last executing test programs: 3m23.905907311s ago: executing program 1 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0xb, 0x0, &(0x7f0000000440)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000300, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20041dcc, 0x0, 0x0) 3m22.985376363s ago: executing program 1 (id=106): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3m22.611868358s ago: executing program 1 (id=107): open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecompose,decompose\x00nobfrrier,gid=', @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) remap_file_pages(&(0x7f000061d000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffff2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000c80), 0xff, 0x23f, &(0x7f0000000540)="$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") r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x9) getsockopt$netlink(r4, 0x10e, 0x2, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x121002, 0x0) fsetxattr(r5, &(0x7f0000001580)=@known='trusted.overlay.origin\x00', &(0x7f00000015c0)=')\\@:.\\#{^*@*\\%/\x00', 0x10, 0x2) 3m22.03490372s ago: executing program 1 (id=109): bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x8208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x0) truncate(&(0x7f0000000080)='./bus\x00', 0x4) 3m20.03494712s ago: executing program 1 (id=115): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa70e36aa54c60c80, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getpid() prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x3fffffe, 0xffffffffffffffff, 0xffffe000) ioctl$SNDRV_PCM_IOCTL_XRUN(r0, 0x4148, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) lseek(r1, 0x0, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = memfd_create(0x0, 0x0) r3 = dup(r2) fanotify_mark(0xffffffffffffffff, 0x1, 0x2b, r3, 0x0) sched_setaffinity(0x0, 0xffffffffffffff28, &(0x7f0000000100)=0x400000bce) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3m17.029524951s ago: executing program 1 (id=122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@loopback, @private0, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400c6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) creat(&(0x7f0000000040)='./file0\x00', 0x0) keyctl$revoke(0x3, 0x0) 3m16.164444089s ago: executing program 32 (id=122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@loopback, @private0, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400c6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) creat(&(0x7f0000000040)='./file0\x00', 0x0) keyctl$revoke(0x3, 0x0) 1m49.835326539s ago: executing program 4 (id=357): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m47.929043931s ago: executing program 4 (id=359): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x90) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1m45.574608463s ago: executing program 4 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x6, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 1m45.379952751s ago: executing program 4 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1m45.108940525s ago: executing program 4 (id=370): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = getpgid(r3) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@RTM_NEWNSID={0x54, 0x58, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}]}, 0x54}}, 0x0) setregid(0x0, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', @random='\x00\x00\x00 \x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) 1m42.707529662s ago: executing program 4 (id=371): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 1m38.610088792s ago: executing program 2 (id=388): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 1m37.239442565s ago: executing program 2 (id=391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1m36.068017591s ago: executing program 2 (id=395): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = getpgid(r3) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@RTM_NEWNSID={0x54, 0x58, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r8}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r3}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}]}, 0x54}}, 0x0) setregid(0x0, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', @random='\x00\x00\x00 \x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) 1m34.549686048s ago: executing program 2 (id=397): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000003c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {}, {@dioread_lock}]}, 0x10, 0x4d2, &(0x7f0000002d00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) open(0x0, 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) fallocate(r0, 0x3, 0x0, 0x1a00) 1m32.207994659s ago: executing program 2 (id=402): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1m31.566089137s ago: executing program 2 (id=408): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = getpgid(r2) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@RTM_NEWNSID={0x54, 0x58, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}]}, 0x54}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', @random='\x00\x00\x00 \x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) 1m31.337094088s ago: executing program 33 (id=408): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = getpgid(r2) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@RTM_NEWNSID={0x54, 0x58, 0x0, 0x70bd26, 0x25dfdbff, {}, [@NETNSA_PID={0x8, 0x2, r7}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}]}, 0x54}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', @random='\x00\x00\x00 \x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020}, 0x2020) write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a) 1m27.573328707s ago: executing program 34 (id=371): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4008004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000005a00), 0x1, 0x42f, &(0x7f0000000940)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) 35.501565376s ago: executing program 0 (id=577): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@loopback, @private0, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400c6}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r6) 34.439828652s ago: executing program 0 (id=578): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 34.283884036s ago: executing program 0 (id=580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000280), &(0x7f00000002c0)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000180), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r8, @ANYBLOB="c89904bd0000000008000d000000000034001680300001802c000c"], 0x5c}}, 0x0) 32.923135429s ago: executing program 0 (id=583): syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x4b, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d5001020301090239000100001647090400000308"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 28.435112934s ago: executing program 0 (id=602): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@remote}, {@multicast2}, {@private=0xa010101}, {@multicast2}]}, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 27.859143446s ago: executing program 0 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)=r1}, 0x20) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) 11.783327666s ago: executing program 35 (id=607): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000b00), &(0x7f0000000b40)=r1}, 0x20) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) 8.878965659s ago: executing program 5 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x34, 0x0, &(0x7f0000000000)="f8ad48cc02cb29dcc8007f5b86dda51d64cc50aa132e905be5b2500a48328dcdf28886581ba61fc1ed93e3a34bd2f0f86ffb090e", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.711032404s ago: executing program 7 (id=663): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000280), 0x1003) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) chmod(0x0, 0xe) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x1a) 7.694399255s ago: executing program 6 (id=664): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) 7.64697169s ago: executing program 5 (id=665): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 6.75440499s ago: executing program 6 (id=666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x6, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000890000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 6.667327438s ago: executing program 5 (id=667): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001280), 0x101400, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000012c0)=0x4) 6.593923445s ago: executing program 6 (id=668): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") pipe(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) 6.452874197s ago: executing program 5 (id=669): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@loopback, @private0, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400c6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r7) 5.855148991s ago: executing program 7 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$packet(0x11, 0x3, 0x300) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000017c0)='./file0\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) prlimit64(0x0, 0xe, &(0x7f0000001800)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0xac000005, 0x0}, 0x0, 0x8, &(0x7f0000000440)) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) 5.376104645s ago: executing program 5 (id=672): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffbb, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpgid(r3) setregid(0x0, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8946, &(0x7f0000000300)={'veth1_to_hsr\x00', @random='\x00\x00\x00 \x00'}) 4.394665433s ago: executing program 7 (id=673): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@remote}, {@multicast2}, {@private=0xa010101}, {@multicast2}]}, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.815658325s ago: executing program 7 (id=675): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) 3.808204386s ago: executing program 3 (id=676): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 3.335148779s ago: executing program 6 (id=677): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f00000001c0)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.3146751s ago: executing program 3 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x6, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000890000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 3.054184464s ago: executing program 3 (id=679): r0 = epoll_create1(0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x6) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r6, &(0x7f00000000c0)={0x60000005}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000700)={[{@resuid}, {@errors_continue}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.000945819s ago: executing program 3 (id=680): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) rmdir(&(0x7f0000000080)='./control\x00') timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.971311492s ago: executing program 7 (id=681): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={@loopback, @private0, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400c6}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r7) 1.359108107s ago: executing program 6 (id=682): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_request_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 350.083268ms ago: executing program 3 (id=683): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000080)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) 265.611336ms ago: executing program 6 (id=684): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@remote}, {@multicast2}, {@private=0xa010101}, {@multicast2}]}, @noop, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 162.030895ms ago: executing program 7 (id=685): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000feff17110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000920000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) 83.231222ms ago: executing program 3 (id=686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000200), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)=""/246, 0xf6}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=687): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) kernel console output (not intermixed with test programs): 66] device veth0_vlan entered promiscuous mode [ 62.033577][ T4173] device veth0_vlan entered promiscuous mode [ 62.040862][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.049712][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.058928][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.066831][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.076889][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.085873][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.094388][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.111953][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.121751][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.130056][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.148706][ T4173] device veth1_vlan entered promiscuous mode [ 62.171118][ T4166] device veth1_vlan entered promiscuous mode [ 62.222502][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.231002][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.242559][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.251133][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.260770][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.269301][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.278306][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.286498][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.297834][ T4167] device veth0_vlan entered promiscuous mode [ 62.320290][ T4169] device veth0_macvtap entered promiscuous mode [ 62.337723][ T4173] device veth0_macvtap entered promiscuous mode [ 62.355020][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.364520][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.375084][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.384258][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.392747][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.401911][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.415933][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.424544][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.432599][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.440542][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.453559][ T4166] device veth0_macvtap entered promiscuous mode [ 62.461925][ T4167] device veth1_vlan entered promiscuous mode [ 62.471013][ T4173] device veth1_macvtap entered promiscuous mode [ 62.484604][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.492377][ T4169] device veth1_macvtap entered promiscuous mode [ 62.501925][ T4166] device veth1_macvtap entered promiscuous mode [ 62.555318][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.567316][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.577860][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.586525][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.594644][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.602632][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.611194][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.619509][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.628682][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.640489][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.651803][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.663969][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.690420][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.699928][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.710722][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.721160][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.737609][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.749206][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.758176][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.767541][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.776756][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.785671][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.794804][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.804496][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.814064][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.822609][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.845666][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.856619][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.867683][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.886701][ T4173] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.895812][ T4173] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.916344][ T4173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.925387][ T4173] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.937395][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.946182][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.956447][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.965689][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.974875][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.983678][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.992363][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.001097][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.010322][ T4168] device veth0_vlan entered promiscuous mode [ 63.020129][ T4166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.029638][ T4166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.039255][ T4166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.048195][ T4166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.060801][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.071545][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.081608][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.092390][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.104123][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.112258][ T4167] device veth0_macvtap entered promiscuous mode [ 63.146665][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.158115][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.167269][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.180374][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.189358][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.199198][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.208365][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.225780][ T4167] device veth1_macvtap entered promiscuous mode [ 63.244514][ T4168] device veth1_vlan entered promiscuous mode [ 63.273427][ T4217] Bluetooth: hci2: command 0x040f tx timeout [ 63.284071][ T4217] Bluetooth: hci4: command 0x040f tx timeout [ 63.290253][ T4217] Bluetooth: hci1: command 0x040f tx timeout [ 63.309449][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.329303][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.339493][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.350980][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.361412][ T4213] Bluetooth: hci3: command 0x040f tx timeout [ 63.365103][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.367844][ T4213] Bluetooth: hci0: command 0x040f tx timeout [ 63.384751][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.396465][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.411525][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.421504][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 63.430668][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 63.440134][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.449090][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.467047][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.483324][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.493691][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.504343][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.515304][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.525856][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.537251][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.571536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.580952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.589854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.599579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.612630][ T4167] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.622859][ T4167] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.632184][ T4167] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.641544][ T4167] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.669820][ T4168] device veth0_macvtap entered promiscuous mode [ 63.687279][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.696380][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.710489][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.726430][ T4168] device veth1_macvtap entered promiscuous mode [ 63.770402][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.789167][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.799541][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.810101][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.823002][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.833983][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.844070][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.854750][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.866206][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.899600][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.909226][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.921164][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.932179][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.942317][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.954734][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.964721][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.975292][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.985424][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.997081][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.010174][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.020393][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.028105][ T4168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.037258][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.042617][ T4168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.054475][ T4168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.063579][ T4168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.081080][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.091629][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.101520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.119494][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.128917][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.148636][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.159687][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.183162][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.191142][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.247453][ T3054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.264428][ T3054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.277867][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.295251][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.317874][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.344567][ T4227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.352622][ T4227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.361541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.370735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.432391][ T4227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.458246][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.467730][ T4227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.501728][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.531846][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.545303][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.563902][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.581547][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.610912][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.620164][ T4250] loop3: detected capacity change from 0 to 512 [ 64.641803][ T4252] loop2: detected capacity change from 0 to 512 [ 64.707360][ T4252] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 64.723902][ T4250] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 64.750929][ T4252] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 64.774568][ T4250] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.4: iget: bad i_size value: -67835469387268086 [ 64.831696][ T4252] EXT4-fs (loop2): 1 truncate cleaned up [ 64.839312][ T4250] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 64.863335][ T4252] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.887900][ T4250] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 64.939015][ T4250] ext2 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.088752][ T4261] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.832893][ C0] sched: RT throttling activated [ 68.465589][ T4268] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.4: Directory hole found for htree leaf block 0 [ 68.495445][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 68.509829][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 68.909390][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 68.948300][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 68.971648][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 70.255879][ T4282] loop2: detected capacity change from 0 to 128 [ 70.450700][ T4282] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.469312][ T4282] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.274803][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.281495][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.414769][ T4293] loop3: detected capacity change from 0 to 512 [ 71.753210][ T4245] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.913428][ T4245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.841281][ T4245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.915493][ T4318] loop1: detected capacity change from 0 to 256 [ 74.951772][ T4245] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 74.961019][ T4245] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.988415][ T4245] usb 5-1: config 0 descriptor?? [ 75.038761][ T4318] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 75.058067][ T4245] usb 5-1: can't set config #0, error -71 [ 75.113692][ T4245] usb 5-1: USB disconnect, device number 2 [ 75.154933][ T4323] device veth1_macvtap left promiscuous mode [ 75.163657][ T4323] device macsec0 entered promiscuous mode [ 76.023749][ T4332] loop4: detected capacity change from 0 to 256 [ 76.826940][ T4336] exFAT-fs (loop1): hint_cluster is invalid (17) [ 77.444132][ T4338] serio: Serial port ptm0 [ 78.073790][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 78.093434][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.102140][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.300163][ T4364] loop1: detected capacity change from 0 to 512 [ 80.431035][ T4364] ======================================================= [ 80.431035][ T4364] WARNING: The mand mount option has been deprecated and [ 80.431035][ T4364] and is ignored by this kernel. Remove the mand [ 80.431035][ T4364] option from the mount to silence this warning. [ 80.431035][ T4364] ======================================================= [ 81.783520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 81.846225][ T1109] cfg80211: failed to load regulatory.db [ 81.935203][ T4364] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 82.022767][ T4364] EXT4-fs: failed to create workqueue [ 82.066030][ T4364] EXT4-fs (loop1): mount failed [ 82.204658][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 82.214148][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 82.232922][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 82.241909][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 82.250897][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.259889][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.268919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.278008][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.287010][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 82.862306][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 83.272693][ T4405] loop3: detected capacity change from 0 to 512 [ 83.293183][ T4245] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.410086][ T4405] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 83.601592][ T4412] loop1: detected capacity change from 0 to 512 [ 83.627367][ T4405] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 84.563095][ T4245] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 84.575257][ T4245] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 84.586717][ T4412] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 84.596264][ T4245] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 84.605867][ T4245] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.664999][ T4400] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.676018][ T4412] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.43: iget: bad i_size value: -67835469387268086 [ 84.702081][ T4412] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.43: couldn't read orphan inode 15 (err -117) [ 84.737078][ T4412] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 84.834871][ T4412] ext2 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.982534][ T4423] loop2: detected capacity change from 0 to 512 [ 85.274907][ T4423] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 85.724356][ T4423] EXT4-fs (loop2): 1 truncate cleaned up [ 85.736803][ T4423] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 86.978848][ T4433] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.43: Directory hole found for htree leaf block 0 [ 87.023198][ T4245] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 87.179162][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.51'. [ 87.217359][ T4245] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input5 [ 87.466405][ T4245] usb 1-1: USB disconnect, device number 2 [ 87.482963][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 90.129243][ T4454] loop0: detected capacity change from 0 to 512 [ 91.015053][ T4454] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 91.086975][ T4454] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 91.260165][ T4454] EXT4-fs (loop0): orphan cleanup on readonly fs [ 92.089336][ T4454] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.53: attempt to clear invalid blocks 1024 len 1 [ 92.292204][ T4454] EXT4-fs (loop0): Remounting filesystem read-only [ 92.311857][ T4483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.65'. [ 92.339397][ T4454] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.53: bg 0: block 361: padding at end of block bitmap is not set [ 93.095039][ T4454] EXT4-fs (loop0): Remounting filesystem read-only [ 93.115751][ T4454] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 93.190648][ T4454] EXT4-fs (loop0): Remounting filesystem read-only [ 93.232165][ T4454] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.53: invalid indirect mapped block 1811939328 (level 0) [ 93.280988][ T4454] EXT4-fs (loop0): Remounting filesystem read-only [ 93.299399][ T4454] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.53: invalid indirect mapped block 2185560079 (level 1) [ 94.110008][ T4454] EXT4-fs (loop0): Remounting filesystem read-only [ 94.139612][ T4454] EXT4-fs (loop0): 1 truncate cleaned up [ 94.329559][ T4454] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noblock_validity,discard,errors=remount-ro,data_err=ignore. Quota mode: none. [ 95.821706][ T4522] loop2: detected capacity change from 0 to 512 [ 96.026185][ T4522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.221273][ T4525] loop4: detected capacity change from 0 to 1024 [ 96.508461][ T4522] EXT4-fs (loop2): 1 truncate cleaned up [ 96.564220][ T4522] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 96.856100][ T4525] mmap: syz.4.78 (4525) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 98.291294][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 98.312076][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 98.318579][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 98.333634][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 98.341245][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 98.383029][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 98.391208][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 98.422992][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 98.430480][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 98.487350][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.339320][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.347028][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.354695][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.366501][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.374203][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.381627][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.389319][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.413002][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.420452][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.452980][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.460415][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.644306][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.651770][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.659753][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.683082][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.690547][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.698441][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.712947][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.721077][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.744838][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.752284][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.792974][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.800435][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 99.921145][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.415494][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.448921][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.469191][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.490814][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.523250][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.548861][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.579235][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.597308][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.663877][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 100.692985][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 101.414738][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 101.422183][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 101.430438][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 101.438306][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 101.446786][ T4245] hid-generic 0000:0000:0003.0001: unknown main item tag 0x0 [ 101.459640][ T4245] hid-generic 0000:0000:0003.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 101.511075][ T4558] loop3: detected capacity change from 0 to 512 [ 101.556508][ T4558] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 101.601253][ T4558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 101.609948][ T4558] EXT4-fs (loop3): orphan cleanup on readonly fs [ 101.618342][ T4558] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.87: attempt to clear invalid blocks 1024 len 1 [ 101.822961][ T4558] EXT4-fs (loop3): Remounting filesystem read-only [ 101.834263][ T4558] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.87: bg 0: block 361: padding at end of block bitmap is not set [ 101.851134][ T4558] EXT4-fs (loop3): Remounting filesystem read-only [ 101.857740][ T4558] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 101.875080][ T4558] EXT4-fs (loop3): Remounting filesystem read-only [ 102.195929][ T4558] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.87: invalid indirect mapped block 1811939328 (level 0) [ 102.211525][ T4558] EXT4-fs (loop3): Remounting filesystem read-only [ 102.218158][ T4558] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.87: invalid indirect mapped block 2185560079 (level 1) [ 102.237095][ T4558] EXT4-fs (loop3): Remounting filesystem read-only [ 102.244057][ T4558] EXT4-fs (loop3): 1 truncate cleaned up [ 102.249736][ T4558] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noblock_validity,discard,errors=remount-ro,data_err=ignore. Quota mode: none. [ 102.671159][ T4590] loop1: detected capacity change from 0 to 1024 [ 102.918524][ T4592] loop1: detected capacity change from 0 to 512 [ 103.013592][ T4594] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.267635][ T4592] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 103.358134][ T4592] EXT4-fs (loop1): 1 truncate cleaned up [ 103.414425][ T4592] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 104.664390][ T4611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 105.766852][ T4618] loop3: detected capacity change from 0 to 512 [ 106.033099][ T4618] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.587419][ T4618] EXT4-fs (loop3): 1 truncate cleaned up [ 106.916762][ T4618] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 107.669564][ T4636] loop1: detected capacity change from 0 to 1024 [ 108.027397][ T4641] syz.3.102 (pid 4641) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 109.893666][ T4655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 111.384464][ T26] audit: type=1326 audit(1730898219.098:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380debc719 code=0x7ffc0000 [ 111.418616][ T4672] loop4: detected capacity change from 0 to 1024 [ 111.442411][ T4661] device syzkaller0 entered promiscuous mode [ 111.469988][ T26] audit: type=1326 audit(1730898219.118:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380debc719 code=0x7ffc0000 [ 111.700448][ T26] audit: type=1326 audit(1730898219.168:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f380debc719 code=0x7ffc0000 [ 111.741335][ T26] audit: type=1326 audit(1730898219.168:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380debc719 code=0x7ffc0000 [ 111.869603][ T26] audit: type=1326 audit(1730898219.168:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f380debc719 code=0x7ffc0000 [ 112.371879][ T26] audit: type=1326 audit(1730898219.168:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380debc719 code=0x7ffc0000 [ 112.749058][ T26] audit: type=1326 audit(1730898219.168:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f380debc719 code=0x7ffc0000 [ 112.902975][ T26] audit: type=1326 audit(1730898219.168:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4671 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f380debc719 code=0x7ffc0000 [ 113.874416][ T4288] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.206272][ T4288] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.417583][ T4288] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.580772][ T26] audit: type=1326 audit(1730898222.288:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 114.628483][ T26] audit: type=1326 audit(1730898222.288:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4698 comm="syz.0.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 114.835209][ T4288] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.987474][ T4693] chnl_net:caif_netlink_parms(): no params data found [ 116.248526][ T3531] Bluetooth: hci1: command 0x0409 tx timeout [ 116.348018][ T4693] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.357423][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.365897][ T4693] device bridge_slave_0 entered promiscuous mode [ 116.419650][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.433945][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.442328][ T4693] device bridge_slave_1 entered promiscuous mode [ 116.589300][ T4693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.900029][ T4693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.574133][ T4693] team0: Port device team_slave_0 added [ 117.632275][ T4693] team0: Port device team_slave_1 added [ 117.771461][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.785982][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.869549][ T4693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.948999][ T4693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.971782][ T4693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.059452][ T4693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.394130][ T4680] Bluetooth: hci1: command 0x041b tx timeout [ 118.616294][ T4693] device hsr_slave_0 entered promiscuous mode [ 118.665380][ T4693] device hsr_slave_1 entered promiscuous mode [ 118.700772][ T4693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.752966][ T4693] Cannot create hsr debugfs directory [ 119.151871][ T4288] device hsr_slave_0 left promiscuous mode [ 119.164004][ T4288] device hsr_slave_1 left promiscuous mode [ 119.186689][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.222475][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.232152][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.289848][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.426831][ T4288] device bridge_slave_1 left promiscuous mode [ 119.578710][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.955940][ T4288] device bridge_slave_0 left promiscuous mode [ 120.046534][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.122114][ T4288] device veth1_macvtap left promiscuous mode [ 120.138968][ T4288] device veth0_macvtap left promiscuous mode [ 120.184645][ T4288] device veth1_vlan left promiscuous mode [ 120.190696][ T4288] device veth0_vlan left promiscuous mode [ 120.475535][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 122.440026][ T4795] loop4: detected capacity change from 0 to 512 [ 122.553432][ T4680] Bluetooth: hci1: command 0x0419 tx timeout [ 123.371402][ T4288] team0 (unregistering): Port device team_slave_1 removed [ 123.386122][ T4795] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 123.423894][ T4795] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 123.432782][ T4795] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.440116][ T4795] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.146: attempt to clear invalid blocks 1024 len 1 [ 123.454794][ T4795] EXT4-fs (loop4): Remounting filesystem read-only [ 123.461573][ T4795] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.146: bg 0: block 361: padding at end of block bitmap is not set [ 123.477823][ T4795] EXT4-fs (loop4): Remounting filesystem read-only [ 123.484407][ T4795] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 123.493737][ T4795] EXT4-fs (loop4): Remounting filesystem read-only [ 123.500558][ T4795] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.146: invalid indirect mapped block 1811939328 (level 0) [ 123.514913][ T4795] EXT4-fs (loop4): Remounting filesystem read-only [ 123.521543][ T4795] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.146: invalid indirect mapped block 2185560079 (level 1) [ 123.536078][ T4795] EXT4-fs (loop4): Remounting filesystem read-only [ 123.542830][ T4795] EXT4-fs (loop4): 1 truncate cleaned up [ 123.548604][ T4795] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noblock_validity,discard,errors=remount-ro,data_err=ignore. Quota mode: none. [ 123.619500][ T4804] loop2: detected capacity change from 0 to 1024 [ 123.637080][ T4288] team0 (unregistering): Port device team_slave_0 removed [ 123.862667][ T4288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.099671][ T4288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.282946][ T4680] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.311949][ T4288] bond0 (unregistering): Released all slaves [ 124.443366][ T4793] tipc: Started in network mode [ 124.449270][ T4793] tipc: Node identity ac1414aa, cluster identity 4711 [ 124.469615][ T4793] tipc: New replicast peer: 100.1.1.1 [ 124.483247][ T4793] tipc: Enabled bearer , priority 10 [ 124.563393][ T4680] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 125.216826][ T4680] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 125.300871][ T4680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.478858][ T4693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.687608][ T4693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.711103][ T4213] tipc: Node number set to 2886997162 [ 125.753626][ T4693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.303538][ T4693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.356008][ T4680] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 126.383097][ T4680] usb 4-1: No valid video chain found. [ 126.582548][ T4217] usb 4-1: USB disconnect, device number 2 [ 127.959169][ T4852] device pim6reg1 entered promiscuous mode [ 127.981251][ T4693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.227696][ T4860] netlink: 4 bytes leftover after parsing attributes in process `syz.0.163'. [ 128.330094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.340318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.356601][ T4693] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.489541][ T4863] loop3: detected capacity change from 0 to 256 [ 128.939075][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.993791][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.002674][ T4783] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.009823][ T4783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.768664][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 129.869942][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 129.943698][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 129.990266][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.997413][ T4783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.188985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.252990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.425466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.287927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.368057][ T4693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.414582][ T4693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.622388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.632298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.668088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.146297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.216984][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.244293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.276317][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.340847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.392422][ T4906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.173'. [ 132.647934][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.654280][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.713251][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.721385][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.751849][ T4693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.766666][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 134.793994][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 134.865794][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 134.883852][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 134.933483][ T4693] device veth0_vlan entered promiscuous mode [ 134.956549][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 134.975008][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.031476][ T4693] device veth1_vlan entered promiscuous mode [ 135.863633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.899349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.958708][ T4693] device veth0_macvtap entered promiscuous mode [ 135.999834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.017255][ T4954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.183'. [ 136.253974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.533170][ T4693] device veth1_macvtap entered promiscuous mode [ 136.795464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.822034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.892591][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.982130][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.853348][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.904792][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.065723][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.127881][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.167882][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.198938][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.270655][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.643841][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.819522][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.971628][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.029862][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.040190][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.063168][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.133511][ T4693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.176025][ T4693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.235829][ T4693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.329331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.354330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.487734][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.557000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.568820][ T4987] loop4: detected capacity change from 0 to 1024 [ 139.591640][ T4693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.631278][ T4693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.683840][ T4693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.976269][ T4693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.502362][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.580753][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.657904][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.707928][ T4551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.783283][ T4551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.882615][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.186949][ T5025] loop0: detected capacity change from 0 to 128 [ 143.102699][ T5025] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.124564][ T5025] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.023518][ T5056] Zero length message leads to an empty skb [ 148.729791][ T5108] loop3: detected capacity change from 0 to 1024 [ 152.950420][ T5167] device pim6reg1 entered promiscuous mode [ 153.536385][ T5180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 154.319718][ T5169] loop2: detected capacity change from 0 to 512 [ 154.375182][ T5183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 154.537934][ T5169] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 155.459327][ T5169] EXT4-fs: failed to create workqueue [ 155.464838][ T5169] EXT4-fs (loop2): mount failed [ 155.484187][ T5196] loop0: detected capacity change from 0 to 1024 [ 155.882009][ T5201] loop4: detected capacity change from 0 to 128 [ 159.424532][ T5228] loop3: detected capacity change from 0 to 512 [ 160.593230][ T5228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 160.694232][ T5228] EXT4-fs (loop3): 1 truncate cleaned up [ 160.699917][ T5228] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=continue,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 162.017192][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.249'. [ 162.231049][ T5252] kvm: emulating exchange as write [ 165.088552][ T5284] loop3: detected capacity change from 0 to 512 [ 165.829554][ T5284] EXT4-fs (loop3): 1 truncate cleaned up [ 165.859119][ T5284] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,nolazytime,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback. [ 166.417345][ T5297] loop2: detected capacity change from 0 to 512 [ 167.183201][ T5306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.261'. [ 167.903223][ T4680] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 168.275745][ T4680] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 169.298279][ T5338] loop0: detected capacity change from 0 to 1024 [ 169.313898][ T4680] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 169.348727][ T4680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.733106][ T4680] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 170.742161][ T4680] usb 4-1: No valid video chain found. [ 170.767974][ T4680] usb 4-1: USB disconnect, device number 3 [ 170.800530][ T5360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'. [ 170.821752][ T5361] loop4: detected capacity change from 0 to 2048 [ 170.910962][ T5361] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.118609][ T5372] loop2: detected capacity change from 0 to 512 [ 171.224820][ T5372] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 171.450116][ T5372] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.278: iget: bad i_size value: -67835469387268086 [ 171.476461][ T5372] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.278: couldn't read orphan inode 15 (err -117) [ 171.528191][ T5372] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.712113][ T5372] ext2 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.466497][ T5392] loop3: detected capacity change from 0 to 512 [ 173.742366][ T5392] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 173.844605][ T5392] EXT4-fs (loop3): 1 truncate cleaned up [ 173.912695][ T5392] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 175.278136][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 175.291606][ T5410] loop5: detected capacity change from 0 to 128 [ 175.644450][ T5410] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.707665][ T5410] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.787634][ T5416] loop0: detected capacity change from 0 to 128 [ 176.847792][ T5436] loop5: detected capacity change from 0 to 128 [ 177.316479][ T5449] loop0: detected capacity change from 0 to 128 [ 179.122226][ T5467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 179.250943][ T5480] loop5: detected capacity change from 0 to 512 [ 179.353191][ T5480] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 179.487164][ T5480] EXT4-fs (loop5): 1 truncate cleaned up [ 179.519170][ T5480] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 180.095231][ T5515] loop3: detected capacity change from 0 to 128 [ 180.854114][ T5515] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.864893][ T5515] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 180.953155][ T1109] Bluetooth: hci2: command 0x0406 tx timeout [ 180.960784][ T1109] Bluetooth: hci0: command 0x0406 tx timeout [ 181.165638][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 181.172394][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 182.273772][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 182.998276][ T5557] loop5: detected capacity change from 0 to 512 [ 183.053332][ T5557] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5 [ 183.053332][ T5557] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 183.053332][ T5557] [ 183.053393][ T5557] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 183.138448][ T5557] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,data_err=ignore,nouser_xattr,mblk_io_submit,nogrpid,dioread_nolock,,errors=continue. Quota mode: none. [ 183.217748][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 183.217766][ T26] audit: type=1800 audit(1730898290.928:37): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.318" name="bus" dev="overlay" ino=21 res=0 errno=0 [ 184.693335][ T5577] loop2: detected capacity change from 0 to 512 [ 184.885018][ T5577] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback. [ 184.899736][ T5577] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.850399][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.882217][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.901856][ T5594] loop5: detected capacity change from 0 to 128 [ 185.910055][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.934819][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.959959][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 185.983318][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.003627][ T5594] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 186.014682][ T5594] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.022138][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.058033][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.082238][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.107864][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.129315][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.156492][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.177449][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.200395][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.223372][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.247483][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.270505][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.298123][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.309320][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.321730][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.332682][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.344919][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.359136][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.369712][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.381844][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.392517][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.405427][ T1107] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 186.469688][ T1107] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 187.939921][ T5611] netlink: 'syz.5.327': attribute type 4 has an invalid length. [ 187.952314][ T5611] netlink: 17 bytes leftover after parsing attributes in process `syz.5.327'. [ 188.215102][ T5610] loop4: detected capacity change from 0 to 16 [ 190.672970][ T5610] erofs: (device loop4): mounted with root inode @ nid 36. [ 190.734618][ T5619] loop5: detected capacity change from 0 to 512 [ 190.906631][ T5619] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 191.053232][ T4215] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 191.204662][ T5619] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.331: iget: bad i_size value: -67835469387268086 [ 191.417455][ T5619] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.331: couldn't read orphan inode 15 (err -117) [ 191.594002][ T4215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.642881][ T4215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.663536][ T5619] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.866870][ T4215] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 192.019072][ T5619] ext2 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.130933][ T4215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.475462][ T4215] usb 3-1: config 0 descriptor?? [ 193.753572][ T5635] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.331: Directory hole found for htree leaf block 0 [ 193.801472][ T5631] loop0: detected capacity change from 0 to 2048 [ 193.823740][ T4215] hid (null): bogus close delimiter [ 194.043315][ T4215] usb 3-1: language id specifier not provided by device, defaulting to English [ 194.084433][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.090889][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.429275][ T5631] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.546441][ T4215] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 194.736217][ T4215] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 194.848342][ T4215] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 194.871514][ T5650] loop5: detected capacity change from 0 to 256 [ 194.923771][ T4215] usb 3-1: USB disconnect, device number 2 [ 195.056763][ T5657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.340'. [ 195.225212][ T5650] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 196.405571][ T5684] loop2: detected capacity change from 0 to 512 [ 196.646808][ T5684] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 196.711681][ T5684] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.346: iget: bad i_size value: -67835469387268086 [ 196.827267][ T5684] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.346: couldn't read orphan inode 15 (err -117) [ 196.853470][ T5684] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.963210][ T5684] ext2 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.368139][ T5705] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.346: Directory hole found for htree leaf block 0 [ 199.999779][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.353'. [ 200.193000][ T1109] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 202.393215][ T1109] usb 1-1: Using ep0 maxpacket: 16 [ 203.283025][ T1109] usb 1-1: unable to read config index 0 descriptor/all [ 203.298652][ T1109] usb 1-1: can't read configurations, error -71 [ 204.581076][ T5794] loop0: detected capacity change from 0 to 512 [ 204.650036][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 204.694388][ T5794] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.744082][ T5794] EXT4-fs (loop0): 1 truncate cleaned up [ 204.750089][ T5794] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 207.343791][ T5814] futex_wake_op: syz.3.372 tries to shift op by 32; fix this program [ 207.501990][ T5816] loop4: detected capacity change from 0 to 512 [ 208.184243][ T5816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.605901][ T5816] EXT4-fs (loop4): 1 truncate cleaned up [ 208.611588][ T5816] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.020243][ T5837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 211.284758][ T5861] loop3: detected capacity change from 0 to 512 [ 212.579829][ T5861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.856615][ T5875] device pim6reg1 entered promiscuous mode [ 213.407168][ T5861] EXT4-fs (loop3): 1 truncate cleaned up [ 213.635015][ T5861] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 215.391197][ T26] audit: type=1326 audit(1730898323.098:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 215.459765][ T5899] loop2: detected capacity change from 0 to 512 [ 215.563644][ T26] audit: type=1326 audit(1730898323.198:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 215.679176][ T26] audit: type=1326 audit(1730898323.198:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.5.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 215.731117][ T5904] loop3: detected capacity change from 0 to 512 [ 215.913160][ T5904] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 215.973702][ T5899] EXT4-fs (loop2): 1 orphan inode deleted [ 216.157308][ T5899] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,bsddf,dioread_lock,. Quota mode: writeback. [ 216.235061][ T5904] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.396: iget: bad i_size value: -67835469387268086 [ 216.646633][ T5904] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.396: couldn't read orphan inode 15 (err -117) [ 216.710349][ T5904] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 216.714481][ T5899] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.722377][ T5904] ext2 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.324076][ T5914] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.396: Directory hole found for htree leaf block 0 [ 217.497788][ T5917] syz.5.400[5917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.497905][ T5917] syz.5.400[5917] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.736621][ T4173] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 16 [ 217.814818][ T4173] EXT4-fs (loop2): Remounting filesystem read-only [ 217.821691][ T4173] EXT4-fs error (device loop2): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 16 [ 217.862986][ T4173] EXT4-fs (loop2): Remounting filesystem read-only [ 218.369639][ T5935] loop5: detected capacity change from 0 to 512 [ 218.515630][ T5935] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 218.596351][ T5935] EXT4-fs (loop5): 1 truncate cleaned up [ 218.693010][ T5935] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 219.625945][ T5948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.413'. [ 219.693096][ T5948] netlink: 20 bytes leftover after parsing attributes in process `syz.0.413'. [ 219.718655][ T5950] loop3: detected capacity change from 0 to 512 [ 220.141565][ T5950] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 220.253944][ T5950] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.412: iget: bad i_size value: -67835469387268086 [ 220.302624][ T5950] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.412: couldn't read orphan inode 15 (err -117) [ 220.431649][ T5950] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.528051][ T5950] ext2 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.067443][ T5965] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.412: Directory hole found for htree leaf block 0 [ 221.536542][ T5952] chnl_net:caif_netlink_parms(): no params data found [ 221.833567][ T4216] Bluetooth: hci4: command 0x0409 tx timeout [ 222.170295][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.193046][ T5952] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.201289][ T5952] device bridge_slave_0 entered promiscuous mode [ 222.358679][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.365865][ T5952] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.374129][ T5952] device bridge_slave_1 entered promiscuous mode [ 223.181845][ T5952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.256218][ T5952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.822421][ T5952] team0: Port device team_slave_0 added [ 223.837740][ T5952] team0: Port device team_slave_1 added [ 223.913163][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 224.005512][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.022513][ T6005] loop0: detected capacity change from 0 to 512 [ 224.029278][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.113047][ T6005] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 224.116768][ T5952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.176810][ T5952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.191468][ T6005] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.427: iget: bad i_size value: -67835469387268086 [ 224.207231][ T5952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.236123][ T5952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.252998][ T6005] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.427: couldn't read orphan inode 15 (err -117) [ 224.282542][ T6005] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.305222][ T6005] ext2 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.588183][ T5952] device hsr_slave_0 entered promiscuous mode [ 224.630669][ T5952] device hsr_slave_1 entered promiscuous mode [ 224.999800][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.009838][ T5952] Cannot create hsr debugfs directory [ 225.058350][ T6011] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.427: Directory hole found for htree leaf block 0 [ 226.844530][ T4216] Bluetooth: hci5: command 0x0409 tx timeout [ 226.852291][ T4245] Bluetooth: hci4: command 0x040f tx timeout [ 227.688143][ T5996] chnl_net:caif_netlink_parms(): no params data found [ 228.178157][ T5952] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 228.231889][ T5952] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 228.380949][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.398812][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.439390][ T5996] device bridge_slave_0 entered promiscuous mode [ 228.480679][ T5952] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 228.516796][ T4330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.578472][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.591065][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.621092][ T5996] device bridge_slave_1 entered promiscuous mode [ 228.628901][ T5952] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 228.695965][ T4330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.738310][ T5996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.774895][ T5996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.872958][ T4245] Bluetooth: hci5: command 0x041b tx timeout [ 228.953073][ T4245] Bluetooth: hci4: command 0x0419 tx timeout [ 228.972034][ T4330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.021044][ T5996] team0: Port device team_slave_0 added [ 229.075603][ T4330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.128457][ T6051] loop3: detected capacity change from 0 to 40427 [ 229.131570][ T5996] team0: Port device team_slave_1 added [ 229.198532][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.210381][ T6051] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 229.245122][ T6051] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 229.269381][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.277300][ T6051] F2FS-fs (loop3): invalid crc value [ 229.299771][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.337509][ T5996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.351121][ T5996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.362510][ T6051] F2FS-fs (loop3): Found nat_bits in checkpoint [ 229.364576][ T5996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.395520][ T5996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.425395][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 229.453688][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 229.491383][ T6051] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 229.495239][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.503243][ T6051] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 231.410396][ T4216] Bluetooth: hci5: command 0x040f tx timeout [ 231.477229][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.514057][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.553140][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.560240][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.583591][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.656468][ T5996] device hsr_slave_0 entered promiscuous mode [ 231.684119][ T5996] device hsr_slave_1 entered promiscuous mode [ 231.712559][ T5996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.793226][ T5996] Cannot create hsr debugfs directory [ 231.933225][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.043614][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.189927][ T4426] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.197082][ T4426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.799871][ T4330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.860373][ T6088] loop0: detected capacity change from 0 to 512 [ 232.915110][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.947889][ T6088] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 232.950987][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 233.018918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.075629][ T6088] EXT4-fs (loop0): 1 truncate cleaned up [ 233.081412][ T6088] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 233.083103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.198874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.228181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.242974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 233.262442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 233.271205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 233.294154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 233.376011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 233.405783][ T4330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.535658][ T4214] Bluetooth: hci5: command 0x0419 tx timeout [ 233.985015][ T5952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 234.187497][ T4330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.900910][ T4330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.112014][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.454'. [ 237.433508][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 237.441178][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 237.464689][ T6150] loop0: detected capacity change from 0 to 512 [ 237.489944][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.534073][ T4553] Bluetooth: hci1: command 0x0406 tx timeout [ 237.569737][ T6150] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 237.687052][ T6156] loop5: detected capacity change from 0 to 256 [ 237.975121][ T6150] EXT4-fs (loop0): 1 truncate cleaned up [ 238.022588][ T6150] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 239.460890][ T6177] process 'syz.5.460' launched './file0' with NULL argv: empty string added [ 239.645658][ T5996] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 242.453945][ T5996] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 242.533069][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.5.464'. [ 242.556753][ T5996] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 242.583781][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.594039][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.643102][ T5996] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 242.677773][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.693716][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.728539][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.853736][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.926753][ T5952] device veth0_vlan entered promiscuous mode [ 243.469932][ T5952] device veth1_vlan entered promiscuous mode [ 243.499027][ T5952] device veth0_macvtap entered promiscuous mode [ 243.510733][ T5952] device veth1_macvtap entered promiscuous mode [ 243.528885][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.573137][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.581858][ T6211] loop5: detected capacity change from 0 to 512 [ 243.613100][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.641441][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.672153][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.713095][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.725221][ T6215] futex_wake_op: syz.3.465 tries to shift op by 32; fix this program [ 243.743283][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.761217][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.802059][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.831655][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.881803][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.946429][ T6211] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 244.224357][ T6211] EXT4-fs (loop5): 1 truncate cleaned up [ 244.230048][ T6211] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 244.523037][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 244.533711][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 244.547562][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.557289][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.567026][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.575951][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.585224][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 245.505229][ T645] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.538168][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.590614][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.602156][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.655376][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.685964][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.720319][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.760002][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.792467][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.806774][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.818832][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.840912][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.856981][ T5952] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.866144][ T5952] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.880558][ T5952] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.889679][ T5952] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.350022][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 246.387160][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 246.451071][ T6252] loop3: detected capacity change from 0 to 1024 [ 246.621462][ T6252] EXT4-fs (loop3): Unrecognized mount option "fsuuid=d204ffe4-dcb2-U9cc-535c-0" or missing value [ 247.011792][ T5996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.134138][ T5460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.163531][ T5460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.240159][ T5996] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.317615][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 247.323387][ T5460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.338001][ T5460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.344679][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.386482][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 247.393288][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.403416][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 247.489538][ T6270] loop3: detected capacity change from 0 to 512 [ 247.511258][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.523798][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.532306][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.539457][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.551301][ T6270] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 247.566187][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.585450][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.590560][ T6270] EXT4-fs (loop3): 1 truncate cleaned up [ 247.612535][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.613166][ T6270] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 247.619717][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.673669][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.683665][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.715169][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.939488][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.174877][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.629192][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.198537][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.207488][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.273745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.295903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.362479][ T26] audit: type=1326 audit(1730898357.068:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 249.438574][ T26] audit: type=1326 audit(1730898357.108:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 249.481097][ T26] audit: type=1326 audit(1730898357.148:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 249.533526][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.548085][ T5460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.553538][ T26] audit: type=1326 audit(1730898357.148:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 249.642687][ T26] audit: type=1326 audit(1730898357.148:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 249.670495][ T5996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.684872][ T26] audit: type=1326 audit(1730898357.148:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 249.755028][ T26] audit: type=1326 audit(1730898357.148:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.5.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 249.794368][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.488'. [ 251.166133][ T4330] device hsr_slave_0 left promiscuous mode [ 251.183763][ T4330] device hsr_slave_1 left promiscuous mode [ 251.204053][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.225493][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.380224][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.407187][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.421331][ T4330] device bridge_slave_1 left promiscuous mode [ 252.430665][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.525515][ T4330] device bridge_slave_0 left promiscuous mode [ 252.531773][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.611950][ T4330] device hsr_slave_0 left promiscuous mode [ 252.618541][ T4330] device hsr_slave_1 left promiscuous mode [ 252.625504][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.634478][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.717594][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.733137][ T4330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.757502][ T4330] device bridge_slave_1 left promiscuous mode [ 252.786990][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.818960][ T4330] device bridge_slave_0 left promiscuous mode [ 252.835510][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.970118][ T4330] device veth1_macvtap left promiscuous mode [ 252.977680][ T4330] device veth0_macvtap left promiscuous mode [ 252.985494][ T4330] device veth1_vlan left promiscuous mode [ 253.001425][ T4330] device veth0_vlan left promiscuous mode [ 253.012751][ T4330] device veth1_macvtap left promiscuous mode [ 253.029493][ T4330] device veth0_macvtap left promiscuous mode [ 253.041713][ T4330] device veth1_vlan left promiscuous mode [ 253.072257][ T4330] device veth0_vlan left promiscuous mode [ 253.145951][ T26] audit: type=1326 audit(1730898360.858:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.6.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02733f2719 code=0x7ffc0000 [ 253.181761][ T6365] loop6: detected capacity change from 0 to 512 [ 253.201228][ T26] audit: type=1326 audit(1730898360.858:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.6.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02733f2719 code=0x7ffc0000 [ 253.233372][ T26] audit: type=1326 audit(1730898360.888:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6364 comm="syz.6.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f02733f2719 code=0x7ffc0000 [ 253.330994][ T6365] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.498: corrupted inode contents [ 253.351629][ T6365] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #16: comm syz.6.498: mark_inode_dirty error [ 253.373339][ T6365] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.498: corrupted inode contents [ 253.387851][ T6365] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #16: comm syz.6.498: mark_inode_dirty error [ 253.403005][ T6365] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.498: corrupted inode contents [ 253.421992][ T6365] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 253.441466][ T6365] EXT4-fs error (device loop6): ext4_do_update_inode:5174: inode #16: comm syz.6.498: corrupted inode contents [ 253.462609][ T6365] EXT4-fs error (device loop6): ext4_truncate:4272: inode #16: comm syz.6.498: mark_inode_dirty error [ 253.474132][ T6365] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 253.487295][ T6365] EXT4-fs (loop6): 1 truncate cleaned up [ 253.494825][ T6365] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 253.507724][ T6365] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.615112][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 253.636202][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 253.660547][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.687845][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.780664][ T4330] bond0 (unregistering): Released all slaves [ 253.964868][ T4330] team0 (unregistering): Port device team_slave_1 removed [ 253.985388][ T4330] team0 (unregistering): Port device team_slave_0 removed [ 254.012715][ T4330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.035291][ T4330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.124758][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.499'. [ 254.183101][ T4330] bond0 (unregistering): Released all slaves [ 254.353078][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.370945][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.411610][ T5996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.651675][ T6391] loop6: detected capacity change from 0 to 128 [ 255.515948][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.522346][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.686190][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 255.752501][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 256.212948][ T26] kauditd_printk_skb: 46 callbacks suppressed [ 256.212989][ T26] audit: type=1800 audit(1730898363.818:97): pid=6397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.504" name="bus" dev="loop6" ino=1048599 res=0 errno=0 [ 256.447907][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 256.461173][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 256.506070][ T6129] attempt to access beyond end of device [ 256.506070][ T6129] loop6: rw=1, want=721, limit=128 [ 256.516520][ T5996] device veth0_vlan entered promiscuous mode [ 256.547022][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 256.577057][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.511'. [ 256.596257][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 256.639211][ T5996] device veth1_vlan entered promiscuous mode [ 256.698331][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 256.759674][ T6430] loop6: detected capacity change from 0 to 512 [ 256.905802][ T6430] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 256.938714][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 257.068332][ T6430] EXT4-fs (loop6): 1 truncate cleaned up [ 257.184292][ T6430] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 257.273568][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 257.605303][ T5996] device veth0_macvtap entered promiscuous mode [ 257.715103][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 257.732648][ T5996] device veth1_macvtap entered promiscuous mode [ 257.779942][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.843960][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.854808][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.866060][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.876842][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.888363][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.961758][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.112993][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.160733][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.248706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.269856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.495952][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.524277][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.582969][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.629153][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.663054][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.698867][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.882104][ T5996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.892739][ T5996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.905134][ T5996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.917220][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.936510][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.497134][ T5996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.653069][ T5996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.661815][ T5996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.679497][ T5996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.689765][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 260.146485][ T5460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.207582][ T6478] fuse: Bad value for 'fd' [ 260.231384][ T5460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.962122][ T5460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.981457][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.047852][ T5460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.270080][ T4783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.521674][ T6511] loop5: detected capacity change from 0 to 512 [ 262.708781][ T6519] loop6: detected capacity change from 0 to 16 [ 262.719519][ T6511] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 262.773437][ T6519] erofs: (device loop6): mounted with root inode @ nid 36. [ 262.816839][ T6511] EXT4-fs (loop5): 1 truncate cleaned up [ 262.822541][ T6511] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 262.844787][ T6485] af_packet: tpacket_rcv: packet too big, clamped from 78 to 4294967286. macoff=82 [ 263.091890][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.7.537'. [ 264.835670][ T26] audit: type=1326 audit(1730898372.548:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 264.942905][ T26] audit: type=1326 audit(1730898372.548:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 265.062933][ T26] audit: type=1326 audit(1730898372.548:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 265.182987][ T26] audit: type=1326 audit(1730898372.548:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 265.286308][ T26] audit: type=1326 audit(1730898372.608:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 265.405919][ T26] audit: type=1326 audit(1730898372.718:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 265.469550][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 265.518665][ T6585] loop5: detected capacity change from 0 to 512 [ 265.533339][ T26] audit: type=1326 audit(1730898372.738:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 265.625575][ T26] audit: type=1326 audit(1730898372.738:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 265.652420][ T6585] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 265.730423][ T6585] EXT4-fs (loop5): 1 truncate cleaned up [ 265.748356][ T6585] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 265.755932][ T26] audit: type=1326 audit(1730898372.738:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 266.058703][ T26] audit: type=1326 audit(1730898372.748:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.0.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d91549719 code=0x7ffc0000 [ 269.492216][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.562'. [ 269.716398][ T6652] loop7: detected capacity change from 0 to 512 [ 269.824779][ T6655] loop6: detected capacity change from 0 to 1024 [ 269.855242][ T6652] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 269.915254][ T6655] EXT4-fs (loop6): Ignoring removed orlov option [ 269.930113][ T6652] EXT4-fs (loop7): 1 truncate cleaned up [ 269.946039][ T6655] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 269.954313][ T6652] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 270.003097][ T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 270.084387][ T6655] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,journal_ioprio=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 270.272934][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 270.993014][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.004057][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.014997][ T13] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 271.043066][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.065789][ T13] usb 4-1: config 0 descriptor?? [ 271.575742][ T13] hkems 0003:2006:0118.0004: item fetching failed at offset 1/5 [ 272.349672][ T13] hkems 0003:2006:0118.0004: parse failed [ 272.356683][ T13] hkems: probe of 0003:2006:0118.0004 failed with error -22 [ 272.369159][ T13] usb 4-1: USB disconnect, device number 4 [ 275.510510][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 275.841839][ T6761] loop7: detected capacity change from 0 to 128 [ 276.024513][ T6755] device ip6gretap0 entered promiscuous mode [ 276.034206][ T6755] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 277.493047][ T4680] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 277.552001][ T6793] loop7: detected capacity change from 0 to 512 [ 277.566946][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.590'. [ 277.622629][ T6793] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 277.701988][ T6793] EXT4-fs (loop7): 1 truncate cleaned up [ 277.718518][ T6793] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 277.967043][ T4680] usb 1-1: Using ep0 maxpacket: 16 [ 278.294664][ T4680] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.437297][ T4680] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.623196][ T4680] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 278.646179][ T4680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.706200][ T4680] usb 1-1: Product: syz [ 278.725874][ T4680] usb 1-1: Manufacturer: syz [ 278.750942][ T4680] usb 1-1: SerialNumber: syz [ 278.787019][ T4680] usb 1-1: config 0 descriptor?? [ 278.830016][ T4680] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 278.875483][ T4680] gspca_stv06xx: st6422 sensor detected [ 279.663100][ T4680] STV06xx: probe of 1-1:0.0 failed with error -71 [ 279.693043][ T4680] usb 1-1: USB disconnect, device number 5 [ 280.037639][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 280.037656][ T26] audit: type=1326 audit(1730898387.748:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 280.118409][ T26] audit: type=1326 audit(1730898387.768:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 280.247883][ T26] audit: type=1326 audit(1730898387.768:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 280.276184][ T26] audit: type=1326 audit(1730898387.768:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 280.299271][ T26] audit: type=1326 audit(1730898387.768:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.5.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2b3de7719 code=0x7ffc0000 [ 281.462515][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.6.601'. [ 281.565677][ T6875] loop5: detected capacity change from 0 to 512 [ 281.623824][ T6875] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 281.700687][ T6875] EXT4-fs (loop5): 1 truncate cleaned up [ 281.717981][ T6875] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 281.823212][ T4680] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 283.143205][ T4680] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.174450][ T4680] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.217048][ T4680] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 283.262882][ T4680] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.323084][ T4680] usb 8-1: config 0 descriptor?? [ 283.484954][ T6909] loop5: detected capacity change from 0 to 16 [ 285.233106][ T6909] erofs: (device loop5): mounted with root inode @ nid 36. [ 286.626837][ T4680] usbhid 8-1:0.0: can't add hid device: -71 [ 286.634674][ T4680] usbhid: probe of 8-1:0.0 failed with error -71 [ 286.643031][ T4680] usb 8-1: USB disconnect, device number 2 [ 287.650289][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.6.616'. [ 287.954290][ T6960] loop6: detected capacity change from 0 to 512 [ 288.012377][ T6960] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 288.082404][ T6960] EXT4-fs (loop6): 1 truncate cleaned up [ 288.088199][ T6960] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 291.573049][ T6999] netlink: 40 bytes leftover after parsing attributes in process `syz.6.624'. [ 291.581955][ T6999] netlink: 40 bytes leftover after parsing attributes in process `syz.6.624'. [ 291.870849][ T7006] netlink: 52 bytes leftover after parsing attributes in process `syz.6.624'. [ 291.926064][ T7006] device bond0 entered promiscuous mode [ 291.931694][ T7006] device bond_slave_0 entered promiscuous mode [ 291.938544][ T7006] device bond_slave_1 entered promiscuous mode [ 292.295392][ T7024] netlink: 20 bytes leftover after parsing attributes in process `syz.7.631'. [ 292.992186][ T7041] loop3: detected capacity change from 0 to 512 [ 293.073368][ T7041] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 293.160732][ T7041] EXT4-fs (loop3): 1 truncate cleaned up [ 293.166728][ T7041] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 294.801280][ T7027] loop7: detected capacity change from 0 to 40427 [ 295.015009][ T7027] F2FS-fs (loop7): Found nat_bits in checkpoint [ 295.198319][ T7027] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 295.561023][ T7083] loop5: detected capacity change from 0 to 512 [ 295.600306][ T7083] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 295.688306][ T7083] EXT4-fs (loop5): 1 truncate cleaned up [ 295.698253][ T7083] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.758115][ T7089] syz.6.645[7089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.758227][ T7089] syz.6.645[7089] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.808483][ T5996] attempt to access beyond end of device [ 295.808483][ T5996] loop7: rw=2049, want=45104, limit=40427 [ 299.578820][ T7136] loop6: detected capacity change from 0 to 512 [ 299.639250][ T7138] netlink: 52 bytes leftover after parsing attributes in process `syz.5.658'. [ 299.674067][ T7136] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 299.760387][ T7136] EXT4-fs (loop6): 1 truncate cleaned up [ 299.772970][ T7136] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 299.825410][ T7142] loop7: detected capacity change from 0 to 1024 [ 299.900880][ T7124] chnl_net:caif_netlink_parms(): no params data found [ 299.944406][ T7142] EXT4-fs (loop7): Ignoring removed bh option [ 299.970746][ T7150] loop5: detected capacity change from 0 to 128 [ 299.992711][ T7142] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 300.098440][ T7142] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,noblock_validity,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,max_batch_time=0x0000000000000002,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 300.713806][ T7150] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.724708][ T7150] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.902004][ T7124] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.956912][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.994572][ T7124] device bridge_slave_0 entered promiscuous mode [ 301.039759][ T7124] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.099778][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.129951][ T7124] device bridge_slave_1 entered promiscuous mode [ 301.353487][ T4680] Bluetooth: hci0: command 0x0409 tx timeout [ 302.017511][ T7124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.148246][ T7124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.399220][ T7189] loop7: detected capacity change from 0 to 512 [ 302.988177][ T7189] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 303.144715][ T7124] team0: Port device team_slave_0 added [ 303.233275][ T7124] team0: Port device team_slave_1 added [ 303.265611][ T7189] EXT4-fs error (device loop7): ext4_orphan_get:1401: inode #15: comm syz.7.663: iget: bad i_size value: -67835469387268086 [ 303.364380][ T7189] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.663: couldn't read orphan inode 15 (err -117) [ 303.429247][ T7189] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 303.443038][ T1109] Bluetooth: hci0: command 0x041b tx timeout [ 303.455024][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.461994][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.508831][ T7189] ext2 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.528710][ T7208] loop5: detected capacity change from 0 to 512 [ 303.557682][ T7124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.601315][ T7124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.646290][ T7124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.754275][ T7208] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.827221][ T7208] EXT4-fs (loop5): 1 truncate cleaned up [ 303.838982][ T7124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.843180][ T7208] EXT4-fs (loop5): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 304.026210][ T7124] device hsr_slave_0 entered promiscuous mode [ 304.123513][ T7124] device hsr_slave_1 entered promiscuous mode [ 304.379702][ T7227] loop7: detected capacity change from 0 to 256 [ 304.525926][ T7206] loop6: detected capacity change from 0 to 512 [ 304.545635][ T7227] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d) [ 305.501469][ T7206] EXT4-fs (loop6): Test dummy encryption mode enabled [ 305.513323][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 305.573082][ T7206] EXT4-fs error (device loop6): ext4_fill_super:4841: inode #2: comm syz.6.668: casefold flag without casefold feature [ 305.592621][ T7206] EXT4-fs (loop6): get root inode failed [ 305.623051][ T7206] EXT4-fs (loop6): mount failed [ 305.669273][ T7124] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 305.699026][ T7124] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 305.786213][ T7124] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 305.868043][ T26] audit: type=1326 audit(1730898413.578:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02733f2719 code=0x7ffc0000 [ 305.975588][ T26] audit: type=1326 audit(1730898413.608:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02733f2719 code=0x7ffc0000 [ 306.014365][ T7124] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 306.110999][ T26] audit: type=1326 audit(1730898413.608:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f02733f2719 code=0x7ffc0000 [ 306.171590][ T4289] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.208514][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 306.244984][ T26] audit: type=1326 audit(1730898413.608:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02733f2719 code=0x7ffc0000 [ 306.287265][ T4289] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.375193][ T26] audit: type=1326 audit(1730898413.608:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7205 comm="syz.6.668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02733f2719 code=0x7ffc0000 [ 306.491134][ T4289] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.727200][ T7273] loop6: detected capacity change from 0 to 512 [ 306.775862][ T4289] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.849759][ T7124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.861778][ T7273] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 306.955288][ T7273] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 307.013466][ T7273] EXT4-fs (loop6): 1 truncate cleaned up [ 307.126161][ T7284] loop3: detected capacity change from 0 to 512 [ 307.173691][ T7273] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 307.288040][ T7284] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 307.398126][ T7284] EXT4-fs (loop3): 1 truncate cleaned up [ 307.403952][ T7284] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=continue,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 307.807040][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 307.813661][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 307.872329][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.932620][ T7124] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.035913][ T7289] loop7: detected capacity change from 0 to 512 [ 308.105380][ T7124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.117112][ T7124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.208379][ T4289] tipc: Disabling bearer [ 308.217320][ T4289] tipc: Left network mode [ 308.484288][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.498315][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.507091][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.514281][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.523349][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.532449][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.541349][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.548470][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.556921][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 308.566134][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 308.574473][ T7289] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 308.578133][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.610463][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.667798][ T7289] EXT4-fs (loop7): 1 truncate cleaned up [ 308.686530][ T7289] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 308.718776][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.736118][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.749932][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 308.825213][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 309.157424][ T7301] loop6: detected capacity change from 0 to 128 [ 309.174445][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 309.253763][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 309.298631][ T7301] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 309.351139][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 309.396054][ T7301] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 309.473854][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 309.539975][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 309.672655][ T7124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.683154][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.691550][ T4227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.897911][ T7318] [ 309.900288][ T7318] ============================================ [ 309.906447][ T7318] WARNING: possible recursive locking detected [ 309.912607][ T7318] 5.15.170-syzkaller #0 Not tainted [ 309.917812][ T7318] -------------------------------------------- [ 309.923966][ T7318] syz.7.685/7318 is trying to acquire lock: [ 309.929857][ T7318] ffff88802820ddb8 (&trie->lock){..-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 309.938771][ T7318] [ 309.938771][ T7318] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 309.946155][ T7318] ffff88802820f5b8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 309.955071][ T7318] [ 309.955071][ T7318] other info that might help us debug this: [ 309.963138][ T7318] Possible unsafe locking scenario: [ 309.963138][ T7318] [ 309.970596][ T7318] CPU0 [ 309.973888][ T7318] ---- [ 309.977177][ T7318] lock(&trie->lock); [ 309.981262][ T7318] lock(&trie->lock); [ 309.985346][ T7318] [ 309.985346][ T7318] *** DEADLOCK *** [ 309.985346][ T7318] [ 309.993500][ T7318] May be due to missing lock nesting notation [ 309.993500][ T7318] [ 310.001827][ T7318] 3 locks held by syz.7.685/7318: [ 310.006863][ T7318] #0: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 310.016308][ T7318] #1: ffff88802820f5b8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc5/0xc00 [ 310.025737][ T7318] #2: ffffffff8c91fc60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 310.035176][ T7318] [ 310.035176][ T7318] stack backtrace: [ 310.041105][ T7318] CPU: 0 PID: 7318 Comm: syz.7.685 Not tainted 5.15.170-syzkaller #0 [ 310.049234][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 310.059320][ T7318] Call Trace: [ 310.062622][ T7318] [ 310.065565][ T7318] dump_stack_lvl+0x1e3/0x2d0 [ 310.070306][ T7318] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 310.075965][ T7318] ? panic+0x860/0x860 [ 310.080065][ T7318] validate_chain+0x46d2/0x5930 [ 310.084945][ T7318] ? reacquire_held_locks+0x660/0x660 [ 310.090334][ T7318] ? is_bpf_text_address+0x24f/0x260 [ 310.095761][ T7318] ? stack_trace_save+0x1c0/0x1c0 [ 310.100821][ T7318] ? __kernel_text_address+0x94/0x100 [ 310.106230][ T7318] ? reacquire_held_locks+0x660/0x660 [ 310.111620][ T7318] ? stack_trace_save+0x113/0x1c0 [ 310.116673][ T7318] ? mark_lock+0x98/0x340 [ 310.121022][ T7318] __lock_acquire+0x1295/0x1ff0 [ 310.125931][ T7318] lock_acquire+0x1db/0x4f0 [ 310.130450][ T7318] ? trie_delete_elem+0x90/0x690 [ 310.135418][ T7318] ? mark_lock+0x98/0x340 [ 310.139763][ T7318] ? read_lock_is_recursive+0x10/0x10 [ 310.145156][ T7318] ? __lock_acquire+0x1295/0x1ff0 [ 310.150204][ T7318] _raw_spin_lock_irqsave+0xd1/0x120 [ 310.155496][ T7318] ? trie_delete_elem+0x90/0x690 [ 310.160525][ T7318] ? _raw_spin_lock+0x40/0x40 [ 310.165207][ T7318] ? read_lock_is_recursive+0x10/0x10 [ 310.170578][ T7318] ? __lock_acquire+0x1ff0/0x1ff0 [ 310.175596][ T7318] trie_delete_elem+0x90/0x690 [ 310.180356][ T7318] ? __cant_sleep+0x270/0x270 [ 310.185030][ T7318] bpf_prog_1db1603a7cfa36fb+0x3d/0x8dc [ 310.190569][ T7318] bpf_trace_run4+0x1ea/0x390 [ 310.195262][ T7318] ? bpf_trace_run3+0x380/0x380 [ 310.200117][ T7318] __bpf_trace_mm_page_alloc+0xba/0xe0 [ 310.205581][ T7318] __alloc_pages+0x6e0/0x700 [ 310.210167][ T7318] ? __rmqueue_pcplist+0x2030/0x2030 [ 310.215459][ T7318] ? do_raw_spin_lock+0x14a/0x370 [ 310.220505][ T7318] kmalloc_large_node+0x7c/0x180 [ 310.225586][ T7318] ? _raw_spin_lock_irqsave+0xac/0x120 [ 310.231057][ T7318] __kmalloc_node+0x22d/0x390 [ 310.235732][ T7318] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 310.241195][ T7318] ? _raw_spin_lock+0x40/0x40 [ 310.245876][ T7318] bpf_map_kmalloc_node+0xdb/0x160 [ 310.250992][ T7318] trie_update_elem+0x1cb/0xc00 [ 310.255841][ T7318] ? asm_exc_page_fault+0x22/0x30 [ 310.260863][ T7318] bpf_map_update_value+0x5d7/0x6c0 [ 310.266056][ T7318] map_update_elem+0x6a0/0x7c0 [ 310.270814][ T7318] __sys_bpf+0x2fd/0x670 [ 310.275052][ T7318] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 310.280427][ T7318] ? syscall_enter_from_user_mode+0x2e/0x240 [ 310.286411][ T7318] ? lockdep_hardirqs_on+0x94/0x130 [ 310.291606][ T7318] __x64_sys_bpf+0x78/0x90 [ 310.296017][ T7318] do_syscall_64+0x3b/0xb0 [ 310.300427][ T7318] ? clear_bhb_loop+0x15/0x70 [ 310.305118][ T7318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 310.311013][ T7318] RIP: 0033:0x7f0bdd204719 [ 310.315426][ T7318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.335027][ T7318] RSP: 002b:00007f0bdb67c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.343529][ T7318] RAX: ffffffffffffffda RBX: 00007f0bdd3bbf80 RCX: 00007f0bdd204719 [ 310.351526][ T7318] RDX: 0000000000000020 RSI: 0000000020000340 RDI: 0000000000000002 [ 310.359581][ T7318] RBP: 00007f0bdd27739e R08: 0000000000000000 R09: 0000000000000000 [ 310.367546][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.375519][ T7318] R13: 0000000000000000 R14: 00007f0bdd3bbf80 R15: 00007ffd66313cf8 [ 310.383582][ T7318] [ 311.596399][ T4289] device hsr_slave_0 left promiscuous mode [ 311.602749][ T4289] device hsr_slave_1 left promiscuous mode [ 311.611140][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.621061][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.629555][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.640395][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.649370][ T4289] device bridge_slave_1 left promiscuous mode [ 311.658404][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.668187][ T4289] device bridge_slave_0 left promiscuous mode [ 311.677377][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.688006][ T4289] device veth0_macvtap left promiscuous mode [ 311.694560][ T4289] device veth1_vlan left promiscuous mode [ 311.700322][ T4289] device veth0_vlan left promiscuous mode [ 311.801283][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 311.812223][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 311.822757][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.837567][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.888567][ T4289] bond0 (unregistering): Released all slaves [ 313.070904][ T4289] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.118493][ T4289] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.167141][ T4289] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.208204][ T4289] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.335277][ T4289] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.377123][ T4289] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.416536][ T4289] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.458130][ T4289] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.563739][ T4289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.606445][ T4289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.670618][ T4289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.727518][ T4289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.808714][ T4289] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.867744][ T4289] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.907096][ T4289] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.946854][ T4289] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.284311][ T4289] device hsr_slave_0 left promiscuous mode [ 315.290649][ T4289] device hsr_slave_1 left promiscuous mode [ 315.298764][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.307691][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.316121][ T4289] device bridge_slave_1 left promiscuous mode [ 315.322342][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.331224][ T4289] device bridge_slave_0 left promiscuous mode [ 315.337665][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.349157][ T4289] device hsr_slave_0 left promiscuous mode [ 315.359653][ T4289] device hsr_slave_1 left promiscuous mode [ 315.367862][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.375591][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.383835][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.391278][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.400187][ T4289] device bridge_slave_1 left promiscuous mode [ 315.406628][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.415208][ T4289] device bridge_slave_0 left promiscuous mode [ 315.421876][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.434072][ T4289] device hsr_slave_0 left promiscuous mode [ 315.440359][ T4289] device hsr_slave_1 left promiscuous mode [ 315.447322][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.455199][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.463219][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.470648][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.480181][ T4289] device bridge_slave_1 left promiscuous mode [ 315.486953][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.495551][ T4289] device bridge_slave_0 left promiscuous mode [ 315.501750][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.514056][ T4289] device hsr_slave_0 left promiscuous mode [ 315.520197][ T4289] device hsr_slave_1 left promiscuous mode [ 315.526442][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.534003][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.541583][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.550034][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.557687][ T4289] device bridge_slave_1 left promiscuous mode [ 315.563965][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.571914][ T4289] device bridge_slave_0 left promiscuous mode [ 315.578387][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.589518][ T4289] device hsr_slave_0 left promiscuous mode [ 315.596409][ T4289] device hsr_slave_1 left promiscuous mode [ 315.603813][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.611259][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.619487][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.627176][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.634856][ T4289] device bridge_slave_1 left promiscuous mode [ 315.640994][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.649296][ T4289] device bridge_slave_0 left promiscuous mode [ 315.655628][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.670362][ T4289] device veth1_macvtap left promiscuous mode [ 315.676998][ T4289] device veth0_macvtap left promiscuous mode [ 315.683162][ T4289] device veth1_vlan left promiscuous mode [ 315.688930][ T4289] device veth0_vlan left promiscuous mode [ 315.696395][ T4289] device veth1_macvtap left promiscuous mode [ 315.702392][ T4289] device veth0_macvtap left promiscuous mode [ 315.708759][ T4289] device veth1_vlan left promiscuous mode [ 315.714983][ T4289] device veth0_vlan left promiscuous mode [ 315.721239][ T4289] device veth1_macvtap left promiscuous mode [ 315.727284][ T4289] device veth0_macvtap left promiscuous mode [ 315.733364][ T4289] device veth1_vlan left promiscuous mode [ 315.739121][ T4289] device veth0_vlan left promiscuous mode [ 315.745736][ T4289] device veth1_macvtap left promiscuous mode [ 315.751731][ T4289] device veth0_macvtap left promiscuous mode [ 315.758154][ T4289] device veth1_vlan left promiscuous mode [ 315.764172][ T4289] device veth0_vlan left promiscuous mode [ 316.040650][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 316.051978][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 316.064778][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.078545][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.126272][ T4289] bond0 (unregistering): Released all slaves [ 316.196242][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 316.211430][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 316.222373][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.231097][ T4289] device bond_slave_1 left promiscuous mode [ 316.240871][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.250476][ T4289] device bond_slave_0 left promiscuous mode [ 316.291578][ T4289] bond0 (unregistering): Released all slaves [ 316.377838][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 316.388393][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 316.399510][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.412324][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.461361][ T4289] bond0 (unregistering): Released all slaves [ 316.567665][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 316.581678][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 316.592468][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.605050][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.652679][ T4289] bond0 (unregistering): Released all slaves [ 316.774022][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 316.784837][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 316.796936][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.808738][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.854542][ T4289] bond0 (unregistering): Released all slaves [ 316.956148][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.962559][ T1421] ieee802154 phy1 wpan1: encryption failed: -22