last executing test programs: 10m47.827718195s ago: executing program 32 (id=156): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000240)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = fanotify_init(0x10, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fanotify_mark(r1, 0x455, 0x40001000, r2, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000440)={{0x0, 0x0, 0x9}, {0x0, 0x0, 0xf, 0x40, 0x0, 0x0, 0x5, 0x5}, {0x1, 0xeeee8000, 0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83}, {0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xdddd1000, 0x0, 0x0, 0x0, 0xe2, 0x0, 0x3}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x5}, {0xeeee8000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x3}, {0xdddd1000}, {0xdddd1000, 0x1}, 0x0, 0x0, 0x0, 0x100124, 0x0, 0x0, 0x2, [0x4, 0x7, 0x5, 0x3]}) fanotify_mark(r1, 0x80, 0x22, r2, 0x0) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000000000000000000000000000000000380001"], 0x43) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 10m33.699888955s ago: executing program 33 (id=217): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x145c, &(0x7f0000000080)={0x0, 0x0, 0x10180, 0x2000}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x40006252, 0x845e1, 0x8, 0x0, 0x0) 9m51.947473313s ago: executing program 34 (id=362): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./bus\x00', 0x10418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) 8m37.000840695s ago: executing program 35 (id=578): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)={0xfe, "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"}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r2, 0x9, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'hsr0\x00', @ifru_data=0x0}}) 7m58.077361615s ago: executing program 36 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) r4 = socket$kcm(0x21, 0x2, 0x2) dup2(r4, r3) 7m49.034882824s ago: executing program 37 (id=677): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000000000000900000000ff0300000000000008000100ac"], 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x4995, 0x40}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_ECN={0x8}]}}}]}, 0x60}}, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff40}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m43.245401414s ago: executing program 38 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x40, 0x700, 0xf00000, 0x7ff, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x64, 0x0, 0x9, 0x29, 0x0, @broadcast, @loopback}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000640)="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", 0x93d}], 0x1}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m44.737584079s ago: executing program 39 (id=854): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x9, 0x6, 0x0, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x9, @void, @value, @void, @value}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m1.581252214s ago: executing program 40 (id=1137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r5, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32315d}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000380)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x146ead}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x749bc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ca83}) close_range(r0, 0xffffffffffffffff, 0x0) 4m39.505777352s ago: executing program 5 (id=1197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r2, &(0x7f0000000680), 0x4924924924925c6, 0x0) 4m37.632836917s ago: executing program 5 (id=1200): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x6, &(0x7f00000000c0)={0x101, {{0x29, 0x0, 0x43000000, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000ff000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)={0x2, 'vlan0\x00', {}, 0x3}) 4m36.355328793s ago: executing program 5 (id=1205): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @none}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept4(r1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) 4m34.379003154s ago: executing program 41 (id=1209): r0 = socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f01c, 0x2}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000500), 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) 4m34.37003171s ago: executing program 5 (id=1214): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000140)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) prlimit64(0x0, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', 0x0) 4m32.675476656s ago: executing program 5 (id=1217): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x40400, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2028407, &(0x7f0000000040), 0x1, 0x53d, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x1) 4m31.9854956s ago: executing program 5 (id=1221): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x1, 0xc}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4, 0x0, 0x0, @void}, 0x10) 4m31.600310517s ago: executing program 42 (id=1221): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x1, 0xc}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4, 0x0, 0x0, @void}, 0x10) 4m12.712357433s ago: executing program 9 (id=1261): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000380)=0x8) 4m10.679247319s ago: executing program 9 (id=1263): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040), 0x8) shutdown(r3, 0x1) 4m9.368820755s ago: executing program 9 (id=1266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000fffffffbfdff000020030005000000000002000000ac1414aa00000000000000000a0008"], 0xb0}, 0x1, 0x7}, 0x0) 4m7.803373547s ago: executing program 9 (id=1268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) 4m6.743115432s ago: executing program 9 (id=1271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x10000, 0xeeee8000, 0x3}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) 4m6.257749433s ago: executing program 9 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 4m6.048923816s ago: executing program 43 (id=1273): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x18, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340), 0x0, 0x0) umount2(&(0x7f0000000380)='./file0/file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='\x00', &(0x7f0000000480)='./file0/file0\x00', &(0x7f00000004c0), 0x21, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 3m56.833935368s ago: executing program 3 (id=1293): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) fsync(r0) mlockall(0x2) ftruncate(r1, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r2 = gettid() socket(0x2a, 0x2, 0x0) process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 3m56.061519888s ago: executing program 3 (id=1295): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0306003c5c9801288763"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 3m54.408827788s ago: executing program 3 (id=1300): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x98f6}]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000000) accept4(r0, 0x0, 0x0, 0x800) r3 = socket$unix(0x1, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = dup2(r3, r1) close_range(r4, 0xffffffffffffffff, 0x0) 3m53.335599894s ago: executing program 3 (id=1301): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004480)={0x2020}, 0x2020) 3m52.549631165s ago: executing program 3 (id=1302): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(r1, &(0x7f0000000b80)={0x2020}, 0x2020) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/189, 0xbd}], 0x1}, 0x6}], 0x1, 0x2, &(0x7f0000004280)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6}, 0x10) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000100, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3m52.328670003s ago: executing program 3 (id=1303): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x2102, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x50, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m51.909465273s ago: executing program 44 (id=1303): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000440)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x2102, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x50, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m27.037239594s ago: executing program 4 (id=1345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000140)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 3m25.827908988s ago: executing program 4 (id=1348): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}, {0x0, 0x401}, {}, {0x0, 0x9}, {}, {0xe}, {}, {}, {0x0, 0x4}], 0x20}) 3m24.057519057s ago: executing program 4 (id=1350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fanotify_init(0x200, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000100)=ANY=[], 0xfc, 0x2dd, &(0x7f0000000500)="$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") truncate(&(0x7f0000000200)='./file2\x00', 0x7) fanotify_mark(r3, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) 3m22.164833705s ago: executing program 4 (id=1354): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x6e45c, &(0x7f00000001c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c000000002c756e686964880ecafb19b839eaaff56dc1585afdb924b16a73b70fd8c704652c6e6f72f3636b2c6e6f6a6f6c6978742c6d6f64653d3878303030303030303030303030303830302c626c6f636b3d307830303030303030303030303030348d56589d", @ANYRESDEC], 0xff, 0x52c, &(0x7f0000000580)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x4812, &(0x7f0000000040)=ANY=[], 0x11, 0x6ae, &(0x7f0000000400)="$eJzs3c1vHHcZB/DvrF83lRy3TdOAKtU0UkFENHGsFMIlASEUpApV4cDZIk5jZZMGx0VpD8QFJK4c+APKIVzgBEJISEiRyhluFTeLUyUkLj2lPTBoZmfttbtrb5Im69DPJ5qdZ+Y385tnnnnZl8iaAJ9bF05k8m7auXDitVvV9Oadpc7mnaVr3bjVSTKTpJVMdkcprifF+8n5dId8oZrZdFcM286vV89e/OCjzQ+7U5PZ7q96aQ9PcHKUvdhohiwkmWjGD2FHfz96sP5mtsNiqzJVwY73CgfjNpWk3OHHR7dbBikn+iaGXu/Ak6Povm/26V7/88mhJLO9N7SNbmPr8We4r/u6F208ujwAAADgwDh873ZyK3PjzgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeJM3z/4tmaPXihRS95/9P9z1jf3rM6Q63d2azveBu63EkAwAAAAAAAACP1ov38ruLZTnXmy6L+v/8X6onjtSvT+Wt3MxK1vJKbmU561nPWhaTzPd1NH1reX19bbG35idlWQ5Z8/T2/773rXl6xITbD7/PAAAAAAAAAPB/5Fwz/lkuZG7MuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA5FMtEd1cORXjyf1mSS2STT1XIbyT968ZPs7rgTAAAAgMfg8L3cy63M9abLov7Of7T+3j+bt3I961nNejpZyaX6t4Dut/7W5p2lzuadpWvV8Ol+v/Wf7fiPc/umUfeY7m8Pg7d8rF6inctZbZZK3kwnl9Kq16wc6+UzOK93q5yKc11lmZlRCnSpGVd7/qtmfDDM1xWZqitS1ehUk1tVjaf3rkT/0XmALS2mtfXLz5H7qPm5PbdS/Lcsu9Gh3pzkqe/tX/Op+9qZh7K7Eqf7zr6je1ci+fKffv/DK53rV68UGycOzmk0yIuDZ8/8q3eEepXo2shKlvoq8XxTgeo63bsSl28e8EqMqJXntuIL+W5+kBNZyOtZy2p+kuWsZyUL+U4dLTfnc/U6v/c5c37H1Ov7ZTHdHJeJXTl96XB3vFdOL9XrzmU138+buZSVvFr/O53FfD1nciZn+47wcyNc9a0BV/2fhyd//CtN0E7yy2Z8MFR1fbqvrv333Pm6rX9OK2XzzvLMZ3Zv3DL5xSaojsTP+67B8duqxGy23iV62T3bq8DUwEr8pr6t3Oxcv7p2ZfnGrn6LjcHbezk7d//g3Eiq8+WZ6mDVUzvPjqrt2YFti3Xbka221u6237a32va7Uqebz3Cf7ul03fb8wLaluu1YX1v1eWs2yUo+Kcuy+3kLgAPv0FcPTbf/3f57+732L9pX2q/NfnvmGzMvTGfqb1PfnDw18XLrheIPeS8/zf7f0AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3dfPudq8udzsrarqAsy9tDmh5JkMlkx5y//qUJmqe81Q8DGr3DaunzraSeM5kmuL/Ebj/Y7rz7oEX4Z3NMHkvBP5Ngduj5szv4uCzLg5HzKEHZOCj5jCMY3z0JeDxOrl+7cfLm2+98bfVa642VN1aunz1z5uyps2deXTp5ebUzO+70gEeofq+vP+eMOxMAAAAAAAAAAABgVKP9cU7xcH/bAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAQLpzI5N0UWTz1yqlqevPOUqcaevH2kh8naSUpFpLi/eR8ukPm+7orhm1nI7n4wUebH3anJpuhXr6113qj2WiGLCSZaMYDzCY5tHtmeXtYf0Xdz43h/Y2o2NrDqmDHe4WDcftfAAAA//8p+RGB") r2 = creat(&(0x7f0000000240)='./file1\x00', 0x5d) setxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v3={0x3000000, [{0x7ff, 0x8}, {0x7, 0x40}]}, 0x18, 0x2) write$cgroup_type(r2, &(0x7f0000000200), 0x175d9003) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet6(0xa, 0x3, 0x101) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x8, &(0x7f0000000500)={[{@gid={'gid', 0x3d, 0xee01}}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') read$FUSE(r3, &(0x7f0000001780)={0x2020}, 0x2020) 3m19.454641454s ago: executing program 4 (id=1358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bd, &(0x7f0000000680)="$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") 3m18.889497907s ago: executing program 4 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) 3m18.328567521s ago: executing program 45 (id=1359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) 3m15.868299887s ago: executing program 7 (id=1366): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x88) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x83, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffffffffffffff2c, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000100000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3m15.172493901s ago: executing program 7 (id=1369): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_NH_ID={0x8}]}, 0x2c}}, 0x0) 3m13.869351756s ago: executing program 7 (id=1373): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5414, 0x20200007) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket(0x25, 0x800, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1d0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x3ed}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @loopback, 0xffffff00, 0x0, 0xff, 0x1, {@mac=@link_local}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'gretap0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @broadcast, @multicast1, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x418) 3m11.60592063s ago: executing program 7 (id=1377): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$exfat(0x0, &(0x7f0000000180)='./bus\x00', 0x1004030, 0x0, 0xfb, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./bus/file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000300)='./bus/file0\x00', r1, &(0x7f0000000200)='./file1\x00', 0x2) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3m10.90658674s ago: executing program 7 (id=1378): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x2}, 0x14}}, 0x840) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m59.773454768s ago: executing program 7 (id=1402): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r1, 0x0, 0x181) 2m59.403986894s ago: executing program 46 (id=1402): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r1, 0x0, 0x181) 2m1.663200023s ago: executing program 1 (id=1503): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r4, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 1m59.998600859s ago: executing program 1 (id=1508): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d6c6f7765722c757466383d302c726f6469722c757466383d302c726f6469722c696f636861727365743d6d6163726f6d616e2c73686f77657865632c73686f72746e616d653d77696e39352c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c00f395f574a499af5e6cdfaa1a85f1ed7bd2a302c79bac684196a181472941f3e8d5f0c25b6b1c813a1a585c9a4b2e13d0e6703ebf775aedddb03cfe9b5b41dbb7f281b7a692d1565d86f1141aeb77ef42aecc9119695ebc164be81adcb319b0a2625908bc71d4ed437b3a8a4bb41531458712657ad8b2849b1b9667bd67ae74df4e33d4f2e6346539944f4a70793058926800"/288], 0x3, 0x36c, &(0x7f00000006c0)="$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") setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) 1m57.268331177s ago: executing program 1 (id=1514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m51.557487627s ago: executing program 1 (id=1524): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x4, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4044000) 1m50.727719893s ago: executing program 1 (id=1527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000180)={0x0, 0x0, 0x1, 0x0, 0xa85}, &(0x7f0000000480)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0, 0xffff, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1m50.235678233s ago: executing program 1 (id=1530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x52d6, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r3, 0x4d92, 0x0, 0x0, 0x0, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x3) 1m50.234441104s ago: executing program 8 (id=1531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000200)={0xbc, 0x0, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m48.851686302s ago: executing program 8 (id=1536): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x200000, &(0x7f0000000600)=ANY=[], 0xfa, 0x27c, &(0x7f0000001240)="$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") openat$kvm(0xffffffffffffff9c, 0x0, 0x10b000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) 1m45.046856373s ago: executing program 8 (id=1542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000000c0)={0x1, {{0xa, 0x4204, 0xffffffff, @mcast1, 0xd57a}}}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f0000004480)={0x2020}, 0x2020) prlimit64(0x0, 0x0, &(0x7f0000000100)={0x2, 0x3}, 0x0) 1m44.750317995s ago: executing program 0 (id=1543): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x895, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x46}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m43.604497151s ago: executing program 8 (id=1545): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$msdos(&(0x7f00000011c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB='\x00'], 0x1, 0x11aa, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) unlink(&(0x7f0000000180)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 1m43.377638623s ago: executing program 0 (id=1546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000793000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m41.596163264s ago: executing program 0 (id=1551): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x0) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) 1m38.493492242s ago: executing program 0 (id=1553): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0}) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m37.291407271s ago: executing program 8 (id=1557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000040)=0x519c16d5, 0x4) 1m36.111669704s ago: executing program 0 (id=1558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r3, 0x80044944, 0x0) 1m29.813856941s ago: executing program 0 (id=1568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0xfffffffe, 0x10100, 0x3, 0xb5}, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m28.05687564s ago: executing program 47 (id=1568): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0xfffffffe, 0x10100, 0x3, 0xb5}, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m28.012807978s ago: executing program 8 (id=1572): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$ax25(0x3, 0x5, 0xca) 1m27.760511584s ago: executing program 48 (id=1572): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$ax25(0x3, 0x5, 0xca) 6.100352255s ago: executing program 2 (id=1694): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x80803, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 4.865469479s ago: executing program 2 (id=1697): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000cf00), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002fc0)=""/102400, 0x19000) socket(0x10, 0x803, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f20ea8accdb7d9", 0x7, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/72, 0x48, 0x0) 4.585651219s ago: executing program 2 (id=1698): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20}, 0x20) sendfile(r4, r3, 0x0, 0x2c62) close_range(r2, 0xffffffffffffffff, 0x0) 4.184589194s ago: executing program 2 (id=1699): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x9}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xef}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0) dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, 0x0}, 0x220) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x0, 0x0, 0x9, {0x9, 0x0, "6491b6fe452d8a"}}, 0x0}, 0x0) 4.063760247s ago: executing program 6 (id=1700): socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x3, 0x4) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x8000000, 0x2, 0x0}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 3.945098714s ago: executing program 6 (id=1701): ioperm(0x0, 0x9, 0x5) socket$inet(0x2, 0x6, 0x4b8) open(0x0, 0x0, 0x0) syz_mount_image$nilfs2(&(0x7f0000000200), &(0x7f0000000280)='./file2\x00', 0x1014800, &(0x7f0000000940)=ANY=[@ANYRES16=0x0, @ANYBLOB="f9cba1923b054572145c2e67b885838cb353bc831573228abfb498e7f1fd8103aceb50858482ddb69dd9112c10e3d66c32cab6609b02bf9f07615fb29a27d49a24de56c84013a0c47945492852bdc34e69ddc25ffb9f4d1dd1af98558daa9974edd7d1abd46ee9d69da503b22758321d5031603da076b28cfc7d9477af38586cb482ad3a187ab4c7b916fad188280cee", @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0, @ANYRES64, @ANYRESOCT, @ANYRES64, @ANYBLOB="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"], 0x1, 0xda6, &(0x7f0000003c80)="$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") syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x80c02) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002301020007006000000002000020d3"]) 3.581726201s ago: executing program 6 (id=1702): socket$inet6_sctp(0xa, 0x1, 0x84) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.557350848s ago: executing program 6 (id=1703): syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x619) 1.531803925s ago: executing program 2 (id=1704): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socket$nl_audit(0x10, 0x3, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0xfffffffffffffffc}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.461585683s ago: executing program 6 (id=1705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.015240163s ago: executing program 2 (id=1706): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x7}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@nogrpid}]}, 0x1, 0x408, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000000)='./file1\x00', 0xc0842, 0x0) pwrite64(r0, &(0x7f0000000000)="1c", 0x44, 0x5370) r1 = fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x184d, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 6 (id=1707): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xe, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f79fa660f1049ef66b9790a00000f32ba4100b009eef30fa7e866b9080900000f32f30f1efb66b8189f00000f23c00f21f86635030009000f23f8bad004ec2e0f0d977147", 0x45}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 6): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1296" name="/newroot/114/bus/file0" dev="overlay" ino=643 res=1 errno=0 [ 518.553810][T12589] kernel write not supported for file /asound/timers (pid: 12589 comm: syz.4.1296) [ 519.061259][ T2123] smc: removing ib device syz2 [ 519.127058][T12592] Process accounting paused [ 519.905068][ T29] audit: type=1326 audit(6029482111.862:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12606 comm="syz.3.1300" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe67e785d29 code=0x0 [ 519.952252][ T5837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 519.971413][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: kworker/u9:3 Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 519.971440][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 519.971453][ T5837] Workqueue: hci5 hci_rx_work [ 519.971488][ T5837] Call Trace: [ 519.971495][ T5837] [ 519.971503][ T5837] dump_stack_lvl+0x241/0x360 [ 519.971528][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.971548][ T5837] ? __pfx__printk+0x10/0x10 [ 519.971581][ T5837] ? __kmalloc_cache_noprof+0x243/0x390 [ 519.971599][ T5837] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 519.971627][ T5837] sysfs_create_dir_ns+0x2ce/0x3a0 [ 519.971653][ T5837] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 519.971687][ T5837] kobject_add_internal+0x435/0x8d0 [ 519.971715][ T5837] kobject_add+0x152/0x220 [ 519.971733][ T5837] ? do_raw_spin_unlock+0x13c/0x8b0 [ 519.971753][ T5837] ? device_add+0x3e7/0xbf0 [ 519.971776][ T5837] ? __pfx_kobject_add+0x10/0x10 [ 519.971795][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 519.971821][ T5837] ? get_device_parent+0x165/0x410 [ 519.971849][ T5837] device_add+0x4e5/0xbf0 [ 519.971886][ T5837] hci_conn_add_sysfs+0xe8/0x200 [ 519.971912][ T5837] le_conn_complete_evt+0xc9f/0x12e0 [ 519.971945][ T5837] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 519.971965][ T5837] ? __mutex_unlock_slowpath+0x21e/0x790 [ 519.971994][ T5837] ? __pfx___mutex_lock+0x10/0x10 [ 519.972020][ T5837] ? skb_pull_data+0x112/0x230 [ 519.972047][ T5837] hci_le_conn_complete_evt+0x18c/0x420 [ 519.972075][ T5837] hci_event_packet+0xa55/0x1540 [ 519.972105][ T5837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 519.972130][ T5837] ? __pfx_hci_event_packet+0x10/0x10 [ 519.972154][ T5837] ? do_raw_spin_unlock+0x13c/0x8b0 [ 519.972182][ T5837] ? hci_send_to_monitor+0xd8/0x7f0 [ 519.972203][ T5837] ? kcov_remote_start+0x97/0x7d0 [ 519.972229][ T5837] hci_rx_work+0x3f3/0xdb0 [ 519.972262][ T5837] ? process_scheduled_works+0x976/0x1840 [ 519.972284][ T5837] process_scheduled_works+0xa66/0x1840 [ 519.972334][ T5837] ? __pfx_process_scheduled_works+0x10/0x10 [ 519.972364][ T5837] ? assign_work+0x364/0x3d0 [ 519.972389][ T5837] worker_thread+0x870/0xd30 [ 519.972425][ T5837] ? __kthread_parkme+0x169/0x1d0 [ 519.972450][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 519.972471][ T5837] kthread+0x7a9/0x920 [ 519.972492][ T5837] ? __pfx_kthread+0x10/0x10 [ 519.972517][ T5837] ? __pfx_worker_thread+0x10/0x10 [ 519.972537][ T5837] ? __pfx_kthread+0x10/0x10 [ 519.972558][ T5837] ? __pfx_kthread+0x10/0x10 [ 519.972585][ T5837] ? __pfx_kthread+0x10/0x10 [ 519.972606][ T5837] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.972627][ T5837] ? lockdep_hardirqs_on+0x99/0x150 [ 519.972650][ T5837] ? __pfx_kthread+0x10/0x10 [ 519.972674][ T5837] ret_from_fork+0x4b/0x80 [ 519.972694][ T5837] ? __pfx_kthread+0x10/0x10 [ 519.972718][ T5837] ret_from_fork_asm+0x1a/0x30 [ 519.972754][ T5837] [ 519.972774][ T5837] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 520.268881][ T5837] Bluetooth: hci5: failed to register connection device [ 520.526583][T12184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 520.693254][T12184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 520.765006][T12478] chnl_net:caif_netlink_parms(): no params data found [ 520.879914][T12184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 521.648984][T12184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 522.089349][T12478] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.096474][T12478] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.114572][T12478] bridge_slave_0: entered allmulticast mode [ 522.131977][T12478] bridge_slave_0: entered promiscuous mode [ 522.147976][T12478] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.155078][T12478] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.172108][T12478] bridge_slave_1: entered allmulticast mode [ 522.198441][T12478] bridge_slave_1: entered promiscuous mode [ 522.294226][T12478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.324463][T12478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.395933][T12478] team0: Port device team_slave_0 added [ 522.411966][T12478] team0: Port device team_slave_1 added [ 522.559933][T12478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.566911][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.644934][T12478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.676799][T12478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.685585][T12420] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.705072][T12420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.713434][T12478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.742755][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.749865][T12478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.775252][T12420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.784383][T12420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 522.794042][T12420] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.913665][T12219] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 522.973783][T12219] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 523.014584][T12478] hsr_slave_0: entered promiscuous mode [ 523.028013][T12478] hsr_slave_1: entered promiscuous mode [ 523.052686][T12219] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 523.174899][T12219] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 523.251156][T12184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.296173][T12184] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.524537][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.531722][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.387471][ T7399] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.394580][ T7399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.500432][T12643] chnl_net:caif_netlink_parms(): no params data found [ 524.563492][T12673] loop4: detected capacity change from 0 to 512 [ 524.725660][T12673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 524.780263][T12673] EXT4-fs (loop4): orphan cleanup on readonly fs [ 524.798792][T12673] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1307: bg 0: block 248: padding at end of block bitmap is not set [ 524.823891][T12673] Quota error (device loop4): write_blk: dquota write failed [ 524.831665][T12673] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 524.841766][T12673] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.1307: Failed to acquire dquot type 1 [ 524.863209][T12673] EXT4-fs (loop4): 1 truncate cleaned up [ 524.884878][T12673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 524.964198][T12420] Bluetooth: hci4: command tx timeout [ 526.683099][T12643] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.709083][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.738803][T12643] bridge_slave_0: entered allmulticast mode [ 526.771799][T12643] bridge_slave_0: entered promiscuous mode [ 526.794568][T12643] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.816795][T12643] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.831433][T12643] bridge_slave_1: entered allmulticast mode [ 526.838523][ T9609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.843725][T12643] bridge_slave_1: entered promiscuous mode [ 526.977562][T12420] Bluetooth: hci4: command tx timeout [ 527.053640][T12643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.092744][T12219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.164566][T12643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.251853][T12478] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 527.319926][T12643] team0: Port device team_slave_0 added [ 527.332970][T12478] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 527.369847][T12643] team0: Port device team_slave_1 added [ 527.392758][T12219] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.400392][T12478] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 527.436603][T12478] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 527.450585][T12643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.459216][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.486381][T12643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.499294][T12643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.506352][T12643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.533502][T12643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.597156][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.604293][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.646294][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.658029][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.665285][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.738941][T12643] hsr_slave_0: entered promiscuous mode [ 527.745894][T12643] hsr_slave_1: entered promiscuous mode [ 527.757983][T12643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.768559][T12643] Cannot create hsr debugfs directory [ 527.930157][T12184] veth0_vlan: entered promiscuous mode [ 528.000080][T12184] veth1_vlan: entered promiscuous mode [ 528.425854][T12184] veth0_macvtap: entered promiscuous mode [ 529.023214][T12478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.051045][T12184] veth1_macvtap: entered promiscuous mode [ 529.056553][T12420] Bluetooth: hci4: command tx timeout [ 529.164147][T12748] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 529.210699][T12478] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.230141][T12219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.367979][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.407541][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.427743][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.445044][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.493775][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.510421][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.542592][T12184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.589861][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.627370][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.660065][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.691065][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.726574][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.747436][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.770144][T12184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.796772][ T7404] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.803938][ T7404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.848622][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.855793][ T7396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.952624][T12184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.990248][T12184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.026463][T12184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.035197][T12184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.227675][T12643] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 530.285442][T12643] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 530.320554][T12643] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.347470][T12643] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 530.805208][ T6596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.821527][ T6596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.833187][T12219] veth0_vlan: entered promiscuous mode [ 530.911598][T12219] veth1_vlan: entered promiscuous mode [ 530.923678][ T6167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.950186][ T6167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.965270][T12219] veth0_macvtap: entered promiscuous mode [ 531.010703][T12219] veth1_macvtap: entered promiscuous mode [ 531.072010][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.100182][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.115365][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.126085][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.136560][T12420] Bluetooth: hci4: command tx timeout [ 531.148063][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.158798][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.168943][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.183920][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.200029][T12219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.234388][T12643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.318142][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.329504][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.359872][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.390286][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.417712][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.444343][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.475174][T12219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.542531][T12219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.614625][T12219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.641262][T12478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.675082][T12219] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.791731][T12219] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.982526][T12219] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.137085][T12219] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.409710][T12643] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.580815][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.587974][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.638313][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.645428][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.596088][ T8704] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 533.645520][T12478] veth0_vlan: entered promiscuous mode [ 533.682823][ T5900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.776105][ T8704] usb 5-1: Using ep0 maxpacket: 16 [ 534.330908][ T5900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.352343][T12478] veth1_vlan: entered promiscuous mode [ 534.688919][ T7399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.740142][ T7399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.981824][T12478] veth0_macvtap: entered promiscuous mode [ 536.012046][ T8704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.020595][ T8704] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 536.031325][ T8704] usb 5-1: can't read configurations, error -71 [ 536.038074][T12478] veth1_macvtap: entered promiscuous mode [ 536.063634][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.150474][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.173909][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.188636][T12852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1318'. [ 536.202233][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.214929][T12852] unsupported nlmsg_type 40 [ 536.225014][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.246171][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.283381][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.310288][T12856] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1319'. [ 536.325929][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.346024][T12856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1319'. [ 536.355266][T12856] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1319'. [ 536.364825][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.384233][T12856] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1319'. [ 536.389519][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.424659][T12478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.459611][T12862] loop2: detected capacity change from 0 to 4096 [ 536.474269][T12862] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 536.485891][T12643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.602798][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.645696][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.670278][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.686256][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.711119][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.722480][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.785619][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.828478][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.862035][T12478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.883080][T12478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.902592][T12478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.758498][T12478] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.852157][T12478] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.881794][T12478] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.940321][T12478] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.738949][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 539.765516][ T7411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.773365][ T7411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.814227][T12643] veth0_vlan: entered promiscuous mode [ 539.913845][ T7404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.946431][T12643] veth1_vlan: entered promiscuous mode [ 539.961650][ T7404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.662956][T12643] veth0_macvtap: entered promiscuous mode [ 540.753304][T12643] veth1_macvtap: entered promiscuous mode [ 540.780330][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.791037][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.805566][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.885197][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.909150][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.930908][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.940862][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.951473][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.961338][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.971810][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.981692][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.992330][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.003509][T12643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.177327][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.189927][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.221376][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.271285][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.304154][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.365102][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.385100][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.400281][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.828576][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.840724][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.851324][T12643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.862824][T12643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.878042][T12643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.245412][T12643] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.267861][T12894] loop2: detected capacity change from 0 to 32768 [ 542.280439][T12643] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.291099][T12894] XFS: ikeep mount option is deprecated. [ 542.301049][T12894] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop2": -EINTR [ 542.305764][T12643] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.323641][T12643] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.593744][T12946] loop4: detected capacity change from 0 to 1024 [ 542.678951][T12946] hfsplus: invalid extended attribute record [ 542.793592][T12946] hfsplus: request for non-existent node 1280 in B*Tree [ 542.806415][T12946] hfsplus: request for non-existent node 1280 in B*Tree [ 542.822016][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.829951][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.930404][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.954407][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.318776][ T7411] hfsplus: b-tree write err: -5, ino 8 [ 544.550350][T12966] loop2: detected capacity change from 0 to 4096 [ 544.659769][T12976] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 544.759441][T12978] loop8: detected capacity change from 0 to 512 [ 544.806672][T12978] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 544.927851][T12978] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 545.006081][T12978] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.1338: corrupted in-inode xattr: e_value size too large [ 545.049963][T12978] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1338: couldn't read orphan inode 15 (err -117) [ 545.073334][T12978] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.589403][T12996] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 549.854912][T13031] Process accounting resumed [ 549.859549][T13031] kernel write not supported for file /asound/timers (pid: 13031 comm: syz.4.1348) [ 549.930561][T13034] kernel write not supported for file /asound/timers (pid: 13034 comm: syz.4.1348) [ 550.096399][T13021] loop2: detected capacity change from 0 to 32768 [ 550.492822][T13021] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 550.497992][T13021] (syz.2.1346,13021,1):ocfs2_initialize_super:2226 ERROR: status = -12 [ 551.109137][T13047] loop4: detected capacity change from 0 to 256 [ 551.260315][T13021] (syz.2.1346,13021,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 551.375364][T13047] vfat filesystem being mounted at /139/bus supports timestamps until 2107-12-31 (0x10391447e) [ 551.419788][T13047] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 551.428809][T13047] FAT-fs (loop4): Filesystem has been set read-only [ 551.790196][T13046] kernel write not supported for file /asound/timers (pid: 13046 comm: syz.4.1350) [ 552.949026][T13056] loop7: detected capacity change from 0 to 1024 [ 552.997672][T13060] loop4: detected capacity change from 0 to 164 [ 553.066976][T13060] loop4: detected capacity change from 0 to 1024 [ 553.328965][T13065] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 553.563542][T13066] hfsplus: cannot replace xattr [ 554.130765][ T29] audit: type=1326 audit(6029482146.046:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 554.544115][ T29] audit: type=1326 audit(6029482146.046:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 554.587637][T13074] kernel write not supported for file /asound/timers (pid: 13074 comm: syz.4.1354) [ 554.663662][ T29] audit: type=1326 audit(6029482146.046:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 554.701000][ T9609] kernel write not supported for file /asound/timers (pid: 9609 comm: syz-executor) [ 554.795127][ T9609] kernel write not supported for file /asound/timers (pid: 9609 comm: syz-executor) [ 554.810846][T13088] loop2: detected capacity change from 0 to 64 [ 554.863891][ T29] audit: type=1326 audit(6029482146.046:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 555.117209][ T29] audit: type=1326 audit(6029482146.046:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 555.388798][ T29] audit: type=1326 audit(6029482146.046:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 555.431247][T12478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.440826][ T29] audit: type=1326 audit(6029482146.046:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 555.540739][ T29] audit: type=1326 audit(6029482146.046:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 555.564701][ T29] audit: type=1326 audit(6029482146.046:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 555.587192][ T29] audit: type=1326 audit(6029482146.046:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.6.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7fc00000 [ 556.089208][ T7411] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.531763][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 556.679365][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 556.689479][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 557.115005][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 557.124740][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 557.132038][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 557.296544][ T7411] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.032068][T13115] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 558.129568][T13118] loop8: detected capacity change from 0 to 1024 [ 558.137390][T13118] EXT4-fs: Ignoring removed orlov option [ 558.143064][T13118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.396280][T13121] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.406261][T13121] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.554116][T13118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.167307][ T7411] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.237934][T12420] Bluetooth: hci0: command tx timeout [ 559.619911][ T7411] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.941355][T12478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.477698][T13100] chnl_net:caif_netlink_parms(): no params data found [ 560.777025][ T7411] bridge_slave_1: left allmulticast mode [ 560.783536][ T7411] bridge_slave_1: left promiscuous mode [ 560.795210][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.850841][ T7411] bridge_slave_0: left allmulticast mode [ 561.292880][T12420] Bluetooth: hci0: command tx timeout [ 561.483131][ T7411] bridge_slave_0: left promiscuous mode [ 561.492989][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.620753][T13197] loop7: detected capacity change from 0 to 1024 [ 562.677940][T13197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.870143][ T7411] team0: Port device bridge1 removed [ 563.059689][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.268113][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 563.355697][ T7411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.368733][ T7411] bond0 (unregistering): Released all slaves [ 563.375852][T12420] Bluetooth: hci0: command tx timeout [ 563.387551][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 563.431266][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 563.467327][T13186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 563.494290][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 563.524456][T13186] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 563.579157][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 563.625384][T13100] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.672764][T13100] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.674582][T13186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 563.707548][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 563.717975][T13186] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 563.734544][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 563.736406][T13100] bridge_slave_0: entered allmulticast mode [ 563.784697][T13100] bridge_slave_0: entered promiscuous mode [ 563.795722][T13186] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 563.816723][T13186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 563.827870][T13186] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 563.848029][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 563.934036][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 563.945715][T13186] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 563.963798][T12219] EXT4-fs error (device loop7): ext4_empty_dir:3094: inode #11: comm syz-executor: invalid size [ 564.000422][T13186] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 564.014711][T13186] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 564.079534][T13186] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 564.099591][T13186] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 564.105840][T13186] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 564.139774][T13186] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 564.149378][T13100] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.156926][T13100] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.165463][T13100] bridge_slave_1: entered allmulticast mode [ 564.172086][T13100] bridge_slave_1: entered promiscuous mode [ 564.656922][T13100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.229175][T13100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.777547][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 565.852906][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 566.012323][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 566.068617][ T7411] hsr_slave_0: left promiscuous mode [ 566.167596][ T7411] hsr_slave_1: left promiscuous mode [ 566.173165][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 566.241050][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.279857][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.325164][T13253] loop2: detected capacity change from 0 to 512 [ 566.333107][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.340536][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.378274][T13253] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 566.440422][T13253] EXT4-fs (loop2): 1 truncate cleaned up [ 566.480995][T13253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.516614][ T7411] veth1_macvtap: left promiscuous mode [ 566.552354][ T7411] veth0_macvtap: left promiscuous mode [ 566.574482][ T7411] veth1_vlan: left promiscuous mode [ 566.603554][ T7411] veth0_vlan: left promiscuous mode [ 566.799400][T12184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.395585][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 567.395602][ T29] audit: type=1326 audit(6029482159.358:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 567.615782][ T29] audit: type=1326 audit(6029482159.358:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 567.768797][ T29] audit: type=1326 audit(6029482159.358:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 567.863770][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 567.886056][ T29] audit: type=1326 audit(6029482159.358:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 567.910053][ T29] audit: type=1326 audit(6029482159.358:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 567.932914][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 567.947449][ T29] audit: type=1326 audit(6029482159.358:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 567.971289][ T29] audit: type=1326 audit(6029482159.358:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 567.999185][ T29] audit: type=1326 audit(6029482159.358:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 568.030925][ T29] audit: type=1326 audit(6029482159.358:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 568.072028][ T29] audit: type=1326 audit(6029482159.358:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13263 comm="syz.2.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6546b85d29 code=0x7ffc0000 [ 568.103166][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 568.262053][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 568.738638][T13292] loop2: detected capacity change from 0 to 512 [ 568.767620][T13292] EXT4-fs (loop2): Test dummy encryption mode enabled [ 568.862972][T13292] EXT4-fs error (device loop2): __ext4_fill_super:5497: inode #2: comm syz.2.1389: iget: special inode unallocated [ 568.888161][T13292] EXT4-fs (loop2): get root inode failed [ 568.932146][T13292] EXT4-fs (loop2): mount failed [ 569.467223][T13298] loop2: detected capacity change from 0 to 1024 [ 569.695498][T13298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.116040][T12420] Bluetooth: hci3: command 0x0c1a tx timeout [ 570.184680][T12420] Bluetooth: hci4: command 0x0c1a tx timeout [ 570.201409][T12184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.331804][T12420] Bluetooth: hci0: command 0x0c1a tx timeout [ 570.564260][ T7411] team0 (unregistering): Port device team_slave_1 removed [ 570.590641][T13307] loop2: detected capacity change from 0 to 256 [ 570.656242][T13307] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 570.668721][T13307] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 570.691936][ T7411] team0 (unregistering): Port device team_slave_0 removed [ 570.771066][T13307] exfat filesystem being mounted at /23/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 572.411769][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 573.065053][T13100] team0: Port device team_slave_0 added [ 573.122484][T13100] team0: Port device team_slave_1 added [ 573.322148][T12219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.349116][T13100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.371620][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.460587][T13100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.516232][T13100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.524628][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.553804][T13100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.846132][T13100] hsr_slave_0: entered promiscuous mode [ 574.921916][T13100] hsr_slave_1: entered promiscuous mode [ 574.941813][T13100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.961935][T13100] Cannot create hsr debugfs directory [ 575.033197][T12420] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 575.059817][T12420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 575.069390][T12420] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 575.080950][T12420] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 575.093757][T12420] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 575.101050][T12420] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 575.292572][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 575.292591][ T29] audit: type=1326 audit(6029482167.248:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13343 comm="syz.8.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2585d29 code=0x7ffc0000 [ 575.355953][ T29] audit: type=1326 audit(6029482167.248:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13343 comm="syz.8.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2585d29 code=0x7ffc0000 [ 575.378327][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.391061][ T7411] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.407347][ T7411] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.311024][ T5837] Bluetooth: hci2: command tx timeout [ 578.544829][ T7411] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.922913][ T5837] Bluetooth: hci2: command tx timeout [ 580.506240][ T7411] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.932861][T12420] Bluetooth: hci2: command tx timeout [ 582.215561][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 582.263118][T12420] Bluetooth: hci3: unexpected event for opcode 0x0c7a [ 582.370615][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 582.377558][ T8] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 582.405706][ T8] usb 3-1: config 0 has no interface number 0 [ 582.429965][T13392] loop6: detected capacity change from 0 to 1024 [ 582.448053][T13392] EXT4-fs: Ignoring removed oldalloc option [ 582.521902][T13392] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 582.564596][ T8] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 582.575936][ T8] usb 3-1: config 0 interface 219 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 582.587400][ T8] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 582.598447][ T8] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.616199][ T8] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 582.627020][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.640403][ T8] usb 3-1: Product: syz [ 582.644613][ T8] usb 3-1: Manufacturer: syz [ 582.651718][ T8] usb 3-1: SerialNumber: syz [ 582.655470][T13392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.673064][ T8] usb 3-1: config 0 descriptor?? [ 582.926708][T13340] chnl_net:caif_netlink_parms(): no params data found [ 583.003004][ T29] audit: type=1804 audit(6029482174.969:220): pid=13392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1418" name="/newroot/19/file1/file1" dev="loop6" ino=15 res=1 errno=0 [ 583.028302][ T7411] bridge_slave_1: left allmulticast mode [ 583.034555][ T7411] bridge_slave_1: left promiscuous mode [ 583.047958][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.099546][ T7411] bridge_slave_0: left allmulticast mode [ 583.136052][ T7411] bridge_slave_0: left promiscuous mode [ 583.162140][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.280178][T12643] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.037461][ T8] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 584.049803][ T8] usb 3-1: USB disconnect, device number 8 [ 584.078319][T12420] Bluetooth: hci2: command tx timeout [ 586.701871][T13427] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 588.030932][T13438] loop6: detected capacity change from 0 to 64 [ 588.093871][T13438] bfs filesystem being mounted at /23/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 591.283089][ T7411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.320289][ T7411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.402111][ T7411] bond0 (unregistering): Released all slaves [ 591.873074][T13469] xt_bpf: check failed: parse error [ 593.353100][T13340] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.414867][T13340] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.608481][T13340] bridge_slave_0: entered allmulticast mode [ 593.714666][T13340] bridge_slave_0: entered promiscuous mode [ 594.034278][T13100] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 594.096846][T13100] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 594.149674][T13340] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.167169][T13340] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.195697][T13340] bridge_slave_1: entered allmulticast mode [ 594.221612][T13340] bridge_slave_1: entered promiscuous mode [ 594.331804][ T7411] hsr_slave_0: left promiscuous mode [ 594.343655][ T7411] hsr_slave_1: left promiscuous mode [ 594.365644][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.387853][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.423647][ T7411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.432589][ T7411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.471865][ T7411] veth1_macvtap: left promiscuous mode [ 594.477638][ T7411] veth0_macvtap: left promiscuous mode [ 594.483684][ T7411] veth1_vlan: left promiscuous mode [ 594.489249][ T7411] veth0_vlan: left promiscuous mode [ 594.826590][T13494] loop6: detected capacity change from 0 to 256 [ 594.841297][T13494] vfat filesystem being mounted at /30/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 595.221679][ T29] audit: type=1326 audit(6029482187.181:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 595.249021][ T29] audit: type=1326 audit(6029482187.191:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 595.292311][ T29] audit: type=1326 audit(6029482187.191:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 595.353286][ T29] audit: type=1326 audit(6029482187.191:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 595.389221][ T29] audit: type=1326 audit(6029482187.191:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 595.415865][ T29] audit: type=1326 audit(6029482187.191:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 595.439568][ T7411] team0 (unregistering): Port device team_slave_1 removed [ 596.409332][ T29] audit: type=1326 audit(6029482187.191:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 596.477891][ T29] audit: type=1326 audit(6029482187.191:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 596.801204][ T7411] team0 (unregistering): Port device team_slave_0 removed [ 598.146314][T13516] 9p filesystem being mounted at /34/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 601.717951][T13100] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 602.031778][T13340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.180000][T13340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.384672][T13100] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 603.430593][T13100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.555641][T13340] team0: Port device team_slave_0 added [ 603.603403][T13553] loop8: detected capacity change from 0 to 512 [ 603.622961][T13340] team0: Port device team_slave_1 added [ 603.679382][T13553] EXT4-fs (loop8): Test dummy encryption mode enabled [ 603.706088][T13553] EXT4-fs error (device loop8): __ext4_fill_super:5497: inode #2: comm syz.8.1459: iget: special inode unallocated [ 603.768470][T13100] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.786913][T13553] EXT4-fs (loop8): get root inode failed [ 603.808460][T13553] EXT4-fs (loop8): mount failed [ 603.819466][T13556] loop2: detected capacity change from 0 to 1764 [ 603.834551][T13340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.948042][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.074113][T13340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.248249][T13340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.255251][T13340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.287761][T13340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.407961][T13564] loop8: detected capacity change from 0 to 1024 [ 604.581022][ T7399] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.588224][ T7399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.651510][T13564] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.019439][T13567] overlayfs: failed to clone upperpath [ 605.081464][ T7399] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.088649][ T7399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.140750][T12478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.352139][T13340] hsr_slave_0: entered promiscuous mode [ 606.378585][T13340] hsr_slave_1: entered promiscuous mode [ 606.412603][T13340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.439302][T13340] Cannot create hsr debugfs directory [ 606.735297][T13100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 606.747455][T13100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.853574][T13562] loop2: detected capacity change from 0 to 32768 [ 606.975418][T13562] jfs filesystem being mounted at /40/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 607.973085][T13100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.388086][T13592] loop8: detected capacity change from 0 to 1024 [ 610.271866][T13100] veth0_vlan: entered promiscuous mode [ 610.409705][ T60] hfsplus: b-tree write err: -5, ino 4 [ 610.579815][T13599] loop8: detected capacity change from 0 to 512 [ 610.668671][T13599] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 610.802727][T13599] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #17: comm syz.8.1471: corrupted in-inode xattr: e_name out of bounds [ 610.823436][T13599] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.1471: couldn't read orphan inode 17 (err -117) [ 611.592654][T13100] veth1_vlan: entered promiscuous mode [ 611.631346][T13599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.585790][T13100] veth0_macvtap: entered promiscuous mode [ 612.589074][T13100] veth1_macvtap: entered promiscuous mode [ 612.809233][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.809260][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.809272][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.809287][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.809298][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.809311][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.809323][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.809336][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.809348][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.809360][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.810342][T13100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.812699][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.812720][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.812733][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.812747][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.812759][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.812771][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.812782][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.812794][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.812805][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.812818][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.813650][T13100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.816184][T13100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.816256][T13100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.816284][T13100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.816310][T13100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.814609][T12478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.020528][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.020553][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.138385][T13625] 9p filesystem being mounted at /35/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 614.151517][ T29] audit: type=1800 audit(6029482206.113:229): pid=13625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1477" name="/" dev="9p" ino=2 res=0 errno=0 [ 614.151562][ T29] audit: type=1804 audit(6029482206.113:230): pid=13625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.1477" name="/newroot/35/file0" dev="9p" ino=2 res=1 errno=0 [ 614.196174][T13340] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 614.226998][ T7396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.227025][ T7396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.263991][T13340] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 614.273743][T13340] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 614.285267][T13340] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 615.102996][T13340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.113100][T13340] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.118371][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.118440][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.144506][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.144580][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.169296][ T29] audit: type=1326 audit(6029482207.133:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13628 comm="syz.6.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 615.458982][T13340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 615.488402][T13633] loop0: detected capacity change from 0 to 16 [ 615.517139][T13633] erofs (device loop0): mounted with root inode @ nid 36. [ 615.537718][ T29] audit: type=1326 audit(6029482207.133:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13628 comm="syz.6.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396f385d29 code=0x7ffc0000 [ 615.798486][T13340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.907905][T13639] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 615.937026][T13639] erofs (device loop0): read error -117 @ 43 of nid 36 [ 622.072512][T13340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.169545][T13340] veth0_vlan: entered promiscuous mode [ 622.177391][T13661] loop8: detected capacity change from 0 to 1024 [ 622.197295][T13661] EXT4-fs: Ignoring removed i_version option [ 622.205048][T13340] veth1_vlan: entered promiscuous mode [ 622.282608][T13340] veth0_macvtap: entered promiscuous mode [ 622.328473][T13661] EXT4-fs (loop8): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 622.571963][T13340] veth1_macvtap: entered promiscuous mode [ 622.814408][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.275888][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.276665][T13661] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.286741][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.476065][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.486318][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.523139][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.916127][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.926947][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.937210][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.947981][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.958204][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.969745][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 623.982425][T13340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.064281][T13690] loop2: detected capacity change from 0 to 256 [ 624.082649][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.113164][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.137278][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.157308][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.170604][T13690] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 624.201304][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.260471][T13690] exfat filesystem being mounted at /44/file1 supports timestamps until 2107-12-31 (0x10391447f) [ 624.374317][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.422246][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.439187][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.449385][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.459971][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.470021][T13340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.481033][T13340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.490920][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.508309][T13340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.543536][T13340] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.552761][T13340] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.562029][T13340] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.571850][T13340] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.722414][T12478] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.732654][ T29] audit: type=1800 audit(6029482217.624:233): pid=13705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1490" name="file1" dev="loop2" ino=1048820 res=0 errno=0 [ 625.781370][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.783367][ T7411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.789294][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.806397][ T7411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.950770][T13720] ipvlan2: entered promiscuous mode [ 626.957527][T13720] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 626.964871][T13720] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 627.984064][ T29] audit: type=1326 audit(6029482219.744:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13715 comm="syz.8.1495" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2585d29 code=0x0 [ 629.145266][T13734] loop2: detected capacity change from 0 to 128 [ 629.757454][T13734] vfat filesystem being mounted at /45/bus supports timestamps until 2107-12-31 (0x10391447e) [ 632.722228][T13764] loop2: detected capacity change from 0 to 1024 [ 634.118604][T13764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.154242][T13779] loop1: detected capacity change from 0 to 256 [ 634.703732][T13785] loop0: detected capacity change from 0 to 256 [ 634.735579][T13785] exfat: Deprecated parameter 'utf8' [ 634.857545][T13779] FAT-fs (loop1): Directory bread(block 64) failed [ 634.859463][T13785] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 634.876181][T13779] FAT-fs (loop1): Directory bread(block 65) failed [ 634.882824][T13779] FAT-fs (loop1): Directory bread(block 66) failed [ 634.894367][T13779] FAT-fs (loop1): Directory bread(block 67) failed [ 634.933438][T13779] FAT-fs (loop1): Directory bread(block 68) failed [ 634.943499][T13779] FAT-fs (loop1): Directory bread(block 69) failed [ 634.975017][T13785] exfat filesystem being mounted at /8/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 634.994026][T13779] FAT-fs (loop1): Directory bread(block 70) failed [ 635.024614][T13779] FAT-fs (loop1): Directory bread(block 71) failed [ 635.031303][T13779] FAT-fs (loop1): Directory bread(block 72) failed [ 635.058894][T13779] FAT-fs (loop1): Directory bread(block 73) failed [ 635.215471][T13801] netlink: 'syz.6.1511': attribute type 1 has an invalid length. [ 635.232157][T13779] vfat filesystem being mounted at /3/bus supports timestamps until 2107-12-31 (0x10391447e) [ 635.644407][T13801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.755129][T13803] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 636.767029][T13803] bond1: (slave batadv1): making interface the new active one [ 636.777677][T13803] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 637.264734][ T6167] kworker/u8:10: attempt to access beyond end of device [ 637.264734][ T6167] loop1: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 637.690494][ T6167] kworker/u8:10: attempt to access beyond end of device [ 637.690494][ T6167] loop1: rw=1, sector=1864, nr_sectors = 1444 limit=256 [ 637.910056][T12184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.937701][T13806] bond1: (slave veth3): Enslaving as an active interface with a down link [ 637.999622][T13828] loop0: detected capacity change from 0 to 1024 [ 638.051420][T13806] bond1: (slave veth5): Enslaving as an active interface with a down link [ 638.098289][T13828] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 639.198419][T13823] kvm: kvm [13822]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 639.367669][T13823] kvm: kvm [13822]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 639.377691][T13823] kvm: kvm [13822]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 640.399770][T13823] kvm: kvm [13822]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x250000ffff [ 640.447340][T13823] kvm: kvm [13822]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x250000f7ff [ 640.503257][T13823] kvm: kvm [13822]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x250000ffff [ 640.598190][T13823] kvm_intel: kvm [13822]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x250000f7ff [ 640.645090][T13851] fuse: Bad value for 'fd' [ 642.518252][T13869] loop2: detected capacity change from 0 to 1024 [ 642.595816][T13869] hfsplus: invalid btree flag [ 642.605571][T13869] hfsplus: failed to load catalog file [ 642.846534][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 642.853474][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 642.875366][T13878] loop0: detected capacity change from 0 to 8 [ 642.920169][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 642.964771][T13876] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 642.993092][T13876] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1 [ 643.058723][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 643.096615][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 643.153419][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 643.164319][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 643.175348][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 643.194625][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 643.207648][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 643.225083][T13876] xfrm0 speed is unknown, defaulting to 1000 [ 643.579726][T13893] loop2: detected capacity change from 0 to 1024 [ 643.750294][T13893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.900593][ T8] IPVS: starting estimator thread 0... [ 644.072521][T12184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.083920][T13900] IPVS: using max 24 ests per chain, 57600 per kthread [ 644.931393][ T2123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.045569][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 645.095266][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 645.105771][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 645.123207][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 645.141894][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 645.154353][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.299168][T13939] loop8: detected capacity change from 0 to 128 [ 646.375209][T13939] vfat filesystem being mounted at /47/bus supports timestamps until 2107-12-31 (0x10391447e) [ 646.821156][ T2123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.961723][T13920] xfrm0 speed is unknown, defaulting to 1000 [ 647.807983][ T5837] Bluetooth: hci2: command tx timeout [ 649.538615][ T2123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.400360][ T5837] Bluetooth: hci2: command tx timeout [ 651.921048][T13992] loop8: detected capacity change from 0 to 128 [ 651.934129][ T2123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.984006][T13992] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 652.029501][T13920] chnl_net:caif_netlink_parms(): no params data found [ 652.079715][T13992] overlayfs: upper fs needs to support d_type. [ 652.119182][T13992] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 652.158836][T13992] overlayfs: failed to set xattr on upper [ 652.230111][T13992] overlayfs: ...falling back to redirect_dir=nofollow. [ 652.261430][T13992] overlayfs: ...falling back to index=off. [ 652.289404][T13992] overlayfs: ...falling back to uuid=null. [ 652.492606][ T5837] Bluetooth: hci2: command tx timeout [ 652.631656][T13920] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.031700][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.481269][ T5837] Bluetooth: hci2: command tx timeout [ 655.571561][T13920] bridge_slave_0: entered allmulticast mode [ 655.673211][T13920] bridge_slave_0: entered promiscuous mode [ 655.693974][T13920] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.728261][T14025] loop0: detected capacity change from 0 to 1024 [ 655.739356][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.749847][T13920] bridge_slave_1: entered allmulticast mode [ 655.760829][T13920] bridge_slave_1: entered promiscuous mode [ 655.874151][T13992] UDF-fs: error (device loop8): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 655.900799][T13920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.944427][T14025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.016802][T13920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.181386][T14037] loop2: detected capacity change from 0 to 2048 [ 656.380689][T14037] NILFS (loop2): Invalid checkpoint (checkpoint number=2) [ 656.388785][T14037] NILFS (loop2): error -22 while loading last checkpoint (checkpoint number=2) [ 656.858190][T12478] UDF-fs: error (device loop8): udf_read_inode: (ino 114) failed !bh [ 656.972575][T12478] UDF-fs: error (device loop8): udf_read_inode: (ino 114) failed !bh [ 657.094035][ T2123] bridge_slave_1: left allmulticast mode [ 657.164060][ T2123] bridge_slave_1: left promiscuous mode [ 657.180004][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.985385][ T2123] bridge_slave_0: left allmulticast mode [ 658.002125][ T2123] bridge_slave_0: left promiscuous mode [ 658.007882][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.186419][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.718178][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.051643][ T2123] bond0 (unregistering): Released all slaves [ 663.355108][T13920] team0: Port device team_slave_0 added [ 663.390880][T13920] team0: Port device team_slave_1 added [ 663.772629][ T8] xfrm0 speed is unknown, defaulting to 1000 [ 663.927244][T13698] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.241907][T13920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.248895][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.377762][T13920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.475248][T13920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.482517][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.510710][T13920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.138165][T14135] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 666.471930][T13920] hsr_slave_0: entered promiscuous mode [ 666.507700][T13920] hsr_slave_1: entered promiscuous mode [ 666.551421][T13920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.586378][T13920] Cannot create hsr debugfs directory [ 667.565977][T12420] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.624347][T12420] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.633929][T12420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.645586][T12420] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.654059][T12420] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 667.664802][T12420] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.729823][T12420] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 667.741893][T12420] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 667.750652][T12420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 667.759603][T12420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 667.767264][T12420] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 667.774777][T12420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 668.735728][ T2123] hsr_slave_0: left promiscuous mode [ 668.743169][ T2123] hsr_slave_1: left promiscuous mode [ 668.749314][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.757295][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.788452][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.796399][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.876124][ T2123] veth1_macvtap: left promiscuous mode [ 668.882135][ T2123] veth0_macvtap: left promiscuous mode [ 668.887910][ T2123] veth1_vlan: left promiscuous mode [ 668.893683][ T2123] veth0_vlan: left promiscuous mode [ 669.851033][T12420] Bluetooth: hci3: command tx timeout [ 669.921480][ T5837] Bluetooth: hci0: command tx timeout [ 671.078571][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 671.190596][ T2123] team0 (unregistering): Port device team_slave_0 removed [ 672.097127][T12420] Bluetooth: hci3: command tx timeout [ 672.102764][T12420] Bluetooth: hci0: command tx timeout [ 672.294292][T14232] netlink: 'syz.6.1584': attribute type 4 has an invalid length. [ 673.395552][T14174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 673.402225][T14174] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 673.413726][T14174] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 673.419656][T14174] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 674.170481][ T5837] Bluetooth: hci0: command tx timeout [ 674.176131][ T5837] Bluetooth: hci3: command tx timeout [ 674.532911][T14263] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1588'. [ 674.565563][T14174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 674.574488][T14174] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 674.611937][T14174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 674.617903][T14174] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 674.643004][T14174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 674.648942][T14174] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 674.721961][T14263] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1588'. [ 674.826165][T14276] loop2: detected capacity change from 0 to 1024 [ 674.871043][T14276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.114722][ T2123] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.166969][T14263] IPVS: Error connecting to the multicast addr [ 676.003492][T12184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.094916][ T2123] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.357360][T14167] chnl_net:caif_netlink_parms(): no params data found [ 676.435646][T14161] chnl_net:caif_netlink_parms(): no params data found [ 676.451758][T14299] dns_resolver: Unsupported server list version (0) [ 677.306709][ T2123] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.465425][ T2123] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.901409][T14167] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.919892][T14167] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.939030][T14167] bridge_slave_0: entered allmulticast mode [ 678.957946][T14167] bridge_slave_0: entered promiscuous mode [ 679.009787][T13920] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 679.043027][T14167] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.060153][T14167] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.081520][T14167] bridge_slave_1: entered allmulticast mode [ 679.094339][T14167] bridge_slave_1: entered promiscuous mode [ 679.110571][T14161] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.137077][T14161] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.163116][T14161] bridge_slave_0: entered allmulticast mode [ 679.180252][T14161] bridge_slave_0: entered promiscuous mode [ 679.200564][T14161] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.207670][T14161] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.228837][T14161] bridge_slave_1: entered allmulticast mode [ 679.239037][T14161] bridge_slave_1: entered promiscuous mode [ 679.246358][T13920] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 679.282600][T13920] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 679.485273][T13920] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 679.524916][T14167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.554942][T14167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.702803][T14161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.722743][T14161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.899960][ T80] IPVS: starting estimator thread 0... [ 680.360370][T14371] raw_sendmsg: syz.2.1598 forgot to set AF_INET. Fix it! [ 680.480651][T14364] IPVS: using max 20 ests per chain, 48000 per kthread [ 681.149597][T14167] team0: Port device team_slave_0 added [ 682.120218][T14382] syz.2.1600: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 682.139907][T14382] CPU: 0 UID: 0 PID: 14382 Comm: syz.2.1600 Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 682.139935][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 682.139947][T14382] Call Trace: [ 682.139955][T14382] [ 682.139964][T14382] dump_stack_lvl+0x241/0x360 [ 682.139993][T14382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.140013][T14382] ? __pfx__printk+0x10/0x10 [ 682.140046][T14382] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 682.140067][T14382] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 682.140090][T14382] warn_alloc+0x278/0x410 [ 682.140119][T14382] ? __pfx_warn_alloc+0x10/0x10 [ 682.140149][T14382] ? hash_ip_create+0x801/0x1670 [ 682.140173][T14382] ? __get_vm_area_node+0x1c8/0x2d0 [ 682.140193][T14382] ? __get_vm_area_node+0x25c/0x2d0 [ 682.140221][T14382] __vmalloc_node_range_noprof+0x62f/0x1380 [ 682.140269][T14382] ? rcu_is_watching+0x15/0xb0 [ 682.140287][T14382] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 682.140309][T14382] ? rcu_is_watching+0x15/0xb0 [ 682.140327][T14382] ? trace_kmalloc+0x1f/0xd0 [ 682.140344][T14382] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 682.140363][T14382] ? __kvmalloc_node_noprof+0x72/0x190 [ 682.140388][T14382] __kvmalloc_node_noprof+0x142/0x190 [ 682.140410][T14382] ? hash_ip_create+0x801/0x1670 [ 682.140434][T14382] hash_ip_create+0x801/0x1670 [ 682.140461][T14382] ? __pfx_lock_acquire+0x10/0x10 [ 682.140501][T14382] ? __pfx_hash_ip_create+0x10/0x10 [ 682.140527][T14382] ? __nla_parse+0x40/0x60 [ 682.140551][T14382] ? __pfx_hash_ip_create+0x10/0x10 [ 682.140575][T14382] ip_set_create+0xa31/0x18b0 [ 682.140593][T14382] ? ip_set_create+0x424/0x18b0 [ 682.140622][T14382] ? __pfx_ip_set_create+0x10/0x10 [ 682.140673][T14382] ? nfnetlink_rcv_msg+0x225/0x1180 [ 682.140695][T14382] nfnetlink_rcv_msg+0xbec/0x1180 [ 682.140716][T14382] ? nfnetlink_rcv_msg+0x225/0x1180 [ 682.140759][T14382] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 682.140778][T14382] ? stack_trace_save+0x118/0x1d0 [ 682.140822][T14382] ? dev_hard_start_xmit+0x27a/0x7d0 [ 682.140840][T14382] ? __dev_queue_xmit+0x1b73/0x3f50 [ 682.140857][T14382] ? __netlink_deliver_tap+0x56b/0x7f0 [ 682.140881][T14382] ? netlink_deliver_tap+0x19d/0x1b0 [ 682.140904][T14382] ? netlink_unicast+0x7c4/0x990 [ 682.140926][T14382] ? netlink_sendmsg+0x8e4/0xcb0 [ 682.140949][T14382] ? __sock_sendmsg+0x221/0x270 [ 682.140970][T14382] ? ____sys_sendmsg+0x52a/0x7e0 [ 682.140986][T14382] ? __sys_sendmsg+0x269/0x350 [ 682.141019][T14382] netlink_rcv_skb+0x1e3/0x430 [ 682.141046][T14382] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 682.141068][T14382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.141108][T14382] ? apparmor_capable+0x13b/0x1b0 [ 682.141134][T14382] ? bpf_lsm_capable+0x9/0x10 [ 682.141154][T14382] ? security_capable+0x7e/0x2d0 [ 682.141181][T14382] nfnetlink_rcv+0x297/0x2ab0 [ 682.141207][T14382] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 682.141233][T14382] ? __dev_queue_xmit+0x2f4/0x3f50 [ 682.141254][T14382] ? __dev_queue_xmit+0x1775/0x3f50 [ 682.141271][T14382] ? kasan_save_track+0x51/0x80 [ 682.141300][T14382] ? ____sys_sendmsg+0x52a/0x7e0 [ 682.141321][T14382] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 682.141341][T14382] ? __dev_queue_xmit+0x2f4/0x3f50 [ 682.141364][T14382] ? __pfx___dev_queue_xmit+0x10/0x10 [ 682.141400][T14382] ? ref_tracker_free+0x643/0x7e0 [ 682.141419][T14382] ? __asan_memcpy+0x40/0x70 [ 682.141440][T14382] ? __pfx_ref_tracker_free+0x10/0x10 [ 682.141475][T14382] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.141504][T14382] ? skb_clone+0x240/0x390 [ 682.141523][T14382] ? __pfx_lock_release+0x10/0x10 [ 682.141548][T14382] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 682.141586][T14382] ? netlink_deliver_tap+0x2e/0x1b0 [ 682.141614][T14382] netlink_unicast+0x7f6/0x990 [ 682.141648][T14382] ? __pfx_netlink_unicast+0x10/0x10 [ 682.141670][T14382] ? __virt_addr_valid+0x45f/0x530 [ 682.141696][T14382] ? __phys_addr_symbol+0x2f/0x70 [ 682.141719][T14382] ? __check_object_size+0x47a/0x730 [ 682.141751][T14382] netlink_sendmsg+0x8e4/0xcb0 [ 682.141790][T14382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.141820][T14382] ? aa_sock_msg_perm+0x91/0x160 [ 682.141847][T14382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.141870][T14382] __sock_sendmsg+0x221/0x270 [ 682.141896][T14382] ____sys_sendmsg+0x52a/0x7e0 [ 682.141924][T14382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.141941][T14382] ? __fget_files+0x2a/0x410 [ 682.141963][T14382] ? __fget_files+0x2a/0x410 [ 682.141992][T14382] __sys_sendmsg+0x269/0x350 [ 682.142016][T14382] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.142062][T14382] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 682.142114][T14382] do_syscall_64+0xf3/0x230 [ 682.142132][T14382] ? clear_bhb_loop+0x35/0x90 [ 682.142159][T14382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.142182][T14382] RIP: 0033:0x7f6546b85d29 [ 682.142201][T14382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.142216][T14382] RSP: 002b:00007f654794a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.142236][T14382] RAX: ffffffffffffffda RBX: 00007f6546d76160 RCX: 00007f6546b85d29 [ 682.142250][T14382] RDX: 0000000000008000 RSI: 0000000020000100 RDI: 0000000000000005 [ 682.142263][T14382] RBP: 00007f6546c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 682.142275][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.142287][T14382] R13: 0000000000000000 R14: 00007f6546d76160 R15: 00007ffd16914d78 [ 682.142317][T14382] [ 682.142325][T14382] Mem-Info: [ 682.330355][T14161] team0: Port device team_slave_0 added [ 682.335740][T14382] active_anon:10974 inactive_anon:1136 isolated_anon:0 [ 682.335740][T14382] active_file:20687 inactive_file:39056 isolated_file:0 [ 682.335740][T14382] unevictable:768 dirty:242 writeback:0 [ 682.335740][T14382] slab_reclaimable:7190 slab_unreclaimable:111399 [ 682.335740][T14382] mapped:40041 shmem:7629 pagetables:766 [ 682.335740][T14382] sec_pagetables:0 bounce:0 [ 682.335740][T14382] kernel_misc_reclaimable:0 [ 682.335740][T14382] free:1284210 free_pcp:2942 free_cma:0 [ 682.729128][T14382] Node 0 active_anon:32196kB inactive_anon:4544kB active_file:82748kB inactive_file:156148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:148764kB dirty:964kB writeback:0kB shmem:17580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11524kB pagetables:2964kB sec_pagetables:0kB all_unreclaimable? no [ 682.763685][T14382] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 682.793840][T14382] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.820981][T14382] lowmem_reserve[]: 0 2463 2464 0 0 [ 682.826260][T14382] Node 0 DMA32 free:1215716kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:32164kB inactive_anon:4540kB active_file:82748kB inactive_file:155564kB unevictable:1536kB writepending:960kB present:3129332kB managed:2551420kB mlocked:0kB bounce:0kB free_pcp:23540kB local_pcp:10584kB free_cma:0kB [ 682.861633][T14382] lowmem_reserve[]: 0 0 0 0 0 [ 682.866421][T14382] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:32kB inactive_anon:4kB active_file:0kB inactive_file:584kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 682.899804][T14382] lowmem_reserve[]: 0 0 0 0 0 [ 682.904587][T14382] Node 1 Normal free:3904404kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 682.981450][T14382] lowmem_reserve[]: 0 0 0 0 0 [ 682.986262][T14382] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 683.000424][T14382] Node 0 DMA32: 879*4kB (UME) 525*8kB (UME) 473*16kB (UME) 520*32kB (UME) 519*64kB (UME) 76*128kB (UME) 54*256kB (UME) 19*512kB (UME) 17*1024kB (UME) 9*2048kB (UME) 269*4096kB (UM) = 1236084kB [ 683.019626][T14382] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 683.031255][T14382] Node 1 Normal: 209*4kB (UM) 68*8kB (UME) 53*16kB (UME) 213*32kB (UME) 105*64kB (UME) 36*128kB (UME) 10*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3904404kB [ 683.049981][T14382] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.059582][T14382] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.068878][T14382] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.078682][T14382] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.088083][T14382] 64483 total pagecache pages [ 683.092823][T14382] 0 pages in swap cache [ 683.096983][T14382] Free swap = 124680kB [ 683.104853][T14382] Total swap = 124996kB [ 683.109141][T14382] 2097051 pages RAM [ 683.112965][T14382] 0 pages HighMem/MovableOnly [ 683.117643][T14382] 427410 pages reserved [ 683.121910][T14382] 0 pages cma reserved [ 683.288597][ T2123] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.345454][T14167] team0: Port device team_slave_1 added [ 683.362963][T14161] team0: Port device team_slave_1 added [ 683.511084][ T2123] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.600432][T14167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.607463][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.646295][T14167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.677532][T14167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.689252][T14167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.726483][T14167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.743653][T14161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 683.769958][T14161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.816459][T14161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 683.904803][ T2123] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.949808][T14161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.977094][T14161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.027483][T14161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.270264][ T2123] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.382390][T14167] hsr_slave_0: entered promiscuous mode [ 684.430601][T14167] hsr_slave_1: entered promiscuous mode [ 684.498348][T14167] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.519117][T14167] Cannot create hsr debugfs directory [ 684.846583][T14433] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 684.854644][T14433] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 684.863319][T14433] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 684.871296][T14433] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 685.760141][T14161] hsr_slave_0: entered promiscuous mode [ 685.772290][T14161] hsr_slave_1: entered promiscuous mode [ 685.778450][T14161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.814037][T14161] Cannot create hsr debugfs directory [ 686.689380][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.460981][T13920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.720479][ T2123] bridge_slave_1: left allmulticast mode [ 688.738555][ T2123] bridge_slave_1: left promiscuous mode [ 688.762466][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.821688][ T2123] bridge_slave_0: left allmulticast mode [ 688.827380][ T2123] bridge_slave_0: left promiscuous mode [ 688.868469][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.941310][ T2123] bridge_slave_1: left allmulticast mode [ 688.969321][ T2123] bridge_slave_1: left promiscuous mode [ 688.975057][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.069121][ T2123] bridge_slave_0: left allmulticast mode [ 689.078596][ T2123] bridge_slave_0: left promiscuous mode [ 689.084321][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.439460][T14485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 692.495847][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 692.620532][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 692.859728][ T2123] bond0 (unregistering): Released all slaves [ 693.327449][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.359612][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.390138][ T2123] bond0 (unregistering): Released all slaves [ 693.429786][T13920] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.463412][T13920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.473858][T13920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.624773][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.631951][ T6596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.679366][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.686536][ T6596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.789413][T14481] vcan0: entered allmulticast mode [ 695.819197][T13920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.379179][ T2123] hsr_slave_0: left promiscuous mode [ 696.389405][ T2123] hsr_slave_1: left promiscuous mode [ 696.406628][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.417791][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.435905][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.455966][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.470739][ T2123] hsr_slave_0: left promiscuous mode [ 696.476735][ T2123] hsr_slave_1: left promiscuous mode [ 696.495943][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.507249][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.507791][ T5881] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 696.529270][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.546748][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.614901][ T2123] veth1_macvtap: left promiscuous mode [ 696.620570][ T2123] veth0_macvtap: left promiscuous mode [ 696.626174][ T2123] veth1_vlan: left promiscuous mode [ 696.631645][ T2123] veth0_vlan: left promiscuous mode [ 696.648472][ T2123] veth1_macvtap: left promiscuous mode [ 696.654029][ T2123] veth0_macvtap: left promiscuous mode [ 696.660138][ T2123] veth1_vlan: left promiscuous mode [ 696.665456][ T2123] veth0_vlan: left promiscuous mode [ 696.677657][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 696.687402][ T5881] usb 3-1: config 2 has an invalid interface number: 78 but max is 0 [ 696.700205][ T5881] usb 3-1: config 2 has no interface number 0 [ 696.713115][ T5881] usb 3-1: config 2 interface 78 has no altsetting 0 [ 696.733885][ T5881] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff70, bcdDevice=82.1b [ 696.743941][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.760886][ T5881] usb 3-1: Product: syz [ 696.775415][ T5881] usb 3-1: Manufacturer: syz [ 696.783741][ T5881] usb 3-1: SerialNumber: syz [ 697.852978][ T5881] option 3-1:2.78: GSM modem (1-port) converter detected [ 697.875712][ T5881] usb 3-1: USB disconnect, device number 9 [ 697.882498][ T5881] option 3-1:2.78: device disconnected [ 698.450664][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 698.840751][ T2123] team0 (unregistering): Port device team_slave_0 removed [ 705.567301][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 706.535372][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 706.558236][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 706.569830][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 706.581595][ T2123] team0 (unregistering): Port device team_slave_0 removed [ 706.616531][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 706.626411][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 706.642341][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 706.698890][T12420] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 706.706183][T12420] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 706.713899][T12420] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 706.722133][T12420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 706.730157][T12420] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 706.737771][T12420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 708.708346][T14689] loop2: detected capacity change from 0 to 512 [ 708.715288][T14689] EXT4-fs: Ignoring removed oldalloc option [ 708.756009][T14689] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 708.796617][T12420] Bluetooth: hci5: command tx timeout [ 708.809947][T14689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 708.826361][T14689] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.033207][T14689] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 709.086488][T14689] File: /83/file0/bus PID: 14689 Comm: syz.2.1644 [ 709.202019][T12184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 710.309503][T14167] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.286092][T12420] Bluetooth: hci5: command tx timeout [ 711.870815][T14161] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 711.977766][T14161] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 712.092310][T14715] loop2: detected capacity change from 0 to 8 [ 712.734909][T14167] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.014400][T14161] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 713.028933][T14161] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 713.537509][T12420] Bluetooth: hci5: command tx timeout [ 713.737548][T14167] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.051923][T14167] netdevsim netdevsim9 netdevsim0 (unregistering): left allmulticast mode [ 714.134905][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1652'. [ 714.174941][T14167] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.443233][T14734] bridge0: entered promiscuous mode [ 714.469697][T14734] macsec1: entered promiscuous mode [ 714.537568][T14734] macsec1: entered allmulticast mode [ 714.623453][T14734] bridge0: entered allmulticast mode [ 714.752068][T14734] bridge0: port 3(macsec1) entered blocking state [ 714.910002][T14734] bridge0: port 3(macsec1) entered disabled state [ 714.983941][T14734] bridge0: left allmulticast mode [ 714.989417][T14734] bridge0: left promiscuous mode [ 715.269100][T14673] chnl_net:caif_netlink_parms(): no params data found [ 716.559591][T14757] trusted_key: syz.6.1654 sent an empty control message without MSG_MORE. [ 717.090680][T12420] Bluetooth: hci5: command tx timeout [ 717.143358][T14161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.158846][T14161] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.189934][T14161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 717.200370][T14161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 717.284272][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.291435][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.346767][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.353900][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.313543][T14167] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 718.400133][T14167] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 718.470291][T14673] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.485372][T14673] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.492573][T14673] bridge_slave_0: entered allmulticast mode [ 718.511801][T14673] bridge_slave_0: entered promiscuous mode [ 718.537726][T14673] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.544827][T14673] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.592694][T14673] bridge_slave_1: entered allmulticast mode [ 718.605268][T14673] bridge_slave_1: entered promiscuous mode [ 718.633751][T14161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 718.749041][T14167] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 719.641253][T14167] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 719.687587][T14673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.707427][T14673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.122939][T14673] team0: Port device team_slave_0 added [ 721.601832][T14673] team0: Port device team_slave_1 added [ 722.853143][T14673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.868320][T14673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.909068][T14673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.089595][T14673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.096894][T14673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 723.125049][ T8700] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 723.150602][T14673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.315185][ T8700] usb 3-1: Using ep0 maxpacket: 8 [ 723.321780][ T8700] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 723.343401][ T8700] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 723.374813][ T8700] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 723.413469][ T8700] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.431161][T14673] hsr_slave_0: entered promiscuous mode [ 723.443640][T14673] hsr_slave_1: entered promiscuous mode [ 723.449473][ T8700] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.449502][ T8700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.487169][T14161] veth0_vlan: entered promiscuous mode [ 723.546481][T14161] veth1_vlan: entered promiscuous mode [ 723.657455][T14161] veth0_macvtap: entered promiscuous mode [ 723.757625][ T8700] usb 3-1: GET_CAPABILITIES returned 0 [ 723.762714][T14161] veth1_macvtap: entered promiscuous mode [ 723.774977][ T8700] usbtmc 3-1:16.0: can't read capabilities [ 723.812989][T14167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.086033][T14161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.101641][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 724.128554][T14161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.135006][ T8704] usb 3-1: USB disconnect, device number 10 [ 724.156438][T14161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.170502][T14161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.181337][T14161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.191817][T14161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.201822][T14161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 724.212513][T14161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.223565][T14161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.241289][T14167] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.288512][T14161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.300151][T14161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.310038][T14161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.322062][T14161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.352900][T14161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.369429][T14161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.380045][T14161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 724.390599][T14161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.402371][T14161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.414907][ T2123] bridge_slave_1: left allmulticast mode [ 724.420572][ T2123] bridge_slave_1: left promiscuous mode [ 724.433744][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.451144][ T2123] bridge_slave_0: left allmulticast mode [ 724.463407][ T2123] bridge_slave_0: left promiscuous mode [ 724.474404][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.154741][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.245924][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.310935][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 728.322589][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 728.331108][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 728.339059][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 728.347377][ T5839] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 728.354965][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 728.403234][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 728.423582][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 728.431962][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 728.474774][ T2123] bond0 (unregistering): Released all slaves [ 728.499639][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 728.513814][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 728.532123][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 729.014295][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.021459][ T7300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.630593][T14922] loop2: detected capacity change from 0 to 128 [ 729.717851][ T2123] hsr_slave_0: left promiscuous mode [ 729.734284][ T2123] hsr_slave_1: left promiscuous mode [ 729.955621][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.024497][T14922] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 730.125861][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.449402][ T5839] Bluetooth: hci6: command tx timeout [ 730.501122][T14922] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 730.605124][T14930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1672'. [ 730.983729][T14943] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 731.043421][ T5839] Bluetooth: hci2: command tx timeout [ 731.609363][T12184] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 731.701421][T14947] loop2: detected capacity change from 0 to 512 [ 731.732322][T14947] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 731.755228][T14947] EXT4-fs (loop2): invalid journal inode [ 731.760942][T14947] EXT4-fs (loop2): can't get journal size [ 731.783107][T14947] EXT4-fs (loop2): 1 truncate cleaned up [ 731.792000][T14947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.090647][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 732.243236][ T2123] team0 (unregistering): Port device team_slave_0 removed [ 732.833273][ T5839] Bluetooth: hci6: command tx timeout [ 732.949264][T12184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.113706][ T5837] Bluetooth: hci2: command tx timeout [ 735.142680][ T5837] Bluetooth: hci6: command tx timeout [ 735.197343][ T5837] Bluetooth: hci2: command tx timeout [ 737.195370][ T5837] Bluetooth: hci6: command tx timeout [ 737.214719][T14908] chnl_net:caif_netlink_parms(): no params data found [ 737.276771][ T5837] Bluetooth: hci2: command tx timeout [ 737.515338][T14905] chnl_net:caif_netlink_parms(): no params data found [ 737.594927][T14673] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 738.533166][T14673] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 738.551945][T14673] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 738.677240][T14673] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 738.698530][T14908] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.167877][T14908] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.245260][T14908] bridge_slave_0: entered allmulticast mode [ 739.297312][T14908] bridge_slave_0: entered promiscuous mode [ 739.495863][T15016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1683'. [ 739.835537][T14908] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.842656][T14908] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.863665][T14908] bridge_slave_1: entered allmulticast mode [ 739.870658][T14908] bridge_slave_1: entered promiscuous mode [ 742.558739][T14905] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.569029][T14905] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.576366][T14905] bridge_slave_0: entered allmulticast mode [ 742.583371][T14905] bridge_slave_0: entered promiscuous mode [ 742.590812][T14905] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.598050][T14905] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.605605][T14905] bridge_slave_1: entered allmulticast mode [ 742.613343][T14905] bridge_slave_1: entered promiscuous mode [ 742.642321][T14908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.661733][T14908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.555295][T14905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.670273][T14908] team0: Port device team_slave_0 added [ 743.686138][T14908] team0: Port device team_slave_1 added [ 744.753276][T14905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.420002][T14905] team0: Port device team_slave_0 added [ 745.436912][T14905] team0: Port device team_slave_1 added [ 745.453576][T14908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.464626][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.506748][T14908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.520078][T14908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.527233][T14908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.553252][T14908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.353539][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.574025][T14908] hsr_slave_0: entered promiscuous mode [ 747.729874][T14908] hsr_slave_1: entered promiscuous mode [ 747.751041][T15071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 747.772084][T14908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 747.779679][T14908] Cannot create hsr debugfs directory [ 747.828059][T14673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.839848][T14905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.849356][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.875742][T14905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.912575][T14905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.919550][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.948530][T14905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.717240][T14673] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.996608][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.003756][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.018637][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.025799][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.112669][T14905] hsr_slave_0: entered promiscuous mode [ 749.132337][T14905] hsr_slave_1: entered promiscuous mode [ 749.138490][T14905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.158894][T14905] Cannot create hsr debugfs directory [ 749.615139][T15096] loop2: detected capacity change from 0 to 128 [ 749.657892][T15096] vfat filesystem being mounted at /109/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 749.783806][ T2123] bridge_slave_1: left allmulticast mode [ 749.804765][ T2123] bridge_slave_1: left promiscuous mode [ 749.822979][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.850198][ T2123] bridge_slave_0: left allmulticast mode [ 749.868786][ T2123] bridge_slave_0: left promiscuous mode [ 749.883926][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.923577][ T2123] bridge_slave_1: left allmulticast mode [ 749.929237][ T2123] bridge_slave_1: left promiscuous mode [ 749.940123][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.026004][ T2123] bridge_slave_0: left allmulticast mode [ 750.032336][ T2123] bridge_slave_0: left promiscuous mode [ 750.038028][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.245411][ T8700] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 750.421928][ T8700] usb 3-1: Using ep0 maxpacket: 32 [ 750.456516][ T8700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.492584][ T8700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.512842][ T8700] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 750.537476][ T8700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.555831][ T8700] usb 3-1: config 0 descriptor?? [ 751.136911][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.147867][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.160051][ T2123] bond0 (unregistering): Released all slaves [ 751.298649][ T8700] lua 0003:1E7D:2C2E.0009: item fetching failed at offset 5/9 [ 751.316549][ T8700] lua 0003:1E7D:2C2E.0009: parse failed [ 751.332694][ T8700] lua 0003:1E7D:2C2E.0009: probe with driver lua failed with error -22 [ 751.507533][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.562736][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.603643][ T2123] bond0 (unregistering): Released all slaves [ 751.654277][ T5881] usb 3-1: USB disconnect, device number 11 [ 752.335032][ T2123] hsr_slave_0: left promiscuous mode [ 752.616986][ T2123] hsr_slave_1: left promiscuous mode [ 752.662164][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.669610][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.678306][T15131] loop2: detected capacity change from 0 to 1024 [ 752.693425][T15131] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 752.905651][T15131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.971224][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.011704][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.054993][T12184] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.110490][ T2123] hsr_slave_0: left promiscuous mode [ 753.130837][ T2123] hsr_slave_1: left promiscuous mode [ 753.158565][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.178530][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.261506][ T2123] veth1_macvtap: left promiscuous mode [ 753.267052][ T2123] veth0_macvtap: left promiscuous mode [ 753.276384][ T2123] veth1_vlan: left promiscuous mode [ 753.281748][ T2123] veth0_vlan: left promiscuous mode [ 753.967404][T15139] loop2: detected capacity change from 0 to 512 [ 754.002336][T15139] EXT4-fs: Ignoring removed mblk_io_submit option [ 754.046115][T15139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.083865][ T29] audit: type=1800 audit(6029482346.068:235): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1706" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 754.230988][T15143] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1706: bg 0: block 496: padding at end of block bitmap is not set [ 754.243996][T15142] [ 754.247929][T15142] ============================================ [ 754.254064][T15142] WARNING: possible recursive locking detected [ 754.260202][T15142] 6.13.0-rc3-next-20241218-syzkaller #0 Not tainted [ 754.266765][T15142] -------------------------------------------- [ 754.272892][T15142] syz.6.1707/15142 is trying to acquire lock: [ 754.278936][T15142] ffff888027158ac8 (vm_lock){++++}-{0:0}, at: move_pages+0x26b/0x1680 [ 754.287101][T15142] [ 754.287101][T15142] but task is already holding lock: [ 754.294447][T15142] ffff888029af0d48 (vm_lock){++++}-{0:0}, at: uffd_lock_vma+0x20/0x2c0 [ 754.302702][T15142] [ 754.302702][T15142] other info that might help us debug this: [ 754.310747][T15142] Possible unsafe locking scenario: [ 754.310747][T15142] [ 754.318176][T15142] CPU0 [ 754.321438][T15142] ---- [ 754.324696][T15142] lock(vm_lock); SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 754.328403][T15142] lock(vm_lock); [ 754.332124][T15142] [ 754.332124][T15142] *** DEADLOCK *** [ 754.332124][T15142] [ 754.340276][T15142] May be due to missing lock nesting notation [ 754.340276][T15142] [ 754.341415][T15143] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3758096384 > max in inode 15 [ 754.348584][T15142] 2 locks held by syz.6.1707/15142: [ 754.348598][T15142] #0: ffff888029af0d48 (vm_lock){++++}-{0:0} [ 754.359216][T15143] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3758096385 > max in inode 15 [ 754.363929][T15142] , at: uffd_lock_vma+0x20/0x2c0 [ 754.363955][T15142] #1: ffffffff8e937d20 (rcu_read_lock){....}-{1:3}, at: lock_vma_under_rcu+0x1dd/0xa40 [ 754.364006][T15142] [ 754.364006][T15142] stack backtrace: [ 754.364015][T15142] CPU: 1 UID: 0 PID: 15142 Comm: syz.6.1707 Not tainted 6.13.0-rc3-next-20241218-syzkaller #0 [ 754.364035][T15142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 754.364045][T15142] Call Trace: [ 754.364053][T15142] [ 754.364066][T15142] dump_stack_lvl+0x241/0x360 [ 754.364088][T15142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.364106][T15142] ? __pfx__printk+0x10/0x10 [ 754.364130][T15142] ? lockdep_unlock+0x16a/0x300 [ 754.364155][T15142] print_deadlock_bug+0x483/0x620 [ 754.364172][T15142] ? validate_chain+0x11e/0x5920 [ 754.364199][T15142] validate_chain+0x15e2/0x5920 [ 754.364230][T15142] ? validate_chain+0x11e/0x5920 [ 754.364254][T15142] ? __pfx_validate_chain+0x10/0x10 [ 754.364280][T15142] ? __pfx_validate_chain+0x10/0x10 [ 754.364308][T15142] ? mark_lock+0x9a/0x360 [ 754.364332][T15142] ? __lock_acquire+0x1397/0x2100 [ 754.364356][T15142] ? validate_chain+0x11e/0x5920 [ 754.364383][T15142] ? reacquire_held_locks+0x3eb/0x690 [ 754.364408][T15142] ? mark_lock+0x9a/0x360 [ 754.364433][T15142] __lock_acquire+0x1397/0x2100 [ 754.364462][T15142] lock_acquire+0x1ed/0x550 [ 754.364483][T15142] ? move_pages+0x26b/0x1680 [ 754.364503][T15142] ? __pfx_lock_acquire+0x10/0x10 [ 754.364531][T15142] ? mas_walk+0x1f3/0x280 [ 754.364554][T15142] lock_vma_under_rcu+0x370/0xa40 [ 754.364573][T15142] ? move_pages+0x26b/0x1680 [ 754.364589][T15142] ? lock_vma_under_rcu+0x1dd/0xa40 [ 754.364610][T15142] ? move_pages+0x26b/0x1680 [ 754.364628][T15142] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 754.364653][T15142] ? uffd_lock_vma+0x91/0x2c0 [ 754.364671][T15142] move_pages+0x26b/0x1680 [ 754.364687][T15142] ? __pfx___might_resched+0x10/0x10 [ 754.364708][T15142] ? __might_fault+0xaa/0x120 [ 754.364730][T15142] ? preempt_count_add+0x93/0x190 [ 754.364750][T15142] ? __pfx_move_pages+0x10/0x10 [ 754.364767][T15142] ? __might_fault+0xc6/0x120 [ 754.364790][T15142] userfaultfd_ioctl+0x5221/0x6840 [ 754.364820][T15142] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 754.364840][T15142] ? stack_trace_save+0x118/0x1d0 [ 754.364861][T15142] ? __pfx_stack_trace_save+0x10/0x10 [ 754.364880][T15142] ? stack_depot_save_flags+0x37/0x940 [ 754.364910][T15142] ? kasan_save_track+0x51/0x80 [ 754.364932][T15142] ? kasan_save_track+0x3f/0x80 [ 754.364953][T15142] ? kasan_save_free_info+0x40/0x50 [ 754.364972][T15142] ? __kasan_slab_free+0x59/0x70 [ 754.364994][T15142] ? kfree+0x196/0x430 [ 754.365009][T15142] ? tomoyo_path_number_perm+0x679/0x860 [ 754.365026][T15142] ? security_file_ioctl+0xc6/0x2a0 [ 754.365043][T15142] ? __se_sys_ioctl+0x46/0x170 [ 754.365070][T15142] ? do_syscall_64+0xf3/0x230 [ 754.365085][T15142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.365109][T15142] ? do_vfs_ioctl+0xf07/0x2e40 [ 754.365134][T15142] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 754.365156][T15142] ? mark_lock+0x9a/0x360 [ 754.365185][T15142] ? tomoyo_path_number_perm+0x206/0x860 [ 754.365203][T15142] ? __pfx_lock_release+0x10/0x10 [ 754.365227][T15142] ? tomoyo_path_number_perm+0x679/0x860 [ 754.365245][T15142] ? tomoyo_path_number_perm+0x679/0x860 [ 754.365264][T15142] ? tomoyo_path_number_perm+0x6f9/0x860 [ 754.365281][T15142] ? __lock_acquire+0x1397/0x2100 [ 754.365304][T15142] ? tomoyo_path_number_perm+0x206/0x860 [ 754.365322][T15142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 754.365356][T15142] ? __fget_files+0x2a/0x410 [ 754.365375][T15142] ? __fget_files+0x2a/0x410 [ 754.365394][T15142] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 754.365416][T15142] __se_sys_ioctl+0xf5/0x170 [ 754.365439][T15142] do_syscall_64+0xf3/0x230 [ 754.365455][T15142] ? clear_bhb_loop+0x35/0x90 [ 754.365478][T15142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.365501][T15142] RIP: 0033:0x7f396f385d29 [ 754.365517][T15142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.365532][T15142] RSP: 002b:00007f396d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.365550][T15142] RAX: ffffffffffffffda RBX: 00007f396f575fa0 RCX: 00007f396f385d29 [ 754.365564][T15142] RDX: 0000000020000040 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 754.365577][T15142] RBP: 00007f396f401a20 R08: 0000000000000000 R09: 0000000000000000 [ 754.365588][T15142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.365600][T15142] R13: 0000000000000000 R14: 00007f396f575fa0 R15: 00007ffd20f16808 [ 754.365619][T15142] [ 754.775288][ C0] vkms_vblank_simulate: vblank timer overrun [ 755.101211][ T29] audit: type=1800 audit(6029482347.068:236): pid=15139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1706" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 755.536355][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 755.588749][ T2123] team0 (unregistering): Port device team_slave_0 removed [ 756.144286][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 756.173376][ T2123] team0 (unregistering): Port device team_slave_0 removed [ 756.806678][T15139] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.606516][ T2123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.648924][ T2123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.676226][ T2123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.727855][ T2123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.833464][ T2123] bridge_slave_1: left allmulticast mode [ 757.839138][ T2123] bridge_slave_1: left promiscuous mode [ 757.848317][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.856934][ T2123] bridge_slave_0: left allmulticast mode [ 757.867833][ T2123] bridge_slave_0: left promiscuous mode [ 757.873848][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.886509][ T2123] bridge_slave_1: left allmulticast mode [ 757.892354][ T2123] bridge_slave_1: left promiscuous mode [ 757.899547][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.915927][ T2123] bridge_slave_0: left allmulticast mode [ 757.925658][ T2123] bridge_slave_0: left promiscuous mode [ 757.932229][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.944899][ T2123] bridge_slave_1: left allmulticast mode [ 757.950700][ T2123] bridge_slave_1: left promiscuous mode [ 757.956846][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.968648][ T2123] bridge_slave_0: left allmulticast mode [ 757.974585][ T2123] bridge_slave_0: left promiscuous mode [ 757.980231][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.206292][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.216077][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.225607][ T2123] bond0 (unregistering): Released all slaves [ 758.236941][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.247103][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.257773][ T2123] bond0 (unregistering): Released all slaves [ 758.269943][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.280070][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.291022][ T2123] bond0 (unregistering): Released all slaves [ 758.549247][ T2123] hsr_slave_0: left promiscuous mode [ 758.560212][ T2123] hsr_slave_1: left promiscuous mode [ 758.568303][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.578379][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.590597][ T2123] hsr_slave_0: left promiscuous mode [ 758.598445][ T2123] hsr_slave_1: left promiscuous mode [ 758.604621][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.614242][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.623859][ T2123] hsr_slave_0: left promiscuous mode [ 758.629501][ T2123] hsr_slave_1: left promiscuous mode [ 758.635430][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.642846][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.650300][ T2123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.657745][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.667260][ T2123] veth1_macvtap: left promiscuous mode [ 758.672805][ T2123] veth0_macvtap: left promiscuous mode [ 758.678310][ T2123] veth1_vlan: left promiscuous mode [ 758.683604][ T2123] veth0_vlan: left promiscuous mode [ 758.813596][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 758.845230][ T2123] team0 (unregistering): Port device team_slave_0 removed [ 758.958735][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 758.985717][ T2123] team0 (unregistering): Port device team_slave_0 removed [ 759.113543][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 759.124754][ T2123] team0 (unregistering): Port device team_slave_0 removed [ 759.219925][ T2123] vcan0 (unregistering): left allmulticast mode [ 759.846976][ T2123] IPVS: stop unused estimator thread 0... [ 759.923138][ T2123] bridge_slave_1: left allmulticast mode [ 759.928812][ T2123] bridge_slave_1: left promiscuous mode [ 759.943098][ T2123] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.952356][ T2123] bridge_slave_0: left allmulticast mode [ 759.958000][ T2123] bridge_slave_0: left promiscuous mode [ 759.964745][ T2123] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.033944][ T2123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.046823][ T2123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.056559][ T2123] bond0 (unregistering): Released all slaves [ 760.114475][ T2123] hsr_slave_0: left promiscuous mode [ 760.132090][ T2123] hsr_slave_1: left promiscuous mode [ 760.137902][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.146902][ T2123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.268574][ T2123] team0 (unregistering): Port device team_slave_1 removed [ 760.283542][ T2123] team0 (unregistering): Port device team_slave_0 removed