last executing test programs: 2m31.307959254s ago: executing program 2 (id=177): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 2m29.316811827s ago: executing program 2 (id=180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2m27.720025124s ago: executing program 2 (id=182): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, 0x0, 0x0) 2m26.71563361s ago: executing program 2 (id=184): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1, &(0x7f0000000340)=@raw=[@generic={0x3, 0x9, 0xd, 0x2d, 0x9}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) 2m25.280044134s ago: executing program 2 (id=190): statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@sysvgroups}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@resgid={'resgid', 0x3d, r0}}, {@nojournal_checksum}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_clone(0x10202000, &(0x7f0000000040)="f5e9834571f12b5abd655cee12de94a615058ec64e58d1767505ac39e29104aac8c106fc7381db37a8e1aafb4bf5fd40b244", 0x32, &(0x7f0000000080), &(0x7f00000000c0), 0x0) syz_open_procfs(r5, &(0x7f00000009c0)='net/nf_conntrack\x00') writev(r1, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)='\n', 0x1}], 0x2) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3f2, 0x200, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004011}, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000380)=ANY=[], 0xff27, 0x0) chdir(&(0x7f0000000300)='./file0\x00') symlink(&(0x7f0000001180)='./file1\x00', &(0x7f0000000040)='./file0\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(r5, 0x0, &(0x7f0000000a00)={0x0, 0xeb}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 2m22.43572085s ago: executing program 1 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2m20.662422979s ago: executing program 2 (id=199): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0xffffffffffffff99) socket$inet_tcp(0x2, 0x1, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m19.930084191s ago: executing program 1 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) syz_emit_ethernet(0x82, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2m15.869388816s ago: executing program 1 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001600)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000380)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m14.660222825s ago: executing program 1 (id=207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) pipe(0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0xcc8c8000) clock_adjtime(0x0, &(0x7f0000000100)={0xf89, 0x6a, 0x55cd, 0xa, 0x48c, 0x4000000004, 0xd, 0x6465, 0x2, 0x1c5, 0x800, 0xfffffffffffffff7, 0x7, 0x2, 0x81, 0x5, 0x0, 0x5, 0x2, 0x8b7, 0x3, 0x6, 0x9, 0x574, 0x5, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711210000000000095000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000033240)=""/102400, 0x19000, 0x0) rt_sigaction(0x1000037, 0x0, 0x0, 0x8, &(0x7f0000000200)) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r3, &(0x7f00000000c0)) 2m6.699315103s ago: executing program 1 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x1, &(0x7f00000000c0)) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xfffffffffffffffe}) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000400)="f479", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r2, r3, r3}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f00000001c0)={0x0}) 2m5.074016399s ago: executing program 32 (id=199): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0xffffffffffffff99) socket$inet_tcp(0x2, 0x1, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m0.70349835s ago: executing program 1 (id=237): listen(0xffffffffffffffff, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$eJzs2k2LW2UUB/Bz25HWKdNEfKMF8UE3urk0Wblw0UFaEAOKNoIK0lvnRkMyyZAbBiLSzs6tH8G1uHQnSL/AbPwEXbibzSy7EK+0KZ0X4mIQJ9j5/TY5cPKH5+FcLmdx9979YXPQq/JeMY1zWRYr12MnHmbRjHNxPuZ24u277zx47ZPPPv9gvdO58XFKN9dvtdoppcuv//bFdz+/cX966dNfLv96IXabX+7tt//YfWX3yt5ft77pV6lfpdF4mop0ZzyeFneGZdroV4M8pY+GZVGVqT+qysmRfm843tqapWK0sba6NSmrKhWjWRqUszQdp+lkloqvi/4o5Xme1laDf6P708O6jv36udtR1/XzP8al+7H2IBqRvZCyF69nL9/OXt3JruzXdWPZR+U/Yf5nm/mfbeZ/th1a6i5GbH6/3d3uzn/n/fVe9GMYZVyLRvwZjx6TJ+b1zfc7N66lx5qRNu89yd/b7p4/mm9FI5qL8615Ph3NX4jVw/l2NOKlxfn2wvzFeOvNQ/k8GvH7VzGOYWzEo+xB/m4rpfc+7BzLX338PwCAZ02enlq4v+X5P/Xn+RPsh8f2q5W4urLcuxNRzb4dFMNhOVEoFIqnxbLfTJyGg6Ev+yQAAAAAAAAAAACcxGl8TrjsOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/w9/BwAA///8j/If") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x32, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB="b3e5273e8a60732cda94f48a97026341ca7d590875e851d505a4c4c118dd37a0f7db4ea0ddeb8ea61f21ec85b6bc7d5d52263f037ca9ae06564473c32e6cc8b360dfc79218f03d339f9b69d85fb1afba437a0038b916948cd106afb0ca5fbbf3748556714a7f157e1f223eb12f8563ba6e302753b3c567abc85a73ddb1297ac362015d6b8bc9d5c6c18971", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1m45.633681022s ago: executing program 33 (id=237): listen(0xffffffffffffffff, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x32, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB="b3e5273e8a60732cda94f48a97026341ca7d590875e851d505a4c4c118dd37a0f7db4ea0ddeb8ea61f21ec85b6bc7d5d52263f037ca9ae06564473c32e6cc8b360dfc79218f03d339f9b69d85fb1afba437a0038b916948cd106afb0ca5fbbf3748556714a7f157e1f223eb12f8563ba6e302753b3c567abc85a73ddb1297ac362015d6b8bc9d5c6c18971", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chown(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1m7.050597792s ago: executing program 4 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="ffff"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000700ac1414bb08001e006907000008000700ac1e010108000b00ffffffff0800", @ANYRES8=r5], 0x60}}, 0x44000) 1m4.657153101s ago: executing program 4 (id=316): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000017c0), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x46, &(0x7f00000006c0)={@local, @random="a5556c3d6c72", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0x100}}}}}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000003) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20045004) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x52, r0, 0x2453c000) 59.879765118s ago: executing program 4 (id=320): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xffffff1f, 0x40000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 59.790134969s ago: executing program 4 (id=321): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f0000000300)='./file1\x00', 0x14927e, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) fallocate(r0, 0x0, 0x0, 0x1001f0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r3, r3, 0x0, 0x80000000) 58.955101222s ago: executing program 4 (id=324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r5, 0x0, &(0x7f00000000c0)) 54.654140281s ago: executing program 4 (id=326): openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000949000/0x1000)=nil, 0x1000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r5 = open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) fallocate(r5, 0x3, 0x36e, 0x10000) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x72, 0xad8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 39.148162781s ago: executing program 34 (id=326): openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000949000/0x1000)=nil, 0x1000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r5 = open(&(0x7f0000000300)='.\x02\x00', 0x14927e, 0x44) fallocate(r5, 0x3, 0x36e, 0x10000) preadv(r5, &(0x7f0000000580)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, 0x72, 0xad8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16.477351165s ago: executing program 3 (id=387): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000017c0), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x46, &(0x7f00000006c0)={@local, @random="a5556c3d6c72", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0x100}}}}}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000003) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20045004) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x52, r0, 0x2453c000) 15.341538463s ago: executing program 0 (id=389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x5030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x50, 0xf9, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x5, 0x53, {0x9, 0x21, 0x1, 0xb, 0x1, {0x22, 0x214}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x2, 0x81, 0x8, 0x8, 0x4}, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socket(0x200000000000011, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 11.960849377s ago: executing program 0 (id=392): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.958823737s ago: executing program 5 (id=393): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f00000000c0)={0x1d, 0x5, 0x14, 0x18, 0x5, 0xb7, 0x1, 0xf5, 0x1}) 11.893850209s ago: executing program 6 (id=394): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10005, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r2, 0x0, r3, 0x0, 0x10000000000016, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) open(0x0, 0x143042, 0x83) pivot_root(&(0x7f0000000240)='./file0/../file0\x00', 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) 11.455504816s ago: executing program 0 (id=395): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r3, 0x0, 0x80000000) 9.834614822s ago: executing program 3 (id=396): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x2) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000100)=0x9) 9.833805182s ago: executing program 5 (id=397): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000000101040000eee7ffff000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e140010"], 0x80}}, 0x0) 9.700047094s ago: executing program 3 (id=398): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x2, 0x5, 0xfffffffffffff001, 0xc, 0x1, 0x5, 0x3, 0x6c3}, &(0x7f0000000140)={0x5, 0xe, 0x8000000000000001, 0xce, 0x0, 0x800, 0x7ff, 0x3}, &(0x7f0000000300)={0x4, 0x401, 0x6dd0, 0x40, 0x1, 0x1, 0xfffffffffffffffc, 0xe7}, &(0x7f0000000380)={r3, r4+10000000}, &(0x7f0000000400)={&(0x7f00000003c0)={[0x9]}, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) pipe2$9p(0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@errors_remount}, {@barrier}]}, 0x3, 0x44a, &(0x7f0000000bc0)="$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") setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000180)={@broadcast, @broadcast, 0x1, 0x3, [@remote, @private=0xa010100, @loopback]}, 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 8.854414137s ago: executing program 0 (id=399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 8.840133128s ago: executing program 6 (id=400): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) 8.775921249s ago: executing program 5 (id=401): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325, 0x70bd27}, 0x14}, 0x1, 0x0, 0x0, 0x10004}, 0x8000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x5030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x50, 0xf9, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x5, 0x53, {0x9, 0x21, 0x1, 0xb, 0x1, {0x22, 0x214}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x2, 0x81, 0x8, 0x8, 0x4}, 0x0, 0x0, 0x5, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) socket(0x200000000000011, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 6.1890597s ago: executing program 6 (id=402): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf090000000000005509"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x21, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffd28) eventfd2(0x0, 0x0) unshare(0x62000200) 6.046727333s ago: executing program 3 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00003cd000/0x1000)=nil, 0x1000, 0x8) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/64, 0x40}], 0x1) 5.846575316s ago: executing program 7 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$key(0xf, 0x3, 0x2) sendmmsg$unix(r2, &(0x7f0000000000), 0x43a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x5000000000000000, 0x9, 0xfffffffffffffffc}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r6, 0x4) getsockopt$sock_buf(r5, 0x1, 0x1a, 0x0, &(0x7f00000009c0)) write$vga_arbiter(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:'], 0x13) 4.590507076s ago: executing program 0 (id=404): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) bpf$PROG_LOAD(0x5, 0x0, 0x0) syslog(0x4, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.581981876s ago: executing program 7 (id=405): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000017c0), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x46, &(0x7f00000006c0)={@local, @random="a5556c3d6c72", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0x100}}}}}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000003) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20045004) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x52, r0, 0x2453c000) 4.471804398s ago: executing program 5 (id=406): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x280880f, &(0x7f0000000080), 0x2f, 0x4fd, &(0x7f0000000100)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, 0x0, &(0x7f0000000980), 0x0, r6) ioctl(r1, 0x8b27, 0x0) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 3.552053473s ago: executing program 0 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24020400) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe2$9p(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0), 0x2, 0x51a, &(0x7f0000001200)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r5, r4, 0x0, 0x80000000) process_mrelease(r4, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.903076473s ago: executing program 5 (id=408): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 1.737062932s ago: executing program 3 (id=409): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x5, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) readlink(&(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', &(0x7f0000000140)=""/176, 0xb0) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x24}}, 0x50) 1.736217962s ago: executing program 6 (id=410): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000380)=ANY=[]) 1.423909307s ago: executing program 5 (id=411): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='timer_start\x00', r6}, 0x18) r7 = open(&(0x7f0000000000)='./file0\x00', 0x42040, 0x50) fcntl$setlease(r7, 0x400, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.332064648s ago: executing program 6 (id=412): bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0x80000010) rmdir(&(0x7f0000000100)='./control\x00') 811.658457ms ago: executing program 3 (id=413): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r0) 0s ago: executing program 6 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$tipc(r4, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ndle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.409741][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.423084][ T4175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.432921][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.440130][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.467550][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.486281][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.493565][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.520028][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.534155][ T4174] team0: Port device team_slave_0 added [ 67.546714][ T4175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.566556][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.573853][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.582752][ T4166] device bridge_slave_0 entered promiscuous mode [ 67.592295][ T4174] team0: Port device team_slave_1 added [ 67.638822][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.646252][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.654926][ T4166] device bridge_slave_1 entered promiscuous mode [ 67.671814][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.678839][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.705117][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.717588][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.724698][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.751796][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.765875][ T4175] team0: Port device team_slave_0 added [ 67.774345][ T4175] team0: Port device team_slave_1 added [ 67.824324][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.837614][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.850538][ T4165] device hsr_slave_0 entered promiscuous mode [ 67.857921][ T4165] device hsr_slave_1 entered promiscuous mode [ 67.889329][ T4167] device hsr_slave_0 entered promiscuous mode [ 67.896196][ T4167] device hsr_slave_1 entered promiscuous mode [ 67.903330][ T4167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.911596][ T4167] Cannot create hsr debugfs directory [ 67.955915][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.963128][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.989393][ T4175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.011141][ T4166] team0: Port device team_slave_0 added [ 68.026290][ T4175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.033521][ T4175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.060238][ T4175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.078245][ T4166] team0: Port device team_slave_1 added [ 68.097181][ T4174] device hsr_slave_0 entered promiscuous mode [ 68.104226][ T4174] device hsr_slave_1 entered promiscuous mode [ 68.110906][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.118698][ T4174] Cannot create hsr debugfs directory [ 68.164772][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.172622][ T4170] Bluetooth: hci2: command 0x0409 tx timeout [ 68.179271][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 68.179761][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.186148][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 68.211878][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.224867][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 68.243745][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 68.269658][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.277071][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.304785][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.349392][ T4175] device hsr_slave_0 entered promiscuous mode [ 68.357746][ T4175] device hsr_slave_1 entered promiscuous mode [ 68.366278][ T4175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.374481][ T4175] Cannot create hsr debugfs directory [ 68.484322][ T4166] device hsr_slave_0 entered promiscuous mode [ 68.492114][ T4166] device hsr_slave_1 entered promiscuous mode [ 68.498849][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.506606][ T4166] Cannot create hsr debugfs directory [ 68.718715][ T4165] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.731372][ T4165] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.740882][ T4165] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.754882][ T4165] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.809318][ T4167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.819433][ T4167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.832692][ T4167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.856460][ T4167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.894153][ T4174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.916395][ T4174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.937479][ T4174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.957335][ T4174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.998368][ T4175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.026372][ T4175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.036392][ T4175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.068365][ T4175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.109656][ T4166] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.135400][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.144793][ T4166] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.173374][ T4166] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.187681][ T4166] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.236766][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.256829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.267173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.292421][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.299751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.310096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.320761][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.338076][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.384927][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.394992][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.404974][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.412268][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.424237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.433232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.442625][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.449869][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.457918][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.468593][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.477656][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.484918][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.493777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.503254][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.512657][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.519868][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.527963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.536900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.547917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.556453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.572005][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.580780][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.589148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.608640][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.620832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.631893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.644649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.654242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.664377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.673377][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.680463][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.695052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.706215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.718443][ T4175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.745326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.754413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.765681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.775172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.784122][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.791395][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.803317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.812984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.822144][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.832314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.841663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.850590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.859704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.868763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.877607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.895047][ T4165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.908546][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.928186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.937970][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.948108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.957149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.966101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.975148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.990650][ T4175] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.000088][ T4167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.025033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.039961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.054527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.069272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.097524][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.116749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.133542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.143426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.152218][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.159317][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.168947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.182956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.192159][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.199250][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.208664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.217889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.248837][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.262042][ T4217] Bluetooth: hci4: command 0x041b tx timeout [ 70.274286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.281183][ T4217] Bluetooth: hci0: command 0x041b tx timeout [ 70.282927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.296687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.298260][ T4217] Bluetooth: hci1: command 0x041b tx timeout [ 70.312104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.317959][ T4217] Bluetooth: hci3: command 0x041b tx timeout [ 70.326694][ T4217] Bluetooth: hci2: command 0x041b tx timeout [ 70.327638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.344233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.354491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.363423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.373378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.382455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.395635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.404483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.424858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.435074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.446106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.455283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.471942][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.482209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.492752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.503238][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.510782][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.528938][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.550054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.560004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.570634][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.577823][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.588673][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.598447][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.627561][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.638412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.652369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.663750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.672526][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.686638][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.698894][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.706143][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.714920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.725929][ T4175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.771073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.780755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.791499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.800142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.818889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.827614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.836611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.854518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.863070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.871649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.885838][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.900462][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.913448][ T4167] device veth0_vlan entered promiscuous mode [ 70.927405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.937585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.947273][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.957733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.967958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.976881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.986128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.994351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.019552][ T4167] device veth1_vlan entered promiscuous mode [ 71.035637][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.050854][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.065938][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.093160][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.121911][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.130111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.143324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.152742][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.163087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.177472][ T4165] device veth0_vlan entered promiscuous mode [ 71.203413][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.225996][ T4165] device veth1_vlan entered promiscuous mode [ 71.256060][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.268337][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.293056][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.314911][ T4167] device veth0_macvtap entered promiscuous mode [ 71.345081][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.357935][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.371049][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.378613][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.396998][ T4167] device veth1_macvtap entered promiscuous mode [ 71.411493][ T4165] device veth0_macvtap entered promiscuous mode [ 71.432331][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.442127][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.451368][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.456547][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.460533][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.472893][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.483102][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.492023][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.500587][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.509636][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.521177][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.529148][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.552583][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.565080][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.575980][ T4165] device veth1_macvtap entered promiscuous mode [ 71.587543][ T4175] device veth0_vlan entered promiscuous mode [ 71.594844][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.604173][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.613471][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.626343][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.635457][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.648929][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.667999][ T4167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.677643][ T4167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.687138][ T4167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.696271][ T4167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.716015][ T4175] device veth1_vlan entered promiscuous mode [ 71.724807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.734378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.758785][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.769844][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.787767][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.811061][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.824611][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.835841][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.853139][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.863843][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.873181][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.882848][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.892675][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.902100][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.922815][ T4165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.933297][ T4165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.942779][ T4165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.951862][ T4165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.996598][ T4174] device veth0_vlan entered promiscuous mode [ 72.039265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.051409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.064586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.074576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.084432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.096024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.126738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.137278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.145790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.154630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.169086][ T4174] device veth1_vlan entered promiscuous mode [ 72.201067][ T4166] device veth0_vlan entered promiscuous mode [ 72.223317][ T4175] device veth0_macvtap entered promiscuous mode [ 72.279126][ T4175] device veth1_macvtap entered promiscuous mode [ 72.290068][ T4166] device veth1_vlan entered promiscuous mode [ 72.337731][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.346577][ T23] Bluetooth: hci3: command 0x040f tx timeout [ 72.359108][ T23] Bluetooth: hci1: command 0x040f tx timeout [ 72.359368][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.366307][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.379126][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.390385][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 72.393937][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.400167][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 72.410362][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.429527][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.433689][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 72.441800][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.451129][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.455273][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.471939][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.473941][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.489972][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.503302][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.525602][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.535776][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.546076][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.558871][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.574207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.585197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.594294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.604349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.612865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.621849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.630234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.638944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.647716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.658331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.668375][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.678394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.689120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.700785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.717723][ T4174] device veth0_macvtap entered promiscuous mode [ 72.759480][ T4174] device veth1_macvtap entered promiscuous mode [ 72.794997][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.805278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.820030][ T4166] device veth0_macvtap entered promiscuous mode [ 72.830419][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.839902][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.872721][ T4166] device veth1_macvtap entered promiscuous mode [ 72.880445][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.889508][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.900492][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.909682][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.920156][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.932700][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.944662][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.956031][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.966350][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.977942][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.988432][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.999475][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.013154][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.027976][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.038653][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.049220][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.061883][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.072326][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.083166][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.095695][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.118212][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.139957][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.150206][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.161646][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.171991][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.183759][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.200656][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.218496][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.236070][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.256146][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.265608][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.274668][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.284765][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.295361][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.305134][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.318542][ T4174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.330342][ T4174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.339699][ T4174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.350115][ T4174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.389858][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.401178][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.412045][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.423152][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.434417][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.450868][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.485931][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.503807][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.517682][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.523482][ T4253] loop3: detected capacity change from 0 to 512 [ 73.544993][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.559638][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.725267][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.733757][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.745702][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.758150][ T4166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.770530][ T4166] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.780252][ T4166] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.789709][ T4166] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.921183][ T4253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 74.620905][ T4253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 74.633636][ T4253] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.651713][ T4253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.4: inode #1: comm syz.3.4: iget: illegal inode # [ 74.665338][ T4248] Bluetooth: hci0: command 0x0419 tx timeout [ 74.672779][ T4248] Bluetooth: hci1: command 0x0419 tx timeout [ 74.680904][ T4248] Bluetooth: hci3: command 0x0419 tx timeout [ 74.720439][ T4253] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.4: error while reading EA inode 1 err=-117 [ 74.757759][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.786445][ T4248] Bluetooth: hci2: command 0x0419 tx timeout [ 74.793005][ T4248] Bluetooth: hci4: command 0x0419 tx timeout [ 74.812651][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.820819][ T4253] EXT4-fs (loop3): 1 orphan inode deleted [ 74.864434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.907934][ T4253] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 74.967927][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.994110][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.018477][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.039337][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.050195][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.075115][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.096804][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.134750][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.179816][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.206014][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.255861][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.276026][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.342371][ T4269] loop2: detected capacity change from 0 to 4096 [ 76.463882][ T4278] loop0: detected capacity change from 0 to 256 [ 76.487048][ T4269] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 77.185531][ T4278] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 77.232680][ T4269] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 78.642205][ T4290] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.219183][ T4287] loop1: detected capacity change from 0 to 40427 [ 80.450943][ C1] sched: RT throttling activated [ 84.359275][ T26] audit: type=1326 audit(1743608013.908:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 84.578767][ T26] audit: type=1326 audit(1743608013.918:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 84.621289][ T26] audit: type=1326 audit(1743608013.918:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 85.598868][ T4317] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 85.607152][ T4317] usb usb1: Process 4317 (syz.0.15) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 85.963123][ T26] audit: type=1326 audit(1743608013.918:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 86.098712][ T26] audit: type=1326 audit(1743608013.918:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 86.208054][ T4326] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.283219][ T26] audit: type=1326 audit(1743608013.918:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 86.348486][ T26] audit: type=1326 audit(1743608013.928:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 86.395724][ T26] audit: type=1326 audit(1743608013.928:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 88.190592][ T1108] cfg80211: failed to load regulatory.db [ 88.608850][ T26] audit: type=1326 audit(1743608013.928:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 89.009065][ T4343] loop2: detected capacity change from 0 to 512 [ 89.402175][ T26] audit: type=1326 audit(1743608013.938:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 89.915806][ T4343] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 89.931698][ T4343] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.374711][ T26] audit: type=1326 audit(1743608013.938:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 90.468745][ T26] audit: type=1326 audit(1743608013.948:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 90.502768][ T26] audit: type=1326 audit(1743608013.948:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 90.862802][ T4356] 9pnet: Insufficient options for proto=fd [ 91.488755][ T26] audit: type=1326 audit(1743608013.948:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 91.907027][ T26] audit: type=1326 audit(1743608013.948:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 93.478787][ T4374] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.489662][ T4374] usb usb1: Process 4374 (syz.0.28) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 93.662483][ T26] audit: type=1326 audit(1743608013.968:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 93.991394][ T26] audit: type=1326 audit(1743608013.968:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 94.127463][ T26] audit: type=1326 audit(1743608013.978:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 94.170038][ T26] audit: type=1326 audit(1743608013.988:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 94.471692][ T26] audit: type=1326 audit(1743608013.988:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 94.796618][ T26] audit: type=1326 audit(1743608013.988:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 95.581200][ T26] audit: type=1326 audit(1743608014.038:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 95.797743][ T26] audit: type=1326 audit(1743608014.038:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4306 comm="syz.4.14" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dc3dd169 code=0x7ffc0000 [ 96.066415][ T26] audit: type=1800 audit(1743608020.358:25): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 96.577560][ T26] audit: type=1800 audit(1743608020.448:26): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 96.648764][ T26] audit: type=1326 audit(1743608025.068:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 96.702055][ T26] audit: type=1326 audit(1743608025.068:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 96.773653][ T26] audit: type=1326 audit(1743608025.078:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 96.925643][ T26] audit: type=1326 audit(1743608025.078:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4384 comm="syz.2.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 97.057915][ T4399] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.072966][ T4399] usb usb1: Process 4399 (syz.2.34) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 99.203239][ T4405] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'. [ 99.492734][ T4412] loop0: detected capacity change from 0 to 256 [ 102.186882][ T4426] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.198670][ T4426] usb usb1: Process 4426 (syz.0.41) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 103.088358][ T4435] loop2: detected capacity change from 0 to 128 [ 105.478694][ T4451] Zero length message leads to an empty skb [ 106.818154][ T4457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.49'. [ 107.890677][ T4262] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.311516][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 109.311753][ T26] audit: type=1326 audit(1743608038.418:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 111.464774][ T26] audit: type=1326 audit(1743608038.418:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 111.566308][ T4482] loop4: detected capacity change from 0 to 512 [ 112.165841][ T4482] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 112.182605][ T4482] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.478874][ T26] audit: type=1326 audit(1743608038.428:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 112.653544][ T26] audit: type=1326 audit(1743608038.438:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 112.971095][ T26] audit: type=1326 audit(1743608038.448:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 113.180676][ T4494] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.191851][ T4494] usb usb1: Process 4494 (syz.2.55) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 113.929658][ T26] audit: type=1326 audit(1743608038.458:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 113.977872][ T26] audit: type=1326 audit(1743608038.468:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 115.096626][ T26] audit: type=1326 audit(1743608038.468:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 115.184458][ T26] audit: type=1326 audit(1743608038.488:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 115.279557][ T4504] loop1: detected capacity change from 0 to 512 [ 115.371213][ T26] audit: type=1326 audit(1743608038.498:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 115.435503][ T4504] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.62: inode #1: comm syz.1.62: iget: illegal inode # [ 115.561017][ T4511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 115.661127][ T4512] loop4: detected capacity change from 0 to 128 [ 117.480965][ T4504] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.62: error while reading EA inode 1 err=-117 [ 117.819612][ T4504] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.62: inode #1: comm syz.1.62: iget: illegal inode # [ 117.862491][ T26] audit: type=1326 audit(1743608038.498:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 117.946482][ T4504] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.62: error while reading EA inode 1 err=-117 [ 118.045251][ T4504] EXT4-fs (loop1): 1 orphan inode deleted [ 118.069889][ T26] audit: type=1326 audit(1743608038.518:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 118.117811][ T4504] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 118.289881][ T26] audit: type=1326 audit(1743608038.528:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 118.340332][ T26] audit: type=1326 audit(1743608038.528:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 118.550982][ T26] audit: type=1326 audit(1743608038.538:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 118.690973][ T26] audit: type=1326 audit(1743608038.618:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 118.837557][ T26] audit: type=1326 audit(1743608038.628:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68228c8169 code=0x7ffc0000 [ 119.351490][ T4519] loop4: detected capacity change from 0 to 128 [ 119.425381][ T4521] loop1: detected capacity change from 0 to 1024 [ 119.446500][ T4521] EXT4-fs (loop1): Ignoring removed orlov option [ 119.453292][ T4521] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 119.611597][ T4519] ======================================================= [ 119.611597][ T4519] WARNING: The mand mount option has been deprecated and [ 119.611597][ T4519] and is ignored by this kernel. Remove the mand [ 119.611597][ T4519] option from the mount to silence this warning. [ 119.611597][ T4519] ======================================================= [ 119.734632][ T4521] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 122.044994][ T4534] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.059534][ T4534] usb usb1: Process 4534 (syz.3.68) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 126.090704][ T4560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'. [ 127.400662][ T4562] loop1: detected capacity change from 0 to 128 [ 129.939736][ T4571] loop3: detected capacity change from 0 to 512 [ 130.643197][ T4571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.80: inode #1: comm syz.3.80: iget: illegal inode # [ 130.701558][ T4571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.80: error while reading EA inode 1 err=-117 [ 130.782565][ T4571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.80: inode #1: comm syz.3.80: iget: illegal inode # [ 130.796694][ T4571] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.80: error while reading EA inode 1 err=-117 [ 130.819761][ T4571] EXT4-fs (loop3): 1 orphan inode deleted [ 130.926742][ T4571] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 131.191565][ T4585] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.191806][ T4585] usb usb1: Process 4585 (syz.2.82) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 133.012274][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.018614][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.540848][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 133.553827][ T26] audit: type=1326 audit(1743608063.868:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 134.047406][ T26] audit: type=1326 audit(1743608063.868:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4600 comm="syz.3.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 134.494961][ T4615] loop3: detected capacity change from 0 to 256 [ 134.584872][ T4615] exfat: Deprecated parameter 'namecase' [ 134.593566][ T4615] exfat: Deprecated parameter 'utf8' [ 134.892675][ T4615] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 134.921294][ T4219] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.171320][ T4219] usb 3-1: device descriptor read/64, error -71 [ 135.366728][ T26] audit: type=1800 audit(1743608065.708:86): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.91" name="file1" dev="loop3" ino=1048603 res=0 errno=0 [ 135.629934][ T4219] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 136.032948][ T4219] usb 3-1: device descriptor read/64, error -71 [ 136.327900][ T4219] usb usb3-port1: attempt power cycle [ 136.476047][ T4629] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.490554][ T4629] usb usb1: Process 4629 (syz.4.93) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 136.971026][ T4219] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.091125][ T4219] usb 3-1: device descriptor read/8, error -71 [ 138.103155][ T4641] loop2: detected capacity change from 0 to 512 [ 138.251407][ T4641] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.97: inode #1: comm syz.2.97: iget: illegal inode # [ 138.306408][ T4641] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.97: error while reading EA inode 1 err=-117 [ 138.345739][ T4641] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.97: inode #1: comm syz.2.97: iget: illegal inode # [ 138.385343][ T4641] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.97: error while reading EA inode 1 err=-117 [ 138.428316][ T4641] EXT4-fs (loop2): 1 orphan inode deleted [ 138.445265][ T4641] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 138.757045][ T4648] loop3: detected capacity change from 0 to 512 [ 139.231509][ T4648] EXT4-fs (loop3): ea_inode feature is not supported for Hurd [ 141.488668][ T4660] loop4: detected capacity change from 0 to 128 [ 143.891104][ T4218] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.111101][ T4218] usb 4-1: device descriptor read/64, error -71 [ 144.391087][ T4218] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.860579][ T4690] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 144.871964][ T4690] usb usb1: Process 4690 (syz.1.109) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 145.698929][ T4218] usb 4-1: device descriptor read/64, error -71 [ 145.821208][ T4218] usb usb4-port1: attempt power cycle [ 146.332519][ T4218] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 146.376154][ T4701] loop3: detected capacity change from 0 to 512 [ 146.459893][ T4701] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.113: inode #1: comm syz.3.113: iget: illegal inode # [ 146.553145][ T4701] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.113: error while reading EA inode 1 err=-117 [ 146.571510][ T4218] usb 4-1: device not accepting address 5, error -71 [ 146.581726][ T4701] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.113: inode #1: comm syz.3.113: iget: illegal inode # [ 146.597068][ T4701] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.113: error while reading EA inode 1 err=-117 [ 146.616796][ T4701] EXT4-fs (loop3): 1 orphan inode deleted [ 146.624758][ T4701] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 148.597293][ T26] audit: type=1326 audit(1743608531.936:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33407d169 code=0x7ffc0000 [ 148.773620][ T4719] loop3: detected capacity change from 0 to 512 [ 150.186423][ T26] audit: type=1326 audit(1743608986.222:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fc33407d169 code=0x7ffc0000 [ 150.473781][ T26] audit: type=1326 audit(1743608986.242:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4715 comm="syz.0.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc33407d169 code=0x7ffc0000 [ 150.509198][ T4719] EXT4-fs (loop3): Ignoring removed bh option [ 150.515873][ T4719] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 151.500940][ T4719] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 151.508985][ T4719] System zones: 1-12 [ 151.514796][ T4719] EXT4-fs: error -4 creating inode table initialization thread [ 151.523166][ T4719] EXT4-fs (loop3): mount failed [ 152.794792][ T4739] loop0: detected capacity change from 0 to 512 [ 153.106876][ T4739] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 153.501338][ T4262] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.526795][ T4739] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.791225][ T4262] usb 4-1: device descriptor read/64, error -71 [ 153.961598][ T4739] EXT4-fs (loop0): 1 truncate cleaned up [ 153.971106][ T4739] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 154.227806][ T4262] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.551003][ T4262] usb 4-1: device descriptor read/64, error -71 [ 154.673322][ T4262] usb usb4-port1: attempt power cycle [ 155.458441][ T4262] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.561233][ T4262] usb 4-1: device descriptor read/8, error -71 [ 155.816370][ T4768] loop1: detected capacity change from 0 to 512 [ 155.953600][ T4262] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.037480][ T4768] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.127: inode #1: comm syz.1.127: iget: illegal inode # [ 156.084573][ T4768] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.127: error while reading EA inode 1 err=-117 [ 156.114746][ T4768] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.127: inode #1: comm syz.1.127: iget: illegal inode # [ 156.135294][ T4768] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.127: error while reading EA inode 1 err=-117 [ 156.150811][ T4768] EXT4-fs (loop1): 1 orphan inode deleted [ 156.181012][ T4768] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 156.229864][ T4262] usb 4-1: device not accepting address 10, error -71 [ 156.238563][ T4262] usb usb4-port1: unable to enumerate USB device [ 162.246569][ T4842] loop3: detected capacity change from 0 to 512 [ 162.411164][ T4842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.142: inode #1: comm syz.3.142: iget: illegal inode # [ 162.461573][ T4842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.142: error while reading EA inode 1 err=-117 [ 162.521560][ T4842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.142: inode #1: comm syz.3.142: iget: illegal inode # [ 162.583878][ T4842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.142: error while reading EA inode 1 err=-117 [ 162.641467][ T4842] EXT4-fs (loop3): 1 orphan inode deleted [ 162.661227][ T4842] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 168.786918][ T4896] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.799303][ T4896] usb usb1: Process 4896 (syz.1.155) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 169.544641][ T4900] loop4: detected capacity change from 0 to 512 [ 169.958815][ T4900] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.156: inode #1: comm syz.4.156: iget: illegal inode # [ 170.468136][ T4900] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.156: error while reading EA inode 1 err=-117 [ 170.491566][ T4900] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.156: inode #1: comm syz.4.156: iget: illegal inode # [ 170.527347][ T4906] loop1: detected capacity change from 0 to 1024 [ 170.551540][ T4900] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.156: error while reading EA inode 1 err=-117 [ 170.587955][ T4906] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 170.625095][ T4906] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 170.641394][ T4900] EXT4-fs (loop4): 1 orphan inode deleted [ 170.647325][ T4900] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 170.722731][ T4906] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,mblk_io_submit,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 175.519884][ T4943] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.529710][ T4943] usb usb1: Process 4943 (syz.0.167) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 177.213132][ T4955] loop2: detected capacity change from 0 to 512 [ 177.333372][ T4955] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.172: inode #1: comm syz.2.172: iget: illegal inode # [ 177.393858][ T4955] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.172: error while reading EA inode 1 err=-117 [ 177.473959][ T4955] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.172: inode #1: comm syz.2.172: iget: illegal inode # [ 177.501472][ T4955] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.172: error while reading EA inode 1 err=-117 [ 177.521598][ T4955] EXT4-fs (loop2): 1 orphan inode deleted [ 177.527387][ T4955] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 178.825246][ T4972] loop3: detected capacity change from 0 to 512 [ 178.975316][ T4972] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 179.051479][ T4972] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.374518][ T4990] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.382361][ T4990] usb usb1: Process 4990 (syz.1.178) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 185.930199][ T5037] loop2: detected capacity change from 0 to 512 [ 188.305813][ T5058] netlink: 28 bytes leftover after parsing attributes in process `syz.3.192'. [ 189.034016][ T5037] EXT4-fs: failed to create workqueue [ 189.047030][ T5037] EXT4-fs (loop2): mount failed [ 190.754985][ T5099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.201'. [ 191.403562][ T4170] Bluetooth: hci2: command 0x0406 tx timeout [ 191.430115][ T4170] Bluetooth: hci3: command 0x0406 tx timeout [ 191.460654][ T4170] Bluetooth: hci4: command 0x0406 tx timeout [ 191.472923][ T4170] Bluetooth: hci0: command 0x0406 tx timeout [ 191.493632][ T4170] Bluetooth: hci1: command 0x0406 tx timeout [ 192.187914][ T5109] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.195709][ T5109] usb usb1: Process 5109 (syz.0.204) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 194.336549][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.342932][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.756167][ T5119] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.771541][ T5119] usb usb1: Process 5119 (syz.1.206) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 195.924087][ T5125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.208'. [ 196.394717][ T5130] loop0: detected capacity change from 0 to 512 [ 196.552184][ T5130] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.210: inode #1: comm syz.0.210: iget: illegal inode # [ 196.605293][ T5130] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.210: error while reading EA inode 1 err=-117 [ 196.631592][ T5130] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.210: inode #1: comm syz.0.210: iget: illegal inode # [ 196.699167][ T5130] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.210: error while reading EA inode 1 err=-117 [ 196.746169][ T5130] EXT4-fs (loop0): 1 orphan inode deleted [ 196.797674][ T5130] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 199.523273][ T5155] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 199.538840][ T5155] usb usb1: Process 5155 (syz.3.215) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 203.883211][ T5183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.224'. [ 205.152876][ T5198] loop0: detected capacity change from 0 to 512 [ 205.272922][ T5199] loop3: detected capacity change from 0 to 512 [ 205.307219][ T5198] EXT4-fs (loop0): ea_inode feature is not supported for Hurd [ 205.423404][ T5201] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 205.434799][ T5201] usb usb1: Process 5201 (syz.4.228) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 206.336621][ T5199] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.226: inode #1: comm syz.3.226: iget: illegal inode # [ 206.533935][ T5199] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.226: error while reading EA inode 1 err=-117 [ 207.469620][ T5199] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.226: inode #1: comm syz.3.226: iget: illegal inode # [ 207.690950][ T5199] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.226: error while reading EA inode 1 err=-117 [ 207.752081][ T5199] EXT4-fs (loop3): 1 orphan inode deleted [ 207.757896][ T5199] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 209.781023][ T21] Bluetooth: hci5: command 0x0409 tx timeout [ 209.998038][ T5241] loop1: detected capacity change from 0 to 128 [ 210.495535][ T5206] chnl_net:caif_netlink_parms(): no params data found [ 211.612211][ T5261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.238'. [ 211.865065][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 211.962796][ T5206] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.969945][ T5206] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.208714][ T5206] device bridge_slave_0 entered promiscuous mode [ 212.331196][ T5268] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.342192][ T5268] usb usb1: Process 5268 (syz.0.239) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 213.194915][ T5206] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.222611][ T5206] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.251075][ T5206] device bridge_slave_1 entered promiscuous mode [ 213.364127][ T5206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.413835][ T5206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.603490][ T5206] team0: Port device team_slave_0 added [ 213.713468][ T5206] team0: Port device team_slave_1 added [ 213.793599][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.800597][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.190925][ T4262] Bluetooth: hci5: command 0x040f tx timeout [ 214.790955][ T5206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.895833][ T5206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.948341][ T5206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.990932][ T5206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.136523][ T5296] loop0: detected capacity change from 0 to 512 [ 215.239195][ T5206] device hsr_slave_0 entered promiscuous mode [ 215.248327][ T5206] device hsr_slave_1 entered promiscuous mode [ 215.255303][ T5206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.263724][ T5206] Cannot create hsr debugfs directory [ 215.365823][ T5296] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.243: inode #1: comm syz.0.243: iget: illegal inode # [ 215.531306][ T5296] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.243: error while reading EA inode 1 err=-117 [ 215.612209][ T5296] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.243: inode #1: comm syz.0.243: iget: illegal inode # [ 215.720321][ T5296] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.243: error while reading EA inode 1 err=-117 [ 215.844390][ T5296] EXT4-fs (loop0): 1 orphan inode deleted [ 215.850328][ T5296] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 216.159781][ T5206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 216.261004][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 216.665489][ T5206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 216.729765][ T5206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 216.795141][ T5206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.307590][ T5206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.410501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.449195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.526652][ T5320] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 217.541405][ T5320] usb usb1: Process 5320 (syz.0.249) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 217.975583][ T5206] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.044595][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.072168][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.101282][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.108411][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.157737][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.242018][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.281530][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.312917][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.320018][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.361373][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.411777][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.445726][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.469936][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.690540][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.714372][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.074688][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.690747][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.732202][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.751795][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.774411][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.859272][ T5206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.128292][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.156559][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.192804][ T5206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.933245][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.961508][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.036790][ T5206] device veth0_vlan entered promiscuous mode [ 222.062394][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.072000][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 222.118113][ T5206] device veth1_vlan entered promiscuous mode [ 222.146323][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 222.164677][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 222.252918][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.385283][ T5206] device veth0_macvtap entered promiscuous mode [ 222.662623][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.827622][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.072136][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.137442][ T5206] device veth1_macvtap entered promiscuous mode [ 223.210368][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.261744][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.465006][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.669697][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.737019][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.806866][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.876915][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.943962][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.970904][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.011297][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.050908][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.112933][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.152520][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.159883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.182628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.210838][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.222722][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.222738][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.222756][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.222768][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.222782][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.222796][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.222811][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.222825][ T5206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.222840][ T5206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.224253][ T5206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.227357][ T5206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.227437][ T5206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.227470][ T5206] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.227501][ T5206] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.779063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.819460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.213086][ T5402] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.227016][ T5402] usb usb1: Process 5402 (syz.4.260) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 225.914393][ T5060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.098826][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.136942][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.150436][ T5060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.231546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.266790][ T4165] syz-executor (4165) used greatest stack depth: 19352 bytes left [ 226.292025][ T5060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.434284][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.469077][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.520526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.091377][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 228.119471][ T5060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.239038][ T5398] chnl_net:caif_netlink_parms(): no params data found [ 229.276965][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.303219][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.102195][ T5398] device bridge_slave_0 entered promiscuous mode [ 231.183247][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.238557][ T4265] Bluetooth: hci4: command 0x041b tx timeout [ 231.252180][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.260570][ T5398] device bridge_slave_1 entered promiscuous mode [ 231.351991][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.429423][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.606958][ T5398] team0: Port device team_slave_0 added [ 231.940071][ T5465] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 231.955158][ T5465] usb usb1: Process 5465 (syz.3.271) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 232.169040][ T5398] team0: Port device team_slave_1 added [ 232.734280][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.761040][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.870996][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.959177][ T5470] loop0: detected capacity change from 0 to 8192 [ 232.966794][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.017401][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.252662][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.291277][ T4214] Bluetooth: hci4: command 0x040f tx timeout [ 233.540081][ T5398] device hsr_slave_0 entered promiscuous mode [ 233.566147][ T5398] device hsr_slave_1 entered promiscuous mode [ 233.601887][ T5398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.628527][ T5398] Cannot create hsr debugfs directory [ 234.241552][ T4262] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 234.366547][ T5398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 234.402506][ T5398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 234.519560][ T5398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 234.715497][ T5398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.075623][ T4262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.098644][ T4262] usb 4-1: config 0 has no interfaces? [ 235.110670][ T4262] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 235.123697][ T4262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.324836][ T5060] device hsr_slave_0 left promiscuous mode [ 236.446328][ T4262] usb 4-1: config 0 descriptor?? [ 236.501073][ T5060] device hsr_slave_1 left promiscuous mode [ 236.517719][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.570452][ T4214] Bluetooth: hci4: command 0x0419 tx timeout [ 236.583354][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.596712][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.605347][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.621387][ T5060] device bridge_slave_1 left promiscuous mode [ 236.650593][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.689349][ T5060] device bridge_slave_0 left promiscuous mode [ 236.705195][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.859095][ T5060] device veth1_macvtap left promiscuous mode [ 237.191575][ T5060] device veth0_macvtap left promiscuous mode [ 237.197717][ T5060] device veth1_vlan left promiscuous mode [ 237.252393][ T5060] device veth0_vlan left promiscuous mode [ 237.931695][ T5548] loop4: detected capacity change from 0 to 512 [ 238.236904][ T5548] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 238.252257][ T5548] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.340557][ T26] audit: type=1800 audit(1743614057.690:90): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.283" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 238.658179][ T23] usb 4-1: USB disconnect, device number 11 [ 238.872895][ T5554] loop3: detected capacity change from 0 to 128 [ 239.570901][ T5060] team0 (unregistering): Port device team_slave_1 removed [ 239.733080][ T5060] team0 (unregistering): Port device team_slave_0 removed [ 239.825372][ T5060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.201686][ T5060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.426609][ T5060] bond0 (unregistering): Released all slaves [ 240.585996][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.5.282'. [ 240.774354][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.837797][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.858878][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.903442][ T5398] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.955029][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.968873][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.994361][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.001536][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.083471][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.121386][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.150634][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.203732][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.210897][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.237402][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.273225][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.311732][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.421820][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.463415][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.538325][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.568880][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.608753][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.655281][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.983503][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 242.012457][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 242.100003][ T5398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.372982][ T5572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'. [ 242.707305][ T5599] syz.5.290[5599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.708157][ T5599] syz.5.290[5599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.843015][ T5599] loop5: detected capacity change from 0 to 16 [ 243.071732][ T5599] erofs: (device loop5): mounted with root inode @ nid 36. [ 243.822289][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 243.829946][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 243.922284][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.520781][ T5612] loop0: detected capacity change from 0 to 1024 [ 244.800290][ T5612] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 244.800290][ T5612] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 244.800290][ T5612] [ 244.851209][ T5612] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 245.190362][ T5612] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,noinit_itable,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,noacl,user_xattr,quota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 245.434237][ T5628] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 245.442527][ T5628] usb usb1: Process 5628 (syz.5.292) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 245.579709][ T5631] process 'syz.4.294' launched './file0' with NULL argv: empty string added [ 246.098686][ T5398] device veth0_vlan entered promiscuous mode [ 246.138424][ T5398] device veth1_vlan entered promiscuous mode [ 246.176222][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 246.200047][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 246.256136][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 246.265493][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 246.282216][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.334642][ T5629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.293'. [ 246.461044][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 246.577938][ T5641] syz.5.296[5641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.578454][ T5641] syz.5.296[5641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.941950][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 247.097108][ T5398] device veth0_macvtap entered promiscuous mode [ 247.144913][ T5398] device veth1_macvtap entered promiscuous mode [ 248.471169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.480108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.581392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 248.617486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 248.940338][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.032945][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.061135][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.096408][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.123391][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.158967][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.189508][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.253323][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.329886][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.686928][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.057116][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.202369][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.221717][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.305872][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.330717][ T5671] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 250.429240][ T5673] loop5: detected capacity change from 0 to 512 [ 250.470119][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.842302][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.128916][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.364300][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.467201][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.477771][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.494204][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.925596][ T5681] loop4: detected capacity change from 0 to 512 [ 255.725479][ T5398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.773308][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.779836][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.827980][ T5398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.872636][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.888699][ T5398] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.897598][ T5398] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.906376][ T5398] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.916517][ T5398] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.059701][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.216144][ T5688] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 256.232183][ T5688] usb usb1: Process 5688 (syz.3.306) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 256.822029][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.365961][ T5700] loop3: detected capacity change from 0 to 256 [ 263.485590][ T5711] loop5: detected capacity change from 0 to 512 [ 264.222941][ T5714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.311'. [ 264.263256][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.535243][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.708609][ T5719] loop3: detected capacity change from 0 to 512 [ 264.937528][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.103882][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.342671][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.474923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.488183][ T5719] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 265.862897][ T5728] loop0: detected capacity change from 0 to 256 [ 266.262013][ T5711] EXT4-fs warning (device loop5): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop5. [ 267.188712][ T5719] EXT4-fs: failed to create workqueue [ 267.194165][ T5719] EXT4-fs (loop3): mount failed [ 270.394060][ T5744] loop6: detected capacity change from 0 to 256 [ 270.505965][ T5743] loop4: detected capacity change from 0 to 2048 [ 270.537133][ T5747] loop3: detected capacity change from 0 to 256 [ 270.637222][ T5747] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 270.706200][ T26] audit: type=1800 audit(1743614090.070:91): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.318" name="file1" dev="loop3" ino=1048612 res=0 errno=0 [ 270.731768][ T5060] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.741875][ T5743] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.795715][ T5761] loop6: detected capacity change from 0 to 512 [ 271.002322][ T5060] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.150053][ T5768] exFAT-fs (loop3): hint_cluster is invalid (17) [ 271.544693][ T5060] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.410180][ T5060] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.842090][ T5785] loop6: detected capacity change from 0 to 256 [ 274.814569][ T5785] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 275.786375][ T5792] loop4: detected capacity change from 0 to 512 [ 275.883698][ T5792] EXT4-fs (loop4): 1 orphan inode deleted [ 275.889486][ T5792] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 275.900986][ T5792] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.178590][ T5793] loop0: detected capacity change from 0 to 40427 [ 276.311367][ T5793] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 276.320682][ T5793] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 276.348895][ T5793] F2FS-fs (loop0): invalid crc value [ 276.405609][ T5793] F2FS-fs (loop0): Found nat_bits in checkpoint [ 276.485715][ T5793] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 276.493215][ T5793] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 277.898097][ T5817] loop6: detected capacity change from 0 to 40427 [ 277.981195][ T5817] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 277.987895][ T5817] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 278.069644][ T5817] F2FS-fs (loop6): Found nat_bits in checkpoint [ 278.125026][ T5817] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 278.132931][ T5817] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 279.604616][ T5060] device hsr_slave_0 left promiscuous mode [ 279.642099][ T5060] device hsr_slave_1 left promiscuous mode [ 279.668600][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.725577][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.751929][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.762937][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.913527][ T5060] device bridge_slave_1 left promiscuous mode [ 279.931183][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.952790][ T5060] device bridge_slave_0 left promiscuous mode [ 279.959074][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.082613][ T5060] device veth1_macvtap left promiscuous mode [ 280.149177][ T5060] device veth0_macvtap left promiscuous mode [ 280.192699][ T5844] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 280.200398][ T5844] usb usb1: Process 5844 (syz.5.335) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 280.213407][ T5060] device veth1_vlan left promiscuous mode [ 280.603566][ T5060] device veth0_vlan left promiscuous mode [ 280.841651][ T5853] fuse: Bad value for 'fd' [ 280.892376][ T5853] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 281.265992][ T5855] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 281.274461][ T5855] usb usb1: Process 5855 (syz.5.338) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 282.368884][ T26] audit: type=1326 audit(1743614101.730:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 282.446202][ T26] audit: type=1326 audit(1743614101.730:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 282.541111][ T26] audit: type=1326 audit(1743614101.730:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 282.603947][ T26] audit: type=1326 audit(1743614101.730:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 282.686995][ T26] audit: type=1326 audit(1743614101.730:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 282.780797][ T26] audit: type=1326 audit(1743614101.770:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 282.838741][ T5857] loop6: detected capacity change from 0 to 40427 [ 282.839197][ T5060] team0 (unregistering): Port device team_slave_1 removed [ 282.890277][ T5857] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 282.909859][ T26] audit: type=1326 audit(1743614101.770:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 282.932571][ T5857] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 282.962791][ T5857] F2FS-fs (loop6): invalid crc value [ 282.977075][ T5060] team0 (unregistering): Port device team_slave_0 removed [ 282.983190][ T26] audit: type=1326 audit(1743614101.770:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 283.031582][ T5060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.040441][ T5857] F2FS-fs (loop6): Found nat_bits in checkpoint [ 283.091280][ T26] audit: type=1326 audit(1743614101.770:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 283.115380][ T5060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.184544][ T26] audit: type=1326 audit(1743614101.770:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5842 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c80ed169 code=0x7ffc0000 [ 283.246332][ T5857] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 283.263962][ T5857] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 283.419034][ T5060] bond0 (unregistering): Released all slaves [ 283.925735][ T5861] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 285.426748][ T5874] syz.0.341 (5874) used greatest stack depth: 19224 bytes left [ 286.110179][ T4312] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 286.180930][ T4312] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 287.433786][ T5906] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 287.450575][ T5906] usb usb1: Process 5906 (syz.3.348) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 288.137176][ T5904] loop5: detected capacity change from 0 to 4096 [ 288.932496][ T5904] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 289.026117][ T5904] fs-verity: sha256 using implementation "sha256-avx2" [ 289.223911][ T5904] fs-verity (loop5, inode 16): Error -4 building Merkle tree [ 289.493408][ T5912] loop3: detected capacity change from 0 to 256 [ 290.880475][ T5912] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 291.171725][ T5925] loop6: detected capacity change from 0 to 256 [ 291.252122][ T5925] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 291.745525][ T5931] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 291.767348][ T5931] usb usb1: Process 5931 (syz.5.350) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 292.422817][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 292.422838][ T26] audit: type=1800 audit(1743614111.770:118): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.352" name="file1" dev="loop6" ino=1048617 res=0 errno=0 [ 292.863973][ T5943] exFAT-fs (loop6): hint_cluster is invalid (17) [ 294.434050][ T5955] loop3: detected capacity change from 0 to 512 [ 294.681837][ T5955] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.356: inode #1: comm syz.3.356: iget: illegal inode # [ 294.823593][ T5955] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.356: error while reading EA inode 1 err=-117 [ 294.867346][ T5955] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.356: inode #1: comm syz.3.356: iget: illegal inode # [ 294.921915][ T5955] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.356: error while reading EA inode 1 err=-117 [ 294.965342][ T5955] EXT4-fs (loop3): 1 orphan inode deleted [ 294.975720][ T5955] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,resgid=0x0000000000000000,nojournal_checksum,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 295.654973][ T4215] Bluetooth: hci0: command 0x0409 tx timeout [ 295.914068][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 295.932782][ T5971] loop6: detected capacity change from 0 to 128 [ 296.532083][ T5971] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 296.609794][ T5971] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 296.682046][ T5976] loop0: detected capacity change from 0 to 256 [ 296.745813][ T5976] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.791477][ T5976] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 296.851295][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.868706][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.887864][ T5938] device bridge_slave_0 entered promiscuous mode [ 296.905921][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.950949][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.960238][ T5976] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 296.974018][ T5938] device bridge_slave_1 entered promiscuous mode [ 297.205848][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.317080][ T5995] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 297.332174][ T5995] usb usb1: Process 5995 (syz.6.362) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 298.009881][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 298.167843][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.716496][ T5938] team0: Port device team_slave_0 added [ 299.436981][ T5938] team0: Port device team_slave_1 added [ 299.756242][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.840975][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.091097][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 300.720120][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.868326][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.898268][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.022083][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.305893][ T5938] device hsr_slave_0 entered promiscuous mode [ 301.333954][ T5938] device hsr_slave_1 entered promiscuous mode [ 301.865471][ T5938] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 301.914900][ T5938] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 301.973628][ T5938] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.022425][ T5938] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.166863][ T5060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.181206][ T4295] Bluetooth: hci0: command 0x0419 tx timeout [ 302.256678][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.5.372'. [ 302.309134][ T5060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.418778][ T5060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.468260][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.516638][ T5060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.563982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.577850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.615552][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.670684][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.694909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.730585][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.737756][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.784075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.802125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.824166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.841678][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.848872][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.908624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.982559][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.012182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.033744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.052017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.091863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.121954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.150351][ T5938] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.235213][ T5938] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.341445][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.359019][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.415296][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.471819][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.520981][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 304.648644][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 304.663004][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 304.699298][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.214678][ T6093] loop3: detected capacity change from 0 to 256 [ 308.270968][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 308.286176][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 309.954449][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 309.982493][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.069163][ T5938] device veth0_vlan entered promiscuous mode [ 310.089822][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.123450][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.647469][ T6114] loop3: detected capacity change from 0 to 256 [ 312.271422][ T5060] device hsr_slave_0 left promiscuous mode [ 312.290610][ T5060] device hsr_slave_1 left promiscuous mode [ 312.992610][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.000393][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.051033][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.083471][ T5060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.111830][ T5060] device bridge_slave_1 left promiscuous mode [ 313.118186][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.224583][ T5060] device bridge_slave_0 left promiscuous mode [ 313.238394][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.320737][ T5060] device veth1_macvtap left promiscuous mode [ 313.371512][ T5060] device veth0_macvtap left promiscuous mode [ 313.398087][ T5060] device veth1_vlan left promiscuous mode [ 313.419688][ T5060] device veth0_vlan left promiscuous mode [ 313.770958][ T4214] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 314.131241][ T4214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 314.494335][ T5060] team0 (unregistering): Port device team_slave_1 removed [ 314.563117][ T5060] team0 (unregistering): Port device team_slave_0 removed [ 314.704906][ T4214] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.714936][ T4214] usb 7-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 314.724042][ T4214] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.766660][ T4214] usb 7-1: config 0 descriptor?? [ 314.809923][ T5060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.403263][ T5060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.574426][ T6141] loop5: detected capacity change from 0 to 512 [ 316.594485][ T6141] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 316.609731][ T4214] hkems 0003:2006:0118.0001: ignoring exceeding usage max [ 316.635707][ T4214] hkems 0003:2006:0118.0001: item fetching failed at offset 3/5 [ 316.663138][ T4214] hkems 0003:2006:0118.0001: parse failed [ 316.677091][ T4214] hkems: probe of 0003:2006:0118.0001 failed with error -22 [ 316.684712][ T6141] EXT4-fs (loop5): 1 truncate cleaned up [ 316.684741][ T6141] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,dioread_lock,inode_readahead_blks=0x0000000008000000,debug_want_extra_isize=0x0000000000000040,noinit_itable,jqfmt=vfsv1,. Quota mode: none. [ 316.740391][ T26] audit: type=1326 audit(1743614136.100:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8c42f169 code=0x7ffc0000 [ 316.779560][ T5060] bond0 (unregistering): Released all slaves [ 316.793270][ T26] audit: type=1326 audit(1743614136.160:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f8c42f169 code=0x7ffc0000 [ 316.823957][ T4217] usb 7-1: USB disconnect, device number 2 [ 316.827612][ T26] audit: type=1326 audit(1743614136.160:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8c42f169 code=0x7ffc0000 [ 316.856301][ T26] audit: type=1326 audit(1743614136.160:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3f8c42f169 code=0x7ffc0000 [ 316.901232][ T26] audit: type=1326 audit(1743614136.270:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.5.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8c42f169 code=0x7ffc0000 [ 317.036413][ T5938] device veth1_vlan entered promiscuous mode [ 317.129872][ T5938] device veth0_macvtap entered promiscuous mode [ 317.184964][ T5938] device veth1_macvtap entered promiscuous mode [ 317.221778][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.229029][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.240244][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.264811][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.308769][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.772915][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.155192][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.195098][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.266272][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.295586][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.316700][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.351480][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.369108][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.387656][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.401967][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.413503][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.424329][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.445798][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.499143][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.531142][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.551733][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.577330][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.597185][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.618796][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.665589][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.683061][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.713444][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.753404][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.839945][ T5938] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.867294][ T5938] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.925887][ T5938] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.957869][ T5938] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.390490][ T6180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.397'. [ 321.170430][ T6185] loop3: detected capacity change from 0 to 512 [ 321.372346][ T4312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.413635][ T6185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 321.578051][ T4312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.641305][ T6185] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.398: corrupted in-inode xattr [ 321.665765][ T6185] EXT4-fs (loop3): Remounting filesystem read-only [ 321.675956][ T6185] EXT4-fs (loop3): 1 truncate cleaned up [ 321.681836][ T6185] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,quota,errors=remount-ro,barrier,. Quota mode: writeback. [ 322.394218][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.404779][ T4312] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.638281][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.064545][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 325.652216][ T6223] input: syz0 as /devices/virtual/input/input5 [ 325.722890][ T6229] loop5: detected capacity change from 0 to 512 [ 325.783011][ T6229] EXT4-fs (loop5): ea_inode feature is not supported for Hurd [ 329.387379][ T6270] netlink: 'syz.5.411': attribute type 16 has an invalid length. [ 329.395254][ T6270] netlink: 64130 bytes leftover after parsing attributes in process `syz.5.411'. [ 330.065505][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.7.405'. [ 330.105009][ C0] ------------[ cut here ]------------ [ 330.105086][ C0] [ 330.105093][ C0] ====================================================== [ 330.105099][ C0] WARNING: possible circular locking dependency detected [ 330.105106][ C0] 5.15.179-syzkaller #0 Not tainted [ 330.105119][ C0] ------------------------------------------------------ [ 330.105125][ C0] syz.0.407/6245 is trying to acquire lock: [ 330.105137][ C0] ffffffff8c9fbd38 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 330.105207][ C0] [ 330.105207][ C0] but task is already holding lock: [ 330.105212][ C0] ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x772/0xeb0 [ 330.105257][ C0] [ 330.105257][ C0] which lock already depends on the new lock. [ 330.105257][ C0] [ 330.105262][ C0] [ 330.105262][ C0] the existing dependency chain (in reverse order) is: [ 330.105268][ C0] [ 330.105268][ C0] -> #3 (&base->lock){-.-.}-{2:2}: [ 330.105292][ C0] lock_acquire+0x1db/0x4f0 [ 330.105309][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 330.105326][ C0] lock_timer_base+0x120/0x260 [ 330.105347][ C0] __mod_timer+0x1d6/0xeb0 [ 330.105366][ C0] queue_delayed_work_on+0x156/0x250 [ 330.105384][ C0] enqueue_task+0x28d/0x2e0 [ 330.105404][ C0] wake_up_new_task+0x515/0xb60 [ 330.105423][ C0] kernel_clone+0x44e/0x960 [ 330.105440][ C0] kernel_thread+0x12e/0x1a0 [ 330.105456][ C0] rest_init+0x21/0x330 [ 330.105472][ C0] start_kernel+0x48c/0x540 [ 330.105491][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 330.105513][ C0] [ 330.105513][ C0] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 330.105537][ C0] lock_acquire+0x1db/0x4f0 [ 330.105553][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 330.105570][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 330.105590][ C0] task_fork_fair+0x5d/0x350 [ 330.105607][ C0] sched_cgroup_fork+0x2d3/0x330 [ 330.105628][ C0] copy_process+0x224a/0x3ef0 [ 330.105645][ C0] kernel_clone+0x210/0x960 [ 330.105661][ C0] kernel_thread+0x12e/0x1a0 [ 330.105678][ C0] rest_init+0x21/0x330 [ 330.105693][ C0] start_kernel+0x48c/0x540 [ 330.105710][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 330.105737][ C0] [ 330.105737][ C0] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 330.105761][ C0] lock_acquire+0x1db/0x4f0 [ 330.105778][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 330.105795][ C0] try_to_wake_up+0xae/0x12c0 [ 330.105815][ C0] up+0x6e/0x90 [ 330.105832][ C0] __up_console_sem+0x11a/0x1e0 [ 330.105850][ C0] console_unlock+0x1145/0x12b0 [ 330.105867][ C0] vprintk_emit+0xbf/0x150 [ 330.105884][ C0] dev_vprintk_emit+0x2aa/0x330 [ 330.105904][ C0] dev_printk_emit+0xd9/0x120 [ 330.105921][ C0] _dev_warn+0x11e/0x170 [ 330.105939][ C0] firmware_fallback_sysfs+0x681/0xc90 [ 330.105962][ C0] _request_firmware+0xc72/0x12c0 [ 330.105982][ C0] request_firmware_work_func+0x126/0x270 [ 330.106004][ C0] process_one_work+0x8a1/0x10c0 [ 330.106023][ C0] worker_thread+0xaca/0x1280 [ 330.106042][ C0] kthread+0x3f6/0x4f0 [ 330.106058][ C0] ret_from_fork+0x1f/0x30 [ 330.106077][ C0] [ 330.106077][ C0] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 330.106101][ C0] validate_chain+0x1649/0x5930 [ 330.106119][ C0] __lock_acquire+0x1295/0x1ff0 [ 330.106136][ C0] lock_acquire+0x1db/0x4f0 [ 330.106151][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 330.106168][ C0] down_trylock+0x1c/0xa0 [ 330.106188][ C0] __down_trylock_console_sem+0x105/0x250 [ 330.106207][ C0] console_trylock_spinning+0x8a/0x3f0 [ 330.106225][ C0] vprintk_emit+0xa6/0x150 [ 330.106242][ C0] _printk+0xd1/0x120 [ 330.106257][ C0] report_bug+0x1e5/0x2e0 [ 330.106277][ C0] handle_bug+0x3d/0x70 [ 330.106295][ C0] exc_invalid_op+0x16/0x40 [ 330.106313][ C0] asm_exc_invalid_op+0x16/0x20 [ 330.106331][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 330.106349][ C0] bpf_probe_read_user+0x26/0x70 [ 330.106367][ C0] bpf_prog_690f12e098ef46de+0x32/0xa20 [ 330.106383][ C0] bpf_trace_run3+0x1d1/0x380 [ 330.106401][ C0] enqueue_timer+0x3ae/0x540 [ 330.106418][ C0] __mod_timer+0xa60/0xeb0 [ 330.106437][ C0] sk_reset_timer+0x1f/0xb0 [ 330.106456][ C0] tcp_event_new_data_sent+0x203/0x360 [ 330.106477][ C0] tcp_write_xmit+0x19d1/0x6650 [ 330.106496][ C0] __tcp_push_pending_frames+0x90/0x250 [ 330.106516][ C0] tcp_rcv_established+0xfad/0x1e30 [ 330.106533][ C0] tcp_v4_do_rcv+0x423/0x970 [ 330.106553][ C0] tcp_v4_rcv+0x27be/0x2de0 [ 330.106572][ C0] ip_protocol_deliver_rcu+0x386/0x740 [ 330.106590][ C0] ip_local_deliver_finish+0x1db/0x320 [ 330.106607][ C0] NF_HOOK+0x364/0x410 [ 330.106623][ C0] ip_sublist_rcv+0xb0f/0xe50 [ 330.106639][ C0] ip_list_rcv+0x427/0x470 [ 330.106654][ C0] __netif_receive_skb_list_core+0x6b1/0x890 [ 330.106676][ C0] netif_receive_skb_list_internal+0x9ed/0xdf0 [ 330.106695][ C0] napi_complete_done+0x352/0x820 [ 330.106712][ C0] virtnet_poll+0xbd1/0x1260 [ 330.106740][ C0] __napi_poll+0xc7/0x440 [ 330.106758][ C0] net_rx_action+0x617/0xda0 [ 330.106778][ C0] handle_softirqs+0x3a7/0x930 [ 330.106795][ C0] __irq_exit_rcu+0x157/0x240 [ 330.106812][ C0] irq_exit_rcu+0x5/0x20 [ 330.106828][ C0] common_interrupt+0xb3/0xd0 [ 330.106847][ C0] asm_common_interrupt+0x22/0x40 [ 330.106865][ C0] save_stack+0x86/0x1e0 [ 330.106883][ C0] __reset_page_owner+0x52/0x180 [ 330.106900][ C0] free_unref_page_prepare+0xc34/0xcf0 [ 330.106919][ C0] free_unref_page_list+0x1f7/0x8e0 [ 330.106937][ C0] release_pages+0x1bb9/0x1f40 [ 330.106956][ C0] tlb_finish_mmu+0x177/0x320 [ 330.106975][ C0] exit_mmap+0x3cd/0x620 [ 330.106991][ C0] __mmput+0x112/0x3b0 [ 330.107007][ C0] exit_mm+0x688/0x7f0 [ 330.107026][ C0] do_exit+0x626/0x2480 [ 330.107045][ C0] do_group_exit+0x144/0x310 [ 330.107061][ C0] get_signal+0xc66/0x14e0 [ 330.107078][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 330.107100][ C0] exit_to_user_mode_loop+0x97/0x130 [ 330.107118][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 330.107136][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 330.107154][ C0] do_syscall_64+0x47/0xb0 [ 330.107172][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 330.107191][ C0] [ 330.107191][ C0] other info that might help us debug this: [ 330.107191][ C0] [ 330.107196][ C0] Chain exists of: [ 330.107196][ C0] (console_sem).lock --> &rq->__lock --> &base->lock [ 330.107196][ C0] [ 330.107226][ C0] Possible unsafe locking scenario: [ 330.107226][ C0] [ 330.107231][ C0] CPU0 CPU1 [ 330.107236][ C0] ---- ---- [ 330.107240][ C0] lock(&base->lock); [ 330.107251][ C0] lock(&rq->__lock); [ 330.107264][ C0] lock(&base->lock); [ 330.107276][ C0] lock((console_sem).lock); [ 330.107287][ C0] [ 330.107287][ C0] *** DEADLOCK *** [ 330.107287][ C0] [ 330.107291][ C0] 5 locks held by syz.0.407/6245: [ 330.107302][ C0] #0: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 330.107348][ C0] #1: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 330.107390][ C0] #2: ffff8880738718a0 (slock-AF_INET/1){+.-.}-{2:2}, at: tcp_v4_rcv+0x271f/0x2de0 [ 330.107442][ C0] #3: ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x772/0xeb0 [ 330.107488][ C0] #4: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 330.107533][ C0] [ 330.107533][ C0] stack backtrace: [ 330.107549][ C0] CPU: 0 PID: 6245 Comm: syz.0.407 Not tainted 5.15.179-syzkaller #0 [ 330.107568][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.107584][ C0] Call Trace: [ 330.107590][ C0] [ 330.107597][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 330.107620][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 330.107646][ C0] ? print_circular_bug+0x12b/0x1a0 [ 330.107668][ C0] check_noncircular+0x2f8/0x3b0 [ 330.107691][ C0] ? add_chain_block+0x850/0x850 [ 330.107711][ C0] ? lockdep_lock+0x11f/0x2a0 [ 330.107746][ C0] validate_chain+0x1649/0x5930 [ 330.107777][ C0] ? reacquire_held_locks+0x660/0x660 [ 330.107796][ C0] ? data_push_tail+0x693/0x700 [ 330.107820][ C0] ? desc_read+0x3d0/0x3d0 [ 330.107845][ C0] ? virtqueue_add+0x3a71/0x4630 [ 330.107868][ C0] ? mark_lock+0x98/0x340 [ 330.107888][ C0] __lock_acquire+0x1295/0x1ff0 [ 330.107914][ C0] lock_acquire+0x1db/0x4f0 [ 330.107931][ C0] ? down_trylock+0x1c/0xa0 [ 330.107952][ C0] ? vsnprintf+0x1c70/0x1c70 [ 330.107976][ C0] ? read_lock_is_recursive+0x10/0x10 [ 330.107996][ C0] ? memcpy+0x3c/0x60 [ 330.108016][ C0] ? vsnprintf+0x1b93/0x1c70 [ 330.108038][ C0] ? _prb_commit+0x30a/0x3e0 [ 330.108060][ C0] ? prb_reserve+0x1240/0x1240 [ 330.108081][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 330.108100][ C0] ? down_trylock+0x1c/0xa0 [ 330.108120][ C0] ? _raw_spin_lock+0x40/0x40 [ 330.108140][ C0] ? vprintk_store+0xf1b/0x1300 [ 330.108161][ C0] down_trylock+0x1c/0xa0 [ 330.108183][ C0] __down_trylock_console_sem+0x105/0x250 [ 330.108204][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 330.108223][ C0] ? vprintk_emit+0xa6/0x150 [ 330.108242][ C0] ? console_trylock+0x70/0x70 [ 330.108266][ C0] ? vprintk_emit+0xa6/0x150 [ 330.108284][ C0] console_trylock_spinning+0x8a/0x3f0 [ 330.108304][ C0] ? vprintk_emit+0x150/0x150 [ 330.108328][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 330.108350][ C0] vprintk_emit+0xa6/0x150 [ 330.108370][ C0] _printk+0xd1/0x120 [ 330.108388][ C0] ? report_bug+0x16e/0x2e0 [ 330.108409][ C0] ? panic+0x860/0x860 [ 330.108428][ C0] ? find_bug+0x9c/0x350 [ 330.108449][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 330.108468][ C0] report_bug+0x1e5/0x2e0 [ 330.108491][ C0] handle_bug+0x3d/0x70 [ 330.108511][ C0] exc_invalid_op+0x16/0x40 [ 330.108532][ C0] asm_exc_invalid_op+0x16/0x20 [ 330.108550][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 330.108572][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 330.108595][ C0] RSP: 0018:ffffc90000006908 EFLAGS: 00010046 [ 330.108611][ C0] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff88805b888000 [ 330.108625][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.108637][ C0] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: fffffbfff2131e19 [ 330.108652][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 330.108664][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000006968 [ 330.108680][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 330.108698][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 330.108721][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 330.108747][ C0] bpf_probe_read_user+0x26/0x70 [ 330.108768][ C0] bpf_prog_690f12e098ef46de+0x32/0xa20 [ 330.108785][ C0] bpf_trace_run3+0x1d1/0x380 [ 330.108806][ C0] ? bpf_trace_run2+0x340/0x340 [ 330.108824][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 330.108845][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 330.108871][ C0] enqueue_timer+0x3ae/0x540 [ 330.108891][ C0] __mod_timer+0xa60/0xeb0 [ 330.108917][ C0] ? mod_timer_pending+0x20/0x20 [ 330.108938][ C0] ? ktime_get+0x7f/0x270 [ 330.108956][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 330.108980][ C0] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 330.109003][ C0] ? memset+0x1f/0x40 [ 330.109020][ C0] ? tcp_rearm_rto+0x24b/0x5e0 [ 330.109040][ C0] sk_reset_timer+0x1f/0xb0 [ 330.109059][ C0] tcp_event_new_data_sent+0x203/0x360 [ 330.109084][ C0] tcp_write_xmit+0x19d1/0x6650 [ 330.109125][ C0] __tcp_push_pending_frames+0x90/0x250 [ 330.109148][ C0] tcp_rcv_established+0xfad/0x1e30 [ 330.109175][ C0] ? tcp_check_space+0x940/0x940 [ 330.109196][ C0] ? rt_is_expired+0x21b/0x290 [ 330.109219][ C0] tcp_v4_do_rcv+0x423/0x970 [ 330.109244][ C0] tcp_v4_rcv+0x27be/0x2de0 [ 330.109285][ C0] ? tcp_filter+0x80/0x80 [ 330.109311][ C0] ip_protocol_deliver_rcu+0x386/0x740 [ 330.109333][ C0] ip_local_deliver_finish+0x1db/0x320 [ 330.109355][ C0] NF_HOOK+0x364/0x410 [ 330.109371][ C0] ? skb_dst_set_noref+0x2a/0xe0 [ 330.109393][ C0] ? NF_HOOK+0x410/0x410 [ 330.109411][ C0] ? ip_local_deliver+0x190/0x190 [ 330.109430][ C0] ? NF_HOOK+0x410/0x410 [ 330.109446][ C0] ? ip_rcv_finish_core+0xc50/0x1b80 [ 330.109467][ C0] ? ip_local_deliver+0x112/0x190 [ 330.109486][ C0] ip_sublist_rcv+0xb0f/0xe50 [ 330.109504][ C0] ? packet_rcv+0x15d/0x11b0 [ 330.109529][ C0] ? ip_list_rcv+0x470/0x470 [ 330.109545][ C0] ? __netif_receive_skb_core+0x36a2/0x3df0 [ 330.109570][ C0] ? ip_rcv_core+0xb50/0xb50 [ 330.109586][ C0] ? ip_rcv_core+0x718/0xb50 [ 330.109608][ C0] ip_list_rcv+0x427/0x470 [ 330.109631][ C0] ? ip_rcv_finish+0x270/0x270 [ 330.109652][ C0] ? ip_rcv_finish+0x270/0x270 [ 330.109669][ C0] __netif_receive_skb_list_core+0x6b1/0x890 [ 330.109698][ C0] ? __netif_receive_skb+0x530/0x530 [ 330.109720][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 330.109758][ C0] netif_receive_skb_list_internal+0x9ed/0xdf0 [ 330.109779][ C0] ? print_irqtrace_events+0x210/0x210 [ 330.109801][ C0] ? netif_receive_skb_list+0x440/0x440 [ 330.109819][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 330.109841][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 330.109864][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 330.109892][ C0] napi_complete_done+0x352/0x820 [ 330.109914][ C0] ? __napi_schedule_irqoff+0x240/0x240 [ 330.109934][ C0] ? virtqueue_get_buf_ctx+0x478/0xe80 [ 330.109957][ C0] ? virtqueue_enable_cb_prepare+0x2c7/0x5b0 [ 330.109982][ C0] virtnet_poll+0xbd1/0x1260 [ 330.110008][ C0] ? refill_work+0x220/0x220 [ 330.110033][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 330.110058][ C0] __napi_poll+0xc7/0x440 [ 330.110080][ C0] net_rx_action+0x617/0xda0 [ 330.110107][ C0] ? net_tx_action+0x8e0/0x8e0 [ 330.110128][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 330.110158][ C0] handle_softirqs+0x3a7/0x930 [ 330.110179][ C0] ? __irq_exit_rcu+0x157/0x240 [ 330.110199][ C0] ? do_softirq+0x240/0x240 [ 330.110220][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 330.110243][ C0] __irq_exit_rcu+0x157/0x240 [ 330.110262][ C0] ? irq_exit_rcu+0x20/0x20 [ 330.110285][ C0] irq_exit_rcu+0x5/0x20 [ 330.110302][ C0] common_interrupt+0xb3/0xd0 [ 330.110323][ C0] [ 330.110328][ C0] [ 330.110335][ C0] asm_common_interrupt+0x22/0x40 [ 330.110354][ C0] RIP: 0010:save_stack+0x86/0x1e0 [ 330.110373][ C0] Code: 49 c1 ed 03 43 c7 44 25 00 f1 f1 f1 f1 43 c7 44 25 14 f3 f3 f3 f3 e8 59 62 af ff ba 80 00 00 00 48 89 df 31 f6 e8 4a 56 f9 ff <65> 48 8b 1d 42 35 31 7e 48 81 c3 80 05 00 00 49 89 df 49 c1 ef 03 [ 330.110389][ C0] RSP: 0018:ffffc90002dcf2c0 EFLAGS: 00000202 [ 330.110405][ C0] RAX: ffffc90002dcf300 RBX: ffffc90002dcf300 RCX: 0000000000000000 [ 330.110419][ C0] RDX: 0000000000000080 RSI: 0000000000000000 RDI: ffffc90002dcf380 [ 330.110432][ C0] RBP: ffffc90002dcf3e8 R08: dffffc0000000000 R09: ffffc90002dcf300 [ 330.110447][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 330.110461][ C0] R13: 1ffff920005b9e5c R14: dffffc0000000000 R15: ffffea0001fe4880 [ 330.110484][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 330.110504][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 330.110527][ C0] ? __reset_page_owner+0x180/0x180 [ 330.110545][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 330.110570][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 330.110590][ C0] ? sched_clock_cpu+0x15/0x3b0 [ 330.110610][ C0] ? debug_check_no_obj_freed+0x455/0x4e0 [ 330.110638][ C0] __reset_page_owner+0x52/0x180 [ 330.110660][ C0] free_unref_page_prepare+0xc34/0xcf0 [ 330.110685][ C0] free_unref_page_list+0x1f7/0x8e0 [ 330.110708][ C0] ? free_unref_page_commit+0x500/0x500 [ 330.110733][ C0] ? __mem_cgroup_uncharge_list+0xf8/0x150 [ 330.110756][ C0] ? uncharge_batch+0x490/0x490 [ 330.110779][ C0] ? _raw_spin_unlock+0x40/0x40 [ 330.110799][ C0] ? __mod_zone_page_state+0x8a/0xc0 [ 330.110826][ C0] release_pages+0x1bb9/0x1f40 [ 330.110851][ C0] ? lru_cache_disable+0x30/0x30 [ 330.110870][ C0] ? free_swap_cache+0x15a/0x2d0 [ 330.110896][ C0] tlb_finish_mmu+0x177/0x320 [ 330.110916][ C0] exit_mmap+0x3cd/0x620 [ 330.110937][ C0] ? vm_brk+0x20/0x20 [ 330.110961][ C0] ? uprobe_clear_state+0x304/0x460 [ 330.110987][ C0] __mmput+0x112/0x3b0 [ 330.111006][ C0] exit_mm+0x688/0x7f0 [ 330.111026][ C0] ? _raw_spin_unlock+0x40/0x40 [ 330.111047][ C0] ? do_exit+0x2480/0x2480 [ 330.111067][ C0] ? taskstats_exit+0x491/0xa10 [ 330.111086][ C0] ? tty_audit_exit+0x150/0x1f0 [ 330.111107][ C0] do_exit+0x626/0x2480 [ 330.111130][ C0] ? put_task_struct+0x80/0x80 [ 330.111152][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 330.111177][ C0] do_group_exit+0x144/0x310 [ 330.111195][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 330.111219][ C0] get_signal+0xc66/0x14e0 [ 330.111245][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 330.111272][ C0] ? __sys_recvmmsg+0x270/0x270 [ 330.111298][ C0] ? get_sigframe_size+0x10/0x10 [ 330.111320][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 330.111345][ C0] ? __x64_sys_recvmmsg+0x195/0x240 [ 330.111368][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 330.111390][ C0] exit_to_user_mode_loop+0x97/0x130 [ 330.111410][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 330.111431][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 330.111451][ C0] do_syscall_64+0x47/0xb0 [ 330.111471][ C0] ? clear_bhb_loop+0x15/0x70 [ 330.111490][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 330.111510][ C0] RIP: 0033:0x7fc33407d169 [ 330.111525][ C0] Code: Unable to access opcode bytes at RIP 0x7fc33407d13f. [ 330.111534][ C0] RSP: 002b:00007fc331ec5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 330.111554][ C0] RAX: 000000000003fffd RBX: 00007fc334296080 RCX: 00007fc33407d169 [ 330.111568][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 330.111582][ C0] RBP: 00007fc3340fe2a0 R08: 0000000000000000 R09: 0000000000000000 [ 330.111595][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 330.111606][ C0] R13: 0000000000000001 R14: 00007fc334296080 R15: 00007ffc023c5b38 [ 330.111627][ C0] [ 331.930960][ C0] WARNING: CPU: 0 PID: 6245 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 331.940333][ C0] Modules linked in: [ 331.944234][ C0] CPU: 0 PID: 6245 Comm: syz.0.407 Not tainted 5.15.179-syzkaller #0 [ 331.952291][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 331.962339][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 331.968514][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 331.988118][ C0] RSP: 0018:ffffc90000006908 EFLAGS: 00010046 [ 331.994180][ C0] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff88805b888000 [ 332.002148][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.010117][ C0] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: fffffbfff2131e19 [ 332.018171][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 332.026139][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000006968 [ 332.034105][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 332.043026][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 332.049603][ C0] CR2: 0000200001000000 CR3: 000000000c88e000 CR4: 00000000003526f0 [ 332.057574][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 332.065543][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 332.073506][ C0] Call Trace: [ 332.076780][ C0] [ 332.079619][ C0] ? __warn+0x15b/0x300 [ 332.083770][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 332.089323][ C0] ? report_bug+0x1b7/0x2e0 [ 332.093830][ C0] ? handle_bug+0x3d/0x70 [ 332.098152][ C0] ? exc_invalid_op+0x16/0x40 [ 332.102829][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 332.107848][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 332.113299][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 332.118839][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 332.124378][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 332.129919][ C0] bpf_probe_read_user+0x26/0x70 [ 332.134852][ C0] bpf_prog_690f12e098ef46de+0x32/0xa20 [ 332.140391][ C0] bpf_trace_run3+0x1d1/0x380 [ 332.145064][ C0] ? bpf_trace_run2+0x340/0x340 [ 332.149910][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 332.155798][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 332.160824][ C0] enqueue_timer+0x3ae/0x540 [ 332.165413][ C0] __mod_timer+0xa60/0xeb0 [ 332.169827][ C0] ? mod_timer_pending+0x20/0x20 [ 332.174756][ C0] ? ktime_get+0x7f/0x270 [ 332.179079][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 332.184274][ C0] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 332.190513][ C0] ? memset+0x1f/0x40 [ 332.194488][ C0] ? tcp_rearm_rto+0x24b/0x5e0 [ 332.199249][ C0] sk_reset_timer+0x1f/0xb0 [ 332.203767][ C0] tcp_event_new_data_sent+0x203/0x360 [ 332.209231][ C0] tcp_write_xmit+0x19d1/0x6650 [ 332.214089][ C0] __tcp_push_pending_frames+0x90/0x250 [ 332.219629][ C0] tcp_rcv_established+0xfad/0x1e30 [ 332.224824][ C0] ? tcp_check_space+0x940/0x940 [ 332.229779][ C0] ? rt_is_expired+0x21b/0x290 [ 332.234540][ C0] tcp_v4_do_rcv+0x423/0x970 [ 332.239127][ C0] tcp_v4_rcv+0x27be/0x2de0 [ 332.243642][ C0] ? tcp_filter+0x80/0x80 [ 332.247977][ C0] ip_protocol_deliver_rcu+0x386/0x740 [ 332.253540][ C0] ip_local_deliver_finish+0x1db/0x320 [ 332.259011][ C0] NF_HOOK+0x364/0x410 [ 332.263093][ C0] ? skb_dst_set_noref+0x2a/0xe0 [ 332.268028][ C0] ? NF_HOOK+0x410/0x410 [ 332.272265][ C0] ? ip_local_deliver+0x190/0x190 [ 332.277289][ C0] ? NF_HOOK+0x410/0x410 [ 332.281624][ C0] ? ip_rcv_finish_core+0xc50/0x1b80 [ 332.286922][ C0] ? ip_local_deliver+0x112/0x190 [ 332.291941][ C0] ip_sublist_rcv+0xb0f/0xe50 [ 332.296643][ C0] ? packet_rcv+0x15d/0x11b0 [ 332.301242][ C0] ? ip_list_rcv+0x470/0x470 [ 332.305826][ C0] ? __netif_receive_skb_core+0x36a2/0x3df0 [ 332.311716][ C0] ? ip_rcv_core+0xb50/0xb50 [ 332.316297][ C0] ? ip_rcv_core+0x718/0xb50 [ 332.320889][ C0] ip_list_rcv+0x427/0x470 [ 332.325307][ C0] ? ip_rcv_finish+0x270/0x270 [ 332.330065][ C0] ? ip_rcv_finish+0x270/0x270 [ 332.334821][ C0] __netif_receive_skb_list_core+0x6b1/0x890 [ 332.340803][ C0] ? __netif_receive_skb+0x530/0x530 [ 332.346086][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 332.351282][ C0] netif_receive_skb_list_internal+0x9ed/0xdf0 [ 332.357436][ C0] ? print_irqtrace_events+0x210/0x210 [ 332.362891][ C0] ? netif_receive_skb_list+0x440/0x440 [ 332.368428][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 332.374604][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 332.379800][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 332.385955][ C0] napi_complete_done+0x352/0x820 [ 332.390973][ C0] ? __napi_schedule_irqoff+0x240/0x240 [ 332.396514][ C0] ? virtqueue_get_buf_ctx+0x478/0xe80 [ 332.401969][ C0] ? virtqueue_enable_cb_prepare+0x2c7/0x5b0 [ 332.407944][ C0] virtnet_poll+0xbd1/0x1260 [ 332.412535][ C0] ? refill_work+0x220/0x220 [ 332.417124][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 332.423099][ C0] __napi_poll+0xc7/0x440 [ 332.427428][ C0] net_rx_action+0x617/0xda0 [ 332.432015][ C0] ? net_tx_action+0x8e0/0x8e0 [ 332.436859][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 332.442848][ C0] handle_softirqs+0x3a7/0x930 [ 332.447628][ C0] ? __irq_exit_rcu+0x157/0x240 [ 332.452479][ C0] ? do_softirq+0x240/0x240 [ 332.456988][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 332.462184][ C0] __irq_exit_rcu+0x157/0x240 [ 332.466857][ C0] ? irq_exit_rcu+0x20/0x20 [ 332.471357][ C0] irq_exit_rcu+0x5/0x20 [ 332.475591][ C0] common_interrupt+0xb3/0xd0 [ 332.480268][ C0] [ 332.483193][ C0] [ 332.486118][ C0] asm_common_interrupt+0x22/0x40 [ 332.491160][ C0] RIP: 0010:save_stack+0x86/0x1e0 [ 332.496184][ C0] Code: 49 c1 ed 03 43 c7 44 25 00 f1 f1 f1 f1 43 c7 44 25 14 f3 f3 f3 f3 e8 59 62 af ff ba 80 00 00 00 48 89 df 31 f6 e8 4a 56 f9 ff <65> 48 8b 1d 42 35 31 7e 48 81 c3 80 05 00 00 49 89 df 49 c1 ef 03 [ 332.515783][ C0] RSP: 0018:ffffc90002dcf2c0 EFLAGS: 00000202 [ 332.521869][ C0] RAX: ffffc90002dcf300 RBX: ffffc90002dcf300 RCX: 0000000000000000 [ 332.529835][ C0] RDX: 0000000000000080 RSI: 0000000000000000 RDI: ffffc90002dcf380 [ 332.537830][ C0] RBP: ffffc90002dcf3e8 R08: dffffc0000000000 R09: ffffc90002dcf300 [ 332.545799][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 332.553765][ C0] R13: 1ffff920005b9e5c R14: dffffc0000000000 R15: ffffea0001fe4880 [ 332.561740][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 332.567651][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 332.572848][ C0] ? __reset_page_owner+0x180/0x180 [ 332.578158][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 332.584053][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 332.589465][ C0] ? sched_clock_cpu+0x15/0x3b0 [ 332.594316][ C0] ? debug_check_no_obj_freed+0x455/0x4e0 [ 332.600132][ C0] __reset_page_owner+0x52/0x180 [ 332.605086][ C0] free_unref_page_prepare+0xc34/0xcf0 [ 332.610641][ C0] free_unref_page_list+0x1f7/0x8e0 [ 332.615836][ C0] ? free_unref_page_commit+0x500/0x500 [ 332.621467][ C0] ? __mem_cgroup_uncharge_list+0xf8/0x150 [ 332.627273][ C0] ? uncharge_batch+0x490/0x490 [ 332.632117][ C0] ? _raw_spin_unlock+0x40/0x40 [ 332.636961][ C0] ? __mod_zone_page_state+0x8a/0xc0 [ 332.642243][ C0] release_pages+0x1bb9/0x1f40 [ 332.647011][ C0] ? lru_cache_disable+0x30/0x30 [ 332.651942][ C0] ? free_swap_cache+0x15a/0x2d0 [ 332.656900][ C0] tlb_finish_mmu+0x177/0x320 [ 332.661573][ C0] exit_mmap+0x3cd/0x620 [ 332.665810][ C0] ? vm_brk+0x20/0x20 [ 332.669787][ C0] ? uprobe_clear_state+0x304/0x460 [ 332.674981][ C0] __mmput+0x112/0x3b0 [ 332.679045][ C0] exit_mm+0x688/0x7f0 [ 332.683113][ C0] ? _raw_spin_unlock+0x40/0x40 [ 332.687961][ C0] ? do_exit+0x2480/0x2480 [ 332.692396][ C0] ? taskstats_exit+0x491/0xa10 [ 332.697240][ C0] ? tty_audit_exit+0x150/0x1f0 [ 332.702088][ C0] do_exit+0x626/0x2480 [ 332.706343][ C0] ? put_task_struct+0x80/0x80 [ 332.711102][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 332.717084][ C0] do_group_exit+0x144/0x310 [ 332.721692][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 332.726887][ C0] get_signal+0xc66/0x14e0 [ 332.731323][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 332.736974][ C0] ? __sys_recvmmsg+0x270/0x270 [ 332.741917][ C0] ? get_sigframe_size+0x10/0x10 [ 332.746856][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 332.751880][ C0] ? __x64_sys_recvmmsg+0x195/0x240 [ 332.757078][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 332.762552][ C0] exit_to_user_mode_loop+0x97/0x130 [ 332.767834][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 332.773376][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 332.778919][ C0] do_syscall_64+0x47/0xb0 [ 332.783331][ C0] ? clear_bhb_loop+0x15/0x70 [ 332.788003][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 332.793890][ C0] RIP: 0033:0x7fc33407d169 [ 332.798299][ C0] Code: Unable to access opcode bytes at RIP 0x7fc33407d13f. [ 332.805653][ C0] RSP: 002b:00007fc331ec5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 332.814082][ C0] RAX: 000000000003fffd RBX: 00007fc334296080 RCX: 00007fc33407d169 [ 332.822068][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 332.830049][ C0] RBP: 00007fc3340fe2a0 R08: 0000000000000000 R09: 0000000000000000 [ 332.838012][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 332.845974][ C0] R13: 0000000000000001 R14: 00007fc334296080 R15: 00007ffc023c5b38 [ 332.853945][ C0] [ 332.856971][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 332.864241][ C0] CPU: 0 PID: 6245 Comm: syz.0.407 Not tainted 5.15.179-syzkaller #0 [ 332.872323][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.882371][ C0] Call Trace: [ 332.885646][ C0] [ 332.888483][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 332.893159][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 332.898814][ C0] ? panic+0x860/0x860 [ 332.902879][ C0] ? panic+0x860/0x860 [ 332.906943][ C0] ? copy_from_user_nofault+0x120/0x1c0 [ 332.912489][ C0] ? copy_from_user_nofault+0x120/0x1c0 [ 332.918031][ C0] panic+0x318/0x860 [ 332.921926][ C0] ? __warn+0x16a/0x300 [ 332.926080][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 332.931278][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 332.936826][ C0] __warn+0x2b2/0x300 [ 332.940809][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 332.946357][ C0] report_bug+0x1b7/0x2e0 [ 332.950695][ C0] handle_bug+0x3d/0x70 [ 332.954852][ C0] exc_invalid_op+0x16/0x40 [ 332.959352][ C0] asm_exc_invalid_op+0x16/0x20 [ 332.964197][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 332.970349][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 332.989950][ C0] RSP: 0018:ffffc90000006908 EFLAGS: 00010046 [ 332.996014][ C0] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff88805b888000 [ 333.003980][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.011946][ C0] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: fffffbfff2131e19 [ 333.019917][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 333.027885][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000006968 [ 333.035856][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 333.041313][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 333.046942][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 333.052482][ C0] bpf_probe_read_user+0x26/0x70 [ 333.057520][ C0] bpf_prog_690f12e098ef46de+0x32/0xa20 [ 333.063062][ C0] bpf_trace_run3+0x1d1/0x380 [ 333.067740][ C0] ? bpf_trace_run2+0x340/0x340 [ 333.072585][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 333.078508][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 333.083532][ C0] enqueue_timer+0x3ae/0x540 [ 333.088117][ C0] __mod_timer+0xa60/0xeb0 [ 333.092533][ C0] ? mod_timer_pending+0x20/0x20 [ 333.097467][ C0] ? ktime_get+0x7f/0x270 [ 333.101808][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 333.107004][ C0] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 333.113243][ C0] ? memset+0x1f/0x40 [ 333.117221][ C0] ? tcp_rearm_rto+0x24b/0x5e0 [ 333.122000][ C0] sk_reset_timer+0x1f/0xb0 [ 333.126501][ C0] tcp_event_new_data_sent+0x203/0x360 [ 333.131955][ C0] tcp_write_xmit+0x19d1/0x6650 [ 333.136818][ C0] __tcp_push_pending_frames+0x90/0x250 [ 333.142361][ C0] tcp_rcv_established+0xfad/0x1e30 [ 333.147562][ C0] ? tcp_check_space+0x940/0x940 [ 333.152582][ C0] ? rt_is_expired+0x21b/0x290 [ 333.157343][ C0] tcp_v4_do_rcv+0x423/0x970 [ 333.161930][ C0] tcp_v4_rcv+0x27be/0x2de0 [ 333.166450][ C0] ? tcp_filter+0x80/0x80 [ 333.170780][ C0] ip_protocol_deliver_rcu+0x386/0x740 [ 333.176240][ C0] ip_local_deliver_finish+0x1db/0x320 [ 333.181695][ C0] NF_HOOK+0x364/0x410 [ 333.185759][ C0] ? skb_dst_set_noref+0x2a/0xe0 [ 333.190779][ C0] ? NF_HOOK+0x410/0x410 [ 333.195016][ C0] ? ip_local_deliver+0x190/0x190 [ 333.200037][ C0] ? NF_HOOK+0x410/0x410 [ 333.204272][ C0] ? ip_rcv_finish_core+0xc50/0x1b80 [ 333.209558][ C0] ? ip_local_deliver+0x112/0x190 [ 333.214580][ C0] ip_sublist_rcv+0xb0f/0xe50 [ 333.219253][ C0] ? packet_rcv+0x15d/0x11b0 [ 333.223842][ C0] ? ip_list_rcv+0x470/0x470 [ 333.228425][ C0] ? __netif_receive_skb_core+0x36a2/0x3df0 [ 333.234321][ C0] ? ip_rcv_core+0xb50/0xb50 [ 333.238904][ C0] ? ip_rcv_core+0x718/0xb50 [ 333.243491][ C0] ip_list_rcv+0x427/0x470 [ 333.247905][ C0] ? ip_rcv_finish+0x270/0x270 [ 333.252665][ C0] ? ip_rcv_finish+0x270/0x270 [ 333.257434][ C0] __netif_receive_skb_list_core+0x6b1/0x890 [ 333.263413][ C0] ? __netif_receive_skb+0x530/0x530 [ 333.268699][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 333.273911][ C0] netif_receive_skb_list_internal+0x9ed/0xdf0 [ 333.280092][ C0] ? print_irqtrace_events+0x210/0x210 [ 333.285655][ C0] ? netif_receive_skb_list+0x440/0x440 [ 333.291201][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 333.297372][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 333.302568][ C0] ? asm_sysvec_call_function_single+0x16/0x20 [ 333.308724][ C0] napi_complete_done+0x352/0x820 [ 333.313748][ C0] ? __napi_schedule_irqoff+0x240/0x240 [ 333.319289][ C0] ? virtqueue_get_buf_ctx+0x478/0xe80 [ 333.324750][ C0] ? virtqueue_enable_cb_prepare+0x2c7/0x5b0 [ 333.330728][ C0] virtnet_poll+0xbd1/0x1260 [ 333.335325][ C0] ? refill_work+0x220/0x220 [ 333.339916][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 333.345910][ C0] __napi_poll+0xc7/0x440 [ 333.350244][ C0] net_rx_action+0x617/0xda0 [ 333.354855][ C0] ? net_tx_action+0x8e0/0x8e0 [ 333.359618][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 333.365612][ C0] handle_softirqs+0x3a7/0x930 [ 333.370397][ C0] ? __irq_exit_rcu+0x157/0x240 [ 333.375272][ C0] ? do_softirq+0x240/0x240 [ 333.379773][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 333.384992][ C0] __irq_exit_rcu+0x157/0x240 [ 333.389666][ C0] ? irq_exit_rcu+0x20/0x20 [ 333.394165][ C0] irq_exit_rcu+0x5/0x20 [ 333.398410][ C0] common_interrupt+0xb3/0xd0 [ 333.403091][ C0] [ 333.406033][ C0] [ 333.408958][ C0] asm_common_interrupt+0x22/0x40 [ 333.413979][ C0] RIP: 0010:save_stack+0x86/0x1e0 [ 333.419002][ C0] Code: 49 c1 ed 03 43 c7 44 25 00 f1 f1 f1 f1 43 c7 44 25 14 f3 f3 f3 f3 e8 59 62 af ff ba 80 00 00 00 48 89 df 31 f6 e8 4a 56 f9 ff <65> 48 8b 1d 42 35 31 7e 48 81 c3 80 05 00 00 49 89 df 49 c1 ef 03 [ 333.438601][ C0] RSP: 0018:ffffc90002dcf2c0 EFLAGS: 00000202 [ 333.444683][ C0] RAX: ffffc90002dcf300 RBX: ffffc90002dcf300 RCX: 0000000000000000 [ 333.452652][ C0] RDX: 0000000000000080 RSI: 0000000000000000 RDI: ffffc90002dcf380 [ 333.460642][ C0] RBP: ffffc90002dcf3e8 R08: dffffc0000000000 R09: ffffc90002dcf300 [ 333.468782][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 333.476758][ C0] R13: 1ffff920005b9e5c R14: dffffc0000000000 R15: ffffea0001fe4880 [ 333.484740][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 333.490634][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 333.495832][ C0] ? __reset_page_owner+0x180/0x180 [ 333.501026][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 333.506919][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 333.512113][ C0] ? sched_clock_cpu+0x15/0x3b0 [ 333.516964][ C0] ? debug_check_no_obj_freed+0x455/0x4e0 [ 333.522683][ C0] __reset_page_owner+0x52/0x180 [ 333.527619][ C0] free_unref_page_prepare+0xc34/0xcf0 [ 333.533081][ C0] free_unref_page_list+0x1f7/0x8e0 [ 333.538283][ C0] ? free_unref_page_commit+0x500/0x500 [ 333.543828][ C0] ? __mem_cgroup_uncharge_list+0xf8/0x150 [ 333.549632][ C0] ? uncharge_batch+0x490/0x490 [ 333.554502][ C0] ? _raw_spin_unlock+0x40/0x40 [ 333.559347][ C0] ? __mod_zone_page_state+0x8a/0xc0 [ 333.564633][ C0] release_pages+0x1bb9/0x1f40 [ 333.569400][ C0] ? lru_cache_disable+0x30/0x30 [ 333.574336][ C0] ? free_swap_cache+0x15a/0x2d0 [ 333.579272][ C0] tlb_finish_mmu+0x177/0x320 [ 333.583947][ C0] exit_mmap+0x3cd/0x620 [ 333.588188][ C0] ? vm_brk+0x20/0x20 [ 333.592174][ C0] ? uprobe_clear_state+0x304/0x460 [ 333.597371][ C0] __mmput+0x112/0x3b0 [ 333.601438][ C0] exit_mm+0x688/0x7f0 [ 333.605504][ C0] ? _raw_spin_unlock+0x40/0x40 [ 333.610351][ C0] ? do_exit+0x2480/0x2480 [ 333.614766][ C0] ? taskstats_exit+0x491/0xa10 [ 333.619611][ C0] ? tty_audit_exit+0x150/0x1f0 [ 333.624481][ C0] do_exit+0x626/0x2480 [ 333.628641][ C0] ? put_task_struct+0x80/0x80 [ 333.633405][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 333.639385][ C0] do_group_exit+0x144/0x310 [ 333.643972][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 333.649169][ C0] get_signal+0xc66/0x14e0 [ 333.653585][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 333.659223][ C0] ? __sys_recvmmsg+0x270/0x270 [ 333.664074][ C0] ? get_sigframe_size+0x10/0x10 [ 333.669010][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 333.674034][ C0] ? __x64_sys_recvmmsg+0x195/0x240 [ 333.679231][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 333.684687][ C0] exit_to_user_mode_loop+0x97/0x130 [ 333.689988][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 333.695528][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 333.701070][ C0] do_syscall_64+0x47/0xb0 [ 333.705512][ C0] ? clear_bhb_loop+0x15/0x70 [ 333.710185][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.716072][ C0] RIP: 0033:0x7fc33407d169 [ 333.720589][ C0] Code: Unable to access opcode bytes at RIP 0x7fc33407d13f. [ 333.728033][ C0] RSP: 002b:00007fc331ec5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 333.736527][ C0] RAX: 000000000003fffd RBX: 00007fc334296080 RCX: 00007fc33407d169 [ 333.744496][ C0] RDX: 03fffffffffffeda RSI: 00002000000000c0 RDI: 0000000000000003 [ 333.752461][ C0] RBP: 00007fc3340fe2a0 R08: 0000000000000000 R09: 0000000000000000 [ 333.760426][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 333.768390][ C0] R13: 0000000000000001 R14: 00007fc334296080 R15: 00007ffc023c5b38 [ 333.776416][ C0] [ 333.779709][ C0] Kernel Offset: disabled [ 333.784041][ C0] Rebooting in 86400 seconds..