last executing test programs: 6m35.825165374s ago: executing program 32 (id=107): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000700)='9', 0x1}]) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) 6m33.266397522s ago: executing program 33 (id=44): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 5m51.748436418s ago: executing program 34 (id=266): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000002140)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 5m50.985990265s ago: executing program 35 (id=269): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x280809a, &(0x7f0000000f40)=ANY=[], 0xd, 0x2b2, &(0x7f00000006c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x0, 0x0, 0x3, 0x0, 0xf, 0x4002}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 5m40.582704917s ago: executing program 36 (id=312): creat(&(0x7f0000000240)='./file0\x00', 0x59) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x56) 5m11.309772596s ago: executing program 3 (id=411): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000240)={0x0, r5, r6}) 5m11.016231615s ago: executing program 3 (id=414): socket(0x1e, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x2f, 0x0, 0x4}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0xffffffff, 0xffffff00, 0xe3e679ad180a2bf1], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x3017, 0x1, 0x7, 0x2, 0xc, 0x1}) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x44}}, 0x0) 5m10.428351563s ago: executing program 3 (id=417): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r2}) 5m9.476232235s ago: executing program 3 (id=423): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) 5m9.051418704s ago: executing program 3 (id=425): mknod$loop(0x0, 0x6000, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socket$packet(0x11, 0x1, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) 5m8.264770542s ago: executing program 3 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0xff34}) sendfile(r5, r6, 0x0, 0x200) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 5m7.738187419s ago: executing program 37 (id=430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0xff34}) sendfile(r5, r6, 0x0, 0x200) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 4m53.680308824s ago: executing program 5 (id=494): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x801, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@binder={0x73622a85, 0x101, 0x2}, @flat=@binder={0x73622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 4m53.522872191s ago: executing program 5 (id=496): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000700), 0xfe, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f00000004c0)=ANY=[@ANYRESOCT], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m52.988474064s ago: executing program 5 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x4) setxattr$incfs_metadata(&(0x7f0000000280)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 4m52.724167161s ago: executing program 5 (id=498): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x35, 0x36, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000000)={0x43, 0x9, 0x2, {0x8, 0x9, 0x8, 0x4, 0x10001, 0x9, 0x3, 0x7861, 0x2}}, 0x43) r1 = syz_open_procfs(0x0, &(0x7f0000000c80)='net/rt_cache\x00') syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723d447466f52c6e6c733d63703835372c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030363734352c00"], 0x3, 0x6a4, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x4c02, &(0x7f0000000140)) r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r3, r1, 0x0, 0x80006800) 4m50.093574187s ago: executing program 5 (id=509): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x58, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc4c85512, &(0x7f0000000b80)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 4m49.452364063s ago: executing program 5 (id=511): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10010000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) 4m48.99403271s ago: executing program 38 (id=511): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x4020744f, &(0x7f0000000000)=0x10010000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) 4m27.114159261s ago: executing program 7 (id=584): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) 4m26.862441407s ago: executing program 7 (id=585): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file0\x00', 0x1208810, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x41, 0x5e2, &(0x7f0000001200)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14d8}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="0f20e06635000002000f22e0d9fa66b9800000c00f326635010000000f3026260f08ba2100b0a2ee0f221dbad104b085ee0f6972ce3e660f3880150f30", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m26.016240862s ago: executing program 7 (id=587): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x4, 0xdaa50, 0x31f09b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000001480)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x8, 0x2a7345, 0x213173}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) 4m25.225470596s ago: executing program 7 (id=589): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) unshare(0x2a060400) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020) 4m24.991861188s ago: executing program 7 (id=590): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x401, 0x200) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x148, &(0x7f0000000300)={0x0, 0x1, 0x3, 0x10}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 4m21.959180919s ago: executing program 8 (id=598): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 4m21.666226795s ago: executing program 8 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0xfffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m21.391038386s ago: executing program 8 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') pread64(r3, &(0x7f0000002180)=""/4105, 0x1009, 0x0) 4m20.269365323s ago: executing program 8 (id=604): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4m19.969422655s ago: executing program 8 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) syz_emit_ethernet(0xb1, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000002ffffffffffff0004abaaa56c72ebe78917d12d837ec7632ecd2d087d936664cd2e0ae709e06d70e78fdf9ea9deea079d33ae41c53e808a924010084630398ea251e603580594938e9635efa7717e7a172ec9fda1273e47179fe5aeaa483b2efa9d306b52fd94c7a924cc8b8d3cda17b8a2449815f18bebe0855ee0790edcd62444a5e4c95371023e95eeef24f9c0fb0e66ded2e02335ec3e1d0983f593e9e617a63940dc961e53b15b965f3197e3fba802d670"], &(0x7f0000000340)={0x0, 0x3, [0x4ec, 0xd2a, 0x1c3, 0x98e]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 4m19.096075895s ago: executing program 7 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 4m18.141421411s ago: executing program 39 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9461a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6006000040000900fffffffffddbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 4m18.123219106s ago: executing program 8 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f20c0350d000000440f22c0c4e27d0f78780fb7da160af2260f001e0f21480f0013660f38804700b9150b00000f32c4a38144df6f", 0x36}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000200)={[{0x7, 0x6a, 0x7f, 0xff, 0x4, 0x6, 0x1b, 0x2, 0x3, 0x10, 0x12, 0x4, 0x9}, {0x7, 0x7, 0x53, 0xd, 0x1, 0x80, 0xff, 0x9, 0x9, 0x4, 0x19, 0x4, 0x2}, {0x3, 0x7, 0x88, 0x4, 0x5, 0x80, 0x8, 0x0, 0x8, 0x0, 0x0, 0xb, 0x7fffffff}], 0x7ff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m18.123084916s ago: executing program 40 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f20c0350d000000440f22c0c4e27d0f78780fb7da160af2260f001e0f21480f0013660f38804700b9150b00000f32c4a38144df6f", 0x36}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000200)={[{0x7, 0x6a, 0x7f, 0xff, 0x4, 0x6, 0x1b, 0x2, 0x3, 0x10, 0x12, 0x4, 0x9}, {0x7, 0x7, 0x53, 0xd, 0x1, 0x80, 0xff, 0x9, 0x9, 0x4, 0x19, 0x4, 0x2}, {0x3, 0x7, 0x88, 0x4, 0x5, 0x80, 0x8, 0x0, 0x8, 0x0, 0x0, 0xb, 0x7fffffff}], 0x7ff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m17.395160221s ago: executing program 4 (id=735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setreuid(0xee00, 0xee01) r1 = socket$inet6(0xa, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r1, 0x10228000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='omfs\x00', 0x0, &(0x7f0000000340)) 3m15.711816606s ago: executing program 4 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000300)=""/104, 0x68) 3m15.634013318s ago: executing program 4 (id=741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x2000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffff7e6, 0xb2ba, 0x8, 0xf, 0xfffffffb, 0x8000}}}}]}, 0x4c}}, 0x44080) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}, {0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x5, 0x8000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 3m13.975997342s ago: executing program 4 (id=746): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x6e45c, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c000000002c756e686964880ecafb19b839eaaff56dc1585afdb924b16a73b70fd8c704652c6e6f72f3636b2c6e6f6a6f6c6978742c6d6f64653d3878303030303030303030303030303830302c626c6f636b3d307830303030303030303030303030348d56589d", @ANYRESDEC], 0xff, 0x52c, &(0x7f0000000580)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x4812, &(0x7f0000000040)=ANY=[], 0x11, 0x6ae, &(0x7f0000000400)="$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") r2 = creat(&(0x7f0000000240)='./file1\x00', 0x5d) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x7ff, 0x8}, {0x7, 0x40}]}, 0x18, 0x2) write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x101) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f0000000500)={[{@gid={'gid', 0x3d, 0xee01}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') read$FUSE(r3, &(0x7f0000001780)={0x2020}, 0x2020) 3m12.270103397s ago: executing program 4 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3000000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x9, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r3}, 0x38) 3m8.960428432s ago: executing program 4 (id=757): openat$pfkey(0xffffff9c, 0x0, 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, 0x0, 0x4000000) 3m8.610145748s ago: executing program 41 (id=757): openat$pfkey(0xffffff9c, 0x0, 0x40000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@lazytime}, {@noblock_validity}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, 0x0, 0x4000000) 1m3.361110761s ago: executing program 9 (id=979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0xe, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd2a, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x200008d0) 1m1.579888989s ago: executing program 9 (id=981): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(r0, 0x3, &(0x7f0000000240)={0x6, 0x9}, 0x0) socket$kcm(0x2, 0x1, 0x84) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpgrp(r0) tgkill(r4, r0, 0x3f) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x24, r5, 0x5707b563827c8365, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x12a}, @void}}}, 0x24}}, 0x0) 58.023346049s ago: executing program 1 (id=985): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket(0x1e, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000540)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvNecykoc8pVobdL94PUe4VWbmJgVE/hXzRnwwSnmbxgYxkjo5DNYT4gM4sDZBADA8PkPxH3HrBIMoggmSXK8U/sVMvyVWad9xlmdExLY2A0mMXBwMCgd0R3pp0BbzcT1MziyqrsxJyc1KLiMwyo5k9m3M+kyAhSd+bv1eAHjHYM3bEMjAxyG/zVFn/7I1W5cVN95PSqiJqp3U03l66PY9im//eKidT7iRlh/x8cEtSyyMv/ME9G6fvmhjkfauqemDh2NirP5W+9/Pfd+5ja4gQ1psfiXYVs/AluWjWfnJ3cLB/PTa9u31KsuCArzWXisakX/yYcX8vAMPnCE1v9mjOH4hVjOKXcKufG3HWLF+Rapn6+7g0Dw8GozxMZGJcz7mdiYJgZtnMPsr/KG6CRwcDMwMCgwsDAwMTAwpCWmZNq4MHAyMAM5RiyQFXBVDMxcIAl9JLzc1LaGRjBSQCsbTkDC9wMw8cMrHCOETLH2KIBahJDO5RWgdIeUHo5lH4MpeXRkg0L2IR+KE+jgYGBjaEisaSkyJCNgQHKgosZwcWMBOA2M0FtncuE6rnjTAyjYBSMglEwCkbBKBgFo2AUjIJRMJIBIAAA///ZbLn7") getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, &(0x7f00000000c0)) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040eaf0031"], 0x7) 51.158259467s ago: executing program 9 (id=992): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x15, 0x39, 0x8, 0x7, 0xa, 0x80, 0x4, 0xf, 0xffffffffffffffff}) 49.174474573s ago: executing program 9 (id=996): r0 = syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) poll(&(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f00000021c0)=[{r0, 0x1000}], 0x1, 0x6) io_uring_setup(0x10039e9, &(0x7f0000002280)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x5) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0xfffffffffffffffe, 0x29) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000001c0)=0x5) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x11) 48.802157981s ago: executing program 1 (id=998): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3fd, @mcast1}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) syz_open_pts(0xffffffffffffffff, 0x2401) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 46.533460263s ago: executing program 1 (id=1002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) setitimer(0x2, &(0x7f0000000340)={{0x77359400}, {0x7fffffffffffffff}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000300)={[{@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'euc-jp'}}, {@gid}, {@part={'part', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@umask={'umask', 0x3d, 0x9}}, {@uid}, {@nodecompose}, {@creator={'creator', 0x3d, "85f19471"}}]}, 0x1, 0x6da, &(0x7f0000000580)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjLYEsMaSlorZkobTqpW4pRYdQQnroebHlWHgtB0kpsimN0se9h5x6Sg+6hR5Keje054ZAyVXHQCGXnHRTmdmZ1Ur7lKzHJv39xMx8M99z/rMzsw/EBPB/a3k2ys8iieXZN7fS9d2dhebEzsJUnt2MiEpElCLKrUUka5Hl3smn+Ha6MS+f9Ovnw9Wltz//aveL1lo5n7LypUH1eqh0b9rOp6hHxES+7DbZp8VPjnZ/qL27fdsbVdLewzRgN4rAxV+eq1V4bvtdttt5H/8nmw+qfpzzFhhTSeu+2WUmYjoiqhGtu35+dSid7+hO3/ZFDwAAAACOq3b8Ki/sxV5sxaWzGA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8U+XP/0/yqVSk65EUz/+v5NsiT4+h4Q9C/GyqtXx29oMBAAAAAAAAgDP36l7sxVZcKtb3k+w3/9c6fuP/VrwXG7ES63EztqIRm7EZ6zEfETMdDVW2Gpub6/NZzYgrA2rejk971Lzdf4x3TnmfAQAAAAAAAGDMVYfkP5zs3vb7WD74/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZBEjHRWmTTlSI9E6VyRFQjopKW2474tEh/TSS9Nj47/3EAAADAc6keXk2qI9R54f3Yi624VKzvJ9ln/mvZ5+VqvBdrsRmrsRnNWIl7+Wfo9FN/aXdnobm7s/Aonbrb/emXxxp61mK0vnvo3fPLWYla3I/VbMvNuBtJ7GdKeSsv7+4spMtHvcf1QTqm5Ce5AaOZ6EjfS2fXP8nSfz78LUL5WLt4QqW+OTNZ7mQ7InP52NIal4sI9I7E0KNTHtjTfJTa3/xcGdxT75h/MLj36SOlen5zcyGORuJ2lNpH6NrgSER89x8f//pBc+3hg/sbs+OzSz29P7TE0UgsdETi+jcoEsPNZZG42l5fjl/Er2I2vpx6K9ZjNX4TjdiMlXqR38hfz+l8ZnCkPpvuXHtr2EjSc7Levn71GlM9Do0p6vHzLNWI17JjeilWI4nHEbESb2R/t2O+fTU4OMJXRzjrSyNcaTvc+F62aIcpav3L/m20Jk9LGtfLHXHtvObOZHmdWw6i9GLPKBX3utHvRx3K38kTaQt/GHh/OG9HIzHfEYmX+r1eWiH9634632iuPVx/0Hh3xP5ez5fpefSnsbpLpEf4xajmO3c5myfZOTWX5b3UvsMejlcl/8WlpdSVd7Vdr3Wm/jIex71DZ+oPYzEWYykrfS0rPdl1x0rzrrdbOnwNT/PSd1rl9g87ne+3Hkez9X4IgPE2/f3pSu2/tX/XPqr9sfag9mb1Z1M/mnqlEpP/mvxxeW7i9dIryd/jo/jdwed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5DaePH3YaDZX1nsnSr2zksG1Gs394kFiA8ocSiT5o3JGKJxsPHm6P7TBwYmpfHgnrH6aieJpjcML189wGMn20eNVHX4siqc8jdBF0hXwtPKJx1z0fLBlcgwO5dFE/fQaLF6wHVnHf/XWeh2viYjoVXjIhWPiNK4+wEW6tfno3VsbT57+YPVR452Vd1bWJhcXl+aWFt9YuHV/tbky15p3VDiXh98C56Hz7URbJSJeHV53wINaAQAAAAAAAAAAgDN0Hv8LcdH7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy9Lc9G+VkkMT93cy5d391ZaKZTkT4oWY6IUkQkv41I/hlxJ1pTzHQ0l/Tr58PVpbc//2r3i4O2ykX5UsR233qj2c6nqEfERL48rfbuDm+vcpCc6pGdtCOTBuxGETi4aP8LAAD//7co7JU=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 45.856223022s ago: executing program 9 (id=1003): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$kcm(0x2, 0xfa97b32f7c5fa303, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x44}}, 0x0) 44.579069103s ago: executing program 1 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0xa, 0x801, 0x84) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000002f00)={0x0, 0xfffffffffffffd41, 0x0, 0x0, 0x62, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {0x0, 0x80000000}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f00000009c0)={{0x80000000, r5, 0x4, [0xc, 0x2]}, {r4, 0x0, 0x3, [0xfffffff9, 0xffffff79]}, 0x2, [0x3]}) fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 42.797720636s ago: executing program 1 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @rand_addr=0x64010102}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) r5 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000140)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000002c0)={0x1, 0x0, 0xff34}) sendfile(r5, r6, 0x0, 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x0) 41.782820836s ago: executing program 1 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x81010000000000, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) epoll_create1(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 41.555841011s ago: executing program 9 (id=1011): socket(0x1e, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, 0x0, &(0x7f0000000280)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xa, 0x80, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, r6, 0x0, 0x700}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r5, 0x0) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x2f, 0x0, 0x4}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0xffffffff, 0xffffff00, 0xe3e679ad180a2bf1], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x3017, 0x1, 0x7, 0x2, 0xc, 0x1}) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x44}}, 0x0) 25.870146349s ago: executing program 42 (id=1011): socket(0x1e, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000000540)={0x1, @sliced={0x0, [0x12a9, 0x400, 0xea, 0x8, 0xffff, 0x3, 0x6, 0x8, 0x83, 0x1, 0xe3c7, 0x5, 0x6, 0x8, 0x9, 0x200, 0x7, 0x9, 0x5, 0x3, 0x1ff, 0xad3f, 0x5, 0x4, 0x0, 0x7, 0x6, 0x8, 0x101, 0x515, 0x7, 0x2, 0x5, 0x9, 0x2, 0xfc00, 0x10, 0xfff, 0x9, 0x23, 0x38, 0x4, 0xfff4, 0x675, 0xa, 0x6, 0x800, 0x8], 0x3}}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0xce5d, 0x80, 0x0, 0x89}, 0x0, &(0x7f0000000280)=0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xa, 0x80, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, r6, 0x0, 0x700}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r5, 0x0) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000480), 0x5, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x9403, 0x0, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @loopback, [0xffffff00, 0x0, 0xffffff00, 0xffffffff], [0xff000000, 0x0, 0x0, 0xff], 'veth1_to_bridge\x00', 'syzkaller0\x00', {}, {0xff}, 0x2f, 0x0, 0x4}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, [0xff000000, 0xffffffff, 0xffffff00, 0xe3e679ad180a2bf1], [0xffffff00, 0x0, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'erspan0\x00', {0xff}, {}, 0x6, 0xc, 0x7, 0x40}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', {0x1000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000000)={0x8, 0x0, 0x3017, 0x1, 0x7, 0x2, 0xc, 0x1}) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000500)="e306644c2f0b801228a9253e", 0xc, 0xfffffffffffffffd) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000210400000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x44}}, 0x0) 25.382624474s ago: executing program 43 (id=1010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x81010000000000, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) poll(0x0, 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) epoll_create1(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 11.998640159s ago: executing program 2 (id=1044): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x82}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235000100000f30c4c1a5e0ca640f01c80f20e035100000000f22e00f01ca650fc758ff8fe8309ff166c4c1e562e0c4c3bd6da00000000018f30fc77503", 0x44}], 0x1, 0x43, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r5) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x3e8c4ddb697c9f8f, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 10.652939144s ago: executing program 6 (id=1045): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x4b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000400000000000000040000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000048000000851000000700000018130000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x50, '\x00', r1, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81, @void, @value}, 0x94) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) socket$inet(0x2, 0x3, 0x2) 10.60907367s ago: executing program 0 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000004000000ff2500000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r5, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080), 0x4) 8.287428743s ago: executing program 0 (id=1047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a0) write$cgroup_int(r5, &(0x7f0000000040)=0x1f00, 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 8.208338311s ago: executing program 2 (id=1048): r0 = syz_open_dev$media(&(0x7f0000000280), 0x4, 0x242700) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000300)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) 7.877534073s ago: executing program 6 (id=1049): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r0], 0x40}}, 0x0) 6.629188171s ago: executing program 0 (id=1050): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000440)={0x14, r7, 0xb05}, 0x14}}, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)="393fbafadf02659379315ea96951df0155f1b0b131d200", 0x17}, 0x1, 0x0, 0x0, 0x48000}, 0x890) 6.156313415s ago: executing program 2 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000640)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) userfaultfd(0x80801) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x1ff) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000200)="48b12300", 0x4, 0xffffffffffffffff) 5.128928956s ago: executing program 6 (id=1052): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC], 0x1, 0x675, &(0x7f0000001280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) semget$private(0x0, 0x4000000009, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x84}], 0x1) semop(0x0, &(0x7f0000000500)=[{}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='setgroups\x00') read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000680)=ANY=[]) keyctl$invalidate(0x15, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.size\x00') 4.87085925s ago: executing program 2 (id=1053): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x5, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'tunl0\x00', 0x0}) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0xc0205648, &(0x7f0000000240)=0x1) 4.041767782s ago: executing program 6 (id=1054): socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$unix(r2, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, 0x0, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$alg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.917979399s ago: executing program 0 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ppoll(&(0x7f00000000c0), 0x0, 0x0, &(0x7f00000001c0)={[0x2a]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x4000004) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a380000001c0abf1b0000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x800) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r4, 0x29, 0x37, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 2.180082892s ago: executing program 2 (id=1056): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="696f636861727365743d617363696900f1652c696f1e716b917365743d757466382c6e6f7672732c74000020acdc6ccf12fc2289215e4cf0690f9e7a280306dca93a9e0c471dcca261ecbfef7d2c689c923248fa9b4088a7ae1c236c0610e0d94663276aaad729233c1b8662d91bda299ad42d27bce2aaf403b00e01f9b18db781ff3c0e179108254e55b32dbedc4116bf5bf3179d05c6725190d783d5d996242d8e14ddb0d65017e6819f0264081c08d474216c5976e81757a9521f170a4fda7988bef80456155b5c7874a0806025ff017cc12aa9f4022ffb459047d400b694f592011b0a434741ebe55eb13ee21c2b4d6012211be0be85440646438465f71ba617c3cdf70e2436ac56ee186c66dff01181bf5bbecb2b386676fa6691ca7ad5276878e264f82cbcb33e48949bb7a132bbbe11cb4a7f2f0eb6fe1744f39baab9cd2eefc26500d0fc199810cd3dfdde4a37ef0bdc0d0f72baa7093d5e8e02f9f68e6d0d6ec9f15247880affc233ffcd9fb5168e62a3eeae33a1058afc2fff1216bcb998bc736307324ab146be1c2e5df28280b4e33e69c89f28e0ed16a470d41354698bf8bcfb0facce28c75ef863bf59210be9d4b1d2c2b623ec67e408fc872f5bef51c9d8d41f45b0cd1ff0787c29a4e0eb2ca772757e5f40a8c1988b514214217b5aa93f3f92d0db4a8b05364e5c5fe1692519d7e25ea9f3e40724b5de8e1649946162d3e77c09530e4277d5a392f5e2ac0493dc8fc120618c1166b24d865240c27551a349cc001ae3a56e522b1b3e4a2045075dff6f9514b24a000000000000000000", @ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYRESHEX], 0x9, 0xc56, &(0x7f0000001bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msgget(0x0, 0x486) chdir(0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mmap$snddsp(&(0x7f00003af000/0x9000)=nil, 0x9000, 0x2000009, 0x13, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) dup2(r3, r3) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) 1.748042998s ago: executing program 6 (id=1057): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}}}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x67d2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xfce1) 1.401419414s ago: executing program 0 (id=1058): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x7351, 0x8001) lseek(r2, 0x0, 0x3) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) timer_settime(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netstat\x00') pread64(r4, &(0x7f0000002180)=""/4105, 0x1009, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 747.392685ms ago: executing program 0 (id=1059): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@nodelalloc}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) 582.164µs ago: executing program 2 (id=1060): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$sg(0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0x58}, 0x0) open(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x0, 0x700, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0xfd, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @empty}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b26, &(0x7f0000000040)) 0s ago: executing program 6 (id=1061): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x14000804}, 0x4000) mknodat(0xffffffffffffffff, &(0x7f00000002c0)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a40)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): op8): readahead error at folio 74 @ nid 36 [ 198.256825][ T8636] erofs (device loop8): readahead error at folio 72 @ nid 36 [ 198.264221][ T8636] erofs (device loop8): readahead error at folio 71 @ nid 36 [ 198.271725][ T8636] erofs (device loop8): readahead error at folio 70 @ nid 36 [ 198.279424][ T8636] erofs (device loop8): readahead error at folio 63 @ nid 36 [ 198.283880][ T8637] F2FS-fs (loop1): Found nat_bits in checkpoint [ 198.287092][ T8636] erofs (device loop8): readahead error at folio 61 @ nid 36 [ 198.300666][ T8636] erofs (device loop8): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 198.309059][ T8636] erofs (device loop8): readahead error at folio 59 @ nid 36 [ 198.317577][ T8636] erofs (device loop8): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 198.326301][ T8636] erofs (device loop8): readahead error at folio 58 @ nid 36 [ 198.333741][ T8636] erofs (device loop8): readahead error at folio 56 @ nid 36 [ 198.341342][ T8636] erofs (device loop8): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 198.349744][ T8636] erofs (device loop8): readahead error at folio 47 @ nid 36 [ 198.357227][ T8636] erofs (device loop8): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 198.357370][ T8637] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 198.365612][ T8636] erofs (device loop8): readahead error at folio 46 @ nid 36 [ 198.365646][ T8636] erofs (device loop8): readahead error at folio 45 @ nid 36 [ 198.365878][ T8636] syz.8.524: attempt to access beyond end of device [ 198.365878][ T8636] loop8: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 198.372757][ T8637] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 198.408845][ T8636] syz.8.524: attempt to access beyond end of device [ 198.408845][ T8636] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 198.423176][ T8636] syz.8.524: attempt to access beyond end of device [ 198.423176][ T8636] loop8: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 198.439743][ T8636] erofs (device loop8): failed to decompress -3 in[47, 4049] out[5297] [ 198.531613][ T8534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.680247][ T5145] Bluetooth: hci3: command tx timeout [ 199.138303][ T8652] netlink: 24 bytes leftover after parsing attributes in process `syz.8.526'. [ 199.916447][ T8534] hsr_slave_0: entered promiscuous mode [ 200.487452][ T8534] hsr_slave_1: entered promiscuous mode [ 200.526688][ T8534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.534296][ T8534] Cannot create hsr debugfs directory [ 200.725529][ T5145] Bluetooth: hci3: command tx timeout [ 200.739346][ T8669] loop8: detected capacity change from 0 to 16 [ 200.922514][ T8669] erofs (device loop8): mounted with root inode @ nid 36. [ 201.306100][ T8676] erofs (device loop8): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 201.401074][ T8676] erofs (device loop8): read error -117 @ 43 of nid 36 [ 202.597815][ T8708] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 202.704961][ T8713] loop8: detected capacity change from 0 to 512 [ 202.723270][ T8713] EXT4-fs (loop8): blocks per group (8192) and clusters per group (2304) inconsistent [ 202.796938][ T8713] netlink: 108 bytes leftover after parsing attributes in process `syz.8.536'. [ 202.807217][ T8713] netlink: 100 bytes leftover after parsing attributes in process `syz.8.536'. [ 202.816173][ T5145] Bluetooth: hci3: command tx timeout [ 202.845505][ T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 203.025625][ T51] usb 2-1: Using ep0 maxpacket: 32 [ 203.075781][ T51] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 203.104420][ T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.127206][ T8713] loop8: detected capacity change from 0 to 40427 [ 203.145870][ T8713] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 203.153644][ T8713] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 203.179619][ T8713] F2FS-fs (loop8): invalid crc value [ 203.186148][ T51] usb 2-1: config 0 has no interface number 0 [ 203.215640][ T8713] F2FS-fs (loop8): Found nat_bits in checkpoint [ 203.227433][ T51] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.283438][ T8713] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 203.290590][ T8713] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 203.293709][ T51] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.347931][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.376450][ T51] usb 2-1: Product: syz [ 203.395518][ T51] usb 2-1: Manufacturer: syz [ 203.410571][ T51] usb 2-1: SerialNumber: syz [ 203.476985][ T51] usb 2-1: config 0 descriptor?? [ 203.494557][ T51] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 204.297167][ T8737] netlink: 36 bytes leftover after parsing attributes in process `syz.9.539'. [ 205.227577][ T51] usb 2-1: qt2_attach - failed to power on unit: -71 [ 205.234589][ T51] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 205.269268][ T51] usb 2-1: USB disconnect, device number 3 [ 205.308130][ T8746] loop9: detected capacity change from 0 to 512 [ 205.378830][ T8746] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.474897][ T8746] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.577294][ T8534] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.659609][ T8534] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.696877][ T8746] capability: warning: `syz.9.541' uses 32-bit capabilities (legacy support in use) [ 205.725658][ T8534] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.748035][ T8534] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.008285][ T8534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.060466][ T8763] loop1: detected capacity change from 0 to 2048 [ 206.095171][ T8534] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.156817][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.163985][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.190111][ T8763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.208544][ T7362] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.259311][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.266455][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.413492][ T8070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.902130][ T8534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.946253][ T5978] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 207.063490][ T8534] veth0_vlan: entered promiscuous mode [ 207.133512][ T5978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.151172][ T8534] veth1_vlan: entered promiscuous mode [ 207.189501][ T5978] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.272251][ T5978] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.319651][ T8534] veth0_macvtap: entered promiscuous mode [ 207.330517][ T8534] veth1_macvtap: entered promiscuous mode [ 207.344737][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.355268][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.360579][ T5978] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.365230][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.384766][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.394783][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.405364][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.415232][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.425781][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.435706][ T5978] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.444568][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.445865][ T5978] usb 10-1: config 0 descriptor?? [ 207.455163][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.470042][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.480510][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.490470][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.501645][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.514145][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.524254][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.535476][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.545297][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.558701][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.568627][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.579150][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.589072][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.599802][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.609860][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.620642][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.630706][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.641932][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.652397][ T8534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.663070][ T8534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.674067][ T8534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.722526][ T8534] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.731375][ T8534] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.740690][ T8534] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.749816][ T8534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.057669][ T7290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.075138][ T5978] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 208.086952][ T5978] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 208.105567][ T7290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.206896][ T8805] netlink: 36 bytes leftover after parsing attributes in process `syz.8.550'. [ 208.811437][ T7290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.835476][ T5978] usb 10-1: USB disconnect, device number 4 [ 208.871476][ T7290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.872770][ T8808] loop7: detected capacity change from 0 to 2048 [ 208.911823][ T8808] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 208.925448][ T8808] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 209.054688][ T8808] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.087771][ T8814] loop1: detected capacity change from 0 to 256 [ 209.214462][ T8814] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 209.378453][ T7145] UDF-fs: warning (device loop7): udf_evict_inode: Inode 1375 (mode 120777) has inode size 4 different from extent length 512. Filesystem need not be standards compliant. [ 211.919208][ T8858] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.982503][ T29] audit: type=1804 audit(1733459935.472:33): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.567" name="/newroot/46/file1" dev="fuse" ino=1 res=1 errno=0 [ 212.080057][ T29] audit: type=1800 audit(1733459935.502:34): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.567" name="/" dev="fuse" ino=1 res=0 errno=0 [ 212.552408][ T8877] dccp_close: ABORT with 213 bytes unread [ 212.611068][ T8840] loop1: detected capacity change from 0 to 32768 [ 212.645216][ T8840] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.662330][ T8844] loop7: detected capacity change from 0 to 32768 [ 212.732321][ T8844] XFS (loop7): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 212.879053][ T8844] XFS (loop7): Starting recovery (logdev: internal) [ 212.918108][ T8840] XFS (loop1): Ending clean mount [ 212.944725][ T8840] XFS (loop1): Quotacheck needed: Please wait. [ 212.974576][ T8844] XFS (loop7): Ending recovery (logdev: internal) [ 213.099152][ T8875] loop8: detected capacity change from 0 to 32768 [ 213.109558][ T8840] XFS (loop1): Quotacheck: Done. [ 213.342482][ T8070] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 213.356054][ T8875] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.571 (8875) [ 213.523607][ T8875] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 213.566515][ T8875] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 213.723245][ T7145] XFS (loop7): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 214.298469][ T8875] BTRFS info (device loop8): rebuilding free space tree [ 214.940222][ T8875] BTRFS info (device loop8): disabling free space tree [ 215.047992][ T8875] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 215.073088][ T8875] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 215.294465][ T8966] loop1: detected capacity change from 0 to 512 [ 215.336938][ T29] audit: type=1800 audit(1733459938.832:35): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.571" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 215.440554][ T8966] EXT4-fs (loop1): blocks per group (8192) and clusters per group (2304) inconsistent [ 215.596958][ T8966] netlink: 108 bytes leftover after parsing attributes in process `syz.1.583'. [ 215.606096][ T8966] netlink: 100 bytes leftover after parsing attributes in process `syz.1.583'. [ 215.752559][ T8976] loop7: detected capacity change from 0 to 1024 [ 215.829912][ T8976] hfsplus: failed to load catalog file [ 215.931749][ T8966] loop1: detected capacity change from 0 to 40427 [ 215.960085][ T8966] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 215.968122][ T8966] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 215.988223][ T7159] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 215.995712][ T8966] F2FS-fs (loop1): invalid crc value [ 216.034752][ T8966] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.153370][ T8955] loop9: detected capacity change from 0 to 32768 [ 216.188849][ T8966] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 216.196121][ T8966] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 216.628511][ T8955] XFS (loop9): DAX unsupported by block device. Turning off DAX. [ 216.746471][ T8955] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 216.920925][ T8955] XFS (loop9): Ending clean mount [ 216.993105][ T8955] XFS (loop9): Quotacheck needed: Please wait. [ 217.262192][ T8955] XFS (loop9): Quotacheck: Done. [ 217.480901][ T29] audit: type=1800 audit(1733459940.922:36): pid=8955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.581" name="bus" dev="loop9" ino=4428 res=0 errno=0 [ 217.501193][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.539750][ T9002] loop4: detected capacity change from 0 to 16384 [ 217.618052][ T9004] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 217.628605][ T9004] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 217.754198][ T7362] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.746099][ T9011] loop9: detected capacity change from 0 to 40427 [ 218.775703][ T9011] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x1fffff [ 218.786047][ T9011] F2FS-fs (loop9): invalid crc value [ 218.813937][ T9011] F2FS-fs (loop9): Found nat_bits in checkpoint [ 218.922066][ T9011] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 219.516127][ T7362] syz-executor: attempt to access beyond end of device [ 219.516127][ T7362] loop9: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 219.531590][ T7362] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 219.549573][ T7362] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 220.090623][ T9026] loop8: detected capacity change from 0 to 64 [ 220.867162][ T9039] process 'syz.9.599' launched './file0' with NULL argv: empty string added [ 222.180861][ T9051] loop8: detected capacity change from 0 to 1024 [ 222.189356][ T9051] EXT4-fs: Ignoring removed bh option [ 222.275357][ T9051] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 223.127747][ T9009] bridge0: port 3(vxlan0) entered blocking state [ 223.140299][ T9009] bridge0: port 3(vxlan0) entered disabled state [ 223.146978][ T9009] vxlan0: entered allmulticast mode [ 223.153509][ T9009] vxlan0: entered promiscuous mode [ 223.166763][ T7159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 223.382489][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 223.480072][ T9070] loop2: detected capacity change from 0 to 1024 [ 223.517182][ T9070] EXT4-fs: Invalid want_extra_isize 125 [ 223.927188][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.472585][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.595544][ T51] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 224.656965][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.747789][ T51] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 224.767525][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.797964][ T51] usb 2-1: config 0 descriptor?? [ 224.914724][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.057597][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.084172][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.095826][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.104142][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.112570][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 225.126700][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 225.212666][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.225445][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.235283][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.246025][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.258051][ T5145] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.276433][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.279435][ T51] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 225.581140][ T35] bridge_slave_1: left allmulticast mode [ 225.590040][ T35] bridge_slave_1: left promiscuous mode [ 225.597487][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.616628][ T35] bridge_slave_0: left allmulticast mode [ 225.622331][ T35] bridge_slave_0: left promiscuous mode [ 225.628269][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.642066][ T51] playstation 0003:054C:0DF2.0004: Failed to retrieve feature with reportID 32: -71 [ 225.655463][ T51] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense firmware info: -71 [ 225.699102][ T51] playstation 0003:054C:0DF2.0004: Failed to get firmware info from DualSense [ 225.720684][ T9087] loop9: detected capacity change from 0 to 32768 [ 225.728270][ T51] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 225.801358][ T51] playstation 0003:054C:0DF2.0004: probe with driver playstation failed with error -71 [ 225.864719][ T51] usb 2-1: USB disconnect, device number 4 [ 226.595239][ T9134] loop9: detected capacity change from 0 to 8192 [ 226.634059][ T9134] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.469720][ T5838] Bluetooth: hci0: command tx timeout [ 227.477472][ T5838] Bluetooth: hci1: command tx timeout [ 228.076920][ T9163] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 228.193171][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.220386][ T9163] kvm: pic: non byte read [ 228.225361][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.233018][ T9163] kvm: pic: non byte read [ 228.253132][ T9163] kvm: pic: level sensitive irq not supported [ 228.263829][ T35] bond0 (unregistering): Released all slaves [ 228.265615][ T9163] kvm: pic: non byte read [ 228.311705][ T9163] kvm: pic: non byte read [ 228.342723][ T9163] kvm: pic: non byte read [ 228.355758][ T9163] kvm: pic: non byte read [ 228.970254][ T9100] chnl_net:caif_netlink_parms(): no params data found [ 228.978971][ T9173] loop1: detected capacity change from 0 to 32768 [ 229.006044][ T9173] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.626 (9173) [ 229.031059][ T9173] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.042265][ T9173] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 229.051701][ T9173] BTRFS info (device loop1): using free-space-tree [ 229.273929][ T35] hsr_slave_0: left promiscuous mode [ 229.348217][ T35] hsr_slave_1: left promiscuous mode [ 229.369386][ T29] audit: type=1804 audit(1733459952.862:37): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.626" name="/newroot/28/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 229.392510][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.402592][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.433344][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.444665][ T29] audit: type=1804 audit(1733459952.942:38): pid=9219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.626" name="/newroot/28/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 229.484691][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.527809][ T5145] Bluetooth: hci1: command tx timeout [ 229.533259][ T5145] Bluetooth: hci0: command tx timeout [ 229.568558][ T35] veth1_macvtap: left promiscuous mode [ 229.574266][ T35] veth0_macvtap: left promiscuous mode [ 229.580522][ T35] veth1_vlan: left promiscuous mode [ 229.586112][ T35] veth0_vlan: left promiscuous mode [ 229.798862][ T8070] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.980334][ T9186] loop2: detected capacity change from 0 to 32768 [ 230.030625][ T29] audit: type=1800 audit(1733459953.522:39): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.628" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 231.612268][ T5145] Bluetooth: hci1: command tx timeout [ 231.612582][ T5838] Bluetooth: hci0: command tx timeout [ 231.715224][ T9242] xt_NFQUEUE: number of queues (1280) out of range (got 65792) [ 233.686328][ T5838] Bluetooth: hci0: command tx timeout [ 233.699137][ T5838] Bluetooth: hci1: command tx timeout [ 233.718202][ T9251] loop9: detected capacity change from 0 to 8192 [ 235.293877][ T35] team0 (unregistering): Port device team_slave_1 removed [ 235.417857][ T35] team0 (unregistering): Port device team_slave_0 removed [ 235.668589][ T9267] loop9: detected capacity change from 0 to 32768 [ 235.701288][ T9267] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.638 (9267) [ 235.734799][ T9267] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 235.757616][ T9267] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 235.769349][ T9267] BTRFS info (device loop9): using free-space-tree [ 235.954378][ T9276] loop1: detected capacity change from 0 to 2048 [ 236.068427][ T9276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.090693][ T9276] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #13: comm syz.1.640: pblk 0 bad header/extent: invalid magic - magic 0, entries 1, max 4(0), depth 0(0) [ 236.115109][ T9276] EXT4-fs (loop1): Remounting filesystem read-only [ 236.164368][ T9276] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 236.171520][ T9276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.189562][ T9276] vhci_hcd vhci_hcd.0: Device attached [ 236.222580][ T9276] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(7) [ 236.229157][ T9276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 236.254672][ T9276] vhci_hcd vhci_hcd.0: Device attached [ 236.370259][ T51] vhci_hcd: vhci_device speed not set [ 236.419663][ T9295] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 236.426228][ T9295] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 236.445832][ T51] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 236.499408][ T9295] vhci_hcd vhci_hcd.0: Device attached [ 236.559029][ T9298] vhci_hcd: connection closed [ 236.576071][ T9293] vhci_hcd: connection closed [ 236.585975][ T11] vhci_hcd: stop threads [ 236.598595][ T11] vhci_hcd: release socket [ 236.607040][ T9290] vhci_hcd: connection reset by peer [ 236.620642][ T11] vhci_hcd: disconnect device [ 236.665757][ T11] vhci_hcd: stop threads [ 236.670075][ T11] vhci_hcd: release socket [ 236.674544][ T11] vhci_hcd: disconnect device [ 236.709298][ T11] vhci_hcd: stop threads [ 236.713598][ T11] vhci_hcd: release socket [ 236.745113][ T11] vhci_hcd: disconnect device [ 237.055621][ T9105] chnl_net:caif_netlink_parms(): no params data found [ 237.121679][ T8070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.368908][ T7362] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 237.388273][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.447890][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.471456][ T9100] bridge_slave_0: entered allmulticast mode [ 237.479188][ T9100] bridge_slave_0: entered promiscuous mode [ 237.513142][ T9100] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.525907][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.808157][ T9100] bridge_slave_1: entered allmulticast mode [ 237.943809][ T9100] bridge_slave_1: entered promiscuous mode [ 238.557570][ T9100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.599646][ T9100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.609722][ T9334] random: crng reseeded on system resumption [ 239.668569][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.686133][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.693403][ T9105] bridge_slave_0: entered allmulticast mode [ 239.723533][ T9105] bridge_slave_0: entered promiscuous mode [ 239.734953][ T9341] loop9: detected capacity change from 0 to 1024 [ 239.963939][ T9100] team0: Port device team_slave_0 added [ 240.121394][ T9354] QAT: Device 8 not found [ 240.293099][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.462018][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.695668][ T9105] bridge_slave_1: entered allmulticast mode [ 240.719508][ T200] hfsplus: b-tree write err: -5, ino 4 [ 240.729932][ T9105] bridge_slave_1: entered promiscuous mode [ 240.749510][ T9100] team0: Port device team_slave_1 added [ 241.031356][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.083427][ T9100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.118153][ T9100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.408263][ T9100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.622465][ T51] vhci_hcd: vhci_device speed not set [ 241.795221][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.874663][ T9100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.890166][ T9100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.918368][ T9100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.039144][ T9105] team0: Port device team_slave_0 added [ 242.083648][ T9105] team0: Port device team_slave_1 added [ 242.258268][ T9100] hsr_slave_0: entered promiscuous mode [ 242.264915][ T9100] hsr_slave_1: entered promiscuous mode [ 242.300092][ T9100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.329061][ T9100] Cannot create hsr debugfs directory [ 242.346063][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.372708][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.415132][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.518488][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.534074][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.638138][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.761042][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.9.653'. [ 244.736191][ T9105] hsr_slave_0: entered promiscuous mode [ 244.786544][ T9105] hsr_slave_1: entered promiscuous mode [ 244.792835][ T9105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.126176][ T9105] Cannot create hsr debugfs directory [ 245.448761][ T5838] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 245.448848][ T5838] Bluetooth: hci2: unknown advertising packet type: 0x09 [ 245.459498][ T5838] Bluetooth: hci2: unknown advertising packet type: 0x05 [ 245.466633][ T5838] Bluetooth: hci2: Dropping invalid advertising data [ 245.480538][ T5838] Bluetooth: hci2: Malformed LE Event: 0x02 [ 245.684328][ T9424] loop9: detected capacity change from 0 to 512 [ 245.734806][ T9424] EXT4-fs (loop9): blocks per group (8192) and clusters per group (2304) inconsistent [ 245.844923][ T9424] netlink: 108 bytes leftover after parsing attributes in process `syz.9.659'. [ 245.854350][ T9424] netlink: 100 bytes leftover after parsing attributes in process `syz.9.659'. [ 246.168026][ T9424] loop9: detected capacity change from 0 to 40427 [ 246.184645][ T9424] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 246.192732][ T9424] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 246.240462][ T9424] F2FS-fs (loop9): invalid crc value [ 246.262356][ T9424] F2FS-fs (loop9): Found nat_bits in checkpoint [ 246.333301][ T9424] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 246.345263][ T9424] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 246.580642][ T9446] loop2: detected capacity change from 0 to 4096 [ 248.248248][ T9100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.381044][ T9105] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.431939][ T9100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.560291][ T9105] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.607918][ T9100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.644470][ T9100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.748432][ T9105] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.842889][ T9473] loop1: detected capacity change from 0 to 32768 [ 248.873459][ T9473] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.666 (9473) [ 248.935531][ T9473] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.963929][ T9473] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 249.028558][ T9473] BTRFS info (device loop1): using free-space-tree [ 249.073394][ T9105] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.282615][ T9100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.398309][ T9100] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.570668][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.577906][ T9366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.640547][ T8070] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.667588][ T9366] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.674702][ T9366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.796432][ T9105] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 249.893917][ T9105] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 249.975057][ T9105] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.077013][ T9105] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.337833][ T9100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.367463][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.404955][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.470769][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.477944][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.511024][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.518216][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.820080][ T9105] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.830908][ T9105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.747411][ T9100] veth0_vlan: entered promiscuous mode [ 251.815289][ T9100] veth1_vlan: entered promiscuous mode [ 251.860227][ T9562] loop2: detected capacity change from 0 to 512 [ 251.926747][ T9562] EXT4-fs (loop2): blocks per group (8192) and clusters per group (2304) inconsistent [ 251.971753][ T9100] veth0_macvtap: entered promiscuous mode [ 252.052028][ T9105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.060729][ T9562] netlink: 108 bytes leftover after parsing attributes in process `syz.2.672'. [ 252.069904][ T9562] netlink: 100 bytes leftover after parsing attributes in process `syz.2.672'. [ 252.108246][ T9100] veth1_macvtap: entered promiscuous mode [ 252.232337][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.305450][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.368692][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.395796][ T9562] loop2: detected capacity change from 0 to 40427 [ 252.406845][ T9562] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 252.414638][ T9562] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 252.428209][ T9562] F2FS-fs (loop2): invalid crc value [ 252.465594][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.478889][ T9562] F2FS-fs (loop2): Found nat_bits in checkpoint [ 252.535225][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.557594][ T9562] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 252.564680][ T9562] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 252.566927][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.665549][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.717903][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.776212][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.845458][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.015600][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.028351][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.145731][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.185710][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.247006][ T9100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.345775][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.386710][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.427816][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.440080][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.451564][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.467425][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.482891][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.493547][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.508490][ T9566] loop9: detected capacity change from 0 to 32768 [ 253.535568][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.546279][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.556189][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.567604][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.585517][ T9100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.607131][ T9566] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.673 (9566) [ 253.625495][ T9100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.648384][ T9100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.712925][ T9100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.732827][ T9566] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 253.755381][ T9100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.764204][ T9100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.805529][ T9566] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 253.814308][ T9566] BTRFS info (device loop9): using free-space-tree [ 253.823762][ T9100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.143195][ T9566] BTRFS info (device loop9): rebuilding free space tree [ 254.251470][ T200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.271225][ T200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.375236][ T9105] veth0_vlan: entered promiscuous mode [ 254.416931][ T29] audit: type=1804 audit(1733459977.892:40): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.673" name="/newroot/78/bus/file1" dev="loop9" ino=260 res=1 errno=0 [ 254.481793][ T9105] veth1_vlan: entered promiscuous mode [ 254.506291][ T9566] loop9: detected capacity change from 32768 to 65 [ 254.515821][ T29] audit: type=1804 audit(1733459977.902:41): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.673" name="/newroot/78/bus/file1" dev="loop9" ino=260 res=1 errno=0 [ 254.545879][ T9621] syz.9.673: attempt to access beyond end of device [ 254.545879][ T9621] loop9: rw=2049, sector=10488, nr_sectors = 8 limit=65 [ 254.579263][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.609756][ T9105] veth0_macvtap: entered promiscuous mode [ 254.616183][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.629270][ T35] kworker/u8:2: attempt to access beyond end of device [ 254.629270][ T35] loop9: rw=2051, sector=10488, nr_sectors = 8 limit=65 [ 254.650156][ T9105] veth1_macvtap: entered promiscuous mode [ 254.665791][ T29] audit: type=1804 audit(1733459978.142:42): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.673" name="/newroot/78/bus/file1" dev="loop9" ino=260 res=1 errno=0 [ 254.722107][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.759069][ T9566] syz.9.673: attempt to access beyond end of device [ 254.759069][ T9566] loop9: rw=2049, sector=10488, nr_sectors = 128 limit=65 [ 254.785527][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.816049][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.835875][ T35] kworker/u8:2: attempt to access beyond end of device [ 254.835875][ T35] loop9: rw=2051, sector=10488, nr_sectors = 128 limit=65 [ 254.850117][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.850148][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.850167][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.850184][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.850199][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.850216][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.850230][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.850247][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.850262][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.850289][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.850303][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.850323][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.850338][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.851664][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.163342][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.184320][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.674'. [ 255.196129][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.220454][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.253334][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.276143][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.307710][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.331127][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.359424][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.389978][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.410172][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.435664][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.474502][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.516986][ T5882] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 255.521161][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.576896][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.615834][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.637849][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.671090][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.705733][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 255.712402][ T35] kworker/u8:2: attempt to access beyond end of device [ 255.712402][ T35] loop9: rw=67112961, sector=10472, nr_sectors = 8 limit=65 [ 255.737564][ T5882] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 255.743236][ T9105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.773193][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.791980][ T35] kworker/u8:2: attempt to access beyond end of device [ 255.791980][ T35] loop9: rw=67112961, sector=10488, nr_sectors = 8 limit=65 [ 255.805603][ T9105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.830435][ T5882] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.839735][ T35] kworker/u8:2: attempt to access beyond end of device [ 255.839735][ T35] loop9: rw=67112961, sector=10496, nr_sectors = 8 limit=65 [ 255.860246][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.875607][ T9105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.876890][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.884338][ T9105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.922134][ T35] kworker/u8:2: attempt to access beyond end of device [ 255.922134][ T35] loop9: rw=67112961, sector=10504, nr_sectors = 8 limit=65 [ 255.948381][ T5882] usb 1-1: Product: syz [ 255.952628][ T5882] usb 1-1: Manufacturer: syz [ 255.978281][ T7362] BTRFS error (device loop9 state A): Transaction aborted (error -5) [ 255.988524][ T5882] usb 1-1: SerialNumber: syz [ 256.008858][ T7362] BTRFS: error (device loop9 state A) in btrfs_start_dirty_block_groups:3459: errno=-5 IO failure [ 256.029554][ T5882] usb 1-1: config 0 descriptor?? [ 256.058396][ T7362] BTRFS info (device loop9 state EA): forced readonly [ 256.087092][ T7362] BTRFS info (device loop9 state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.111068][ T9648] binder: 9647:9648 ioctl c0306201 20000140 returned -14 [ 256.180206][ T6394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.280230][ T6394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.548864][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.567549][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.563457][ T5882] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 257.573081][ T5882] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 259.905787][ T5882] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 260.008023][ T5838] Bluetooth: hci2: command tx timeout [ 260.098664][ T5882] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 260.200862][ T5882] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 260.262001][ T5882] em28xx 1-1:0.0: No AC97 audio processor [ 260.380490][ T5882] usb 1-1: USB disconnect, device number 8 [ 260.426296][ T5882] em28xx 1-1:0.0: Disconnecting em28xx [ 260.479010][ T5882] em28xx 1-1:0.0: Freeing device [ 260.497135][ T9677] loop4: detected capacity change from 0 to 32768 [ 260.529931][ T9677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.681 (9677) [ 260.682056][ T9677] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.741136][ T9677] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 260.822762][ T9677] BTRFS info (device loop4): using free-space-tree [ 261.821344][ T9677] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 261.828907][ T9677] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 262.392560][ T9677] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 262.432817][ T9677] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 262.442463][ T9677] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 262.452394][ T9677] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 262.463059][ T9677] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 262.473291][ T9677] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 262.507680][ T9677] BTRFS error (device loop4): open_ctree failed [ 263.944687][ T9736] rdma_op ffff88804a51c1f0 conn xmit_rdma 0000000000000000 [ 264.624359][ T9741] loop1: detected capacity change from 0 to 128 [ 264.657575][ T9741] ufs: You didn't specify the type of your ufs filesystem [ 264.657575][ T9741] [ 264.657575][ T9741] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 264.657575][ T9741] [ 264.657575][ T9741] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 264.731221][ T9741] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 264.954428][ T9747] netlink: 'syz.0.688': attribute type 4 has an invalid length. [ 268.842564][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 268.997520][ T9776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.696'. [ 270.066267][ T9788] syzkaller0: entered promiscuous mode [ 270.071916][ T9788] syzkaller0: entered allmulticast mode [ 270.091545][ T29] audit: type=1326 audit(1733459993.582:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9786 comm="syz.2.703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f79c777ff19 code=0x0 [ 271.927293][ T9819] syz.9.706 (9819): drop_caches: 2 [ 272.671564][ T9836] netlink: 'syz.1.710': attribute type 4 has an invalid length. [ 272.723738][ T9837] netlink: 'syz.1.710': attribute type 4 has an invalid length. [ 275.703403][ T9847] netlink: 36 bytes leftover after parsing attributes in process `syz.2.711'. [ 277.952147][ T9869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.716'. [ 278.887729][ T9877] netlink: 'syz.9.717': attribute type 2 has an invalid length. [ 279.752402][ T9887] binder_alloc: 9886: binder_alloc_buf, no vma [ 280.531704][ T29] audit: type=1326 audit(1733460004.002:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.9.723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff808f7ff19 code=0x0 [ 280.678879][ T9880] syz.2.719 (9880): drop_caches: 2 [ 282.316922][ T5197] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 282.406873][ T9925] netlink: 36 bytes leftover after parsing attributes in process `syz.9.726'. [ 282.502440][ T9928] netlink: 'syz.0.728': attribute type 4 has an invalid length. [ 282.505694][ T5197] usb 3-1: Using ep0 maxpacket: 8 [ 282.524283][ T5197] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 282.532822][ T5197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 282.546443][ T5197] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.580461][ T5197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 282.664699][ T5197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 282.691032][ T5197] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 282.710784][ T5197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 282.765838][ T5197] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.815819][ T5197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 282.885874][ T5197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 282.929266][ T5197] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 282.938312][ T5197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 282.997771][ T5197] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.743150][ T5197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.754341][ T5197] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.768977][ T5197] usb 3-1: string descriptor 0 read error: -22 [ 283.775243][ T5197] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 283.794948][ T5197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.866433][ T9937] loop0: detected capacity change from 0 to 4096 [ 283.873244][ T5197] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 283.908304][ T9937] nilfs2: Unknown parameter 'D1Fê' [ 284.965211][ T5881] usb 3-1: USB disconnect, device number 2 [ 285.493439][ T9973] omfs: Invalid superblock (0) [ 286.898146][ T9991] syz.1.739 (9991): /proc/9979/oom_adj is deprecated, please use /proc/9979/oom_score_adj instead. [ 289.412070][T10003] netlink: 'syz.1.744': attribute type 10 has an invalid length. [ 289.478513][T10015] loop4: detected capacity change from 0 to 164 [ 289.542989][T10015] loop4: detected capacity change from 0 to 1024 [ 289.635763][T10003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.744'. [ 289.668426][T10003] ipvlan1: entered promiscuous mode [ 289.673920][T10003] ipvlan1: entered allmulticast mode [ 289.703535][T10003] veth0_vlan: entered allmulticast mode [ 289.720421][T10003] bridge0: port 4(ipvlan1) entered blocking state [ 289.733044][T10003] bridge0: port 4(ipvlan1) entered disabled state [ 289.747350][T10024] loop0: detected capacity change from 0 to 128 [ 289.775887][T10003] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 289.839442][T10027] hfsplus: cannot replace xattr [ 289.975666][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 290.049830][T10024] EXT4-fs (loop0): Test dummy encryption mode enabled [ 290.079319][T10024] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.142440][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 290.157357][T10024] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.188359][ T5881] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 290.295202][ T5881] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 290.305662][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.314642][ T5881] usb 3-1: Product: syz [ 290.319945][ T5881] usb 3-1: Manufacturer: syz [ 290.324599][ T5881] usb 3-1: SerialNumber: syz [ 290.363853][T10053] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 290.444884][ T5881] usb 3-1: config 0 descriptor?? [ 290.627665][ T5881] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 290.635975][ T5881] usb 3-1: Detected FT232R [ 290.966121][ T5881] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 291.061429][ T5881] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 291.110533][ T5881] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 291.182389][ T5881] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 291.272655][ T5881] usb 3-1: USB disconnect, device number 3 [ 291.298270][ T5881] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 291.310470][ T5881] ftdi_sio 3-1:0.0: device disconnected [ 292.686776][ T9100] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.842278][ T9366] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.965548][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 294.155242][ T9366] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.192113][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.205667][ T5881] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 294.236266][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.246363][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.258787][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.289419][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 294.302576][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.311241][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 294.344682][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 294.353023][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.363097][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.374093][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.385530][ T5881] usb 10-1: Using ep0 maxpacket: 32 [ 294.390854][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.404584][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 294.413990][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.419681][ T9366] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.423910][ T5881] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 294.446632][ T5881] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 294.456069][ T5881] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 294.464341][ T5881] usb 10-1: Product: syz [ 294.479493][ T5881] usb 10-1: Manufacturer: syz [ 294.485168][ T5881] usb 10-1: SerialNumber: syz [ 294.824972][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 294.842257][ T5881] usb 10-1: config 0 descriptor?? [ 294.865759][ T8] usbtmc 1-1:16.0: can't read capabilities [ 294.891308][T10088] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 295.268861][ T8] usb 1-1: USB disconnect, device number 9 [ 295.278425][ T5881] usb 10-1: USB disconnect, device number 5 [ 295.398052][ T9366] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.432520][ T5838] Bluetooth: hci1: command tx timeout [ 297.135891][T10095] chnl_net:caif_netlink_parms(): no params data found [ 297.153275][T10130] loop2: detected capacity change from 0 to 256 [ 297.188629][ T9366] bridge_slave_1: left allmulticast mode [ 297.220044][ T9366] bridge_slave_1: left promiscuous mode [ 297.238413][ T29] audit: type=1800 audit(1733460020.732:45): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.767" name="bus" dev="loop2" ino=1048678 res=0 errno=0 [ 297.246490][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.391283][ T9366] bridge_slave_0: left allmulticast mode [ 297.404386][T10136] loop1: detected capacity change from 0 to 1764 [ 297.425025][ T9366] bridge_slave_0: left promiscuous mode [ 297.438247][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.555980][ T5145] Bluetooth: hci1: command tx timeout [ 298.795132][T10155] loop2: detected capacity change from 0 to 1024 [ 299.640459][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 299.669707][T10155] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 299.679553][T10155] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 299.695755][T10155] EXT4-fs (loop2): invalid journal inode [ 300.590868][ T5840] Bluetooth: hci1: command tx timeout [ 300.903690][ T9366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.929271][ T9366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.297980][ T9366] bond0 (unregistering): Released all slaves [ 302.109362][T10179] syzkaller0: entered allmulticast mode [ 302.646810][ T5840] Bluetooth: hci1: command tx timeout [ 303.812193][T10201] loop1: detected capacity change from 0 to 2048 [ 304.101724][T10201] loop1: p1 < > p4 [ 304.113891][T10201] loop1: p4 size 8388608 extends beyond EOD, truncated [ 304.325733][ T5205] loop1: p1 < > p4 [ 304.386109][ T5205] loop1: p4 size 8388608 extends beyond EOD, truncated [ 304.446875][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.464386][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.484860][T10095] bridge_slave_0: entered allmulticast mode [ 304.502886][T10095] bridge_slave_0: entered promiscuous mode [ 304.549603][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.557367][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.629117][T10095] bridge_slave_1: entered allmulticast mode [ 304.671741][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 304.691937][ T5835] udevd[5835]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 304.703818][T10095] bridge_slave_1: entered promiscuous mode [ 304.763943][ T7908] udevd[7908]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 304.788222][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 304.808027][T10207] loop1: detected capacity change from 0 to 512 [ 304.827100][T10207] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 306.139496][T10207] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 306.827350][T10207] EXT4-fs (loop1): 1 truncate cleaned up [ 306.926369][T10207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.147981][ T9366] hsr_slave_0: left promiscuous mode [ 307.180167][T10224] loop9: detected capacity change from 0 to 512 [ 307.239051][ T9366] hsr_slave_1: left promiscuous mode [ 307.252153][T10224] EXT4-fs (loop9): blocks per group (8192) and clusters per group (2304) inconsistent [ 307.711214][ T9366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.871045][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.918614][ T8070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.936850][T10224] netlink: 108 bytes leftover after parsing attributes in process `syz.9.790'. [ 307.945940][T10224] netlink: 100 bytes leftover after parsing attributes in process `syz.9.790'. [ 308.084744][ T9366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.103691][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.225635][ T9366] veth1_macvtap: left promiscuous mode [ 308.265522][T10224] loop9: detected capacity change from 0 to 40427 [ 308.272411][ T9366] veth0_macvtap: left promiscuous mode [ 308.278923][T10224] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 308.286731][T10224] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 308.308431][T10224] F2FS-fs (loop9): invalid crc value [ 308.316106][ T9366] veth1_vlan: left promiscuous mode [ 308.321435][ T9366] veth0_vlan: left promiscuous mode [ 308.353053][T10224] F2FS-fs (loop9): Found nat_bits in checkpoint [ 308.422317][T10224] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 308.429656][T10224] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 310.941147][T10261] loop0: detected capacity change from 0 to 512 [ 310.955326][T10261] EXT4-fs: Ignoring removed orlov option [ 311.020916][T10261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.042424][T10261] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.144503][ T9100] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.337612][T10273] loop0: detected capacity change from 0 to 8 [ 312.357213][ T9366] team0 (unregistering): Port device team_slave_1 removed [ 313.300981][ T9366] team0 (unregistering): Port device team_slave_0 removed [ 315.938166][T10300] loop0: detected capacity change from 0 to 128 [ 316.309446][T10300] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 317.021024][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.113282][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.174502][ C0] Unknown status report in ack skb [ 317.346092][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.861175][T10321] virtio-fs: tag <(null)> not found [ 318.408485][T10326] loop0: detected capacity change from 0 to 512 [ 318.418675][T10326] EXT4-fs (loop0): blocks per group (8192) and clusters per group (2304) inconsistent [ 318.649099][ T5145] Bluetooth: hci0: command 0x0406 tx timeout [ 319.113665][T10326] netlink: 108 bytes leftover after parsing attributes in process `syz.0.807'. [ 319.122760][T10326] netlink: 100 bytes leftover after parsing attributes in process `syz.0.807'. [ 319.329474][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 319.371164][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 319.436823][T10326] loop0: detected capacity change from 0 to 40427 [ 319.446996][T10326] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 319.455652][T10326] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 319.466119][T10326] F2FS-fs (loop0): invalid crc value [ 320.037899][T10326] F2FS-fs (loop0): Found nat_bits in checkpoint [ 320.083613][T10095] team0: Port device team_slave_0 added [ 320.098746][T10095] team0: Port device team_slave_1 added [ 320.116779][T10326] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 320.123890][T10326] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 320.487354][T10343] befs: (nbd2): No write support. Marking filesystem read-only [ 320.500280][T10343] syz.2.810: attempt to access beyond end of device [ 320.500280][T10343] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 320.615338][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.676036][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.768495][T10346] binder: 10339:10346 ioctl c0306201 0 returned -14 [ 320.864164][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.899785][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.912307][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.055490][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.440161][T10095] hsr_slave_0: entered promiscuous mode [ 321.478722][T10095] hsr_slave_1: entered promiscuous mode [ 321.501137][T10095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.527444][T10095] Cannot create hsr debugfs directory [ 323.355786][ T51] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 323.568166][T10372] loop2: detected capacity change from 0 to 4096 [ 323.605602][ T51] usb 10-1: Using ep0 maxpacket: 32 [ 323.614725][ T51] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 323.648350][ T51] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.659013][ T51] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.685057][T10372] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 323.699712][ T51] usb 10-1: Product: syz [ 323.704016][ T51] usb 10-1: Manufacturer: syz [ 323.719831][ T51] usb 10-1: SerialNumber: syz [ 323.740347][T10372] ntfs3(loop2): Failed to initialize MFT zone (-22). [ 323.764821][ T51] usb 10-1: config 0 descriptor?? [ 323.799673][T10363] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 324.158939][ T5881] usb 10-1: USB disconnect, device number 6 [ 326.692223][T10411] loop1: detected capacity change from 0 to 4096 [ 327.054680][T10418] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.215667][ T29] audit: type=1804 audit(1733460050.662:46): pid=10411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.823" name="/newroot/82/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 327.573741][ T29] audit: type=1804 audit(1733460050.902:47): pid=10411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.823" name="/newroot/82/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 327.716907][ T29] audit: type=1804 audit(1733460051.002:48): pid=10411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.823" name="/newroot/82/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 327.786703][ T29] audit: type=1804 audit(1733460051.002:49): pid=10423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.823" name="/newroot/82/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 327.841973][ T29] audit: type=1804 audit(1733460051.022:50): pid=10411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.823" name="/newroot/82/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 327.923532][T10430] loop9: detected capacity change from 0 to 512 [ 327.955764][T10095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.962881][T10430] EXT4-fs (loop9): blocks per group (8192) and clusters per group (2304) inconsistent [ 328.190215][T10095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.303431][T10430] loop9: detected capacity change from 0 to 40427 [ 328.319239][T10430] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 328.327062][T10430] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 328.351874][T10430] F2FS-fs (loop9): invalid crc value [ 328.364630][T10095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.388804][T10430] F2FS-fs (loop9): Found nat_bits in checkpoint [ 328.438748][T10430] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 328.446085][T10430] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 328.467594][T10095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.739577][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.028134][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.093437][ T9366] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.100627][ T9366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.188800][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.195977][T10143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.497665][T10095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.910820][T10449] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 330.279702][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.735812][T10095] veth0_vlan: entered promiscuous mode [ 332.748152][T10095] veth1_vlan: entered promiscuous mode [ 333.309025][T10095] veth0_macvtap: entered promiscuous mode [ 333.317654][ T29] audit: type=1326 audit(1733460056.712:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 333.360572][T10095] veth1_macvtap: entered promiscuous mode [ 333.371764][ T29] audit: type=1326 audit(1733460056.722:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 333.448374][ T29] audit: type=1326 audit(1733460056.722:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 333.616247][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.638144][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.071021][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.093203][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.095457][ T29] audit: type=1326 audit(1733460056.722:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 334.127288][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.154889][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.229005][ T29] audit: type=1326 audit(1733460056.722:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 334.312750][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.460090][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.825613][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.836187][ T29] audit: type=1326 audit(1733460056.722:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 334.860285][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.895547][ T29] audit: type=1326 audit(1733460056.722:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 334.900941][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.929737][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.939629][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.955428][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.965263][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.986060][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.015565][ T29] audit: type=1326 audit(1733460056.722:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 335.039764][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.049280][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.060053][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.069968][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.080413][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.090280][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.101017][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.111673][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.122923][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.133515][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.135736][ T29] audit: type=1326 audit(1733460056.722:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 335.144090][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.179231][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.190142][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.200110][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.210701][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.220634][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.767114][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.806475][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.051701][ T29] audit: type=1326 audit(1733460056.722:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10451 comm="syz.0.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efff797ff19 code=0x7fc00000 [ 336.127758][T10095] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.160390][T10095] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.429273][T10496] loop0: detected capacity change from 0 to 65536 [ 336.455643][T10095] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.925842][T10095] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.276333][T10496] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 337.732426][T10496] XFS (loop0): Ending clean mount [ 337.749526][T10496] XFS (loop0): Quotacheck needed: Please wait. [ 337.877526][T10496] XFS (loop0): Quotacheck: Done. [ 338.289688][T10143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.333814][T10143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.354797][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.362761][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.192917][ T9100] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 339.221400][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.285257][T10522] loop9: detected capacity change from 0 to 40427 [ 339.353190][T10522] F2FS-fs (loop9): Found nat_bits in checkpoint [ 339.412194][T10522] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 339.656299][ T5881] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 340.655573][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 341.636497][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 341.674208][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 341.736336][ T7362] syz-executor: attempt to access beyond end of device [ 341.736336][ T7362] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 341.768003][ T7362] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 342.134525][ T5881] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 342.143756][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.151891][ T5881] usb 3-1: Product: syz [ 342.167966][ T5881] usb 3-1: config 0 descriptor?? [ 342.173430][ T5881] usb 3-1: can't set config #0, error -71 [ 342.189502][ T5881] usb 3-1: USB disconnect, device number 4 [ 343.170027][T10574] loop0: detected capacity change from 0 to 512 [ 343.182486][ T5881] IPVS: starting estimator thread 0... [ 343.209965][T10571] tipc: Started in network mode [ 343.230420][T10574] ext4: Unknown parameter 'fsuuid' [ 343.235842][T10571] tipc: Node identity ac1414aa, cluster identity 4711 [ 343.261297][T10571] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.275677][T10579] IPVS: using max 27 ests per chain, 64800 per kthread [ 343.302772][T10571] tipc: Enabled bearer , priority 10 [ 343.398861][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.535571][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.675531][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.815498][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.955662][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.095524][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.235588][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.382270][ T9] tipc: Node number set to 2886997162 [ 344.492016][T10566] loop2: detected capacity change from 0 to 32768 [ 344.515644][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.606180][T10566] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 344.785507][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.562749][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 345.562802][ T29] audit: type=1800 audit(1733460069.042:63): pid=10566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.852" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 345.695944][ T5978] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 345.933274][ T29] audit: type=1800 audit(1733460069.392:64): pid=10566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.852" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 346.032689][ T5978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.268352][ T5978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.398623][ T5978] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 346.478919][ T5978] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.477748][ T5978] usb 7-1: config 0 descriptor?? [ 348.128588][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.143620][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.192288][ T8534] ocfs2: Unmounting device (7,2) on (node local) [ 348.273720][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.280829][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.287907][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.294908][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.301969][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.309066][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.316564][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.323568][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.331040][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.339511][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.347484][ T5978] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0 [ 348.405477][ C0] net_ratelimit: 3 callbacks suppressed [ 348.405499][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.203920][ T5978] lg-g15 0003:046D:C222.0005: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0 [ 349.366510][ T8] usb 7-1: USB disconnect, device number 2 [ 349.445475][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.485572][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.525495][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.865499][T10663] loop6: detected capacity change from 0 to 1024 [ 352.345436][T10663] hfsplus: invalid extent max_key_len 0 [ 352.351330][T10663] hfsplus: failed to load extents file [ 352.565494][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.605497][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.645482][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.943443][ T52] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.165573][ T5910] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 355.685473][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.185547][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 356.502777][ T5910] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 356.528875][ T52] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.547467][ T5910] usb 3-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40 [ 356.725519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.510916][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.519038][ T5910] usb 3-1: Product: syz [ 357.523232][ T5910] usb 3-1: Manufacturer: syz [ 357.528041][ T5910] usb 3-1: SerialNumber: syz [ 357.765477][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 357.948903][T10727] loop0: detected capacity change from 0 to 32768 [ 357.998510][T10727] (syz.0.880,10727,0):ocfs2_initialize_super:2139 ERROR: couldn't mount because of unsupported optional features (30000). [ 358.011436][T10727] (syz.0.880,10727,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 358.268452][T10732] loop9: detected capacity change from 0 to 1024 [ 358.521157][ T5910] usb 3-1: can't set config #1, error -71 [ 358.528845][ T5910] usb 3-1: USB disconnect, device number 5 [ 358.569107][ T52] netdevsim netdevsim8 netdevsim1: left allmulticast mode [ 358.805487][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.165609][ T52] netdevsim netdevsim8 netdevsim1: left promiscuous mode [ 359.203226][T10737] loop0: detected capacity change from 0 to 1024 [ 359.302725][ T52] bridge0: port 3(vlan2) entered disabled state [ 359.326448][T10737] EXT4-fs: Ignoring removed orlov option [ 359.332158][T10737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 359.440885][T10742] loop6: detected capacity change from 0 to 512 [ 359.524040][T10742] EXT4-fs (loop6): blocks per group (8192) and clusters per group (2304) inconsistent [ 359.542655][T10737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.566657][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.886'. [ 359.679980][T10742] netlink: 108 bytes leftover after parsing attributes in process `syz.6.885'. [ 359.689123][T10742] netlink: 100 bytes leftover after parsing attributes in process `syz.6.885'. [ 359.845489][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.011347][T10742] loop6: detected capacity change from 0 to 40427 [ 360.242690][T10742] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 360.255474][T10742] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 360.450570][T10742] F2FS-fs (loop6): invalid crc value [ 360.577671][T10742] F2FS-fs (loop6): Found nat_bits in checkpoint [ 360.758677][T10742] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 360.765945][T10742] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 360.833432][ T52] vlan2 (unregistering): left allmulticast mode [ 360.885480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.911368][ T9100] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.944421][ T52] vlan2 (unregistering): left promiscuous mode [ 360.989920][ T52] bridge0: port 3(vlan2) entered disabled state [ 361.505671][ T52] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.925474][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 362.017320][T10743] bridge0: entered promiscuous mode [ 362.485772][T10743] macvtap1: entered promiscuous mode [ 362.491261][T10743] macvtap1: entered allmulticast mode [ 362.496881][T10743] bridge0: entered allmulticast mode [ 362.572404][T10779] loop0: detected capacity change from 0 to 8 [ 362.657105][T10751] bridge0: left allmulticast mode [ 362.697107][T10751] bridge0: left promiscuous mode [ 362.914951][ T52] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.965512][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.005716][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.045788][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.808613][ T52] bridge_slave_1: left allmulticast mode [ 365.814282][ T52] bridge_slave_1: left promiscuous mode [ 365.820516][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.949422][ T52] bridge_slave_0: left allmulticast mode [ 365.957482][ T52] bridge_slave_0: left promiscuous mode [ 365.965641][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.085488][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.125603][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.145934][T10830] loop6: detected capacity change from 0 to 128 [ 368.165489][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 368.217804][T10830] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 368.328610][T10828] loop1: detected capacity change from 0 to 1024 [ 368.354437][T10828] EXT4-fs: Ignoring removed orlov option [ 368.381626][T10828] EXT4-fs: Ignoring removed nomblk_io_submit option [ 368.581168][T10828] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.205492][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.494179][T10820] loop9: detected capacity change from 0 to 32768 [ 369.521468][T10820] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.897 (10820) [ 369.607829][T10820] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 369.634903][T10820] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 369.865754][T10820] BTRFS info (device loop9): rebuilding free space tree [ 369.911492][T10820] BTRFS info (device loop9): disabling free space tree [ 369.927378][T10820] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 369.939175][T10820] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 370.245798][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.341962][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.363714][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.378006][ T52] bond0 (unregistering): Released all slaves [ 370.415507][ T7362] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 370.430927][T10842] netlink: 144 bytes leftover after parsing attributes in process `syz.2.900'. [ 370.936824][ T8070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.285913][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.204209][T10903] loop1: detected capacity change from 0 to 512 [ 372.325845][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.352381][T10905] loop0: detected capacity change from 0 to 512 [ 372.376674][T10903] EXT4-fs (loop1): blocks per group (8192) and clusters per group (2304) inconsistent [ 372.785371][T10903] loop1: detected capacity change from 0 to 40427 [ 372.856777][T10903] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 372.864618][T10903] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 372.878825][T10903] F2FS-fs (loop1): invalid crc value [ 373.261374][T10905] ext4: Unknown parameter 'permit_directio' [ 373.302966][T10903] F2FS-fs (loop1): Found nat_bits in checkpoint [ 373.365486][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 373.405981][T10903] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 373.413069][T10903] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 374.406072][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.976306][T10923] syz.0.906 (10923): drop_caches: 2 [ 375.445587][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.219683][T10927] batadv0: entered promiscuous mode [ 376.236561][T10927] macsec1: entered promiscuous mode [ 376.241866][T10927] macsec1: entered allmulticast mode [ 376.268044][T10927] batadv0: entered allmulticast mode [ 376.485492][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.525479][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.397741][T10952] loop0: detected capacity change from 0 to 64 [ 378.565496][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 378.628136][T10927] batadv0: left allmulticast mode [ 378.696686][T10927] batadv0: left promiscuous mode [ 378.755052][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.083208][T10952] hfs: get root inode failed [ 379.605499][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.221627][T10964] loop2: detected capacity change from 0 to 4096 [ 380.359261][T10964] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 380.499810][T10964] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 380.522365][T10964] ntfs3(loop2): Failed to load $MFT. [ 380.552994][T10952] syz.0.914 (10952): drop_caches: 2 [ 380.645620][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.796273][ T52] hsr_slave_0: left promiscuous mode [ 381.685487][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.797436][ T52] hsr_slave_1: left promiscuous mode [ 382.725480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.916559][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.930517][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.967592][T11001] loop9: detected capacity change from 0 to 64 [ 383.765477][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.359447][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.367233][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.400379][T11010] netlink: 'syz.9.920': attribute type 10 has an invalid length. [ 384.505152][ T52] veth1_macvtap: left promiscuous mode [ 384.510799][ T52] veth0_macvtap: left promiscuous mode [ 384.516535][ T52] veth1_vlan: left promiscuous mode [ 384.521836][ T52] veth0_vlan: left promiscuous mode [ 384.805487][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.397944][ T52] team0 (unregistering): Port device team_slave_1 removed [ 385.462238][ T52] team0 (unregistering): Port device team_slave_0 removed [ 385.849423][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.064769][T11001] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 386.139821][T11010] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.148663][T11010] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.197310][T11010] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.204474][T11010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.212001][T11010] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.219168][T11010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.330571][T11010] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 386.398925][ T7289] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 386.885490][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.419964][T11015] team_slave_0: entered promiscuous mode [ 387.426495][T11015] team_slave_1: entered promiscuous mode [ 387.434658][T11015] team0: Device macsec1 is already an upper device of the team interface [ 387.464685][T11015] team_slave_0: left promiscuous mode [ 387.470219][T11015] team_slave_1: left promiscuous mode [ 387.925473][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.119708][T11043] netlink: 'syz.2.929': attribute type 4 has an invalid length. [ 388.171387][T11045] netlink: 'syz.2.929': attribute type 4 has an invalid length. [ 388.966437][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.478465][T11066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.931'. [ 389.537844][T11066] loop1: detected capacity change from 0 to 4096 [ 389.565820][T11066] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 389.903356][T11066] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 390.005524][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.045519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.085567][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.527346][T11091] loop0: detected capacity change from 0 to 128 [ 392.543698][T11091] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 393.013808][T11104] loop2: detected capacity change from 0 to 40427 [ 393.125491][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.141745][T11104] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 393.149575][T11104] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 393.180089][T11104] F2FS-fs (loop2): invalid crc value [ 393.461311][T11104] F2FS-fs (loop2): Found nat_bits in checkpoint [ 393.770930][T11104] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 393.778027][T11104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 393.944380][ T9366] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 394.020988][T11120] loop0: detected capacity change from 0 to 16 [ 394.046568][ T9366] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 394.069696][T11120] erofs (device loop0): mounted with root inode @ nid 36. [ 394.165615][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.218588][T11124] syz.0.940: attempt to access beyond end of device [ 394.218588][T11124] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 394.233196][T11124] syz.0.940: attempt to access beyond end of device [ 394.233196][T11124] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 394.347978][ T5881] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 394.605638][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 394.687153][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.710513][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.205814][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.260664][T11127] loop9: detected capacity change from 0 to 256 [ 395.267134][ T5881] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 395.289056][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.344223][ T5881] usb 2-1: config 0 descriptor?? [ 396.245471][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.285847][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.734075][T11149] loop9: detected capacity change from 0 to 1024 [ 398.110002][T11156] loop6: detected capacity change from 0 to 512 [ 398.158815][T11156] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 398.325480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.365471][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.336139][T11156] EXT4-fs: error -4 creating inode table initialization thread [ 400.344782][T11156] EXT4-fs (loop6): mount failed [ 400.405465][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.057029][T11167] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 401.373704][ T5881] usbhid 2-1:0.0: can't add hid device: -32 [ 401.385582][ T5881] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 401.445484][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.481239][ T69] hfsplus: b-tree write err: -5, ino 8 [ 401.488896][ T5881] usb 2-1: USB disconnect, device number 5 [ 402.414349][T11185] tmpfs: Bad value for 'mpol' [ 402.485503][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.526880][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.565588][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.605802][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.645625][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.685505][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.725585][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.765607][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.704730][T11255] loop0: detected capacity change from 0 to 512 [ 410.805483][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.845480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.076666][T11255] EXT4-fs warning (device loop0): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 412.885531][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.925475][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.965485][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 415.295752][T11286] usb usb1: usbfs: process 11286 (syz.6.968) did not claim interface 0 before use [ 416.005525][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.964428][T11291] loop1: detected capacity change from 0 to 2048 [ 417.033888][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 417.045817][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.174071][T11291] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.661688][T11296] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 417.774707][T11308] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 418.021585][T11308] loop9: detected capacity change from 0 to 4096 [ 418.085643][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.148847][T11308] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 418.362817][T11306] loop6: detected capacity change from 0 to 256 [ 418.388987][T11306] exfat: Deprecated parameter 'namecase' [ 418.526172][T11306] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 418.775577][T11312] Invalid option length (0) for dns_resolver key [ 419.125641][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.165479][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.923130][ T12] bridge_slave_1: left allmulticast mode [ 420.928996][ T12] bridge_slave_1: left promiscuous mode [ 420.935937][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.990596][T11341] loop6: detected capacity change from 0 to 128 [ 421.205490][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.243366][ T12] bridge_slave_0: left allmulticast mode [ 421.255670][ T12] bridge_slave_0: left promiscuous mode [ 421.447031][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.096534][T11341] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 422.175685][T11341] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 422.245492][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.285509][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 423.561563][T11363] binder_alloc: 11361: binder_alloc_buf size 4096 failed, no address space [ 423.571367][T11363] binder_alloc: allocated: 8192 (num: 2 largest: 4096), free: 0 (num: 0 largest: 0) [ 423.648681][T11364] netlink: 48 bytes leftover after parsing attributes in process `syz.0.984'. [ 424.325661][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.343261][T11369] loop2: detected capacity change from 0 to 512 [ 424.448442][T11369] EXT4-fs (loop2): blocks per group (8192) and clusters per group (2304) inconsistent [ 424.777503][T11369] loop2: detected capacity change from 0 to 40427 [ 424.789457][T11369] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 424.798822][T11369] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 424.846103][T11369] F2FS-fs (loop2): invalid crc value [ 425.112891][T11378] loop1: detected capacity change from 0 to 8 [ 425.365483][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 425.426178][ T5838] Bluetooth: hci2: unexpected event for opcode 0x0031 [ 425.815276][T11369] F2FS-fs (loop2): Found nat_bits in checkpoint [ 425.986311][ T5838] Bluetooth: hci1: unexpected event for opcode 0x041b [ 426.405481][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 426.677904][T11369] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 426.685002][T11369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 427.445488][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.605694][T11391] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.485483][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.459388][ T5838] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 429.468329][ T5838] Bluetooth: hci2: Injecting HCI hardware error event [ 429.481280][ T5838] Bluetooth: hci2: hardware error 0x00 [ 429.525496][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.791273][T11397] loop6: detected capacity change from 0 to 512 [ 429.835695][T11397] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 429.894478][T11397] nullb0: [POWERTEC] p1 p2 p3 p4 [ 429.937091][T11397] nullb0: p1 start 1986356271 is beyond EOD, truncated [ 429.985598][T11397] nullb0: p2 start 1068017860 is beyond EOD, truncated [ 429.992518][T11397] nullb0: p3 start 2952576660 is beyond EOD, truncated [ 430.565668][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.726208][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.737883][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.812603][ T12] bond0 (unregistering): Released all slaves [ 430.954704][T11346] netlink: 'syz.9.981': attribute type 298 has an invalid length. [ 431.605484][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.925688][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 431.957362][T11408] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'. [ 432.645494][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.960989][T11416] tty tty33: ldisc open failed (-12), clearing slot 32 [ 433.119398][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 433.457743][T11426] netlink: 24 bytes leftover after parsing attributes in process `syz.6.997'. [ 433.504768][T11426] loop6: detected capacity change from 0 to 1024 [ 433.589492][T11431] syz.2.995: attempt to access beyond end of device [ 433.589492][T11431] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 433.603162][T11431] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 433.685517][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.240309][T11433] mkiss: ax0: crc mode is auto. [ 434.726426][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 435.725570][T11426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.765489][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.580830][T11463] loop1: detected capacity change from 0 to 1024 [ 436.651470][T11458] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.6.997: corrupted in-inode xattr: bad magic number in in-inode xattr [ 436.679145][ T5881] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 436.815512][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.538943][T11469] netlink: 'syz.9.1003': attribute type 1 has an invalid length. [ 437.627661][ T6394] hfsplus: b-tree write err: -5, ino 4 [ 437.781525][ T5881] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 437.790232][ T5881] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 437.800538][ T5881] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 437.809605][ T5881] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 437.820929][ T5881] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 437.845488][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.398137][T11476] vivid-000: kernel_thread() failed [ 438.481576][ T5881] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 438.646860][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 438.660358][ T5881] usb 3-1: Product: syz [ 438.664557][ T5881] usb 3-1: Manufacturer: syz [ 438.683857][ T5881] cdc_wdm 3-1:1.0: skipping garbage [ 438.689266][ T5881] cdc_wdm 3-1:1.0: skipping garbage [ 438.885618][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.991511][T11469] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 439.331474][ T5881] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 439.345787][ T5881] cdc_wdm 3-1:1.0: Unknown control protocol [ 439.420124][ T5881] usb 3-1: USB disconnect, device number 6 [ 439.465647][T10095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.670305][T11491] loop0: detected capacity change from 0 to 512 [ 439.815773][T11491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 439.925474][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.622127][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.628127][T11491] EXT4-fs (loop0): 1 truncate cleaned up [ 440.715358][T11491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.858899][T11503] loop6: detected capacity change from 0 to 1024 [ 440.872468][T11501] loop2: detected capacity change from 0 to 512 [ 440.965500][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.005528][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.606718][T11503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.643629][ T12] hsr_slave_0: left promiscuous mode [ 442.652906][ T12] hsr_slave_1: left promiscuous mode [ 442.668656][ T9100] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.711066][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.725588][T11501] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.1007: casefold flag without casefold feature [ 442.738935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.803867][T11517] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1011'. [ 443.045582][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.523396][T11501] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1007: couldn't read orphan inode 15 (err -117) [ 443.566326][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.575171][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.085493][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.346382][T11501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.400630][T10095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.535373][ T12] veth1_macvtap: left promiscuous mode [ 444.547575][ T12] veth0_macvtap: left promiscuous mode [ 444.632113][ T12] veth1_vlan: left promiscuous mode [ 444.701381][ T12] veth0_vlan: left promiscuous mode [ 445.125494][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.165480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.442984][ T8534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.638986][T11552] loop6: detected capacity change from 0 to 164 [ 450.930805][T11564] kvm: kvm [11562]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 452.178814][T11587] loop6: detected capacity change from 0 to 512 [ 452.271912][T11587] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 452.293924][T11587] EXT4-fs (loop6): 1 truncate cleaned up [ 452.321011][T11587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.177995][T11626] loop0: detected capacity change from 0 to 2048 [ 454.328886][T11626] loop0: p1 < > p2 < > p3 p4 < > [ 454.334085][T11626] loop0: partition table partially beyond EOD, truncated [ 454.342195][T11626] loop0: p1 start 2305 is beyond EOD, truncated [ 454.348609][T11626] loop0: p2 start 4294902784 is beyond EOD, truncated [ 454.355575][T11626] loop0: p3 start 3724543488 is beyond EOD, truncated [ 454.441277][ T5205] loop0: p1 < > p2 < > p3 p4 < > [ 454.501495][ T5205] loop0: partition table partially beyond EOD, truncated [ 454.655986][ T5205] loop0: p1 start 2305 is beyond EOD, truncated [ 454.663088][ T5205] loop0: p2 start 4294902784 is beyond EOD, truncated [ 454.674840][ T5205] loop0: p3 start 3724543488 is beyond EOD, truncated [ 454.775376][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 454.835172][ T5848] udevd[5848]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 454.872240][ T12] team0 (unregistering): Port device team_slave_1 removed [ 455.169701][ T12] team0 (unregistering): Port device team_slave_0 removed [ 456.149270][T11641] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1026'. [ 457.343581][T10095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.404737][ T5145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 457.404989][T11653] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 457.429654][T11653] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 457.445913][T11653] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 457.447547][ T5145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 457.465058][T11653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 457.472728][T11653] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 457.480008][T11653] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 457.487532][T11653] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 457.535999][ T5145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 457.548116][ T5145] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 457.569452][ T5145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 459.546369][T11666] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1029'. [ 459.645299][ T5145] Bluetooth: hci6: command tx timeout [ 459.705955][ T5145] Bluetooth: hci4: command tx timeout [ 461.783265][T11705] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1033'. [ 461.793272][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1033'. [ 461.802345][T11705] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1033'. [ 461.823714][T11704] loop0: detected capacity change from 0 to 16 [ 461.851408][ T5145] Bluetooth: hci6: command tx timeout [ 461.856927][ T5145] Bluetooth: hci4: command tx timeout [ 462.935632][T11704] erofs (device loop0): mounted with root inode @ nid 36. [ 462.946549][T11704] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 463.651416][T11704] erofs (device loop0): failed to decompress -35 in[64, 4032] out[1851] [ 463.659867][T11704] erofs (device loop0): read error -117 @ 43 of nid 36 [ 463.939411][ T5838] Bluetooth: hci4: command tx timeout [ 463.939459][ T5145] Bluetooth: hci6: command tx timeout [ 464.053368][T11716] loop6: detected capacity change from 0 to 64 [ 465.935146][T11648] chnl_net:caif_netlink_parms(): no params data found [ 466.231880][ T5145] Bluetooth: hci4: command tx timeout [ 466.247230][ T5145] Bluetooth: hci6: command tx timeout [ 467.140561][T11648] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.156872][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.164140][T11648] bridge_slave_0: entered allmulticast mode [ 467.195328][T11648] bridge_slave_0: entered promiscuous mode [ 467.270795][T11647] chnl_net:caif_netlink_parms(): no params data found [ 467.478873][T11648] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.539134][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.599566][T11648] bridge_slave_1: entered allmulticast mode [ 467.694889][T11648] bridge_slave_1: entered promiscuous mode [ 469.923979][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.247027][T11760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1040'. [ 470.369918][T11648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.457752][T11773] loop2: detected capacity change from 0 to 512 [ 470.515506][T11773] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 470.806935][T11773] EXT4-fs (loop2): 1 truncate cleaned up [ 470.821096][T11773] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.751196][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.431995][T11648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.136827][ T8534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.259242][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.403598][T11812] netlink: 'syz.2.1048': attribute type 4 has an invalid length. [ 475.487504][T11813] syz.2.1048 uses old SIOCAX25GETINFO [ 475.887447][T11648] team0: Port device team_slave_0 added [ 475.899958][T11648] team0: Port device team_slave_1 added [ 475.983666][T11647] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.992456][T11647] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.025684][T11647] bridge_slave_0: entered allmulticast mode [ 476.035023][T11647] bridge_slave_0: entered promiscuous mode [ 476.197563][T11823] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.259906][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.488029][T11830] Invalid option length (0) for dns_resolver key [ 477.282518][T11648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.327449][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.426315][T11834] loop6: detected capacity change from 0 to 1024 [ 477.495525][T11648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.605688][T11647] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.638162][T11647] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.645705][T11647] bridge_slave_1: entered allmulticast mode [ 477.652791][T11647] bridge_slave_1: entered promiscuous mode [ 478.034353][T11648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.051909][T11648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.157541][T11648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.500671][T11648] hsr_slave_0: entered promiscuous mode [ 480.432434][T11648] hsr_slave_1: entered promiscuous mode [ 480.876583][T11648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.903919][T11648] Cannot create hsr debugfs directory [ 480.943376][T11647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.034365][T11867] loop2: detected capacity change from 0 to 2048 [ 481.073144][T11647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.292559][T11867] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.843475][T11884] UDF-fs: error (device loop2): udf_read_inode: (ino 1345) failed !bh [ 481.936380][T11882] loop0: detected capacity change from 0 to 512 [ 482.046074][T11882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 482.204205][T11882] EXT4-fs (loop0): 1 orphan inode deleted [ 482.213022][T11647] team0: Port device team_slave_0 added [ 482.249720][T11882] EXT4-fs (loop0): 1 truncate cleaned up [ 482.286591][T11882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.319845][ T12] bridge_slave_1: left allmulticast mode [ 482.348125][ T12] bridge_slave_1: left promiscuous mode [ 482.354327][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.456329][ T12] bridge_slave_0: left allmulticast mode [ 482.462027][ T12] bridge_slave_0: left promiscuous mode [ 482.468030][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.479813][ T7289] [ 482.482570][ T7289] ============================= [ 482.487538][ T7289] WARNING: suspicious RCU usage [ 482.492409][ T7289] 6.13.0-rc1-next-20241205-syzkaller #0 Not tainted [ 482.499133][ T7289] ----------------------------- [ 482.503993][ T7289] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 482.513004][ T7289] [ 482.513004][ T7289] other info that might help us debug this: [ 482.513004][ T7289] [ 482.523458][ T7289] [ 482.523458][ T7289] rcu_scheduler_active = 2, debug_locks = 1 [ 482.531648][ T7289] 3 locks held by kworker/u8:9/7289: [ 482.537108][ T7289] #0: ffff88807a60f148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 482.545585][T11887] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 482.548381][ T7289] #1: [ 482.548694][T11887] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 482.568677][ T7289] ffffc90003607d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 482.581300][ T7289] #2: ffffffff8e9374a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 482.591869][ T7289] [ 482.591869][ T7289] stack backtrace: [ 482.598470][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: kworker/u8:9 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 482.608830][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 482.618991][ T7289] Workqueue: bond0 bond_mii_monitor [ 482.624307][ T7289] Call Trace: [ 482.627596][ T7289] [ 482.630531][ T7289] dump_stack_lvl+0x241/0x360 [ 482.635254][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.640467][ T7289] ? __pfx__printk+0x10/0x10 [ 482.645070][ T7289] lockdep_rcu_suspicious+0x226/0x340 [ 482.650449][ T7289] dev_deactivate_queue+0x8f/0x160 [ 482.655579][ T7289] dev_deactivate_many+0xc8/0xb10 [ 482.660627][ T7289] dev_deactivate+0x184/0x280 [ 482.665318][ T7289] ? __pfx_dev_deactivate+0x10/0x10 [ 482.670521][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.676415][ T7289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 482.682851][ T7289] ? rfc2863_policy+0x1d7/0x300 [ 482.687716][ T7289] linkwatch_do_dev+0x10a/0x170 [ 482.692576][ T7289] ethtool_op_get_link+0x15/0x60 [ 482.697514][ T7289] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 482.703142][ T7289] bond_check_dev_link+0x1f1/0x3f0 [ 482.708257][ T7289] ? __pfx_bond_check_dev_link+0x10/0x10 [ 482.713901][ T7289] bond_mii_monitor+0x49a/0x3170 [ 482.718843][ T7289] ? __lock_acquire+0x1397/0x2100 [ 482.723869][ T7289] ? bond_mii_monitor+0x174/0x3170 [ 482.728982][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 482.734187][ T7289] ? __pfx_bond_mii_monitor+0x10/0x10 [ 482.739570][ T7289] ? __pfx_lock_acquire+0x10/0x10 [ 482.744593][ T7289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 482.750575][ T7289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.756911][ T7289] ? process_scheduled_works+0x976/0x1840 [ 482.762634][ T7289] process_scheduled_works+0xa66/0x1840 [ 482.768202][ T7289] ? __pfx_process_scheduled_works+0x10/0x10 [ 482.774189][ T7289] ? assign_work+0x364/0x3d0 [ 482.778791][ T7289] worker_thread+0x870/0xd30 [ 482.783403][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.789313][ T7289] ? __kthread_parkme+0x169/0x1d0 [ 482.794337][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 482.799449][ T7289] kthread+0x2f0/0x390 [ 482.803516][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 482.808633][ T7289] ? __pfx_kthread+0x10/0x10 [ 482.813222][ T7289] ret_from_fork+0x4b/0x80 [ 482.817636][ T7289] ? __pfx_kthread+0x10/0x10 [ 482.822223][ T7289] ret_from_fork_asm+0x1a/0x30 [ 482.826995][ T7289] [ 482.830511][ T7289] [ 482.834187][ T7289] ============================= [ 482.839700][ T7289] WARNING: suspicious RCU usage [ 482.844572][ T7289] 6.13.0-rc1-next-20241205-syzkaller #0 Not tainted [ 482.851438][ T7289] ----------------------------- [ 482.856492][ T7289] ./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage! [ 482.865787][ T7289] [ 482.865787][ T7289] other info that might help us debug this: [ 482.865787][ T7289] [ 482.876263][ T7289] [ 482.876263][ T7289] rcu_scheduler_active = 2, debug_locks = 1 [ 482.884596][ T7289] 3 locks held by kworker/u8:9/7289: [ 482.890805][ T7289] #0: ffff88807a60f148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 482.902625][ T7289] #1: ffffc90003607d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 482.915812][ T7289] #2: ffffffff8e9374a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 482.925736][ T7289] [ 482.925736][ T7289] stack backtrace: [ 482.931648][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: kworker/u8:9 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 482.941988][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 482.952058][ T7289] Workqueue: bond0 bond_mii_monitor [ 482.957290][ T7289] Call Trace: [ 482.960582][ T7289] [ 482.963529][ T7289] dump_stack_lvl+0x241/0x360 [ 482.968231][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.973454][ T7289] ? __pfx__printk+0x10/0x10 [ 482.978079][ T7289] lockdep_rcu_suspicious+0x226/0x340 [ 482.983485][ T7289] dev_deactivate_many+0x18f/0xb10 [ 482.988641][ T7289] dev_deactivate+0x184/0x280 [ 482.993353][ T7289] ? __pfx_dev_deactivate+0x10/0x10 [ 482.998577][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 483.004507][ T7289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 483.010862][ T7289] ? rfc2863_policy+0x1d7/0x300 [ 483.015743][ T7289] linkwatch_do_dev+0x10a/0x170 [ 483.020600][ T7289] ethtool_op_get_link+0x15/0x60 [ 483.025538][ T7289] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 483.031167][ T7289] bond_check_dev_link+0x1f1/0x3f0 [ 483.036285][ T7289] ? __pfx_bond_check_dev_link+0x10/0x10 [ 483.041927][ T7289] bond_mii_monitor+0x49a/0x3170 [ 483.046878][ T7289] ? __lock_acquire+0x1397/0x2100 [ 483.051902][ T7289] ? bond_mii_monitor+0x174/0x3170 [ 483.057014][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 483.062219][ T7289] ? __pfx_bond_mii_monitor+0x10/0x10 [ 483.067599][ T7289] ? __pfx_lock_acquire+0x10/0x10 [ 483.072623][ T7289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.078618][ T7289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 483.084948][ T7289] ? process_scheduled_works+0x976/0x1840 [ 483.090677][ T7289] process_scheduled_works+0xa66/0x1840 [ 483.096250][ T7289] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.102239][ T7289] ? assign_work+0x364/0x3d0 [ 483.106837][ T7289] worker_thread+0x870/0xd30 [ 483.111430][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 483.117324][ T7289] ? __kthread_parkme+0x169/0x1d0 [ 483.122346][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 483.127460][ T7289] kthread+0x2f0/0x390 [ 483.131526][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 483.136638][ T7289] ? __pfx_kthread+0x10/0x10 [ 483.141229][ T7289] ret_from_fork+0x4b/0x80 [ 483.145645][ T7289] ? __pfx_kthread+0x10/0x10 [ 483.150232][ T7289] ret_from_fork_asm+0x1a/0x30 [ 483.155003][ T7289] [ 483.195017][ T7289] BUG: sleeping function called from invalid context at net/core/dev.c:11403 [ 483.204508][ T7289] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 7289, name: kworker/u8:9 [ 483.213806][ T7289] preempt_count: 0, expected: 0 [ 483.218740][ T7289] RCU nest depth: 1, expected: 0 [ 483.223695][ T7289] 3 locks held by kworker/u8:9/7289: [ 483.225667][T11887] EXT4-fs (loop0): Remounting filesystem read-only [ 483.229049][ T7289] #0: ffff88807a60f148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 483.248572][ T7289] #1: ffffc90003607d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 483.881560][ T7289] #2: ffffffff8e9374a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 483.891490][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: kworker/u8:9 Not tainted 6.13.0-rc1-next-20241205-syzkaller #0 [ 483.901838][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 483.911920][ T7289] Workqueue: bond0 bond_mii_monitor [ 483.917237][ T7289] Call Trace: [ 483.920565][ T7289] [ 483.923526][ T7289] dump_stack_lvl+0x241/0x360 [ 483.928246][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.933469][ T7289] ? __pfx__printk+0x10/0x10 [ 483.938076][ T7289] ? preempt_schedule_common+0x84/0xd0 [ 483.943587][ T7289] __might_resched+0x5d4/0x780 [ 483.948386][ T7289] ? preempt_schedule+0xe1/0xf0 [ 483.953261][ T7289] ? __pfx___might_resched+0x10/0x10 [ 483.958570][ T7289] ? __local_bh_enable_ip+0x179/0x200 [ 483.963983][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 483.969304][ T7289] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 483.975044][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 483.980274][ T7289] synchronize_net+0x1b/0x50 [ 483.984881][ T7289] dev_deactivate_many+0x4a7/0xb10 [ 483.990022][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 483.995334][ T7289] dev_deactivate+0x184/0x280 [ 484.000037][ T7289] ? __pfx_dev_deactivate+0x10/0x10 [ 484.005254][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.011168][ T7289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 484.017515][ T7289] ? rfc2863_policy+0x1d7/0x300 [ 484.022377][ T7289] linkwatch_do_dev+0x10a/0x170 [ 484.027234][ T7289] ethtool_op_get_link+0x15/0x60 [ 484.032168][ T7289] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 484.037805][ T7289] bond_check_dev_link+0x1f1/0x3f0 [ 484.042928][ T7289] ? __pfx_bond_check_dev_link+0x10/0x10 [ 484.048575][ T7289] bond_mii_monitor+0x49a/0x3170 [ 484.053537][ T7289] ? __lock_acquire+0x1397/0x2100 [ 484.058600][ T7289] ? bond_mii_monitor+0x174/0x3170 [ 484.063715][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 484.068925][ T7289] ? __pfx_bond_mii_monitor+0x10/0x10 [ 484.074307][ T7289] ? __pfx_lock_acquire+0x10/0x10 [ 484.079333][ T7289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.085311][ T7289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.091909][ T7289] ? process_scheduled_works+0x976/0x1840 [ 484.097633][ T7289] process_scheduled_works+0xa66/0x1840 [ 484.103291][ T7289] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.109279][ T7289] ? assign_work+0x364/0x3d0 [ 484.114155][ T7289] worker_thread+0x870/0xd30 [ 484.118768][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.124666][ T7289] ? __kthread_parkme+0x169/0x1d0 [ 484.129691][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 484.134977][ T7289] kthread+0x2f0/0x390 [ 484.139049][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 484.144166][ T7289] ? __pfx_kthread+0x10/0x10 [ 484.148758][ T7289] ret_from_fork+0x4b/0x80 [ 484.153183][ T7289] ? __pfx_kthread+0x10/0x10 [ 484.157772][ T7289] ret_from_fork_asm+0x1a/0x30 [ 484.162545][ T7289] [ 484.175474][ T7289] [ 484.177831][ T7289] ============================= [ 484.182705][ T7289] WARNING: suspicious RCU usage [ 484.187670][ T7289] 6.13.0-rc1-next-20241205-syzkaller #0 Tainted: G W [ 484.195845][ T7289] ----------------------------- [ 484.200711][ T7289] kernel/rcu/tree_exp.h:949 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 484.211470][ T7289] [ 484.211470][ T7289] other info that might help us debug this: [ 484.211470][ T7289] [ 484.222274][ T7289] [ 484.222274][ T7289] rcu_scheduler_active = 2, debug_locks = 1 [ 484.230830][ T7289] 3 locks held by kworker/u8:9/7289: [ 484.236162][ T7289] #0: ffff88807a60f148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 484.247438][ T7289] #1: ffffc90003607d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 484.260491][ T7289] #2: ffffffff8e9374a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 484.270284][ T7289] [ 484.270284][ T7289] stack backtrace: [ 484.276346][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: kworker/u8:9 Tainted: G W 6.13.0-rc1-next-20241205-syzkaller #0 [ 484.288176][ T7289] Tainted: [W]=WARN [ 484.291987][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 484.302033][ T7289] Workqueue: bond0 bond_mii_monitor [ 484.307231][ T7289] Call Trace: [ 484.310501][ T7289] [ 484.313420][ T7289] dump_stack_lvl+0x241/0x360 [ 484.318094][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.323292][ T7289] ? __pfx__printk+0x10/0x10 [ 484.327885][ T7289] lockdep_rcu_suspicious+0x226/0x340 [ 484.333247][ T7289] synchronize_rcu_expedited+0x12e/0x830 [ 484.338893][ T7289] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 484.345082][ T7289] ? add_taint+0x99/0xe0 [ 484.349349][ T7289] ? __might_resched+0x5e0/0x780 [ 484.354315][ T7289] ? __local_bh_enable_ip+0x179/0x200 [ 484.359717][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 484.365008][ T7289] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 484.370729][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 484.375933][ T7289] dev_deactivate_many+0x4a7/0xb10 [ 484.381047][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 484.386339][ T7289] dev_deactivate+0x184/0x280 [ 484.391021][ T7289] ? __pfx_dev_deactivate+0x10/0x10 [ 484.396217][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.402109][ T7289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 484.408436][ T7289] ? rfc2863_policy+0x1d7/0x300 [ 484.413286][ T7289] linkwatch_do_dev+0x10a/0x170 [ 484.418135][ T7289] ethtool_op_get_link+0x15/0x60 [ 484.423071][ T7289] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 484.428704][ T7289] bond_check_dev_link+0x1f1/0x3f0 [ 484.433816][ T7289] ? __pfx_bond_check_dev_link+0x10/0x10 [ 484.439458][ T7289] bond_mii_monitor+0x49a/0x3170 [ 484.444401][ T7289] ? __lock_acquire+0x1397/0x2100 [ 484.449420][ T7289] ? bond_mii_monitor+0x174/0x3170 [ 484.454532][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 484.459739][ T7289] ? __pfx_bond_mii_monitor+0x10/0x10 [ 484.465118][ T7289] ? __pfx_lock_acquire+0x10/0x10 [ 484.470141][ T7289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.476120][ T7289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.482448][ T7289] ? process_scheduled_works+0x976/0x1840 [ 484.488198][ T7289] process_scheduled_works+0xa66/0x1840 [ 484.493766][ T7289] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.499756][ T7289] ? assign_work+0x364/0x3d0 [ 484.504348][ T7289] worker_thread+0x870/0xd30 [ 484.508939][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.514832][ T7289] ? __kthread_parkme+0x169/0x1d0 [ 484.519856][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 484.524974][ T7289] kthread+0x2f0/0x390 [ 484.529045][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 484.534157][ T7289] ? __pfx_kthread+0x10/0x10 [ 484.538746][ T7289] ret_from_fork+0x4b/0x80 [ 484.543202][ T7289] ? __pfx_kthread+0x10/0x10 [ 484.547805][ T7289] ret_from_fork_asm+0x1a/0x30 [ 484.552602][ T7289] [ 484.556585][ T7289] BUG: sleeping function called from invalid context at kernel/rcu/tree.c:4013 [ 484.567612][ T7289] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 7289, name: kworker/u8:9 [ 484.576928][ T7289] preempt_count: 0, expected: 0 [ 484.581791][ T7289] RCU nest depth: 1, expected: 0 [ 484.586780][ T7289] 3 locks held by kworker/u8:9/7289: [ 484.592079][ T7289] #0: ffff88807a60f148 ((wq_completion)bond0#11){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 484.603366][ T7289] #1: ffffc90003607d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 484.616429][ T7289] #2: ffffffff8e9374a0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 484.626707][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: kworker/u8:9 Tainted: G W 6.13.0-rc1-next-20241205-syzkaller #0 [ 484.638539][ T7289] Tainted: [W]=WARN [ 484.642361][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 484.652430][ T7289] Workqueue: bond0 bond_mii_monitor [ 484.657660][ T7289] Call Trace: [ 484.660953][ T7289] [ 484.663907][ T7289] dump_stack_lvl+0x241/0x360 [ 484.668620][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.673826][ T7289] ? __pfx__printk+0x10/0x10 [ 484.678444][ T7289] __might_resched+0x5d4/0x780 [ 484.683212][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.688422][ T7289] ? preempt_schedule_notrace+0xf6/0x140 [ 484.694060][ T7289] ? __pfx___might_resched+0x10/0x10 [ 484.699355][ T7289] ? nbcon_cpu_emergency_exit+0x6e/0xd0 [ 484.704904][ T7289] ? nbcon_cpu_emergency_exit+0x77/0xd0 [ 484.710456][ T7289] ? lockdep_rcu_suspicious+0x299/0x340 [ 484.716003][ T7289] synchronize_rcu_expedited+0x148/0x830 [ 484.721642][ T7289] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 484.727802][ T7289] ? add_taint+0x99/0xe0 [ 484.732050][ T7289] ? __might_resched+0x5e0/0x780 [ 484.737004][ T7289] ? __local_bh_enable_ip+0x179/0x200 [ 484.742384][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 484.747674][ T7289] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 484.753391][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 484.758601][ T7289] dev_deactivate_many+0x4a7/0xb10 [ 484.763715][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 484.769002][ T7289] dev_deactivate+0x184/0x280 [ 484.773684][ T7289] ? __pfx_dev_deactivate+0x10/0x10 [ 484.778891][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.784800][ T7289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 484.791143][ T7289] ? rfc2863_policy+0x1d7/0x300 [ 484.796024][ T7289] linkwatch_do_dev+0x10a/0x170 [ 484.800924][ T7289] ethtool_op_get_link+0x15/0x60 [ 484.805884][ T7289] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 484.811515][ T7289] bond_check_dev_link+0x1f1/0x3f0 [ 484.816634][ T7289] ? __pfx_bond_check_dev_link+0x10/0x10 [ 484.822295][ T7289] bond_mii_monitor+0x49a/0x3170 [ 484.827251][ T7289] ? __lock_acquire+0x1397/0x2100 [ 484.832288][ T7289] ? bond_mii_monitor+0x174/0x3170 [ 484.837415][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 484.842641][ T7289] ? __pfx_bond_mii_monitor+0x10/0x10 [ 484.848042][ T7289] ? __pfx_lock_acquire+0x10/0x10 [ 484.853075][ T7289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.859072][ T7289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.865430][ T7289] ? process_scheduled_works+0x976/0x1840 [ 484.871160][ T7289] process_scheduled_works+0xa66/0x1840 [ 484.876765][ T7289] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.882779][ T7289] ? assign_work+0x364/0x3d0 [ 484.887396][ T7289] worker_thread+0x870/0xd30 [ 484.892010][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.897913][ T7289] ? __kthread_parkme+0x169/0x1d0 [ 484.902938][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 484.908050][ T7289] kthread+0x2f0/0x390 [ 484.912117][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 484.917239][ T7289] ? __pfx_kthread+0x10/0x10 [ 484.921848][ T7289] ret_from_fork+0x4b/0x80 [ 484.926279][ T7289] ? __pfx_kthread+0x10/0x10 [ 484.930876][ T7289] ret_from_fork_asm+0x1a/0x30 [ 484.935664][ T7289] [ 484.942221][ T7289] ------------[ cut here ]------------ [ 484.947707][ T7289] Voluntary context switch within RCU read-side critical section! [ 484.947814][ T7289] WARNING: CPU: 0 PID: 7289 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xcf4/0xff0 [ 484.966047][ T7289] Modules linked in: [ 484.969964][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: kworker/u8:9 Tainted: G W 6.13.0-rc1-next-20241205-syzkaller #0 [ 484.981789][ T7289] Tainted: [W]=WARN [ 484.985603][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 484.995679][ T7289] Workqueue: bond0 bond_mii_monitor [ 485.000913][ T7289] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 485.007164][ T7289] Code: 00 ba 02 00 00 00 e8 7b 13 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 33 33 7e 0e 01 90 48 c7 c7 e0 e7 0b 8c e8 5d 39 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 485.026772][ T7289] RSP: 0018:ffffc90003607100 EFLAGS: 00010046 [ 485.032839][ T7289] RAX: f8da4d01eac64a00 RBX: ffff88802c5b0444 RCX: ffff88802c5b0000 [ 485.040809][ T7289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.048785][ T7289] RBP: ffffc90003607250 R08: ffffffff81600dd2 R09: fffffbfff1cfa10c [ 485.056769][ T7289] R10: dffffc0000000000 R11: fffffbfff1cfa10c R12: ffff88802c5b0000 [ 485.064742][ T7289] R13: 0000000000000000 R14: 1ffff920006c0e38 R15: dffffc0000000000 [ 485.072716][ T7289] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 485.081652][ T7289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.088233][ T7289] CR2: 00007f4ae07535e8 CR3: 0000000037410000 CR4: 00000000003526f0 [ 485.096207][ T7289] Call Trace: [ 485.099486][ T7289] [ 485.102413][ T7289] ? __warn+0x165/0x4d0 [ 485.106574][ T7289] ? rcu_note_context_switch+0xcf4/0xff0 [ 485.112215][ T7289] ? report_bug+0x2b3/0x500 [ 485.116714][ T7289] ? rcu_note_context_switch+0xcf4/0xff0 [ 485.122355][ T7289] ? handle_bug+0x60/0x90 [ 485.126684][ T7289] ? exc_invalid_op+0x1a/0x50 [ 485.131363][ T7289] ? asm_exc_invalid_op+0x1a/0x20 [ 485.136399][ T7289] ? __warn_printk+0x292/0x360 [ 485.141169][ T7289] ? rcu_note_context_switch+0xcf4/0xff0 [ 485.146808][ T7289] ? mark_lock+0x9a/0x360 [ 485.151138][ T7289] ? __lock_acquire+0x1397/0x2100 [ 485.156165][ T7289] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 485.162141][ T7289] ? mark_lock+0x9a/0x360 [ 485.166474][ T7289] ? rcu_is_watching+0x15/0xb0 [ 485.171240][ T7289] __schedule+0x34b/0x4c80 [ 485.175671][ T7289] ? __pfx___schedule+0x10/0x10 [ 485.180519][ T7289] ? schedule+0x90/0x320 [ 485.184772][ T7289] ? __pfx_lock_release+0x10/0x10 [ 485.189795][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 485.195691][ T7289] ? kthread_data+0x52/0xd0 [ 485.200197][ T7289] ? wq_worker_sleeping+0x66/0x240 [ 485.205312][ T7289] ? schedule+0x90/0x320 [ 485.209549][ T7289] schedule+0x14b/0x320 [ 485.213703][ T7289] synchronize_rcu_expedited+0x70a/0x830 [ 485.219342][ T7289] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 485.225497][ T7289] ? __pfx_autoremove_wake_function+0x10/0x10 [ 485.231560][ T7289] ? add_taint+0x99/0xe0 [ 485.235799][ T7289] ? __might_resched+0x5e0/0x780 [ 485.240756][ T7289] ? __local_bh_enable_ip+0x179/0x200 [ 485.246145][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 485.251520][ T7289] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 485.257237][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 485.262439][ T7289] dev_deactivate_many+0x4a7/0xb10 [ 485.267553][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 485.272860][ T7289] dev_deactivate+0x184/0x280 [ 485.277551][ T7289] ? __pfx_dev_deactivate+0x10/0x10 [ 485.282753][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 485.288645][ T7289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 485.294968][ T7289] ? rfc2863_policy+0x1d7/0x300 [ 485.299828][ T7289] linkwatch_do_dev+0x10a/0x170 [ 485.304684][ T7289] ethtool_op_get_link+0x15/0x60 [ 485.309790][ T7289] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 485.315442][ T7289] bond_check_dev_link+0x1f1/0x3f0 [ 485.320552][ T7289] ? __pfx_bond_check_dev_link+0x10/0x10 [ 485.326191][ T7289] bond_mii_monitor+0x49a/0x3170 [ 485.331134][ T7289] ? __lock_acquire+0x1397/0x2100 [ 485.336155][ T7289] ? bond_mii_monitor+0x174/0x3170 [ 485.341264][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 485.346470][ T7289] ? __pfx_bond_mii_monitor+0x10/0x10 [ 485.351853][ T7289] ? __pfx_lock_acquire+0x10/0x10 [ 485.356877][ T7289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 485.362858][ T7289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 485.369192][ T7289] ? process_scheduled_works+0x976/0x1840 [ 485.374914][ T7289] process_scheduled_works+0xa66/0x1840 [ 485.380478][ T7289] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.386464][ T7289] ? assign_work+0x364/0x3d0 [ 485.391058][ T7289] worker_thread+0x870/0xd30 [ 485.395651][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 485.401545][ T7289] ? __kthread_parkme+0x169/0x1d0 [ 485.406569][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 485.411679][ T7289] kthread+0x2f0/0x390 [ 485.415751][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 485.420861][ T7289] ? __pfx_kthread+0x10/0x10 [ 485.425448][ T7289] ret_from_fork+0x4b/0x80 [ 485.429858][ T7289] ? __pfx_kthread+0x10/0x10 [ 485.434443][ T7289] ret_from_fork_asm+0x1a/0x30 [ 485.439256][ T7289] [ 485.442292][ T7289] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 485.449573][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: kworker/u8:9 Tainted: G W 6.13.0-rc1-next-20241205-syzkaller #0 [ 485.461397][ T7289] Tainted: [W]=WARN [ 485.465195][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 485.475249][ T7289] Workqueue: bond0 bond_mii_monitor [ 485.480465][ T7289] Call Trace: [ 485.483742][ T7289] [ 485.486671][ T7289] dump_stack_lvl+0x241/0x360 [ 485.491352][ T7289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.496551][ T7289] ? __pfx__printk+0x10/0x10 [ 485.501225][ T7289] ? _printk+0xd5/0x120 [ 485.505380][ T7289] ? __init_begin+0x41000/0x41000 [ 485.510411][ T7289] ? vscnprintf+0x5d/0x90 [ 485.514738][ T7289] panic+0x349/0x880 [ 485.518632][ T7289] ? __warn+0x174/0x4d0 [ 485.522784][ T7289] ? __pfx_panic+0x10/0x10 [ 485.527203][ T7289] ? ret_from_fork_asm+0x1a/0x30 [ 485.532135][ T7289] __warn+0x344/0x4d0 [ 485.536109][ T7289] ? rcu_note_context_switch+0xcf4/0xff0 [ 485.541737][ T7289] report_bug+0x2b3/0x500 [ 485.546061][ T7289] ? rcu_note_context_switch+0xcf4/0xff0 [ 485.551695][ T7289] handle_bug+0x60/0x90 [ 485.555854][ T7289] exc_invalid_op+0x1a/0x50 [ 485.560353][ T7289] asm_exc_invalid_op+0x1a/0x20 [ 485.565198][ T7289] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 485.571435][ T7289] Code: 00 ba 02 00 00 00 e8 7b 13 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 33 33 7e 0e 01 90 48 c7 c7 e0 e7 0b 8c e8 5d 39 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 485.591037][ T7289] RSP: 0018:ffffc90003607100 EFLAGS: 00010046 [ 485.597111][ T7289] RAX: f8da4d01eac64a00 RBX: ffff88802c5b0444 RCX: ffff88802c5b0000 [ 485.605079][ T7289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 485.613050][ T7289] RBP: ffffc90003607250 R08: ffffffff81600dd2 R09: fffffbfff1cfa10c [ 485.621015][ T7289] R10: dffffc0000000000 R11: fffffbfff1cfa10c R12: ffff88802c5b0000 [ 485.629029][ T7289] R13: 0000000000000000 R14: 1ffff920006c0e38 R15: dffffc0000000000 [ 485.637012][ T7289] ? __warn_printk+0x292/0x360 [ 485.641785][ T7289] ? mark_lock+0x9a/0x360 [ 485.646116][ T7289] ? __lock_acquire+0x1397/0x2100 [ 485.651144][ T7289] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 485.657123][ T7289] ? mark_lock+0x9a/0x360 [ 485.661459][ T7289] ? rcu_is_watching+0x15/0xb0 [ 485.666222][ T7289] __schedule+0x34b/0x4c80 [ 485.670650][ T7289] ? __pfx___schedule+0x10/0x10 [ 485.675493][ T7289] ? schedule+0x90/0x320 [ 485.679732][ T7289] ? __pfx_lock_release+0x10/0x10 [ 485.684755][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 485.690646][ T7289] ? kthread_data+0x52/0xd0 [ 485.695147][ T7289] ? wq_worker_sleeping+0x66/0x240 [ 485.700260][ T7289] ? schedule+0x90/0x320 [ 485.704497][ T7289] schedule+0x14b/0x320 [ 485.708649][ T7289] synchronize_rcu_expedited+0x70a/0x830 [ 485.714280][ T7289] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 485.720431][ T7289] ? __pfx_autoremove_wake_function+0x10/0x10 [ 485.726496][ T7289] ? add_taint+0x99/0xe0 [ 485.730735][ T7289] ? __might_resched+0x5e0/0x780 [ 485.735679][ T7289] ? __local_bh_enable_ip+0x179/0x200 [ 485.741050][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 485.746331][ T7289] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 485.752046][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 485.757251][ T7289] dev_deactivate_many+0x4a7/0xb10 [ 485.762364][ T7289] ? dev_deactivate_many+0x250/0xb10 [ 485.767651][ T7289] dev_deactivate+0x184/0x280 [ 485.772329][ T7289] ? __pfx_dev_deactivate+0x10/0x10 [ 485.777521][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 485.783409][ T7289] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 485.789745][ T7289] ? rfc2863_policy+0x1d7/0x300 [ 485.794593][ T7289] linkwatch_do_dev+0x10a/0x170 [ 485.799443][ T7289] ethtool_op_get_link+0x15/0x60 [ 485.804369][ T7289] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 485.809990][ T7289] bond_check_dev_link+0x1f1/0x3f0 [ 485.815101][ T7289] ? __pfx_bond_check_dev_link+0x10/0x10 [ 485.820739][ T7289] bond_mii_monitor+0x49a/0x3170 [ 485.825676][ T7289] ? __lock_acquire+0x1397/0x2100 [ 485.830695][ T7289] ? bond_mii_monitor+0x174/0x3170 [ 485.835804][ T7289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 485.841003][ T7289] ? __pfx_bond_mii_monitor+0x10/0x10 [ 485.846390][ T7289] ? __pfx_lock_acquire+0x10/0x10 [ 485.851412][ T7289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 485.857396][ T7289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 485.863728][ T7289] ? process_scheduled_works+0x976/0x1840 [ 485.869453][ T7289] process_scheduled_works+0xa66/0x1840 [ 485.875012][ T7289] ? __pfx_process_scheduled_works+0x10/0x10 [ 485.880994][ T7289] ? assign_work+0x364/0x3d0 [ 485.885592][ T7289] worker_thread+0x870/0xd30 [ 485.890181][ T7289] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 485.896069][ T7289] ? __kthread_parkme+0x169/0x1d0 [ 485.901088][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 485.906195][ T7289] kthread+0x2f0/0x390 [ 485.910255][ T7289] ? __pfx_worker_thread+0x10/0x10 [ 485.915362][ T7289] ? __pfx_kthread+0x10/0x10 [ 485.919947][ T7289] ret_from_fork+0x4b/0x80 [ 485.924352][ T7289] ? __pfx_kthread+0x10/0x10 [ 485.928932][ T7289] ret_from_fork_asm+0x1a/0x30 [ 485.933696][ T7289] [ 485.936952][ T7289] Kernel Offset: disabled [ 485.941361][ T7289] Rebooting in 86400 seconds..