last executing test programs: 1m36.872600696s ago: executing program 1 (id=1582): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063010a00000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r1 = io_uring_setup(0x1d7b, &(0x7f00000002c0)) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x74000000) signalfd(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0xcfb45b99770bb43a) fcntl$setown(r3, 0x4, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) write$dsp(r2, &(0x7f0000002000)='`', 0x88020) 1m35.84615312s ago: executing program 0 (id=1621): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000009000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b30, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x4788}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x101}]}}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) 1m34.441477795s ago: executing program 0 (id=1622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$igmp6(0xa, 0x3, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x5423, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x5422) 1m33.342781324s ago: executing program 0 (id=1625): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) write$P9_RREADLINK(r0, &(0x7f0000000280)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) sendmsg$rds(r0, 0x0, 0x51) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100030400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000001fc90a921c157634a0c4801d614e2b74d6"], 0x20}}, 0x0) 1m33.258272761s ago: executing program 1 (id=1626): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f00003e4000/0x4000)=nil, 0x4000, 0x0, 0x1000000000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) landlock_create_ruleset(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000140)=0x2, 0x18) 1m32.89878078s ago: executing program 3 (id=1629): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x2400001) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 1m30.891381824s ago: executing program 1 (id=1631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010067656e6576650000200002801400070082"], 0x50}, 0x1, 0x2}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001100)=ANY=[@ANYBLOB="a40200002b0001"], 0x2a4}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000174614"], 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1m30.675261802s ago: executing program 3 (id=1632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0xc9, &(0x7f0000000340)={'veth1_to_bond\x00', @ifru_names='pim6reg0\x00'}) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r2, 0x0) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$mice(0xffffffffffffff9c, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="3957e0bd", 0x4}], 0x1}, 0x0) 1m30.529099743s ago: executing program 4 (id=1634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) gettid() ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}}) 1m29.96035224s ago: executing program 4 (id=1635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003f9000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6(0xa, 0x3, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x600) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010069705f7674693000000000000000000014000000110001"], 0x80}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m29.084726831s ago: executing program 4 (id=1636): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) waitid(0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x1c, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x7b}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x3f00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m28.088928322s ago: executing program 4 (id=1637): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000140)={0x2, 0x0, [{}, {0x0, 0x0, 0x7}]}) r2 = socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0), 0x60) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a444b7fbb161860c18ff851923b530208f", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$inet6_int(r7, 0x29, 0xce, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000180)={0xd, 0x1, 0x81, 0x88, 0x4005, 0x8}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000240)={0x3c0000, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, '\x00', @p_u32=&(0x7f0000000100)=0x9}}) socket$alg(0x26, 0x5, 0x0) 1m27.534542677s ago: executing program 3 (id=1638): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = syz_open_dev$swradio(&(0x7f0000000440), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0xb, @pix_mp={0x38305343}}) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0xc0305710, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8000000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 1m27.271813669s ago: executing program 4 (id=1639): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b70300000009000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x4b30, &(0x7f0000000040)) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x4788}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x101}]}}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) 1m27.270215099s ago: executing program 2 (id=1650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0xefff, 0xfa64}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63}, 0x90) write$hidraw(r4, &(0x7f0000004840)="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", 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x52}, 0x20) 1m27.049956557s ago: executing program 0 (id=1640): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3e}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0xe, &(0x7f0000000240)="b9ad020000b805000000ba000000000f30c4c1f56b03b8003000000f23d80f21f835c00000100f23f89a0b00000005013e0f01cbb9b00100000f320f63650966baf80cb8e86e868fef66bafc0cb8c67512e7ef670f01c3663e660fc7b4390d000000", 0x62}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) move_mount(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000006800f0012abd7000fedb003c000c8008000300090000000600010002000000060001008c3e000008000200000000000800030000000000060001000700000008000300ff0f0000060003000100000004000400"], 0x60}}, 0x4) 1m26.89500649s ago: executing program 1 (id=1641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) syz_emit_ethernet(0x86, &(0x7f0000000180)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast=0xe0000001}, {0x0, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "7d3b331a312ee08bcc36dc36e12b49e0b393e8bf81058dc2d5762b17464cff0d", "1c64ed0b4a59ae1c119ddbc71b0930d8", {"d23dd644021a65f4b2db00f46fda5861", "72997824b931d497927989ebef22a608"}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x240) 1m24.622294025s ago: executing program 3 (id=1642): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2008002, &(0x7f0000000440), 0x1, 0x547, &(0x7f0000001940)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x185102, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40) syz_emit_ethernet(0x22, &(0x7f0000000100)={@broadcast, @local, @val={@void, {0x8847}}, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "534ead40a3537293"}}}}, 0x0) 1m24.621769365s ago: executing program 4 (id=1643): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x1, 0x87, &(0x7f0000000180)="$eJzs0TEOQUEYBODxGu7gDnsHRxElnYpInMhVHMENFFoNYWm21Ky8fF/ybzKZZpI930/zxzF5X2O726+Xm/qGURqSTJPMUv//la+L2k0+/eV2WH2v914AAOB3Q0qbS7cxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH/oGQAA//+6dyiR") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@multicast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x4, 0x2f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, &(0x7f0000000000)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1m24.616656255s ago: executing program 2 (id=1654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000580)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x207601a}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x170000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40811) 1m23.626276026s ago: executing program 2 (id=1644): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp}, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xf405, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/153, 0x99, 0x40000160, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) dup3(r3, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x30, 0x0, &(0x7f0000000000)=[@request_death, @clear_death, @request_death], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r4, 0x851, 0x0) 1m23.492108617s ago: executing program 2 (id=1646): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000200)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba724a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e993ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d74df524b760ab92efcce7dd1574052c73596f860221156437f4d6b76ecc4b35bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5ca93125e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d309d8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a650be5114c31582d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc882d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd61dfb3de7f503d58ac8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da9399507126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0d74d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fbc64f547a671ded4896d8c4bac78f23e15c8e6cb72599d27607e5a1ad434cdee73d026e5dd14d9824202052181dda714fff7dc43444bc948541f641ac8215a5dae7fa8a50897b916a856aedcdf16be8736b33823ab7b2f1c77554bf2c36e412fcdc2c7c2bf0499ed5dfe84db2d7d3bb802f47dd2ebb7945e09f542d464dfbd2c70a90ab36ebd331a6549fa16f2e83a06c512c83eec56b5b94040d31da56e021a48c8651ebf3e1f8931a6d18150f1d76d07e7d8ecacbed15e9c2a50e610f1d0b523083b182cde6cf655ddd45409400c23fb89eba0db0ab4eee055a60a6ac7fea75703e8e4d737bfabae0fc3c1406b6b454ba694673a69b1782eb0052c2a4e251c8f96c7bcab1845dc347ded7fb207fd19f2bea2e496d63613af735b8e8376658ce4b43a09b53846f0a0218661d917e39bcd79063128f4c5c570b6214db8ed5e1255d48725ad8dc0d3c5aafafb47095dc1f3572650e4b3d0540cec5340638d325897dc3ecc721634875abc32f6ea1c28bf579013269343786a7e8389df8bf34fee174310f070f0abfb9b5e035aa32be5721b5c8475faba7cce82fc9af55e73d8398a45dd151b0a1490700c02135e81d4153c992e171cec6720269625daec40c909f2bb92f9dae7e7caf86be26f080daeb973bd5912562e4211ef924f284dd583537e15b342ef7a7c3cf4c976742c086915d8d92be7e9f9464fb12fa3908c957ae1b2e4443be891828c9cf41036fcd4d871080e4d035c6dcab88a13704f0538c48d7b24f35282adaa33f588ecd4ce7eb861023e10c5adfd80df856524d14c6485198bb7045921f8ca677a7e50123d8ad717d259f31e4f4808f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r5) setresuid(0xee01, 0xee01, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0306003c5c980128876340860800702c1ffe80000000000000ff", @ANYRESOCT], 0xffdd) 1m23.490683077s ago: executing program 0 (id=1647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000780)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000740)={0xa, 0x4e24, 0x400000, @loopback}, 0x1c) shutdown(r1, 0x1) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet6_int(r2, 0x10d, 0xa, &(0x7f0000000040)=0xd, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200)) unshare(0x60480) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) 1m22.737098308s ago: executing program 1 (id=1648): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@abort}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfb, 0x49f, &(0x7f0000001440)="$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") mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000b40)=@known='security.selinux\x00', &(0x7f0000000b80)=""/27, 0x1b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m20.922292346s ago: executing program 1 (id=1649): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x0, 0x746, 0x0, 0x4}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121401, 0x0) write$proc_mixer(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='VOLUME \'M'], 0x35) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, r2, 0x303}, 0x14}}, 0x0) sendmmsg$inet(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000002dc0)="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", 0x2a1}], 0x1}}], 0x2, 0x0) 1m18.935183488s ago: executing program 2 (id=1651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000b000014000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090500000000019400000000070000b7020000000000006b9af0ff000000007609000000000000dbaaf0fff1000000bf86000000000000070800000d000000bfa400000000000007040000f0ffffff560000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m18.934793408s ago: executing program 3 (id=1652): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000140)={0x2, 0x0, [{}, {0x0, 0x0, 0x7}]}) r2 = socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0), 0x60) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a444b7fbb161860c18ff851923b530208f", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x111000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r6, @ANYBLOB="08000600", @ANYRES32], 0x24}}, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$inet6_int(r7, 0x29, 0xce, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000180)={0xd, 0x1, 0x81, 0x88, 0x4005, 0x8}) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000240)={0x3c0000, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, '\x00', @p_u32=&(0x7f0000000100)=0x9}}) socket$alg(0x26, 0x5, 0x0) 58.092265167s ago: executing program 3 (id=1653): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f00000000c0)={[{@check_strict}, {@map_acorn}, {@hide}, {@unhide}, {@check_relaxed}, {@nojoliet}, {@mode}, {@block={'block', 0x3d, 0x400}}]}, 0xff, 0x52c, &(0x7f0000000580)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) close(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f716420656372797074667320747275737465643a656ebdac797c746564002030303030303030303030303030303030303030302000"], 0x37, 0x0) add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) ioctl$SIOCRSSL2CALL(r2, 0x89e2, 0x0) 9.957353329s ago: executing program 0 (id=1657): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = io_uring_setup(0x3ead, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000300)={0xf7, 0xe, 0x0, 'queue1\x00', 0x4}) syz_clone(0x0, 0x0, 0x3d, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ee9ff2820"], 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xd52d, 0xfff}) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000097}]}) getsockopt$inet6_mptcp_buf(r2, 0x6, 0xb, 0x0, &(0x7f0000000180)) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x7c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x73}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x60}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xd8e}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffff6}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0xc000094) 0s ago: executing program 2 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0x20001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20242, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0xff, 0x7ffe}) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): [ T9949] SQUASHFS error: Unable to read metadata cache entry [260685] [ 561.371571][ T9957] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 561.543742][ T9949] SQUASHFS error: Unable to read directory block [260685:0] [ 561.770157][ T9957] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038 (0x7fffffff) [ 561.820667][ T9941] SQUASHFS error: Unable to read metadata cache entry [260685] [ 561.864039][ T9943] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 561.948567][ T9941] SQUASHFS error: Unable to read directory block [260685:0] [ 561.950500][ T9953] SQUASHFS error: Unable to read metadata cache entry [260685] [ 562.058270][ T9967] Cannot find del_set index 0 as target [ 562.205915][ T9970] loop4: detected capacity change from 0 to 128 [ 562.218390][ T9953] SQUASHFS error: Unable to read directory block [260685:0] [ 562.230558][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 562.313462][ T9970] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 562.354039][ T9943] Remounting filesystem read-only [ 562.380117][ T9970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 562.494854][ T9963] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 562.526870][ T9941] SQUASHFS error: Unable to read metadata cache entry [260685] [ 562.580207][ T9941] SQUASHFS error: Unable to read directory block [260685:0] [ 562.855954][ T9980] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.039267][ T9987] loop3: detected capacity change from 0 to 256 [ 563.115283][ T9989] loop1: detected capacity change from 0 to 256 [ 563.123150][ T4770] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 563.138513][ T9987] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 563.171037][ T9989] exfat: Bad value for 'uid' [ 563.193169][ T9987] Core dump to core aborted: cannot preserve file permissions [ 563.323431][ T9989] loop1: detected capacity change from 0 to 256 [ 563.414867][ T9989] FAT-fs (loop1): Directory bread(block 64) failed [ 563.421830][ T9989] FAT-fs (loop1): Directory bread(block 65) failed [ 563.448554][ T9989] FAT-fs (loop1): Directory bread(block 66) failed [ 563.455138][ T9989] FAT-fs (loop1): Directory bread(block 67) failed [ 563.462312][ T9989] FAT-fs (loop1): Directory bread(block 68) failed [ 563.469319][ T4770] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 209 [ 563.479679][ T9989] FAT-fs (loop1): Directory bread(block 69) failed [ 563.494415][ T4770] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 563.504063][ T9989] FAT-fs (loop1): Directory bread(block 70) failed [ 563.510690][ T9989] FAT-fs (loop1): Directory bread(block 71) failed [ 563.528037][ T4770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.555145][ T9989] FAT-fs (loop1): Directory bread(block 72) failed [ 563.578665][ T4770] usb 1-1: config 0 descriptor?? [ 563.593853][ T9989] FAT-fs (loop1): Directory bread(block 73) failed [ 563.628344][ T9983] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 564.457015][ T4770] ath6kl: Failed to submit usb control message: -71 [ 564.463700][ T4770] ath6kl: unable to send the bmi data to the device: -71 [ 564.485482][ T4770] ath6kl: Unable to send get target info: -71 [ 564.520259][ T4770] ath6kl: Failed to init ath6kl core: -71 [ 564.760150][ T4770] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 564.788619][ T4770] usb 1-1: USB disconnect, device number 22 [ 566.996220][ T4770] Bluetooth: hci1: command 0x0409 tx timeout [ 567.093444][T10022] loop2: detected capacity change from 0 to 2048 [ 567.357257][T10022] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.384861][T10002] chnl_net:caif_netlink_parms(): no params data found [ 568.038170][T10002] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.077272][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.086013][T10002] device bridge_slave_0 entered promiscuous mode [ 568.109751][T10039] netlink: 'syz.0.1438': attribute type 15 has an invalid length. [ 568.122373][T10002] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.129872][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.137288][ T5896] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 568.148267][T10002] device bridge_slave_1 entered promiscuous mode [ 568.247460][T10041] syz.3.1439[10041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.247553][T10041] syz.3.1439[10041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 568.343455][T10002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.387735][T10024] loop1: detected capacity change from 0 to 32768 [ 568.401343][T10002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.456237][T10046] loop0: detected capacity change from 0 to 64 [ 568.468894][T10002] team0: Port device team_slave_0 added [ 568.477746][T10002] team0: Port device team_slave_1 added [ 568.866080][T10048] overlayfs: upper fs needs to support d_type. [ 568.872500][T10048] overlayfs: upper fs does not support tmpfile. [ 568.900278][T10048] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 568.907521][ T5896] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 568.935860][ T4762] Bluetooth: hci1: command 0x041b tx timeout [ 568.960048][T10002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.363138][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.389834][T10002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.392717][ T5896] usb 3-1: string descriptor 0 read error: -71 [ 569.402560][T10002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.430735][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 569.434824][ T5896] usb 3-1: New USB device found, idVendor=0dba, idProduct=0001, bcdDevice=80.99 [ 569.495365][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.549692][ T9022] non-latin1 character 0x2e66 found in JFS file name [ 569.562349][ T9022] mount with iocharset=utf8 to access [ 569.620269][ T5896] usb 3-1: config 0 descriptor?? [ 569.625899][T10002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.687696][ T5896] usb 3-1: can't set config #0, error -71 [ 570.074263][ T5896] usb 3-1: USB disconnect, device number 21 [ 570.150956][T10061] loop2: detected capacity change from 0 to 512 [ 570.239559][T10002] device hsr_slave_0 entered promiscuous mode [ 570.249860][T10002] device hsr_slave_1 entered promiscuous mode [ 570.256472][T10002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 570.264132][T10002] Cannot create hsr debugfs directory [ 570.317204][T10061] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 570.352484][T10061] ext4 filesystem being mounted at /46/bus supports timestamps until 2038 (0x7fffffff) [ 571.277383][T10002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.424899][ T9166] Bluetooth: hci1: command 0x040f tx timeout [ 572.229812][T10002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.387008][T10090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1454'. [ 572.420014][T10002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.433319][T10090] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1454'. [ 572.453315][T10090] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1454'. [ 572.489185][ T4766] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 572.688328][T10002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.433885][T10094] chnl_net:caif_netlink_parms(): no params data found [ 573.477559][ T3575] Bluetooth: hci1: command 0x0419 tx timeout [ 573.595605][T10094] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.605606][T10094] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.614255][T10094] device bridge_slave_0 entered promiscuous mode [ 573.622814][T10002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 573.633068][T10094] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.640709][T10094] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.671527][T10094] device bridge_slave_1 entered promiscuous mode [ 573.674828][ T9166] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 573.708812][ T4766] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 573.717192][ T4766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.728552][T10002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 573.738297][T10002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 573.750396][T10094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.794687][T10094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.842537][ T4766] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 573.864234][ T4766] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 573.889264][ T4766] usb 3-1: Manufacturer: syz [ 573.948355][ T4766] usb 3-1: config 0 descriptor?? [ 574.119086][T10094] team0: Port device team_slave_0 added [ 574.185911][ T9166] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 574.277079][ T9166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.290762][T10094] team0: Port device team_slave_1 added [ 574.457357][ T9166] usb 4-1: Product: syz [ 574.464189][ T9166] usb 4-1: Manufacturer: syz [ 574.468915][ T9166] usb 4-1: SerialNumber: syz [ 574.476547][ T9166] usb 4-1: config 0 descriptor?? [ 574.482772][ T3575] Bluetooth: hci4: command 0x0409 tx timeout [ 574.499971][ T4766] rc_core: IR keymap rc-hauppauge not found [ 574.506556][ T4766] Registered IR keymap rc-empty [ 574.528742][T10002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 574.554885][ T4766] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 574.586746][ T4766] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 574.703808][ T4770] usb 3-1: USB disconnect, device number 22 [ 575.074999][T10094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.138345][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.455638][T10094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.517981][T10094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.538915][T10094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.593124][T10094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.640756][T10126] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 575.685882][T10002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.758717][T10094] device hsr_slave_0 entered promiscuous mode [ 575.810647][T10094] device hsr_slave_1 entered promiscuous mode [ 575.831572][T10094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.841294][T10094] Cannot create hsr debugfs directory [ 575.934820][T10130] loop0: detected capacity change from 0 to 4096 [ 575.969742][T10130] vhci_hcd: GetPortErrorCount req not supported for USB 2.0 roothub [ 576.001412][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 576.012848][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 576.025814][T10002] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.337254][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 576.441394][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 576.590600][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.597763][ T5896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.806905][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 576.814709][ T4766] Bluetooth: hci4: command 0x041b tx timeout [ 576.836512][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 576.882770][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.041033][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.048161][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.089335][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 577.103886][ T5900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 577.163388][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 577.220843][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 577.268424][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 577.348867][ T5889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 577.463894][ T5903] usb 4-1: USB disconnect, device number 22 [ 577.556408][T10094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.642284][T10002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.691499][T10002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.730020][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 577.738038][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.771468][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.782913][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 577.791939][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.822772][T10149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.855274][T10094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.895909][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 577.961245][T10094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.070124][T10094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.290860][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 578.304730][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 578.362991][T10002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.768204][ T4766] Bluetooth: hci4: command 0x040f tx timeout [ 579.001321][T10094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 579.081238][T10094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 579.131707][T10094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 579.169367][T10094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 579.179790][T10177] loop2: detected capacity change from 0 to 4096 [ 579.238287][T10177] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 579.291648][T10177] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 579.305016][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 579.315727][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 579.376831][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 579.396927][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 579.424922][T10002] device veth0_vlan entered promiscuous mode [ 579.452053][T10094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.484736][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.496789][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 579.546732][T10002] device veth1_vlan entered promiscuous mode [ 579.568425][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 579.588428][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 579.596287][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 579.620006][T10094] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.693633][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 579.703068][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 579.750419][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 579.777090][ T4770] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.784238][ T4770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.821129][T10188] loop2: detected capacity change from 0 to 32768 [ 579.826109][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 579.848251][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 579.862079][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.869223][ T4770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.881812][T10188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1473 (10188) [ 579.919792][T10002] device veth0_macvtap entered promiscuous mode [ 579.950708][T10188] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 579.959553][T10188] BTRFS info (device loop2): using free space tree [ 579.966068][T10188] BTRFS info (device loop2): has skinny extents [ 580.024018][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 580.042480][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 580.062046][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 580.079239][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 580.093278][T10002] device veth1_macvtap entered promiscuous mode [ 580.100198][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 580.116210][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 580.178141][T10002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.240537][T10183] loop0: detected capacity change from 0 to 32768 [ 580.247525][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.277920][T10002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.302360][T10188] BTRFS info (device loop2): enabling ssd optimizations [ 580.311295][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.321688][T10002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.333814][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.344283][T10002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.355168][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.365417][T10002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.376313][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.406821][T10002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.491815][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 580.541993][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 580.563131][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 580.589128][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 580.598807][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 580.608179][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 580.619953][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 581.388135][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 581.403247][ T3575] Bluetooth: hci4: command 0x0419 tx timeout [ 581.418677][ T1241] device hsr_slave_0 left promiscuous mode [ 581.428298][T10183] XFS (loop0): Mounting V5 Filesystem [ 581.464324][ T1241] device hsr_slave_1 left promiscuous mode [ 581.476606][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.485391][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.506851][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.521277][T10199] loop3: detected capacity change from 0 to 32768 [ 581.523325][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.542458][ T1241] device bridge_slave_1 left promiscuous mode [ 581.563412][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.672909][T10199] XFS (loop3): Mounting V5 Filesystem [ 581.738858][T10199] XFS (loop3): Ending clean mount [ 581.884622][ T1241] device bridge_slave_0 left promiscuous mode [ 581.892591][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.900377][T10183] XFS (loop0): Ending clean mount [ 581.959831][ T1241] device veth0_macvtap left promiscuous mode [ 582.221030][ T1241] device veth1_vlan left promiscuous mode [ 583.617960][ T1241] device veth0_vlan left promiscuous mode [ 583.656901][ T8585] XFS (loop3): Unmounting Filesystem [ 583.688056][ T5900] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 [ 583.717672][ T5900] XFS (loop3): Unmount and run xfs_repair [ 583.754174][ T5900] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 583.771236][T10236] loop2: detected capacity change from 0 to 1024 [ 583.771845][ T5900] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 583.787158][ T5900] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 583.796126][ T5900] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 583.805801][ T5900] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 583.814986][ T5900] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 583.824196][ T5900] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 583.848264][ T5900] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 583.857471][ T5900] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 583.859887][T10236] hfsplus: xattr searching failed [ 583.866775][ T5900] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74 [ 583.883047][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 583.883061][ T26] audit: type=1800 audit(1723708099.932:205): pid=10236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1476" name="bus" dev="loop2" ino=4 res=0 errno=0 [ 583.890737][T10236] hfsplus: catalog searching failed [ 583.941019][ T5903] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 [ 583.967220][ T8165] XFS (loop0): Unmounting Filesystem [ 583.973754][ T5900] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 583.990417][ T5903] XFS (loop0): Unmount and run xfs_repair [ 583.996152][ T5903] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 584.004577][ T5900] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 584.013334][ T5903] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 584.023931][ T5903] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 584.048654][ T5903] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 584.058191][ T5903] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 584.067455][ T5903] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 584.076742][ T5903] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 584.085902][ T5903] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 584.095314][ T5903] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 584.125332][ T5903] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74 [ 584.138335][ T5903] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 584.154892][ T5903] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 584.311807][ T3792] hfsplus: b-tree write err: -5, ino 3 [ 584.499318][ T1241] team0 (unregistering): Port device team_slave_1 removed [ 584.543197][ T1241] team0 (unregistering): Port device team_slave_0 removed [ 584.568395][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.634716][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.984482][T10247] loop0: detected capacity change from 0 to 512 [ 585.004899][ T1241] bond0 (unregistering): Released all slaves [ 585.152890][ T5898] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 585.254391][T10247] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 585.266269][T10247] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038 (0x7fffffff) [ 585.354803][T10247] Quota error (device loop0): find_tree_dqentry: Getting block too big (2309 >= 6) [ 585.364705][T10247] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 585.374195][T10247] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.1477: Failed to acquire dquot type 0 [ 585.648595][T10002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.667755][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.677716][T10002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.688573][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.723714][T10002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.724011][ T5898] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 585.741239][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.755417][T10253] loop0: detected capacity change from 0 to 8192 [ 585.761407][T10002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.762328][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.783084][T10002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.783959][ T5898] usb 4-1: config 0 descriptor?? [ 585.801937][T10002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.812164][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 585.820964][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 585.829976][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 585.834260][T10253] loop0: p1 p2 p4[EZD] [ 585.839321][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 585.845638][T10253] loop0: p1 size 16128 extends beyond EOD, truncated [ 585.857838][T10253] loop0: p2 size 2130728454 extends beyond EOD, truncated [ 585.860377][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 585.866007][T10253] loop0: p4 size 65536 extends beyond EOD, truncated [ 585.902649][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 585.927113][T10094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 585.932937][T10253] overlayfs: missing 'lowerdir' [ 585.968866][T10002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.015367][T10002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.024794][T10002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.035048][T10002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.217657][ T9629] udevd[9629]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 586.231189][ T9770] udevd[9770]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 586.252009][ T9692] udevd[9692]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 586.298700][T10258] loop0: detected capacity change from 0 to 164 [ 586.459523][ T8818] hfsplus: node 4:3 still has 1 user(s)! [ 586.606376][ T3652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.802702][ T3652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.999053][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 587.039531][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 587.504678][T10094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.531478][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.547796][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.595105][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 587.691090][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 587.715884][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 587.724535][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 587.803357][ T4766] usb 4-1: USB disconnect, device number 23 [ 587.808159][T10094] device veth0_vlan entered promiscuous mode [ 587.841252][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 587.852051][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 587.894668][T10094] device veth1_vlan entered promiscuous mode [ 588.092467][T10094] device veth0_macvtap entered promiscuous mode [ 588.145324][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 588.153268][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 588.198670][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 588.207679][ T5896] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 588.232942][ T3612] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 588.255930][T10094] device veth1_macvtap entered promiscuous mode [ 588.316198][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.361840][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.386876][T10289] loop2: detected capacity change from 0 to 512 [ 588.399592][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.417618][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.447003][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.465091][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.482590][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.494797][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.514213][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.533444][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.554571][T10094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.562969][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 588.586524][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 588.599453][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 588.614741][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.630888][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.632899][T10289] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 588.646605][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.656901][T10289] ext4 filesystem being mounted at /60/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2038 (0x7fffffff) [ 588.695205][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.707479][T10289] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz.2.1488: corrupted inode contents [ 588.763269][T10289] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #2: comm syz.2.1488: mark_inode_dirty error [ 588.774854][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.796361][T10289] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz.2.1488: corrupted inode contents [ 588.809812][T10289] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1488: mark_inode_dirty error [ 588.812389][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.873296][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.902399][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.932750][T10094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.970123][T10094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.988043][T10094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.019942][T10094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.054942][T10094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.105824][T10094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.114876][T10094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.133191][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 589.149937][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 589.408992][T10303] netlink: 'syz.0.1501': attribute type 29 has an invalid length. [ 589.504404][T10303] netlink: 'syz.0.1501': attribute type 29 has an invalid length. [ 589.551546][ T3664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.593910][ T3664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.650989][T10285] loop3: detected capacity change from 0 to 40427 [ 589.683239][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 589.698568][ T3664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.719958][ T3664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.755514][ T5890] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 589.870591][T10285] F2FS-fs (loop3): invalid crc value [ 589.981560][T10285] F2FS-fs (loop3): Found nat_bits in checkpoint [ 590.302999][T10285] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 591.500758][ T8585] attempt to access beyond end of device [ 591.500758][ T8585] loop3: rw=2049, want=45120, limit=40427 [ 591.587334][T10330] loop1: detected capacity change from 0 to 1024 [ 591.605442][T10332] syz.0.1499[10332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.605531][T10332] syz.0.1499[10332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 591.672905][T10332] loop0: detected capacity change from 0 to 16 [ 591.806761][T10330] hfsplus: unable to parse mount options [ 591.822441][T10332] erofs: Unknown parameter '18446744073709551615i(툵Fp' [ 593.786109][ T9164] Bluetooth: hci3: command 0x0406 tx timeout [ 593.849427][T10340] loop1: detected capacity change from 0 to 4096 [ 593.926928][T10347] loop3: detected capacity change from 0 to 128 [ 593.950355][T10344] loop0: detected capacity change from 0 to 2048 [ 593.994072][T10340] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 594.020242][ T3583] block nbd4: Receive control failed (result -107) [ 594.034592][T10348] nbd4: detected capacity change from 0 to 15960 [ 594.048104][ T263] block nbd4: Dead connection, failed to find a fallback [ 594.055312][ T263] block nbd4: shutting down sockets [ 594.060542][ T263] print_req_error: 40 callbacks suppressed [ 594.060556][ T263] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.077586][ T263] buffer_io_error: 39 callbacks suppressed [ 594.077600][ T263] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.091461][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.102560][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.111334][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.122288][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.130232][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.141069][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.149035][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.159863][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.168578][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.180198][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.188525][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.199341][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.207288][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.218211][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.226387][ T9770] ldm_validate_partition_table(): Disk read failed. [ 594.234928][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.245837][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.258322][ T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 594.269734][ T150] Buffer I/O error on dev nbd4, logical block 0, async page read [ 594.279252][T10344] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 594.306653][ T9770] Dev nbd4: unable to read RDB block 0 [ 594.342002][ T9770] nbd4: unable to read partition table [ 595.533617][T10348] ldm_validate_partition_table(): Disk read failed. [ 595.557055][T10348] Dev nbd4: unable to read RDB block 0 [ 595.563971][T10348] nbd4: unable to read partition table [ 595.696320][ T9770] ldm_validate_partition_table(): Disk read failed. [ 595.802641][ T9770] Dev nbd4: unable to read RDB block 0 [ 595.825246][ T9770] nbd4: unable to read partition table [ 595.828056][ T8165] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 595.882578][ T8165] EXT4-fs error (device loop0): __ext4_iget:4861: inode #13: block 127754: comm syz-executor: invalid block [ 595.897580][ T8165] EXT4-fs error (device loop0): __ext4_iget:4861: inode #13: block 127754: comm syz-executor: invalid block [ 596.947688][T10371] loop4: detected capacity change from 0 to 1024 [ 598.115780][T10383] loop2: detected capacity change from 0 to 1024 [ 598.359981][ T4769] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 598.388632][ T26] audit: type=1326 audit(1723708115.171:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 598.424677][ T4769] Bluetooth: hci3: Injecting HCI hardware error event [ 598.836904][ T26] audit: type=1326 audit(1723708115.171:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 599.123642][ T26] audit: type=1326 audit(1723708115.328:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 599.135807][ T3583] Bluetooth: hci3: hardware error 0x00 [ 599.218012][ T26] audit: type=1326 audit(1723708115.328:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 599.320694][ T5900] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 599.336430][ T26] audit: type=1326 audit(1723708115.328:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 599.392063][ T26] audit: type=1326 audit(1723708115.339:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 599.424964][ T26] audit: type=1326 audit(1723708115.339:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 599.460201][ T26] audit: type=1326 audit(1723708115.349:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 599.490866][ T26] audit: type=1326 audit(1723708115.360:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 599.605908][ T5900] usb 4-1: Using ep0 maxpacket: 8 [ 599.613168][T10400] loop2: detected capacity change from 0 to 256 [ 599.633781][ T26] audit: type=1326 audit(1723708115.360:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10388 comm="syz.3.1515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 599.737639][T10400] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d) [ 599.765896][T10395] chnl_net:caif_netlink_parms(): no params data found [ 599.773239][ T5900] usb 4-1: config 0 has no interfaces? [ 599.784982][ T5900] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 599.823962][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.859813][T10400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.869511][ T5900] usb 4-1: config 0 descriptor?? [ 599.968015][T10395] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.975203][T10395] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.983299][T10395] device bridge_slave_0 entered promiscuous mode [ 599.991796][T10395] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.999165][T10395] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.009193][T10395] device bridge_slave_1 entered promiscuous mode [ 600.048465][T10395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.060031][T10395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.096292][T10395] team0: Port device team_slave_0 added [ 600.104587][T10395] team0: Port device team_slave_1 added [ 600.129386][T10395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.136542][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.163238][T10395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.176388][T10395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.183651][T10395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.227927][T10395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.300791][T10395] device hsr_slave_0 entered promiscuous mode [ 600.315459][T10395] device hsr_slave_1 entered promiscuous mode [ 600.330449][T10395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.347430][T10395] Cannot create hsr debugfs directory [ 600.517811][T10395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.602020][T10395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.713683][T10395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.955901][T10395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.387938][ T9166] usb 4-1: USB disconnect, device number 24 [ 601.644691][ T4766] Bluetooth: hci2: command 0x0409 tx timeout [ 601.856979][T10395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 601.886368][T10395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 601.909940][T10414] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 601.939002][T10395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 601.992367][T10414] kvm: pic: non byte read [ 602.027519][T10395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 602.053603][T10414] kvm: pic: non byte read [ 603.340816][ T1241] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.412925][T10395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.576352][T10435] Cannot find del_set index 0 as target [ 603.612209][T10423] loop2: detected capacity change from 0 to 32768 [ 603.617685][ T9166] Bluetooth: hci2: command 0x041b tx timeout [ 603.626234][T10395] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.644939][T10420] chnl_net:caif_netlink_parms(): no params data found [ 603.663298][T10423] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1523 (10423) [ 604.076890][ T4769] Bluetooth: hci5: command 0x0409 tx timeout [ 604.438927][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 604.447367][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 604.461095][T10423] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 604.480039][T10423] BTRFS info (device loop2): using free space tree [ 604.489269][ T1241] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.489835][T10423] BTRFS info (device loop2): has skinny extents [ 604.636011][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 604.659097][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 604.679262][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.686419][ T9166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.802955][T10395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 604.847026][T10395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.897374][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 604.906845][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.540580][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.549192][ T4770] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.556295][ T4770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.648576][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 605.657648][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 605.666569][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 605.675821][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 605.685160][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 605.698847][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 605.718352][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 605.733406][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 605.749423][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 605.771525][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 605.906855][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 606.508474][ T4769] Bluetooth: hci2: command 0x040f tx timeout [ 606.515058][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.523173][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.531507][ T4766] Bluetooth: hci5: command 0x041b tx timeout [ 606.544250][T10423] BTRFS error (device loop2): open_ctree failed [ 606.555204][ T1241] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.668831][ T1241] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.978453][T10420] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.075163][T10420] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.194251][T10420] device bridge_slave_0 entered promiscuous mode [ 607.290960][T10420] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.361464][T10420] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.459712][T10420] device bridge_slave_1 entered promiscuous mode [ 607.700290][T10482] loop4: detected capacity change from 0 to 256 [ 607.724446][T10420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.911739][T10420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.950459][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 607.950491][ T26] audit: type=1800 audit(1723708125.194:227): pid=10482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1533" name="bus" dev="loop4" ino=1048761 res=0 errno=0 [ 608.048394][ T4766] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 608.391552][ T4766] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 608.473465][ T4766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.612550][ T4766] usb 4-1: config 0 descriptor?? [ 608.623405][ T3615] Bluetooth: hci5: command 0x040f tx timeout [ 608.633062][ T3615] Bluetooth: hci2: command 0x0419 tx timeout [ 608.651794][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 608.659932][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 608.693478][T10395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.802777][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 608.835388][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 608.836653][T10496] loop2: detected capacity change from 0 to 512 [ 608.866205][T10479] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 608.873015][T10420] team0: Port device team_slave_0 added [ 608.880287][T10479] VFS: Can't find a romfs filesystem on dev nullb0. [ 608.880287][T10479] [ 608.892996][T10479] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 608.928764][T10395] device veth0_vlan entered promiscuous mode [ 608.937736][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 608.956185][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 608.972480][ T4766] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 608.989670][T10496] EXT4-fs (loop2): Value of option "test_dummy_encryption=test_dummy_encryption" is unrecognized [ 609.004239][T10420] team0: Port device team_slave_1 added [ 609.015997][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 609.015997][ T4766] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 609.026776][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 609.044793][T10395] device veth1_vlan entered promiscuous mode [ 609.106154][ T4766] [drm:udl_init] *ERROR* Selecting channel failed [ 609.107372][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 609.128456][ T4766] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 609.130421][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 609.154237][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.162702][ T5549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.188333][T10420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.202309][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.238388][T10420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.262138][T10395] device veth0_macvtap entered promiscuous mode [ 609.381822][T10503] loop4: detected capacity change from 0 to 32768 [ 609.388472][ T4766] [drm] Initialized udl on minor 2 [ 609.410833][ T4766] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 609.435821][ T4766] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 609.459613][ T4766] usb 4-1: USB disconnect, device number 25 [ 609.470839][T10503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1537 (10503) [ 609.499075][T10420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.506720][T10420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.537037][T10420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.552436][T10503] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 609.557942][T10395] device veth1_macvtap entered promiscuous mode [ 609.561263][T10503] BTRFS info (device loop4): using free space tree [ 609.574240][T10503] BTRFS info (device loop4): has skinny extents [ 610.107296][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.156952][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.239584][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.266533][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.395106][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.405898][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.415950][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.426584][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.454120][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.474636][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.494118][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 610.505035][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.521354][T10395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 610.530370][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 610.543332][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.587198][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.598534][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.650130][T10420] device hsr_slave_0 entered promiscuous mode [ 610.657044][T10420] device hsr_slave_1 entered promiscuous mode [ 610.664415][T10420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 610.672109][T10420] Cannot create hsr debugfs directory [ 610.739558][T10503] BTRFS info (device loop4): enabling ssd optimizations [ 610.962396][ T9166] Bluetooth: hci5: command 0x0419 tx timeout [ 610.966592][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.022619][T10547] loop2: detected capacity change from 0 to 2048 [ 611.642124][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.821383][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.888360][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.917232][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.993075][T10554] tipc: Failed to remove unknown binding: 66,1,1/0:3776900078/3776900080 [ 612.001561][T10554] tipc: Failed to remove unknown binding: 66,1,1/0:3776900078/3776900080 [ 612.065566][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.118384][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.256550][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.312269][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.382698][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.443982][T10395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.591502][T10395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.604769][T10395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.665784][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 612.706204][T10547] NILFS (loop2): invalid segment: Sequence number mismatch [ 612.713787][T10547] NILFS (loop2): trying rollback from an earlier position [ 612.721289][T10547] NILFS (loop2): invalid segment: Checksum error in segment payload [ 612.729341][T10547] NILFS (loop2): error -22 while searching super root [ 612.732403][ T5885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 612.958956][T10395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.002073][T10395] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.066596][T10558] loop3: detected capacity change from 0 to 256 [ 614.199522][T10560] loop2: detected capacity change from 0 to 1024 [ 614.335295][T10560] hfsplus: bad catalog entry type [ 614.424999][T10395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.643277][T10395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.950462][ T3790] hfsplus: b-tree write err: -5, ino 4 [ 614.975229][T10558] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 614.994536][T10558] exFAT-fs (loop3): error, invalid access to FAT bad cluster (entry 0x00000005) [ 615.003672][T10558] exFAT-fs (loop3): Filesystem has been set read-only [ 615.011204][T10558] exFAT-fs (loop3): failed to initialize root inode [ 615.187253][T10564] loop2: detected capacity change from 0 to 256 [ 615.408049][T10564] FAT-fs (loop2): bogus number of reserved sectors [ 615.450165][T10564] FAT-fs (loop2): Can't find a valid FAT filesystem [ 615.840169][T10569] loop3: detected capacity change from 0 to 40427 [ 616.001334][T10569] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 616.009378][T10569] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 616.317162][T10569] F2FS-fs (loop3): Found nat_bits in checkpoint [ 616.435677][T10569] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 616.442825][T10569] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 622.707235][T10590] unsupported nlmsg_type 40 [ 622.743833][ T3780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.788134][ T3780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.846999][ T8585] attempt to access beyond end of device [ 622.846999][ T8585] loop3: rw=2051, want=53248, limit=40427 [ 622.863217][ T8585] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5 [ 622.947852][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 623.655197][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 623.895181][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.903838][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.935620][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 624.077636][ T1241] device hsr_slave_0 left promiscuous mode [ 624.231905][T10609] loop0: detected capacity change from 0 to 512 [ 624.265610][ T1241] device hsr_slave_1 left promiscuous mode [ 624.297503][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.394656][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.866702][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.894389][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.925117][ T1241] device bridge_slave_1 left promiscuous mode [ 624.947948][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.958314][ T1241] device bridge_slave_0 left promiscuous mode [ 624.965998][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.978516][ T1241] device veth1_macvtap left promiscuous mode [ 624.984604][ T1241] device veth0_macvtap left promiscuous mode [ 624.991111][ T1241] device veth1_vlan left promiscuous mode [ 624.996880][ T1241] device veth0_vlan left promiscuous mode [ 625.183668][ T1241] team0 (unregistering): Port device team_slave_1 removed [ 625.197674][ T1241] team0 (unregistering): Port device team_slave_0 removed [ 625.210358][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.224455][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.294218][ T1241] bond0 (unregistering): Released all slaves [ 625.415597][T10420] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 625.454829][T10420] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 625.476842][T10420] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 625.486963][T10420] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 625.695999][T10420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.738126][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 625.751988][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 625.784048][T10420] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.805931][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 625.825219][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 625.834429][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.841547][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.865526][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 625.886313][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 625.904694][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 625.923375][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.930461][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.947587][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 625.989933][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 625.998781][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 626.011217][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 626.030676][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 626.039573][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 626.048578][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 626.060543][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 626.076903][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 626.085433][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 626.093739][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 626.120318][T10420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 626.382928][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.400330][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 626.413557][T10420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.482009][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 626.504076][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.582351][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 626.591297][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.611825][T10420] device veth0_vlan entered promiscuous mode [ 626.619779][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 626.639982][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 626.652728][T10420] device veth1_vlan entered promiscuous mode [ 626.735363][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 626.744397][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 626.754929][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 626.781376][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 626.792252][T10420] device veth0_macvtap entered promiscuous mode [ 626.811925][T10420] device veth1_macvtap entered promiscuous mode [ 626.848381][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.888792][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.923392][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.961485][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.990156][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.009164][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.028305][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.050672][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.076014][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.095021][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.114020][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.133071][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.163249][T10420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.179885][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 627.188643][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 627.210032][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 627.218593][ T9164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 627.240955][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.266787][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.285545][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.304558][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.333183][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.353348][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.371219][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.390302][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.409406][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.437988][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.458156][T10420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.476019][T10420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.496692][T10420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.506121][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 627.524549][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 627.551563][T10420] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.560515][T10420] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.578789][T10420] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.589965][T10420] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.718956][ T3780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.752694][ T3780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.788517][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 627.797784][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.812182][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.826350][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 628.353063][T10665] chnl_net:caif_netlink_parms(): no params data found [ 628.593713][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.610079][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.639311][T10665] device bridge_slave_0 entered promiscuous mode [ 628.656838][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.668453][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.673673][T10664] loop1: detected capacity change from 0 to 40427 [ 628.682403][T10665] device bridge_slave_1 entered promiscuous mode [ 628.712177][T10665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.723295][T10665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.751891][T10664] F2FS-fs (loop1): invalid crc value [ 628.782063][ T1241] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.789737][T10664] F2FS-fs (loop1): Found nat_bits in checkpoint [ 628.828494][T10665] team0: Port device team_slave_0 added [ 628.845927][ T1241] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.849898][T10664] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 628.875386][T10665] team0: Port device team_slave_1 added [ 628.911008][T10665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.918080][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.946660][T10665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.965175][ T1241] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.978251][T10665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.985691][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.012751][T10665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.045755][ T1241] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.071316][T10665] device hsr_slave_0 entered promiscuous mode [ 629.078905][T10665] device hsr_slave_1 entered promiscuous mode [ 629.085487][T10665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.093611][T10665] Cannot create hsr debugfs directory [ 629.343557][ T1241] tipc: Left network mode [ 629.821615][T10420] attempt to access beyond end of device [ 629.821615][T10420] loop1: rw=524288, want=45072, limit=40427 [ 629.860799][T10420] attempt to access beyond end of device [ 629.860799][T10420] loop1: rw=0, want=45072, limit=40427 [ 629.929562][T10692] loop0: detected capacity change from 0 to 4096 [ 630.065598][ T3780] attempt to access beyond end of device [ 630.065598][ T3780] loop1: rw=2049, want=40992, limit=40427 [ 630.157297][ T4771] Bluetooth: hci4: command 0x0409 tx timeout [ 630.375268][T10692] ntfs3: loop0: ino=3, Correct links count -> 2. [ 630.793961][T10665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 630.942627][T10707] loop3: detected capacity change from 0 to 2048 [ 630.967419][T10710] ntfs3: loop0: failed to convert "0080" to macinuit [ 631.001968][T10665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 631.021770][T10665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 631.038234][T10708] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 631.072308][T10707] NILFS (loop3): invalid segment: Sequence number mismatch [ 631.079681][T10707] NILFS (loop3): trying rollback from an earlier position [ 631.101603][T10707] NILFS (loop3): invalid segment: Checksum error in segment payload [ 631.109760][T10707] NILFS (loop3): error -22 while searching super root [ 631.207132][T10710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1564'. [ 631.795640][T10665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 631.896040][T10665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.911573][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 631.920918][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 631.932785][T10665] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.044749][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.056990][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.067163][T10561] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.074278][T10561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.125615][ T4766] Bluetooth: hci4: command 0x041b tx timeout [ 632.221222][T10725] loop3: detected capacity change from 0 to 1024 [ 632.951897][T10720] hfsplus: bad catalog entry type [ 633.010535][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.887869][ T3780] hfsplus: b-tree write err: -5, ino 4 [ 633.904892][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.917333][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.925878][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.932993][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.941034][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.959454][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 634.127228][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 634.136374][ T5902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.162698][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.171208][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 634.181233][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.189473][ T3615] Bluetooth: hci4: command 0x040f tx timeout [ 634.230764][T10736] syz.0.1559[10736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 634.230856][T10736] syz.0.1559[10736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 634.269544][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.291310][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.299734][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.308609][T10561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.319867][T10665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.676307][T10742] loop3: detected capacity change from 0 to 32768 [ 634.686091][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 635.526549][T10665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.618188][T10665] device veth0_vlan entered promiscuous mode [ 635.654041][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 635.661955][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 635.674914][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 635.688343][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 635.720082][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 635.728556][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 635.743703][T10665] device veth1_vlan entered promiscuous mode [ 635.752235][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 635.761227][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 636.439593][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 636.450067][ T3615] Bluetooth: hci4: command 0x0419 tx timeout [ 636.550301][ T4771] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 636.579197][ T4771] Bluetooth: hci1: Injecting HCI hardware error event [ 636.604652][ T3583] Bluetooth: hci1: hardware error 0x00 [ 636.657238][T10665] device veth0_macvtap entered promiscuous mode [ 636.671846][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 636.774656][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 636.802082][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 636.829296][T10665] device veth1_macvtap entered promiscuous mode [ 636.884508][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.913217][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.923766][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.935046][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.945713][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.956542][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.966737][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.977535][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.987998][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.999062][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.010891][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.031807][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.043170][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.053984][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.065955][T10665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.084682][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 637.092246][ T4769] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 637.101988][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.111367][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.123228][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.138505][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.148636][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.159487][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.169466][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.179916][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.189870][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.200583][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.210487][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.221235][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.231218][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.243350][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.253279][T10665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.263726][T10665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.275017][T10665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.283239][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 637.293221][ T9163] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 637.341201][T10665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.353950][T10665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.370757][T10665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.383914][T10665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.437928][ T1241] device hsr_slave_0 left promiscuous mode [ 637.442828][ T4769] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 637.452940][ T1241] device hsr_slave_1 left promiscuous mode [ 637.468773][ T4769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.477457][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.489569][ T4769] usb 1-1: config 0 descriptor?? [ 637.499835][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.525490][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.549818][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.592612][ T1241] device bridge_slave_1 left promiscuous mode [ 637.599366][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.608684][ T1241] device bridge_slave_0 left promiscuous mode [ 637.638500][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.679401][ T1241] device hsr_slave_0 left promiscuous mode [ 637.697212][ T1241] device hsr_slave_1 left promiscuous mode [ 637.706188][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.725022][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.735087][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.754565][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.762736][ T1241] device bridge_slave_1 left promiscuous mode [ 637.779046][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.788546][ T1241] device bridge_slave_0 left promiscuous mode [ 637.794733][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.810993][ T1241] device veth1_macvtap left promiscuous mode [ 637.818432][ T1241] device veth0_macvtap left promiscuous mode [ 637.825174][ T1241] device veth1_vlan left promiscuous mode [ 637.830975][ T1241] device veth0_vlan left promiscuous mode [ 637.838263][ T1241] device veth1_macvtap left promiscuous mode [ 637.844725][ T1241] device veth0_macvtap left promiscuous mode [ 637.850800][ T1241] device veth1_vlan left promiscuous mode [ 637.855427][ T5898] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 637.856719][ T1241] device veth0_vlan left promiscuous mode [ 638.229659][ T5898] usb 5-1: New USB device found, idVendor=9710, idProduct=7843, bcdDevice= 7.b4 [ 638.241545][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.252469][ T1241] team0 (unregistering): Port device team_slave_1 removed [ 638.264987][ T5898] usb 5-1: config 0 descriptor?? [ 638.279887][ T1241] team0 (unregistering): Port device team_slave_0 removed [ 638.292441][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.302487][ T5898] mos7840 5-1:0.0: required endpoints missing [ 638.327741][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.408679][ T1241] bond0 (unregistering): Released all slaves [ 638.511920][ T4766] usb 5-1: USB disconnect, device number 21 [ 638.570990][ T1241] team0 (unregistering): Port device team_slave_1 removed [ 638.585370][ T1241] team0 (unregistering): Port device team_slave_0 removed [ 638.600488][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.618507][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.698991][ T1241] bond0 (unregistering): Released all slaves [ 638.778610][ T4769] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 638.837687][ T4769] asix: probe of 1-1:0.0 failed with error -71 [ 638.863416][ T4769] usb 1-1: USB disconnect, device number 23 [ 638.949657][ T3780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.959120][ T3780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.991985][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 639.003472][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.040270][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.133281][ T4769] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 639.192652][T10769] chnl_net:caif_netlink_parms(): no params data found [ 639.375319][T10782] 9pnet: Insufficient options for proto=fd [ 640.016176][ T5549] Bluetooth: hci3: command 0x0409 tx timeout [ 640.167967][ T5898] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 640.186327][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.193417][T10769] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.211616][T10769] device bridge_slave_0 entered promiscuous mode [ 640.229151][T10769] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.244367][T10769] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.255893][T10769] device bridge_slave_1 entered promiscuous mode [ 640.382794][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.328907][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.473278][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.497164][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.518635][ T5898] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 641.537733][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.568394][ T5898] usb 3-1: config 0 descriptor?? [ 641.756235][T10769] team0: Port device team_slave_0 added [ 641.769311][T10769] team0: Port device team_slave_1 added [ 641.844812][T10769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.851773][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.879100][T10769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.923871][T10769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.957777][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.002004][T10769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.034920][ T4769] Bluetooth: hci3: command 0x041b tx timeout [ 642.067253][ T5898] hid-led 0003:1D34:000A.0017: unknown main item tag 0x0 [ 642.133284][T10769] device hsr_slave_0 entered promiscuous mode [ 642.151693][T10769] device hsr_slave_1 entered promiscuous mode [ 642.176571][T10769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 642.204824][T10769] Cannot create hsr debugfs directory [ 642.283987][ T5898] hid-led 0003:1D34:000A.0017: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 642.344524][ T5898] hid-led 0003:1D34:000A.0017: Dream Cheeky Webmail Notifier initialized [ 642.855232][T10561] usb 3-1: USB disconnect, device number 23 [ 643.457528][T10769] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.577430][T10769] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.628721][T10806] loop4: detected capacity change from 0 to 40427 [ 643.669891][T10769] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.752997][T10806] F2FS-fs (loop4): invalid crc value [ 643.784302][T10816] loop3: detected capacity change from 0 to 4096 [ 643.812014][T10806] F2FS-fs (loop4): Found nat_bits in checkpoint [ 643.822049][T10816] ntfs3: loop3: ino=3, Correct links count -> 2. [ 643.987713][T10806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 643.998133][T10769] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.024486][ T4769] Bluetooth: hci3: command 0x040f tx timeout [ 644.852477][T10816] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 644.910764][T10816] ntfs3: loop3: failed to convert "0080" to macinuit [ 644.937106][T10816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1580'. [ 645.009539][T10769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 645.125441][T10769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 645.191080][T10769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 645.215222][T10769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 645.446314][T10832] netlink: 'syz.3.1598': attribute type 21 has an invalid length. [ 645.567448][T10769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.658894][T10843] Unsupported ieee802154 address type: 0 [ 645.804519][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 645.824465][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.975068][T10769] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.039328][T10840] loop4: detected capacity change from 0 to 512 [ 646.092252][ T4770] Bluetooth: hci3: command 0x0419 tx timeout [ 646.295845][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 646.313888][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.332546][ T4771] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.339602][ T4771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.024525][T10849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1590'. [ 647.178067][T10769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 647.246349][T10850] loop3: detected capacity change from 0 to 8 [ 647.629709][T10840] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 647.656469][T10769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.685524][T10840] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 647.724662][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 647.742964][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 647.789759][T10850] SQUASHFS error: Failed to read block 0x260685: -5 [ 647.806037][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 647.829490][T10850] SQUASHFS error: Unable to read metadata cache entry [260685] [ 647.844250][ T4766] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.847807][T10840] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 647.851439][ T4766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.875380][T10850] SQUASHFS error: Unable to read directory block [260685:0] [ 647.891501][T10856] SQUASHFS error: Unable to read metadata cache entry [260685] [ 647.905131][T10840] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28 [ 647.917700][T10856] SQUASHFS error: Unable to read directory block [260685:0] [ 647.928592][T10850] SQUASHFS error: Unable to read metadata cache entry [260685] [ 647.949296][T10840] EXT4-fs (loop4): This should not happen!! Data will be lost [ 647.949296][T10840] [ 647.960722][T10850] SQUASHFS error: Unable to read directory block [260685:0] [ 647.984498][T10840] EXT4-fs (loop4): Total free blocks count 0 [ 647.991089][T10857] SQUASHFS error: Unable to read metadata cache entry [260685] [ 647.998786][T10840] EXT4-fs (loop4): Free/Dirty block details [ 647.999619][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 648.005163][T10857] SQUASHFS error: Unable to read directory block [260685:0] [ 648.015192][T10840] EXT4-fs (loop4): free_blocks=39626 [ 648.023649][T10855] loop0: detected capacity change from 0 to 4096 [ 648.047799][T10850] SQUASHFS error: Unable to read metadata cache entry [260685] [ 648.050804][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 648.058785][T10850] SQUASHFS error: Unable to read directory block [260685:0] [ 648.071267][T10840] EXT4-fs (loop4): dirty_blocks=1 [ 648.077550][T10850] SQUASHFS error: Unable to read metadata cache entry [260685] [ 648.096536][T10855] ntfs3: Unknown parameter 'dicard' [ 648.115415][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 648.122084][T10850] SQUASHFS error: Unable to read directory block [260685:0] [ 648.131910][T10840] EXT4-fs (loop4): Block reservation details [ 648.139444][T10840] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 648.171644][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 648.203214][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 648.263279][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 648.279460][T10850] SQUASHFS error: Unable to read metadata cache entry [260685] [ 648.286701][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 648.301960][T10855] loop0: detected capacity change from 0 to 2048 [ 648.314050][T10850] SQUASHFS error: Unable to read directory block [260685:0] [ 648.325586][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 648.327111][T10859] loop2: detected capacity change from 0 to 8192 [ 648.356780][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 648.377510][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 648.394944][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 648.423296][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 648.454477][T10859] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 648.486096][T10859] REISERFS (device loop2): using ordered data mode [ 648.492714][T10859] reiserfs: using flush barriers [ 648.504333][T10859] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 648.522245][T10859] REISERFS (device loop2): checking transaction log (loop2) [ 648.533724][T10859] REISERFS (device loop2): Using r5 hash to sort names [ 648.540873][T10859] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 648.713928][T10865] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2117, free_space(entry_count) 2 [ 650.329953][T10868] loop4: detected capacity change from 0 to 512 [ 650.391369][T10865] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 650.488603][T10868] EXT4-fs (loop4): Ignoring removed orlov option [ 650.495356][T10868] EXT4-fs (loop4): Test dummy encryption mode enabled [ 650.513894][T10865] REISERFS (device loop2): Remounting filesystem read-only [ 650.548479][T10868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 650.561766][T10877] loop3: detected capacity change from 0 to 2048 [ 650.566885][T10868] System zones: 1-12 [ 650.571155][T10865] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 650.593971][T10868] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1594: casefold flag without casefold feature [ 650.646050][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 650.654060][T10868] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1594: missing EA_INODE flag [ 650.687455][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 650.716260][T10877] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 650.728327][T10859] REISERFS warning (device loop2): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS [ 650.739574][T10868] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1594: error while reading EA inode 12 err=-117 [ 650.758732][T10769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.776277][T10877] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038 (0x7fffffff) [ 650.779491][T10868] EXT4-fs (loop4): 1 orphan inode deleted [ 650.808758][T10868] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 650.855670][T10859] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2117, free_space(entry_count) 2 [ 650.881640][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 650.887672][T10859] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 650.897911][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 650.909655][T10859] REISERFS error (device loop2): zam-7001 reiserfs_find_entry: io error [ 651.112289][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.121533][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.132703][T10769] device veth0_vlan entered promiscuous mode [ 651.140575][ T5895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.148804][ T5895] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.635180][T10769] device veth1_vlan entered promiscuous mode [ 651.738782][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 652.093148][T10893] netlink: 'syz.4.1602': attribute type 2 has an invalid length. [ 653.358176][T10897] 9pnet: Insufficient options for proto=fd [ 653.622004][T10769] device veth0_macvtap entered promiscuous mode [ 653.647204][T10769] device veth1_macvtap entered promiscuous mode [ 653.853248][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 653.871981][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 653.883807][T10902] binder: 10901:10902 ioctl 4018620d 0 returned -22 [ 653.917888][T10902] loop2: detected capacity change from 0 to 8 [ 653.922741][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 653.937812][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1602'. [ 654.100342][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 654.144579][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.207082][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.285024][T10907] Cannot find add_set index 0 as target [ 654.364195][ T5895] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 654.507494][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.569248][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.621808][ T26] audit: type=1326 audit(1723708174.154:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 654.658080][ T5895] usb 3-1: Using ep0 maxpacket: 8 [ 654.698260][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.728230][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.741360][T10909] loop3: detected capacity change from 0 to 512 [ 654.750923][T10913] loop4: detected capacity change from 0 to 512 [ 654.755416][ T26] audit: type=1326 audit(1723708174.154:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 654.784940][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.802774][ T5895] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 654.825410][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.832879][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.858953][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 654.871125][ T5895] usb 3-1: config 0 descriptor?? [ 654.886367][ T26] audit: type=1326 audit(1723708174.154:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 654.917033][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 654.941563][T10915] loop0: detected capacity change from 0 to 512 [ 654.945850][ T26] audit: type=1326 audit(1723708174.154:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 654.967563][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.011159][ T26] audit: type=1326 audit(1723708174.154:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 655.020733][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.080163][T10769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.103799][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 655.108687][ T26] audit: type=1326 audit(1723708174.154:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 655.142755][ T4770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.143377][T10913] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 655.214602][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.242785][T10913] EXT4-fs error (device loop4): __ext4_iget:4861: inode #11: block 1: comm syz.4.1606: invalid block [ 655.339125][T10913] EXT4-fs (loop4): Remounting filesystem read-only [ 655.348804][T10915] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 655.395169][T10913] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1606: couldn't read orphan inode 11 (err -117) [ 655.427458][T10915] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 655.438709][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.450277][ T26] audit: type=1326 audit(1723708174.154:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 655.467821][T10913] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 655.496585][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.512468][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.600986][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.817138][ T26] audit: type=1326 audit(1723708174.154:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 655.945976][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.995524][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.074531][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.085376][ T26] audit: type=1326 audit(1723708174.154:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 656.146878][ T5895] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 656.172957][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.201618][ T5895] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 656.238430][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.259780][ T26] audit: type=1326 audit(1723708174.154:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.3.1604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe26ebfe9b9 code=0x7ffc0000 [ 656.298892][T10769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.309518][T10769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.317771][ T5895] asix: probe of 3-1:0.0 failed with error -71 [ 656.321957][T10769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.334637][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 656.343856][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 656.356163][T10769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.365802][T10769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.374514][T10769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.386903][T10769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.422815][ T5895] usb 3-1: USB disconnect, device number 24 [ 660.240596][T10935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.325901][T10951] loop0: detected capacity change from 0 to 1024 [ 660.337533][T10935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.377431][ T7578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.426027][ T7578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.448796][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 660.463336][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 661.412461][T10967] tipc: Enabling of bearer rejected, media not registered [ 661.681846][T10972] loop3: detected capacity change from 0 to 512 [ 661.716889][T10973] loop0: detected capacity change from 0 to 128 [ 661.769058][T10972] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 661.832131][T10953] loop2: detected capacity change from 0 to 32768 [ 661.855947][T10972] EXT4-fs (loop3): 1 truncate cleaned up [ 661.861844][T10972] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 661.896342][T10953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1616 (10953) [ 661.958034][T10953] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 661.998467][T10973] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 662.011902][T10953] BTRFS info (device loop2): setting nodatacow, compression disabled [ 662.022456][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 662.022470][ T26] audit: type=1800 audit(1723708181.952:272): pid=10977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1619" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 662.063508][T10973] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff) [ 662.072583][T10953] BTRFS info (device loop2): enabling auto defrag [ 662.090515][T10953] BTRFS info (device loop2): max_inline at 0 [ 662.182247][T10953] BTRFS info (device loop2): using free space tree [ 662.216357][T10953] BTRFS info (device loop2): has skinny extents [ 662.342154][ T26] audit: type=1326 audit(1723708182.288:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce582f89b9 code=0x7ffc0000 [ 662.473184][ T26] audit: type=1326 audit(1723708182.351:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce582f89b9 code=0x7ffc0000 [ 662.535384][ T26] audit: type=1326 audit(1723708182.351:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fce582f89b9 code=0x7ffc0000 [ 662.622699][T10983] loop4: detected capacity change from 0 to 512 [ 662.788128][ T26] audit: type=1326 audit(1723708182.351:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce582f89b9 code=0x7ffc0000 [ 662.816112][ T26] audit: type=1326 audit(1723708182.351:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce582f89b9 code=0x7ffc0000 [ 664.822950][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 664.912095][ T26] audit: type=1326 audit(1723708182.351:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fce582f89b9 code=0x7ffc0000 [ 665.016544][ T26] audit: type=1326 audit(1723708182.351:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce582f89b9 code=0x7ffc0000 [ 665.070213][ T26] audit: type=1326 audit(1723708182.351:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce582f89b9 code=0x7ffc0000 [ 665.101193][ T26] audit: type=1326 audit(1723708182.351:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10980 comm="syz.4.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fce582f89b9 code=0x7ffc0000 [ 665.241409][ T1241] device hsr_slave_0 left promiscuous mode [ 665.263954][ T1241] device hsr_slave_1 left promiscuous mode [ 665.276952][T10953] BTRFS error (device loop2): open_ctree failed [ 667.432931][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.450820][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.465196][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.505090][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.549493][ T1241] device bridge_slave_1 left promiscuous mode [ 667.564889][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.592413][ T1241] device bridge_slave_0 left promiscuous mode [ 667.598809][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.647683][ T1241] device veth1_macvtap left promiscuous mode [ 667.664818][ T1241] device veth0_macvtap left promiscuous mode [ 667.675022][ T1241] device veth1_vlan left promiscuous mode [ 667.683204][ T1241] device veth0_vlan left promiscuous mode [ 670.084399][T11048] loop2: detected capacity change from 0 to 1764 [ 670.373950][ T1241] team0 (unregistering): Port device team_slave_1 removed [ 670.405255][ T1241] team0 (unregistering): Port device team_slave_0 removed [ 670.427246][ T1241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.479870][ T1241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.670619][ T1241] bond0 (unregistering): Released all slaves [ 670.764640][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 670.782788][T11061] loop3: detected capacity change from 0 to 8192 [ 670.815322][T11061] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 670.858138][T11061] REISERFS (device loop3): using ordered data mode [ 670.865164][T11061] reiserfs: using flush barriers [ 670.882008][T11061] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 670.905911][T11061] REISERFS (device loop3): checking transaction log (loop3) [ 670.918560][T11061] REISERFS (device loop3): Using r5 hash to sort names [ 670.927176][T11061] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 671.155683][T11061] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2117, free_space(entry_count) 2 [ 671.171975][T11061] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 671.188272][T11061] REISERFS (device loop3): Remounting filesystem read-only [ 671.198264][T11061] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 673.225326][T11061] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2117, free_space(entry_count) 2 [ 673.352440][T11061] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 673.363470][T11061] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error [ 673.454261][T11077] device syzkaller0 entered promiscuous mode [ 673.591909][T11083] loop4: detected capacity change from 0 to 64 [ 675.419667][T11091] device syzkaller0 entered promiscuous mode [ 675.555891][T11098] loop1: detected capacity change from 0 to 2048 [ 675.576190][T11100] loop3: detected capacity change from 0 to 512 [ 675.657948][T11098] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 675.674777][T11098] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 730.547904][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 730.590347][ T9164] Bluetooth: hci2: command 0x0406 tx timeout [ 748.559290][T11126] loop2: detected capacity change from 0 to 40427 [ 749.671796][ T9164] Bluetooth: hci4: command 0x0406 tx timeout [ 750.702798][T11132] chnl_net:caif_netlink_parms(): no params data found [ 750.763485][T11129] chnl_net:caif_netlink_parms(): no params data found [ 750.801665][T11128] chnl_net:caif_netlink_parms(): no params data found [ 751.342207][ T9164] Bluetooth: hci7: command 0x0409 tx timeout [ 751.350411][ T9164] Bluetooth: hci6: command 0x0409 tx timeout [ 751.380477][ T9164] Bluetooth: hci5: command 0x0409 tx timeout [ 753.324112][ T9166] Bluetooth: hci5: command 0x041b tx timeout [ 753.330211][ T9166] Bluetooth: hci6: command 0x041b tx timeout [ 753.346374][ T9166] Bluetooth: hci7: command 0x041b tx timeout [ 755.305960][ T4770] Bluetooth: hci7: command 0x040f tx timeout [ 755.312067][ T4770] Bluetooth: hci6: command 0x040f tx timeout [ 755.327963][ T4770] Bluetooth: hci5: command 0x040f tx timeout [ 757.287814][ T4770] Bluetooth: hci5: command 0x0419 tx timeout [ 757.297953][ T4770] Bluetooth: hci6: command 0x0419 tx timeout [ 757.314202][ T4770] Bluetooth: hci7: command 0x0419 tx timeout [ 760.413039][ T4770] Bluetooth: hci8: command 0x0409 tx timeout [ 760.489407][ T4770] Bluetooth: hci9: command 0x0409 tx timeout [ 762.394982][ T9166] Bluetooth: hci8: command 0x041b tx timeout [ 762.471131][ T9166] Bluetooth: hci9: command 0x041b tx timeout [ 764.376814][ T4770] Bluetooth: hci8: command 0x040f tx timeout [ 764.453062][ T4770] Bluetooth: hci9: command 0x040f tx timeout [ 766.358608][ T4770] Bluetooth: hci8: command 0x0419 tx timeout [ 766.434952][ T4770] Bluetooth: hci9: command 0x0419 tx timeout [ 791.286452][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.070072][T11128] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.077315][T11128] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.091284][T11128] device bridge_slave_0 entered promiscuous mode [ 808.206407][ T4767] Bluetooth: hci2: command 0x0409 tx timeout [ 808.212526][ T4767] Bluetooth: hci0: command 0x0409 tx timeout [ 808.282789][ T4767] Bluetooth: hci3: command 0x0409 tx timeout [ 810.187816][ T4767] Bluetooth: hci0: command 0x041b tx timeout [ 810.197199][ T4767] Bluetooth: hci2: command 0x041b tx timeout [ 810.264754][ T4767] Bluetooth: hci3: command 0x041b tx timeout [ 812.170081][ T4767] Bluetooth: hci2: command 0x040f tx timeout [ 812.178502][ T4767] Bluetooth: hci0: command 0x040f tx timeout [ 812.246625][ T4767] Bluetooth: hci3: command 0x040f tx timeout [ 814.152022][ T4767] Bluetooth: hci0: command 0x0419 tx timeout [ 814.161298][ T4767] Bluetooth: hci2: command 0x0419 tx timeout [ 814.228411][ T4767] Bluetooth: hci3: command 0x0419 tx timeout [ 817.658426][ T4767] Bluetooth: hci4: command 0x0409 tx timeout [ 817.734689][ T4767] Bluetooth: hci10: command 0x0409 tx timeout [ 819.640255][ T3615] Bluetooth: hci4: command 0x041b tx timeout [ 819.716452][ T3615] Bluetooth: hci10: command 0x041b tx timeout [ 821.622102][ T4767] Bluetooth: hci4: command 0x040f tx timeout [ 821.698246][ T4767] Bluetooth: hci10: command 0x040f tx timeout [ 823.603994][ T4767] Bluetooth: hci4: command 0x0419 tx timeout [ 823.680190][ T4767] Bluetooth: hci10: command 0x0419 tx timeout [ 842.151451][T11128] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.181148][T11128] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.227019][T11128] device bridge_slave_1 entered promiscuous mode [ 849.827789][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 866.289863][ T4771] Bluetooth: hci5: command 0x0409 tx timeout [ 866.366467][ T4771] Bluetooth: hci6: command 0x0409 tx timeout [ 866.442900][ T4771] Bluetooth: hci7: command 0x0409 tx timeout [ 868.272097][ T4771] Bluetooth: hci5: command 0x041b tx timeout [ 868.348390][ T4771] Bluetooth: hci6: command 0x041b tx timeout [ 868.424802][ T4771] Bluetooth: hci7: command 0x041b tx timeout [ 870.253977][ T4767] Bluetooth: hci5: command 0x040f tx timeout [ 870.330266][ T4767] Bluetooth: hci6: command 0x040f tx timeout [ 870.406624][ T4767] Bluetooth: hci7: command 0x040f tx timeout [ 872.235910][ T4771] Bluetooth: hci5: command 0x0419 tx timeout [ 872.312012][ T4771] Bluetooth: hci6: command 0x0419 tx timeout [ 872.388495][ T4771] Bluetooth: hci7: command 0x0419 tx timeout [ 875.818516][ T4767] Bluetooth: hci11: command 0x0409 tx timeout [ 875.894695][ T4767] Bluetooth: hci12: command 0x0409 tx timeout [ 876.199548][ T4767] Bluetooth: hci9: command 0x0406 tx timeout [ 876.209366][ T4767] Bluetooth: hci8: command 0x0406 tx timeout [ 877.800331][ T4767] Bluetooth: hci11: command 0x041b tx timeout [ 877.876776][ T4767] Bluetooth: hci12: command 0x041b tx timeout [ 879.782167][ T4767] Bluetooth: hci11: command 0x040f tx timeout [ 879.858454][ T4767] Bluetooth: hci12: command 0x040f tx timeout [ 881.764178][ T4771] Bluetooth: hci11: command 0x0419 tx timeout [ 881.840268][ T4771] Bluetooth: hci12: command 0x0419 tx timeout [ 908.376491][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 923.307031][ T3615] Bluetooth: hci13: command 0x0409 tx timeout [ 924.374118][ T3615] Bluetooth: hci14: command 0x0409 tx timeout [ 924.450479][ T3615] Bluetooth: hci15: command 0x0409 tx timeout [ 924.984059][ T3615] Bluetooth: hci0: command 0x0406 tx timeout [ 924.990148][ T3615] Bluetooth: hci2: command 0x0406 tx timeout [ 925.011659][ T3615] Bluetooth: hci3: command 0x0406 tx timeout [ 925.288928][ T3615] Bluetooth: hci13: command 0x041b tx timeout [ 926.355993][ T3615] Bluetooth: hci14: command 0x041b tx timeout [ 926.432299][ T3615] Bluetooth: hci15: command 0x041b tx timeout [ 927.270351][ T3615] Bluetooth: hci13: command 0x040f tx timeout [ 928.337833][ T4771] Bluetooth: hci14: command 0x040f tx timeout [ 928.414172][ T4771] Bluetooth: hci15: command 0x040f tx timeout [ 929.252618][ T4771] Bluetooth: hci13: command 0x0419 tx timeout [ 930.319889][ T3615] Bluetooth: hci14: command 0x0419 tx timeout [ 930.395915][ T3615] Bluetooth: hci15: command 0x0419 tx timeout [ 934.740874][ T3615] Bluetooth: hci4: command 0x0406 tx timeout [ 934.746955][ T3615] Bluetooth: hci10: command 0x0406 tx timeout [ 966.918305][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 981.543677][ T27] INFO: task kworker/u4:4:1241 blocked for more than 143 seconds. [ 981.551517][ T27] Not tainted 5.15.164-syzkaller #0 [ 981.570291][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 981.580631][ T27] task:kworker/u4:4 state:D stack:19832 pid: 1241 ppid: 2 flags:0x00004000 [ 981.600762][ T27] Workqueue: netns cleanup_net [ 981.605580][ T27] Call Trace: [ 981.608878][ T27] [ 981.623247][ T27] __schedule+0x12c4/0x45b0 [ 981.627828][ T27] ? release_firmware_map_entry+0x190/0x190 [ 981.644699][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 981.654001][ T27] ? kthread_data+0x4e/0xc0 [ 981.667333][ T27] ? wq_worker_sleeping+0x5d/0x200 [ 981.672481][ T27] schedule+0x11b/0x1f0 [ 981.676659][ T27] schedule_preempt_disabled+0xf/0x20 [ 981.692569][ T27] __mutex_lock_common+0xe34/0x25a0 [ 981.701868][ T27] ? rcu_barrier+0x9c/0x4e0 [ 981.713484][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 981.723202][ T27] ? cleanup_net+0x817/0xb60 [ 981.733861][ T27] mutex_lock_nested+0x17/0x20 [ 981.738655][ T27] rcu_barrier+0x9c/0x4e0 [ 981.742994][ T27] ? cond_synchronize_rcu+0x20/0x20 [ 981.757597][ T27] ? ops_free_list+0x30d/0x340 [ 981.762393][ T27] cleanup_net+0x81c/0xb60 [ 981.779364][ T27] ? ops_free_list+0x340/0x340 [ 981.789003][ T27] process_one_work+0x8a1/0x10c0 [ 981.800012][ T27] ? worker_detach_from_pool+0x260/0x260 [ 981.811132][ T27] ? _raw_spin_lock_irqsave+0x120/0x120 [ 981.816717][ T27] ? kthread_data+0x4e/0xc0 [ 981.832517][ T27] ? wq_worker_running+0x97/0x170 [ 981.837610][ T27] worker_thread+0xaca/0x1280 [ 981.857905][ T27] kthread+0x3f6/0x4f0 [ 981.862012][ T27] ? rcu_lock_release+0x20/0x20 [ 981.866884][ T27] ? kthread_blkcg+0xd0/0xd0 [ 981.883136][ T27] ret_from_fork+0x1f/0x30 [ 981.892237][ T27] [ 981.895362][ T27] INFO: task syz.2.1659:11126 blocked for more than 143 seconds. [ 981.915098][ T27] Not tainted 5.15.164-syzkaller #0 [ 981.920856][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 981.938911][ T27] task:syz.2.1659 state:D stack:24704 pid:11126 ppid: 10665 flags:0x00004006 [ 981.958429][ T27] Call Trace: [ 981.961742][ T27] [ 981.969699][ T27] __schedule+0x12c4/0x45b0 [ 981.980168][ T27] ? release_firmware_map_entry+0x190/0x190 [ 981.997800][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 982.003717][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 982.009552][ T27] schedule+0x11b/0x1f0 [ 982.024388][ T27] schedule_preempt_disabled+0xf/0x20 [ 982.034648][ T27] __mutex_lock_common+0xe34/0x25a0 [ 982.045623][ T27] ? rcu_barrier+0x9c/0x4e0 [ 982.054673][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 982.065445][ T27] ? wake_up_q+0x9f/0xd0 [ 982.074180][ T27] ? __mutex_unlock_slowpath+0x6f6/0x750 [ 982.088303][ T27] mutex_lock_nested+0x17/0x20 [ 982.093095][ T27] rcu_barrier+0x9c/0x4e0 [ 982.109384][ T27] ? mark_lock+0x98/0x340 [ 982.113850][ T27] ? cond_synchronize_rcu+0x20/0x20 [ 982.130202][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 982.141027][ T27] netdev_run_todo+0x381/0xc40 [ 982.152004][ T27] ? kasan_quarantine_put+0xd4/0x220 [ 982.171777][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 982.177668][ T27] ? netdev_refcnt_read+0x50/0x50 [ 982.192982][ T27] ? netdev_state_change+0xa3/0x250 [ 982.198347][ T27] ? netdev_features_change+0x1b0/0x1b0 [ 982.215296][ T27] ? slab_free_freelist_hook+0xdd/0x160 [ 982.226488][ T27] ? tun_chr_close+0x104/0x1b0 [ 982.237517][ T27] ? kfree+0xf1/0x270 [ 982.246612][ T27] tun_chr_close+0x136/0x1b0 [ 982.257062][ T27] ? tun_chr_open+0x4d0/0x4d0 [ 982.266598][ T27] __fput+0x3fe/0x8e0 [ 982.276790][ T27] task_work_run+0x129/0x1a0 [ 982.281950][ T27] do_exit+0x6a3/0x2480 [ 982.286134][ T27] ? put_task_struct+0x80/0x80 [ 982.303948][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 982.314750][ T27] do_group_exit+0x144/0x310 [ 982.330059][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 982.340118][ T27] get_signal+0xc66/0x14e0 [ 982.350447][ T27] arch_do_signal_or_restart+0xc3/0x1890 [ 982.360862][ T27] ? print_irqtrace_events+0x210/0x210 [ 982.372231][ T27] ? cpu_online+0x40/0x40 [ 982.376602][ T27] ? get_sigframe_size+0x10/0x10 [ 982.381557][ T27] ? __might_sleep+0xc0/0xc0 [ 982.402556][ T27] ? exit_to_user_mode_loop+0x39/0x130 [ 982.408059][ T27] exit_to_user_mode_loop+0x97/0x130 [ 982.423681][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 982.429289][ T27] syscall_exit_to_user_mode+0x5d/0x240 [ 982.446183][ T27] do_syscall_64+0x47/0xb0 [ 982.451097][ T27] ? clear_bhb_loop+0x15/0x70 [ 982.455805][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 982.477240][ T27] RIP: 0033:0x7fbf9699b64a [ 982.481700][ T27] RSP: 002b:00007fbf94e18e50 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 982.500922][ T27] RAX: 0000000000000000 RBX: 00007fbf94e18ef0 RCX: 00007fbf9699b64a [ 982.521372][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 982.534155][ T27] RBP: 00000000200004c0 R08: 0000000000000000 R09: 0000000000005535 [ 982.542146][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000020000040 [ 982.559520][ T27] R13: 00007fbf94e18eb0 R14: 000000000000553b R15: 0000000020001f80 [ 982.570136][ T27] [ 982.580884][ T27] INFO: task syz-executor:11146 blocked for more than 144 seconds. [ 982.600475][ T27] Not tainted 5.15.164-syzkaller #0 [ 982.607746][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 982.628826][ T27] task:syz-executor state:D stack:24600 pid:11146 ppid: 1 flags:0x00004004 [ 982.648115][ T27] Call Trace: [ 982.651759][ T27] [ 982.654721][ T27] __schedule+0x12c4/0x45b0 [ 982.667907][ T27] ? release_firmware_map_entry+0x190/0x190 [ 982.673834][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 982.692106][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 982.703062][ T27] schedule+0x11b/0x1f0 [ 982.711890][ T27] schedule_preempt_disabled+0xf/0x20 [ 982.724668][ T27] __mutex_lock_common+0xe34/0x25a0 [ 982.730901][ T27] ? rcu_barrier+0x9c/0x4e0 [ 982.745866][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 982.751104][ T27] ? wake_up_q+0x9f/0xd0 [ 982.763385][ T27] ? __mutex_unlock_slowpath+0x6f6/0x750 [ 982.769052][ T27] ? __might_sleep+0xc0/0xc0 [ 982.785774][ T27] mutex_lock_nested+0x17/0x20 [ 982.798830][ T27] rcu_barrier+0x9c/0x4e0 [ 982.805855][ T27] ? cond_synchronize_rcu+0x20/0x20 [ 982.819078][ T27] ? unregister_netdevice_many+0x1710/0x18f0 [ 982.829104][ T27] netdev_run_todo+0x381/0xc40 [ 982.848841][ T27] ? alloc_netdev_mqs+0xc10/0xc10 [ 982.853902][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 982.869568][ T27] ? netdev_refcnt_read+0x50/0x50 [ 982.874612][ T27] ? unregister_netdevice_queue+0x258/0x350 [ 982.892428][ T27] ? list_netdevice+0x450/0x450 [ 982.901246][ T27] ip_tunnel_delete_nets+0x2f2/0x330 [ 982.913957][ T27] ? ip_tunnel_bind_dev+0x880/0x880 [ 982.938599][ T27] ? kfree+0xf1/0x270 [ 982.942731][ T27] ? vti_init_net+0xf0/0xf0 [ 982.953410][ T27] setup_net+0x81c/0x9e0 [ 982.957838][ T27] ? copy_net_ns+0x5d0/0x5d0 [ 982.962437][ T27] ? copy_net_ns+0x378/0x5d0 [ 982.976227][ T27] ? copy_net_ns+0x378/0x5d0 [ 982.987874][ T27] ? down_read_killable+0x1d2/0x350 [ 982.997961][ T27] copy_net_ns+0x392/0x5d0 [ 983.008226][ T27] create_new_namespaces+0x425/0x7a0 [ 983.018182][ T27] ? bpf_lsm_capable+0x5/0x10 [ 983.028877][ T27] unshare_nsproxy_namespaces+0x11e/0x170 [ 983.046908][ T27] ksys_unshare+0x580/0xb20 [ 983.055420][ T27] ? unshare_fd+0x240/0x240 [ 983.067192][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 983.077287][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 983.092879][ T27] __x64_sys_unshare+0x34/0x40 [ 983.101558][ T27] do_syscall_64+0x3b/0xb0 [ 983.112895][ T27] ? clear_bhb_loop+0x15/0x70 [ 983.121156][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 983.146069][ T27] RIP: 0033:0x7f3829c8e117 [ 983.150523][ T27] RSP: 002b:00007fffdbd5d638 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 983.171242][ T27] RAX: ffffffffffffffda RBX: 00007f3829e28f40 RCX: 00007f3829c8e117 [ 983.191253][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 983.199679][ T27] RBP: 00007f3829e29a38 R08: 0000000000000000 R09: 0000000000000000 [ 983.217971][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 983.228518][ T27] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 983.246587][ T27] [ 983.251754][ T27] INFO: task syz-executor:11147 blocked for more than 145 seconds. [ 983.267900][ T27] Not tainted 5.15.164-syzkaller #0 [ 983.276701][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 983.295400][ T27] task:syz-executor state:D stack:24600 pid:11147 ppid: 1 flags:0x00004004 [ 983.304952][ T27] Call Trace: [ 983.315687][ T27] [ 983.318653][ T27] __schedule+0x12c4/0x45b0 [ 983.323196][ T27] ? release_firmware_map_entry+0x190/0x190 [ 983.347211][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 983.352712][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 983.369436][ T27] schedule+0x11b/0x1f0 [ 983.391064][ T27] schedule_preempt_disabled+0xf/0x20 [ 983.396788][ T27] __mutex_lock_common+0xe34/0x25a0 [ 983.410851][ T27] ? rcu_barrier+0x9c/0x4e0 [ 983.415370][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 983.430002][ T27] ? __mutex_unlock_slowpath+0x218/0x750 [ 983.435701][ T27] ? __might_sleep+0xc0/0xc0 [ 983.448986][ T27] mutex_lock_nested+0x17/0x20 [ 983.453808][ T27] rcu_barrier+0x9c/0x4e0 [ 983.458158][ T27] ? cond_synchronize_rcu+0x20/0x20 [ 983.487154][ T27] ? unregister_netdevice_many+0x1710/0x18f0 [ 983.493333][ T27] netdev_run_todo+0x381/0xc40 [ 983.506177][ T27] ? alloc_netdev_mqs+0xc10/0xc10 [ 983.511244][ T27] ? netdev_refcnt_read+0x50/0x50 [ 983.525190][ T27] ? unregister_netdevice_queue+0x258/0x350 [ 983.531127][ T27] ? list_netdevice+0x450/0x450 [ 983.545963][ T27] ip_tunnel_delete_nets+0x2f2/0x330 [ 983.551294][ T27] ? ip_tunnel_bind_dev+0x880/0x880 [ 983.563396][ T27] ? kfree+0xf1/0x270 [ 983.571575][ T27] ? vti_init_net+0xf0/0xf0 [ 983.595412][ T27] setup_net+0x81c/0x9e0 [ 983.599791][ T27] ? copy_net_ns+0x5d0/0x5d0 [ 983.614705][ T27] ? copy_net_ns+0x378/0x5d0 [ 983.619319][ T27] ? copy_net_ns+0x378/0x5d0 [ 983.634265][ T27] ? down_read_killable+0x1d2/0x350 [ 983.639501][ T27] copy_net_ns+0x392/0x5d0 [ 983.650209][ T27] create_new_namespaces+0x425/0x7a0 [ 983.655507][ T27] ? bpf_lsm_capable+0x5/0x10 [ 983.672091][ T27] unshare_nsproxy_namespaces+0x11e/0x170 [ 983.683142][ T27] ksys_unshare+0x580/0xb20 [ 983.695460][ T27] ? unshare_fd+0x240/0x240 [ 983.704545][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 983.720862][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 983.731042][ T27] __x64_sys_unshare+0x34/0x40 [ 983.741919][ T27] do_syscall_64+0x3b/0xb0 [ 983.751013][ T27] ? clear_bhb_loop+0x15/0x70 [ 983.762292][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 983.772827][ T27] RIP: 0033:0x7f7386a85117 [ 983.777258][ T27] RSP: 002b:00007ffcdcce7a48 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 983.796680][ T27] RAX: ffffffffffffffda RBX: 00007f7386c1ff40 RCX: 00007f7386a85117 [ 983.810531][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 983.828902][ T27] RBP: 00007f7386c20a38 R08: 0000000000000000 R09: 0000000000000000 [ 983.855838][ T27] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 983.867641][ T27] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 983.886766][ T27] [ 983.891329][ T27] [ 983.891329][ T27] Showing all locks held in the system: [ 983.908492][ T27] 2 locks held by kworker/u4:0/9: [ 983.913547][ T27] 1 lock held by khungtaskd/27: [ 983.928387][ T27] #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 983.944551][ T27] 3 locks held by kworker/u4:4/1241: [ 983.949854][ T27] #0: ffff888011dd5138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 983.971098][ T27] #1: ffffc90004c4fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 983.992382][ T27] #2: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 984.013097][ T27] 2 locks held by getty/3321: [ 984.017922][ T27] #0: ffff888024656098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 984.037887][ T27] #1: ffffc90002bab2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 984.058808][ T27] 3 locks held by kworker/1:13/5895: [ 984.064117][ T27] #0: ffff888011c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 984.086320][ T27] #1: ffffc90003cc7d20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 984.106762][ T27] #2: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 984.128489][ T27] 2 locks held by kworker/1:22/10561: [ 984.133888][ T27] 4 locks held by syz.4.1643/11095: [ 984.150661][ T27] 1 lock held by syz.2.1659/11126: [ 984.161891][ T27] #0: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 984.182010][ T27] 1 lock held by syz-executor/11128: [ 984.187565][ T27] #0: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 984.216730][ T27] 1 lock held by syz-executor/11129: [ 984.230255][ T27] #0: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 984.250344][ T27] 1 lock held by syz-executor/11132: [ 984.255680][ T27] #0: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 984.274750][ T27] 2 locks held by syz-executor/11146: [ 984.282776][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.304486][ T27] #1: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 984.324282][ T27] 2 locks held by syz-executor/11147: [ 984.331661][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.352988][ T27] #1: ffffffff8c923ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x9c/0x4e0 [ 984.373259][ T27] 2 locks held by syz-executor/11162: [ 984.378706][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.401544][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1b/0x1d0 [ 984.410903][ T27] 2 locks held by syz-executor/11163: [ 984.425841][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.444460][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: ip6_tnl_exit_batch_net+0xc0/0x5e0 [ 984.468557][ T27] 3 locks held by syz-executor/11164: [ 984.474062][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.493419][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: sit_exit_batch_net+0xc0/0x480 [ 984.513714][ T27] #2: ffffffff8c7bd390 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many+0x58e/0x18f0 [ 984.535439][ T27] 2 locks held by syz-executor/11170: [ 984.540834][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.563538][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: xfrmi_exit_batch_net+0xb3/0x280 [ 984.582992][ T27] 2 locks held by syz-executor/11172: [ 984.588473][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.607894][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: vti6_exit_batch_net+0xb0/0x410 [ 984.627229][ T27] 2 locks held by syz-executor/11200: [ 984.635360][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.658000][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 984.678515][ T27] 2 locks held by syz-executor/11207: [ 984.683906][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.702946][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 984.723273][ T27] 2 locks held by syz-executor/11209: [ 984.731105][ T27] #0: ffffffff8da24d10 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 984.751553][ T27] #1: ffffffff8da308c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x80/0x270 [ 984.773196][ T27] 3 locks held by syz-executor/11211: [ 984.780211][ T27] #0: ffff888024c6c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 984.800542][ T27] #1: ffff88807eb553b0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 984.829579][ T27] #2: ffff88814b4b8990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570 [ 984.849722][ T27] 2 locks held by syz-executor/11212: [ 984.855129][ T27] #0: ffff888024c6c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 984.875979][ T27] #1: ffff88807eb553b0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 984.897201][ T27] 2 locks held by syz-executor/11221: [ 984.902977][ T27] #0: ffff888024c6c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 SYZFAIL: failed to recv rpc [ 984.922389][ T27] #1: ffff88807eb553b0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530 [ 984.945536][ T27] 2 locks held by syz-executor/11222: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 985.078327][ T27] 1 lock held by syz-executor/11223: [ 985.164157][ T27] [ 985.166533][ T27] ============================================= [ 985.166533][ T27] [ 985.256135][ T27] NMI backtrace for cpu 0 [ 985.260512][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0 [ 985.268501][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 985.278566][ T27] Call Trace: [ 985.281849][ T27] [ 985.284783][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 985.289477][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 985.295122][ T27] ? panic+0x860/0x860 [ 985.299216][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 985.304345][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 985.309300][ T27] ? __wake_up_klogd+0xd5/0x100 [ 985.314173][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 985.320352][ T27] ? _printk+0xd1/0x120 [ 985.324518][ T27] ? panic+0x860/0x860 [ 985.328599][ T27] ? __wake_up_klogd+0xcc/0x100 [ 985.333466][ T27] ? panic+0x860/0x860 [ 985.337566][ T27] ? __rcu_read_unlock+0x92/0x100 [ 985.342623][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 985.348702][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 985.354702][ T27] watchdog+0xe72/0xeb0 [ 985.358879][ T27] kthread+0x3f6/0x4f0 [ 985.362954][ T27] ? hungtask_pm_notify+0x50/0x50 [ 985.367984][ T27] ? kthread_blkcg+0xd0/0xd0 [ 985.372587][ T27] ret_from_fork+0x1f/0x30 [ 985.377044][ T27] [ 985.380983][ T27] Sending NMI from CPU 0 to CPUs 1: [ 985.386400][ C1] NMI backtrace for cpu 1 [ 985.386411][ C1] CPU: 1 PID: 11095 Comm: syz.4.1643 Not tainted 5.15.164-syzkaller #0 [ 985.386428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 985.386438][ C1] RIP: 0010:memset_erms+0xb/0x10 [ 985.386461][ C1] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 985.386476][ C1] RSP: 0018:ffffc90002e35d20 EFLAGS: 00000202 [ 985.386491][ C1] RAX: 0000000000000000 RBX: ffffc90002e35e30 RCX: 0000000000000000 [ 985.386503][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90002e35e40 [ 985.386514][ C1] RBP: ffffffff8e6ab432 R08: dffffc0000000000 R09: ffffc90002e35e30 [ 985.386527][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1cd5686 [ 985.386539][ C1] R13: 1ffffffff1cd5686 R14: ffffffff8e6ab42e R15: ffffc90002e35de0 [ 985.386553][ C1] FS: 00007fce567336c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 985.386568][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 985.386580][ C1] CR2: 0000001b33a10ff8 CR3: 000000004cfb4000 CR4: 00000000003506e0 [ 985.386596][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 985.386606][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 985.386616][ C1] Call Trace: [ 985.386622][ C1] [ 985.386628][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 985.386646][ C1] ? read_lock_is_recursive+0x10/0x10 [ 985.386665][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 985.386684][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 985.386709][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 985.386727][ C1] ? nmi_handle+0xf7/0x370 [ 985.386745][ C1] ? memset_erms+0xb/0x10 [ 985.386762][ C1] ? default_do_nmi+0x62/0x150 [ 985.386792][ C1] ? exc_nmi+0xa8/0x100 [ 985.386807][ C1] ? end_repeat_nmi+0x16/0x31 [ 985.386842][ C1] ? memset_erms+0xb/0x10 [ 985.386858][ C1] ? memset_erms+0xb/0x10 [ 985.386874][ C1] ? memset_erms+0xb/0x10 [ 985.386889][ C1] [ 985.386893][ C1] [ 985.386898][ C1] unwind_next_frame+0xbc8/0x1fa0 [ 985.386918][ C1] ? try_charge_memcg+0x4f4/0x1530 [ 985.386938][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 985.386955][ C1] arch_stack_walk+0x10d/0x140 [ 985.386974][ C1] ? charge_memcg+0x10b/0x340 [ 985.386992][ C1] stack_trace_save+0x113/0x1c0 [ 985.387008][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 985.387029][ C1] ? kmem_cache_free+0x91/0x1f0 [ 985.387045][ C1] kasan_set_track+0x4b/0x80 [ 985.387061][ C1] ? kasan_set_track+0x4b/0x80 [ 985.387077][ C1] ? kasan_set_free_info+0x1f/0x40 [ 985.387091][ C1] ? ____kasan_slab_free+0xd8/0x120 [ 985.387104][ C1] ? slab_free_freelist_hook+0xdd/0x160 [ 985.387121][ C1] ? kmem_cache_free+0x91/0x1f0 [ 985.387135][ C1] ? free_buffer_head+0x45/0xb0 [ 985.387151][ C1] ? try_to_free_buffers+0x464/0x5a0 [ 985.387167][ C1] ? shrink_page_list+0x2dfe/0x7540 [ 985.387184][ C1] ? shrink_lruvec+0x14ae/0x2b90 [ 985.387200][ C1] ? shrink_node+0x10b3/0x26d0 [ 985.387214][ C1] ? do_try_to_free_pages+0x697/0x17b0 [ 985.387231][ C1] ? try_to_free_mem_cgroup_pages+0x44c/0xa60 [ 985.387249][ C1] ? try_charge_memcg+0x4f4/0x1530 [ 985.387284][ C1] ? kasan_quarantine_put+0xd4/0x220 [ 985.387300][ C1] kasan_set_free_info+0x1f/0x40 [ 985.387315][ C1] ____kasan_slab_free+0xd8/0x120 [ 985.387330][ C1] slab_free_freelist_hook+0xdd/0x160 [ 985.387348][ C1] ? free_buffer_head+0x45/0xb0 [ 985.387370][ C1] kmem_cache_free+0x91/0x1f0 [ 985.387389][ C1] free_buffer_head+0x45/0xb0 [ 985.387405][ C1] try_to_free_buffers+0x464/0x5a0 [ 985.387425][ C1] ? sync_dirty_buffer+0x20/0x20 [ 985.387442][ C1] ? buffer_check_dirty_writeback+0x499/0x5c0 [ 985.387459][ C1] ? try_to_release_page+0x2b7/0x360 [ 985.387478][ C1] shrink_page_list+0x2dfe/0x7540 [ 985.387515][ C1] ? reclaim_clean_pages_from_list+0xc40/0xc40 [ 985.387533][ C1] ? isolate_lru_pages+0x137e/0x1630 [ 985.387558][ C1] ? mark_lock+0x98/0x340 [ 985.387579][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 985.387595][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 985.387611][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 985.387628][ C1] shrink_lruvec+0x14ae/0x2b90 [ 985.387666][ C1] ? mem_cgroup_shrink_node+0x8e0/0x8e0 [ 985.387698][ C1] ? __might_sleep+0xc0/0xc0 [ 985.387718][ C1] ? mem_cgroup_iter+0x3b4/0x520 [ 985.387735][ C1] shrink_node+0x10b3/0x26d0 [ 985.387776][ C1] do_try_to_free_pages+0x697/0x17b0 [ 985.387806][ C1] ? try_to_free_pages+0xfd0/0xfd0 [ 985.387824][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 985.387843][ C1] try_to_free_mem_cgroup_pages+0x44c/0xa60 [ 985.387861][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 985.387878][ C1] ? shrink_lruvec+0x2b90/0x2b90 [ 985.387900][ C1] ? psi_task_switch+0x810/0x810 [ 985.387936][ C1] ? cgroup_file_notify+0x10d/0x190 [ 985.387955][ C1] try_charge_memcg+0x4f4/0x1530 [ 985.387984][ C1] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 985.388012][ C1] ? rcu_lock_acquire+0x30/0x30 [ 985.388029][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 985.388047][ C1] charge_memcg+0x10b/0x340 [ 985.388064][ C1] ? __mem_cgroup_charge+0x80/0x80 [ 985.388087][ C1] __mem_cgroup_charge+0x23/0x80 [ 985.388123][ C1] __add_to_page_cache_locked+0xbdb/0x11a0 [ 985.388145][ C1] ? __rmqueue_pcplist+0x2030/0x2030 [ 985.388165][ C1] ? put_page+0x1e0/0x1e0 [ 985.388182][ C1] ? workingset_activation+0x750/0x750 [ 985.388200][ C1] ? alloc_pages+0x458/0x570 [ 985.388222][ C1] add_to_page_cache_lru+0x1b3/0x560 [ 985.388243][ C1] ? add_to_page_cache_locked+0x40/0x40 [ 985.388263][ C1] ? xas_load+0x128/0x140 [ 985.388281][ C1] pagecache_get_page+0xbe0/0x1010 [ 985.388302][ C1] ? page_cache_prev_miss+0x500/0x500 [ 985.388326][ C1] ? unlock_page+0x188/0x200 [ 985.388344][ C1] __getblk_gfp+0x22a/0xaf0 [ 985.388376][ C1] __bread_gfp+0x2a/0x390 [ 985.388395][ C1] bfs_find_entry+0x1c3/0x3f0 [ 985.388419][ C1] bfs_lookup+0x147/0x270 [ 985.388435][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 985.388456][ C1] ? bfs_readdir+0x440/0x440 [ 985.388472][ C1] ? path_openat+0x100a/0x2f20 [ 985.388495][ C1] ? bfs_readdir+0x440/0x440 [ 985.388511][ C1] path_openat+0x111d/0x2f20 [ 985.388547][ C1] ? do_filp_open+0x460/0x460 [ 985.388578][ C1] do_filp_open+0x21c/0x460 [ 985.388597][ C1] ? vfs_tmpfile+0x2e0/0x2e0 [ 985.388627][ C1] ? _raw_spin_unlock+0x24/0x40 [ 985.388644][ C1] ? alloc_fd+0x598/0x630 [ 985.388667][ C1] do_sys_openat2+0x13b/0x4f0 [ 985.388689][ C1] ? do_sys_open+0x220/0x220 [ 985.388712][ C1] __x64_sys_open+0x221/0x270 [ 985.388731][ C1] ? do_sys_openat2+0x4f0/0x4f0 [ 985.388750][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 985.388769][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 985.388787][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 985.388808][ C1] do_syscall_64+0x3b/0xb0 [ 985.388822][ C1] ? clear_bhb_loop+0x15/0x70 [ 985.388841][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 985.388860][ C1] RIP: 0033:0x7fce582f89b9 [ 985.388875][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.388889][ C1] RSP: 002b:00007fce56733038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 985.388905][ C1] RAX: ffffffffffffffda RBX: 00007fce58495130 RCX: 00007fce582f89b9 [ 985.388917][ C1] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000000020000180 [ 985.388928][ C1] RBP: 00007fce583668d8 R08: 0000000000000000 R09: 0000000000000000 [ 985.388939][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.388949][ C1] R13: 0000000000000000 R14: 00007fce58495130 R15: 00007ffff651c6f8 [ 985.388969][ C1] [ 985.713767][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 985.713787][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0 [ 985.713811][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 985.713824][ T27] Call Trace: [ 985.713832][ T27] [ 985.713841][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 985.713870][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 985.713893][ T27] ? panic+0x860/0x860 [ 985.713928][ T27] panic+0x318/0x860 [ 985.713950][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 985.713973][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 985.713999][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 985.714024][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 985.714052][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 985.714074][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 985.714100][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 985.714127][ T27] watchdog+0xeb0/0xeb0 [ 985.714173][ T27] kthread+0x3f6/0x4f0 [ 985.714193][ T27] ? hungtask_pm_notify+0x50/0x50 [ 985.714214][ T27] ? kthread_blkcg+0xd0/0xd0 [ 985.714235][ T27] ret_from_fork+0x1f/0x30 [ 985.714269][ T27] [ 985.714558][ T27] Kernel Offset: disabled [ 986.460214][ T27] Rebooting in 86400 seconds..