206814][ T6404] ? __warn+0x15b/0x300 [ 240.214382][ T6404] ? drop_nlink+0xbb/0x100 [ 240.219782][ T6404] ? report_bug+0x1b7/0x2e0 [ 240.225027][ T6404] ? handle_bug+0x3d/0x70 [ 240.229572][ T6404] ? exc_invalid_op+0x16/0x40 [ 240.234971][ T6404] ? asm_exc_invalid_op+0x16/0x20 [ 240.240277][ T6404] ? drop_nlink+0x3f/0x100 [ 240.260568][ T6404] ? drop_nlink+0xbb/0x100 [ 240.265623][ T6404] ? drop_nlink+0xbb/0x100 [ 240.270103][ T6404] udf_rename+0xa46/0xdd0 [ 240.282788][ T6404] ? stack_trace_save+0x113/0x1c0 [ 240.298867][ T6404] ? lockdep_unlock+0x166/0x300 [ 240.358763][ T6404] ? udf_mknod+0x90/0x90 [ 240.383825][ T6404] ? lockdep_unlock+0x166/0x300 [ 240.424880][ T6404] vfs_rename+0xd32/0x10f0 [ 240.460108][ T6404] ? tomoyo_path_link+0xf0/0x170 [ 240.475051][ T6404] ? __ia32_sys_link+0x90/0x90 [ 240.479976][ T6404] ? security_path_rename+0x207/0x2a0 [ 240.522621][ T6404] do_renameat2+0xe0f/0x1700 [ 240.541136][ T6404] ? fsnotify_move+0x4f0/0x4f0 [ 240.569161][ T6404] ? __virt_addr_valid+0x3bb/0x460 [ 240.577345][ T6404] ? 0xffffffff81000000 [ 240.581797][ T6404] ? __check_object_size+0x300/0x410 [ 240.609579][ T6404] ? getname_flags+0x1ec/0x4e0 [ 240.632798][ T6404] ? lockdep_hardirqs_on+0x94/0x130 [ 240.638071][ T6404] __x64_sys_rename+0x82/0x90 [ 240.652637][ T6404] do_syscall_64+0x3b/0xb0 [ 240.661009][ T6404] ? clear_bhb_loop+0x15/0x70 [ 240.672630][ T6404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 240.678582][ T6404] RIP: 0033:0x7ffba7ad5169 [ 240.692840][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.720078][ T6404] RSP: 002b:00007ffba591d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 240.744666][ T6404] RAX: ffffffffffffffda RBX: 00007ffba7cee080 RCX: 00007ffba7ad5169 [ 240.758656][ T6404] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000400000000040 [ 240.782365][ T6404] RBP: 00007ffba7b562a0 R08: 0000000000000000 R09: 0000000000000000 [ 240.790870][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.805357][ T6404] R13: 0000000000000000 R14: 00007ffba7cee080 R15: 00007fff76617d88 [ 240.818870][ T6404] [ 240.822063][ T6404] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.829356][ T6404] CPU: 0 PID: 6404 Comm: syz.7.454 Not tainted 5.15.178-syzkaller #0 [ 240.837450][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 240.847522][ T6404] Call Trace: [ 240.850816][ T6404] [ 240.853767][ T6404] dump_stack_lvl+0x1e3/0x2d0 [ 240.858470][ T6404] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 240.864126][ T6404] ? panic+0x860/0x860 [ 240.868230][ T6404] ? drop_nlink+0x50/0x100 [ 240.872698][ T6404] ? drop_nlink+0x50/0x100 [ 240.877136][ T6404] panic+0x318/0x860 [ 240.881061][ T6404] ? __warn+0x16a/0x300 [ 240.885240][ T6404] ? fb_is_primary_device+0xd0/0xd0 [ 240.890484][ T6404] ? drop_nlink+0xbb/0x100 [ 240.895012][ T6404] __warn+0x2b2/0x300 [ 240.899025][ T6404] ? drop_nlink+0xbb/0x100 [ 240.903461][ T6404] report_bug+0x1b7/0x2e0 [ 240.907823][ T6404] handle_bug+0x3d/0x70 [ 240.911995][ T6404] exc_invalid_op+0x16/0x40 [ 240.916513][ T6404] asm_exc_invalid_op+0x16/0x20 [ 240.921426][ T6404] RIP: 0010:drop_nlink+0xbb/0x100 [ 240.926472][ T6404] Code: 49 8b 1e 48 8d bb c8 07 00 00 be 08 00 00 00 e8 3b a4 ed ff f0 48 ff 83 c8 07 00 00 5b 41 5c 41 5e 41 5f 5d c3 e8 25 ba a3 ff <0f> 0b eb 89 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 4c [ 240.946100][ T6404] RSP: 0018:ffffc9000336f650 EFLAGS: 00010283 [ 240.952197][ T6404] RAX: ffffffff81dccb6b RBX: 1ffff1100e7b8502 RCX: 0000000000080000 [ 240.960182][ T6404] RDX: ffffc90016a84000 RSI: 00000000000122c1 RDI: 00000000000122c2 [ 240.968167][ T6404] RBP: 0000000000000000 R08: ffffffff81dccaef R09: fffffbfff2131851 [ 240.976156][ T6404] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888073dc2810 [ 240.984251][ T6404] R13: 0000000067ceb7a7 R14: ffff888073dc27c8 R15: dffffc0000000000 [ 240.992339][ T6404] ? drop_nlink+0x3f/0x100 [ 240.996777][ T6404] ? drop_nlink+0xbb/0x100 [ 241.001313][ T6404] udf_rename+0xa46/0xdd0 [ 241.005697][ T6404] ? stack_trace_save+0x113/0x1c0 [ 241.010764][ T6404] ? lockdep_unlock+0x166/0x300 [ 241.015639][ T6404] ? udf_mknod+0x90/0x90 [ 241.019915][ T6404] ? lockdep_unlock+0x166/0x300 [ 241.024877][ T6404] vfs_rename+0xd32/0x10f0 [ 241.029325][ T6404] ? tomoyo_path_link+0xf0/0x170 [ 241.034290][ T6404] ? __ia32_sys_link+0x90/0x90 [ 241.039088][ T6404] ? security_path_rename+0x207/0x2a0 [ 241.044481][ T6404] do_renameat2+0xe0f/0x1700 [ 241.049117][ T6404] ? fsnotify_move+0x4f0/0x4f0 [ 241.053906][ T6404] ? __virt_addr_valid+0x3bb/0x460 [ 241.059028][ T6404] ? 0xffffffff81000000 [ 241.063365][ T6404] ? __check_object_size+0x300/0x410 [ 241.068709][ T6404] ? getname_flags+0x1ec/0x4e0 [ 241.073495][ T6404] ? lockdep_hardirqs_on+0x94/0x130 [ 241.078730][ T6404] __x64_sys_rename+0x82/0x90 [ 241.083433][ T6404] do_syscall_64+0x3b/0xb0 [ 241.087863][ T6404] ? clear_bhb_loop+0x15/0x70 [ 241.092561][ T6404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 241.098472][ T6404] RIP: 0033:0x7ffba7ad5169 [ 241.102898][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.122519][ T6404] RSP: 002b:00007ffba591d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 241.130957][ T6404] RAX: ffffffffffffffda RBX: 00007ffba7cee080 RCX: 00007ffba7ad5169 [ 241.138962][ T6404] RDX: 0000000000000000 RSI: 0000400000000240 RDI: 0000400000000040 [ 241.146956][ T6404] RBP: 00007ffba7b562a0 R08: 0000000000000000 R09: 0000000000000000 [ 241.154942][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.162949][ T6404] R13: 0000000000000000 R14: 00007ffba7cee080 R15: 00007fff76617d88 [ 241.170957][ T6404] [ 241.174220][ T6404] Kernel Offset: disabled [ 241.178790][ T6404] Rebooting in 86400 seconds..