last executing test programs: 3m51.511943539s ago: executing program 1 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m44.79516859s ago: executing program 1 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m42.093326922s ago: executing program 1 (id=123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@empty, @in=@local}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f0000000240)={[{@stripe}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpquota}, {@nodiscard}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0x0, 0x478, &(0x7f0000000ec0)="$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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) 3m33.262594643s ago: executing program 1 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x4827, 0x9, 0x849c00, 0xca51, 0x7, 0x1}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3m24.967305885s ago: executing program 1 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) utime(&(0x7f0000000200)='./file0\x00', 0x0) stat(&(0x7f0000000340)='./file0\x00', 0x0) 3m22.495065462s ago: executing program 1 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x5, 0x2000000000010000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [""]}, 0x14}}, 0xc0c9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, 0x0, 0x4000854) sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) connect$can_bcm(r6, &(0x7f0000000000), 0x10) readv(r6, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 3m6.969355504s ago: executing program 32 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000040)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x5, 0x2000000000010000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [""]}, 0x14}}, 0xc0c9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, 0x0, 0x4000854) sendmsg$DEVLINK_CMD_RELOAD(r1, 0x0, 0x1) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) connect$can_bcm(r6, &(0x7f0000000000), 0x10) readv(r6, &(0x7f0000001580)=[{0x0}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 3m2.50366297s ago: executing program 3 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r4, 0x4b47, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x4f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1c) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x24000010) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc400}, 0x54) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 2m59.146245715s ago: executing program 3 (id=188): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x1, &(0x7f00000004c0)={0x60, 0x3, 0xe2, 0x2}, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0}) 2m49.470931863s ago: executing program 3 (id=192): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r1}, 0x18) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x21, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0xa, 0x3f}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xb, "d8"}]}}, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(0xffffffffffffffff, &(0x7f00000002c0)=@qipcrtr, &(0x7f0000000040)=0x80, 0x80c00) socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2m46.968884531s ago: executing program 3 (id=197): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv1}]}, 0x2, 0xbbf, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[]) 2m46.752657896s ago: executing program 3 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m41.979609748s ago: executing program 3 (id=207): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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") open(0x0, 0x86442, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sync() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 2m26.501717929s ago: executing program 33 (id=207): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000002c0)={[{@nodiscard}, {@jqfmt_vfsv0}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resuid}, {@norecovery}]}, 0x1, 0x458, &(0x7f0000000680)="$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") open(0x0, 0x86442, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sync() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 1m45.019017923s ago: executing program 6 (id=327): r0 = epoll_create(0x2) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r3, 0x0, 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000006}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000140)) 1m44.890661215s ago: executing program 6 (id=329): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0xfec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1m42.507246082s ago: executing program 6 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff09"], 0x15) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1m41.806845485s ago: executing program 6 (id=338): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r4, 0x20, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}}, 0x10) capget(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0xd2f0, 0xfffffc01, 0xd35, 0xe, 0x7}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x4a, {}, 'lo\x00'}) socket$netlink(0x10, 0x3, 0x0) socket(0x15, 0x1, 0x5) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 1m40.01344101s ago: executing program 6 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000412000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x471b2000) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 1m32.80278797s ago: executing program 6 (id=347): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffebc, &(0x7f0000000000)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$eJzs3M+LG2UYB/Bnd2u3bt0faq22IL7oRS9Ddw9e9BJkC9KA0jZCKwhTN9GwYxIyYSEiVk+eBP8OEUTwJog3vezF/0DwthdvVhBHNqlto6k0omYpn88lDzzzTZ43IYEJ78zBi5+8s9sqs1Y+iMWFhVjsRaQbKVIsxh8+iOde+Pa7Jy9duXqhVq9vX0zpfO3y5vMppbWnvn79vc+e/mZw8rUv175ajv2NNw5+2vpx//T+mYPfLr/dLlO7TJ3uIOXpWrc7yK8VzbTTLnezlF4tmnnZTO1O2exP9FtFt9cbpryzs7rS6zfLMuWdpZuTpEF/mPK38nYnZVmWVleC2R27VTU+vVFVVURVPRDHo6qq6sFYiZPxUKzGWqzHRjwcj8SjcSoei9PxeDwRX/zw+fAwAQAAAAAAAAAAAAAAAAAAAPx7Zr3+/8zoqHlPDQAAAAAAAAAAAAAAAAAAAPeXS1euXqjV69sXUzoRUXy019hrjB/H/Vor2lFEM87Fevwao6v/x8b1+Zfr2+fSyEZ8WFy/mb++11iazG+ObicwNb85zqfJ/HKs3JnfivU4NT2/NTV/Ip595o58Fuvx/ZvRjSJ24jB7O//+ZkovvVL/U/7s6DgAAAC4H2Tplqnn71l2t/44P8P/AxPn14fZs8fmunQiohy+u5sXRbOvOPLF8fmO8UtVVf/VSywdgbf3b4u7f1OWI+Jenufnaa2FiDgaC/xLMe9fJv4Ptz/0eU8CAAAAAAAAAADALP7pDsGPx9vD72nn47zXCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ds7cCwAAAAAIMzfOo2ODQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACArwIAAP//GgHNcg==") listen(0xffffffffffffffff, 0x0) 1m16.82697585s ago: executing program 34 (id=347): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffebc, &(0x7f0000000000)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x120d, &(0x7f0000001280)="$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") listen(0xffffffffffffffff, 0x0) 1m10.526633782s ago: executing program 5 (id=383): creat(&(0x7f0000000740)='./file0\x00', 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x1, 0x4, 0x7, 0x81, 0x8a, 0xff, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400040, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x3fc, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x3, 0x436, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x1, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x40000003, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x0, 0x101, 0x3, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x80000001, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x7ff, 0x8, 0x13ffd, 0xfffffffd, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m10.12084857s ago: executing program 5 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) syz_clone(0x20229500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m8.201319377s ago: executing program 5 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) clock_gettime(0x0, &(0x7f0000000100)) 1m7.966985881s ago: executing program 5 (id=388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ad7e195a000000000000"], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x1d, @rand_addr=0x64010100, 0x4e22, 0x1, 'lblc\x00', 0xe, 0x8ea, 0x3d}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newsa={0x16c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x5, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x68, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xe0, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207141b9a451c00aa"}}, @tfcpad={0x8, 0x16, 0x4}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r1, 0x81ff) 1m4.480194759s ago: executing program 5 (id=394): creat(&(0x7f0000000740)='./file0\x00', 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x1, 0x4, 0x7, 0x81, 0x8a, 0xff, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400040, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x3fc, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x3, 0x436, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x1, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x40000003, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x0, 0x101, 0x3, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x80000001, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x7ff, 0x8, 0x13ffd, 0xfffffffd, 0x1b18]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2805}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m4.144374566s ago: executing program 5 (id=396): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 48.904242551s ago: executing program 35 (id=396): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 23.328712527s ago: executing program 4 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19.879102874s ago: executing program 4 (id=474): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000004000008", @ANYRES32=r6], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 18.690167677s ago: executing program 4 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r5, &(0x7f0000000100)={0xa, 0xffff, 0x0, @mcast2, 0x9}, 0x1c) sendto$inet6(r5, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000300)={0x1d, @rand_addr=0x64010100, 0x4e22, 0x1, 'lblc\x00', 0xe, 0x8ea, 0x3d}, 0x2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 16.669576406s ago: executing program 4 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) request_key(&(0x7f0000000780)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000003c0)='incremental-fs\x00', 0xfffffffffffffffe) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 14.41941951s ago: executing program 7 (id=488): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) r5 = syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') setrlimit(0x2, &(0x7f0000000180)={0x400, 0x770}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x0) sendfile(r6, r6, 0x0, 0x7a680003) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000000)='^\x00', &(0x7f0000000080)='./file0\x00', r5) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, 0x0, 0x1, 0x0, 0x0) 12.959860308s ago: executing program 7 (id=491): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) 12.807348531s ago: executing program 4 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = socket$unix(0x1, 0x5, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = dup2(r8, r7) close_range(r9, 0xffffffffffffffff, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r10, r10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) r11 = syz_open_dev$mouse(0x0, 0x4, 0x200000) setsockopt$sock_int(r11, 0x1, 0x23, &(0x7f0000000040)=0xc60a, 0x4) 11.759805522s ago: executing program 4 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setitimer(0x0, 0x0, &(0x7f0000000440)) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) 10.82726089s ago: executing program 0 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.417384397s ago: executing program 0 (id=499): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@jqfmt_vfsv1}]}, 0x2, 0xbbf, &(0x7f0000000440)="$eJzs3M9rHOUbAPBnJptt2ub73VRErBcjIi2I26SSYotgKxUvHgS9Cg3ppoRsf5BEatIcNvoPiHoWvAhqUTzYcy+KXr1oe1U8CEVioyCikdkfSdpk09TudmL7+cC7877z7u7zPDvszrywuwHctwazmzRib0ScSCJKzf1pRBTrvb6IWuN+S4vzY78vzo8lsbz8yi9JJBFxfXF+rPVcSXO7uznoi4hvn0/igbfWx52enZscrVYrU83xgZnT5w5Mz849NXF69FTlVOXM8KFnRg6OHBo6PNKxWv/44eil3x578afanx//dfHXdz9M4mj0N+fW1tEpgzG48pqsVYiI0U4Hy0lPs561dSaFWzwo7XJSAAC0la65hnsoStETqxdvpfjyu1yTAwAAADpiuSdiGQAAALjHJdb/AAAAcI9rfQ/g+uL8WKvl+42Eu+vasYgYaNS/1GyNmULU6tu+6I2IXdeTWPuz1qTxsDs2GBE/Xj38WdaiS79D3kxtISIe3uj4J/X6B+q/4l5ffxoRQx2IP3jT+L9U/9EOxM+7fgDuT5ePNU5k689/6cr1T2xw/itscO76N/I+/7Wu/5bWXf+t1t/T5vrv5S3GuPDR++fbzWX1P3vphU9bLYufbe+oqNtwbSHikcJG9Scr9Sdt6j+xxRilv89X2s3lXf/yBxH7YuP6W5LN/5/owPhEtTLUuN0wxsI3I5+0i593/dnx39Wm/tb/P7U7/ue2GOO148c/X7fz6mp38/rTn4vJq/VesbnnjdGZmanhiGLy0vr9BzfPpXWf1nNk9e9/fPP3/0b1Z58JtebrkK0FFprbbPzmTTGfu3jhi3b5tNZ/eR7/k22O/9r6vy6sP/5vbzHGE1+9s7/d3Nr1b9ay+K21MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pBHRH0laXumnabkcsTsiHoxdafXs9MyT42dfP3Mym4sYiN50fKJaGYqIUmOcZOPhen91fPCm8dMRsSci3ivtrI/LY2erJ/MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBW7I6I/krQcEWlELJXStFzOOysAAACg4wZuHBbzygMAAADonoG8EwAAAAC6zvofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALtvz6OUrSUTUjuyst0yxOdeba2ZAt6V5JwDkpifvBIDcFPJOAMjNba7xXS7APSi5xXxf25kdHc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO1r397LV5KIqB3ZWW+ZYnOuN9fMgG5L804AyE3PZpOFu5cHcPd5i8P9yxofSG4x37d6n9qNMzu6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA209/vSVpOSKKzX3lcsT/ImIgepPxiWplKCL+HxHfl3p3ZOPhlUf35ZY3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnTU9Ozc5Wq1WprJOGs3Oyh6d1U7SeMVq2yUfnTvsFGNbpLFNO3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIfp2bnJ0Wq1MjWddyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3qZn5yZHq9XKVBc7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/gkAAP//FUoKgg==") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r4, 0x8800000) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x20000578410e9) 9.26251478s ago: executing program 8 (id=423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.042963714s ago: executing program 2 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000412000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x471b2000) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(r6, 0x111, 0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 8.711656511s ago: executing program 7 (id=501): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@nobh}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000031000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b700000000000000950000000000000003ec13e406a9c7694ab81d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r1, 0x0) 7.73660077s ago: executing program 8 (id=502): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) 7.447226846s ago: executing program 8 (id=503): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000200), 0x2, 0x465, &(0x7f0000001180)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x220, 0x43, 0xa0, 0x0, 0x98, 0x3c0, 0x178, 0x178, 0x3c0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller0\x00'}, 0x12a, 0x1c8, 0x1e8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@mcast1, [0xffffffff, 0xff, 0xff000000, 0xff], @ipv4=@loopback, [0x0, 0xffffffff, 0x0, 0xffffff00], 0x4d2, 0x3505, 0x2f, 0x0, 0x10, 0xd}, {@ipv4=@rand_addr=0x64010100, [0xff000000, 0xffffffff, 0xffffff00], @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}, [0xffffff00, 0xffffffff, 0xff, 0xffffff00], 0x4d3, 0x3505, 0x3a, 0x1, 0x2, 0x8}, {@ipv6=@ipv4={'\x00', '\xff\xff', @empty}, [0xffffffff, 0xffffffff, 0x0, 0x807fffff], @ipv4=@private=0xa010101, [0xfffefe, 0xffffff00, 0xffffffff, 0xff], 0x4d6, 0x3504, 0x6, 0x1, 0x2, 0x8}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0x0, 0xffffffff], 0x4d5, 0x3504, 0x0, 0x0, 0xa, 0x1a}], 0x9, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [0x0, 0x0, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 6.647185861s ago: executing program 2 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.358052386s ago: executing program 0 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) creat(0x0, 0xd931d3864d39dcca) unshare(0x62040200) 5.285998477s ago: executing program 7 (id=506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10001}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 4.587221961s ago: executing program 8 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f0000000240)={[{@stripe}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpquota}, {@nodiscard}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}, 0x0, 0x478, &(0x7f0000000ec0)="$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") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) 3.696015158s ago: executing program 2 (id=508): r0 = syz_io_uring_setup(0x9cd, &(0x7f0000000680)={0x0, 0xf530, 0x1000, 0x0, 0x78}, 0x0, 0x0) r1 = syz_io_uring_setup(0x94f, &(0x7f0000000780)={0x0, 0x429f, 0x0, 0x0, 0x23c, 0x0, r0}, &(0x7f0000000800)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) io_uring_enter(r1, 0x3961, 0x0, 0x0, 0x0, 0x0) 3.475215492s ago: executing program 0 (id=509): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) 3.418128174s ago: executing program 7 (id=510): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3.417858283s ago: executing program 8 (id=511): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000a80)=ANY=[@ANYBLOB='utf8=1,uni_xlate=1,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,rodir,codepage=949,uni_xlate=1,shortname=winnt,shortname=mixed,shortname=win95,shortname=win95,iocharset=iso8859-13,shortname=mixed,nonumtail=0,discard,nonumtail=0,incharset=macturkish,\x00'], 0x1, 0x369, &(0x7f0000000700)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) 3.247283637s ago: executing program 2 (id=512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) 2.04756739s ago: executing program 0 (id=513): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.766230776s ago: executing program 2 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000412000/0x3000)=nil, 0x3000, 0x3, 0x12, r1, 0x471b2000) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt(r6, 0x111, 0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.398933263s ago: executing program 8 (id=515): socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 13.499339ms ago: executing program 0 (id=516): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) 13.00356ms ago: executing program 7 (id=517): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./bus/file0\x00', 0x2004011, &(0x7f00000004c0)={[{}, {@debug}, {@norecovery}, {@grpid}, {@grpquota}, {@discard}, {@journal_async_commit}, {@dax_inode}, {@noacl}, {@jqfmt_vfsv0}, {@discard}]}, 0x9, 0x61a, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvTDY/mrzvm7S8vK+92IBIC9qkSVspItjitZT64+YpNmmpTZvSRDS1YAr1oogXD4InD9b/QgtePXj14MWDSCGI9GCl2pXZzKa72Wyy+bG7SfbzgUmemcnO852Eb55nn31mJoCONZx9SSMORsT1JGKwYl8h8p3DSz/34PdbF7IliWLx9d+SuPVBslB5rCT/PpC/+O/BSH5IIw501dY7O3/zysT09NSNfH107ur10dn5m0cvX524NHVp6tr4C+OnTp44eWrs2JbOr1BRPnvn7XcHPzr35ldfPErGvv7pXBKn43EeW3ZeK1/bu6Was9/ZcBSXPHyyNS19PbXFY+8UfwxW/44zycoN7FgXI6I7X/4fg9FV8dccjA9fbWtwQFMVkyi3UUDHSdbP/+7aTX3NCQZooXI/oPzefrX3wbXSJvdKgFZYPLM0SLaU+90RUc7/wtLYYPSVxgb6HyRV4zxJRGxtZG5JVsf33527ky1RZxwOaI6F2+VR7pXtf1LKzaHoK631P0ir8j+tWLLtr22y/uEV6/IfWmfhdkQ8lbf/PbHp/H9rk/XLfwAAAAAAANg+985ExPOrzf9Ll+f/9Kwy/2cgIk5vQ/3rf/6X3s8LyTZUB1RYPBPxUs38378qZwcPdeWf8/+7NB+gO714eXrqWET8JyKORHdvtj5WfdiqCcJHPznweb36K+f/ZUtWf3kuYH6o+4UVF+JOTsxNbM/ZQ2dbvB3xsDT/91C+pXr+T9b+JzXt/8evZAl+vcE6Djx793zVhl+e/HtYP/+BZil+GXF41et/nnS3k7XvzzFa6g+MlnsFtZ5+/9Nv6tUv/6F9sva/f+38700q79czu7Hj90TE8flCsd7+zfb/e5I3usrHz7w3MTd3YyyiJzlbu318YzHDXlXOh3K+ZPl/5Jm1x/+W+/8VebgvIhYarPN/jwd+rrdP+w/tk+X/5Nrt/1B1+7/RQl+M3x36Nr/FWI3zDbX/J0pt+pF8i/E/qFR7P45GE7Qt4QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALpdGxL8iSUeWy2k6MhIxEBH/jf50emZ27rmLM+9cm8z2VT//f3BpPSk//3+oYn18xfrxiNgfEZ917Sutj1yYmZ5s98kDAAAAAAAAAAAAAAAAAADADjFQuua/2Lvy+v/Mr13tjg5oukL+Xb5D5yls+pXF3m0NBGi5zec/sNs1nv/dTY0DaL36+f/wUbGkpeEALaT/D51rk/nv4wLYA7T/0KkaHNPra3YcQDs03P4vNjcOAAAAAABgW+w/dO/HJCIWXtxXWjI9+T6T/WFvS9sdANA25vBC5yrMtDsCoF28xweS5dKfq17sX3/2f9KcgAAAAAAAAAAAAACAGocPuv4fOlUascYjvM3th71sjev/V0t+twuAPaT+oz8aafsTPQTYxbzHB9Zrx13/DwAAAAAAAAAAAAA7QN/NKxPT01M3Zud3X+HlnRHGxgoLEzsijG0tPF7vZ8qPmd/YkbsjYmecYKsL5VtwtDGMNv5PAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqvwTAAD//9ywLb8=") syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80}, {{&(0x7f0000000280)=@isdn, 0x80, &(0x7f0000000380)=[{0x0}], 0x1}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f00000003c0)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/75, 0x4b}], 0x2, &(0x7f0000000340)=""/45, 0x2d}, 0x8}, {{&(0x7f0000000540)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000440)=""/18, 0x12}], 0x1, &(0x7f0000000640)=""/130, 0x82}, 0xe9a8}, {{&(0x7f0000000700)=@caif, 0x80, &(0x7f00000008c0)}, 0x6}], 0x6, 0x0, 0x0) r5 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x400008bf) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) 0s ago: executing program 2 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) unshare(0x62040200) kernel console output (not intermixed with test programs): addresses unique to avoid problems! [ 66.077709][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.086319][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.094946][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.103672][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.113735][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.122746][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.131874][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.141510][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.182168][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.193309][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.203799][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.216870][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.228382][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.239728][ T4187] device veth1_vlan entered promiscuous mode [ 66.251653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.262300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.270870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.280425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.301748][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.311134][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.321927][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.330703][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.350693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.358791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.366814][ T1107] Bluetooth: hci4: command 0x040f tx timeout [ 66.368293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.379691][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 66.385226][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.388601][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 66.395518][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.408254][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 66.414970][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 66.455382][ T4187] device veth0_macvtap entered promiscuous mode [ 66.467736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.477290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.487340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.496920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.507951][ T4184] device veth0_macvtap entered promiscuous mode [ 66.521073][ T4187] device veth1_macvtap entered promiscuous mode [ 66.549028][ T4184] device veth1_macvtap entered promiscuous mode [ 66.658284][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.679405][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.695573][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.706585][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.727564][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.744277][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.767121][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.788018][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.799161][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.816191][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.827373][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.847435][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.858529][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.876667][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.886139][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.901619][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.912700][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.923659][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.933747][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.945124][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.955215][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.966098][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.977418][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.991638][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.000642][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.135417][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.148855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.201690][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.229421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.304324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.365213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.427298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.486415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.659739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.667823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.781962][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.794580][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.804004][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.813392][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.841364][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.858720][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.876627][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.887301][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.906547][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.924113][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.935046][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.952330][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.966622][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.009651][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.045992][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.096244][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.107411][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.119096][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.130064][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.139790][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.149036][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.163968][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.853106][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 68.880356][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 68.931383][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.940979][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.966613][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.999448][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.007480][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.009319][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 69.028158][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 69.036407][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 69.043596][ T4304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.357717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.468511][ T4317] hub 2-0:1.0: USB hub found [ 69.476540][ T4317] hub 2-0:1.0: 1 port detected [ 69.757125][ T4318] loop3: detected capacity change from 0 to 512 [ 69.776177][ T4318] ======================================================= [ 69.776177][ T4318] WARNING: The mand mount option has been deprecated and [ 69.776177][ T4318] and is ignored by this kernel. Remove the mand [ 69.776177][ T4318] option from the mount to silence this warning. [ 69.776177][ T4318] ======================================================= [ 70.485524][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.522247][ T4318] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.540840][ T4318] Quota error (device loop3): find_tree_dqentry: Getting block too big (196613 >= 6) [ 70.551106][ T4318] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 70.560670][ T4318] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.8: Failed to acquire dquot type 1 [ 70.594224][ T4318] EXT4-fs (loop3): 1 truncate cleaned up [ 70.623853][ T4318] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 70.669225][ C1] sched: RT throttling activated [ 71.306679][ T4324] loop4: detected capacity change from 0 to 512 [ 71.318182][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.324802][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.383724][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.448891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.495556][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.524034][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.580781][ T4326] loop1: detected capacity change from 0 to 4096 [ 71.609281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.644376][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.693016][ T4324] EXT4-fs (loop4): Ignoring removed nobh option [ 71.699854][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.723339][ T4324] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 71.764724][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.836689][ T4324] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.855436][ T4329] loop2: detected capacity change from 0 to 256 [ 71.983835][ T4324] EXT4-fs (loop4): 1 truncate cleaned up [ 72.032896][ T4324] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 72.065630][ T4329] FAT-fs (loop2): Unrecognized mount option "codepage==50" or missing value [ 72.577452][ T4326] EXT4-fs (loop1): Test dummy encryption mode enabled [ 72.599662][ T4326] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 73.578337][ T4326] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 73.643350][ T4345] tipc: Started in network mode [ 73.755191][ T4351] loop3: detected capacity change from 0 to 512 [ 73.812249][ T4345] tipc: Node identity 06da841b19fe, cluster identity 4711 [ 73.920063][ T4351] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 73.928792][ T4351] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 73.946221][ T4351] EXT4-fs (loop3): 1 truncate cleaned up [ 73.952556][ T4351] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,usrjquota="data=ordered,noload,grpid,grpjquota="init_itable,jqfmt=vfsold,noblock_validity,,errors=continue. Quota mode: writeback. [ 74.117001][ T4345] tipc: Enabled bearer , priority 0 [ 74.813504][ T4355] device syzkaller0 entered promiscuous mode [ 74.893046][ T4361] tipc: Resetting bearer [ 75.052111][ T4344] tipc: Disabling bearer [ 75.664259][ T4374] loop1: detected capacity change from 0 to 1024 [ 75.694033][ T4374] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 75.694033][ T4374] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 75.694033][ T4374] [ 75.967483][ T4374] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.064885][ T4387] loop2: detected capacity change from 0 to 256 [ 78.121690][ T4389] netlink: 48 bytes leftover after parsing attributes in process `syz.4.22'. [ 78.140205][ T4387] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.172502][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 78.187065][ T4374] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,nouser_xattr,nojournal_checksum,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,nombcache,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 78.204519][ T4387] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 78.234625][ T4387] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 78.413324][ T4393] loop3: detected capacity change from 0 to 256 [ 78.485494][ T4389] device hsr_slave_1 left promiscuous mode [ 78.704787][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.719248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.728163][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.737169][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.746256][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.755794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.764886][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.774079][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.783331][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.792469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 79.384627][ T4400] netlink: 'syz.1.17': attribute type 16 has an invalid length. [ 79.392965][ T4400] netlink: 'syz.1.17': attribute type 17 has an invalid length. [ 79.406084][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.413507][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 79.513653][ T4393] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.532956][ T4393] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 79.552766][ T4393] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 79.567223][ T4400] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 81.680220][ T4408] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 83.110665][ T4408] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 83.175630][ T4421] device syzkaller0 entered promiscuous mode [ 83.202061][ T4418] device syzkaller0 entered promiscuous mode [ 83.231188][ T4423] tipc: Started in network mode [ 83.237051][ T4423] tipc: Node identity be8812c4b071, cluster identity 4711 [ 83.297424][ T4423] tipc: Enabled bearer , priority 0 [ 83.307820][ T4430] loop4: detected capacity change from 0 to 512 [ 83.328759][ T4430] EXT4-fs (loop4): Ignoring removed bh option [ 83.356921][ T4423] tipc: Resetting bearer [ 83.395612][ T4430] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 83.429472][ T4430] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.441191][ T4422] tipc: Disabling bearer [ 83.584301][ T4437] loop3: detected capacity change from 0 to 512 [ 84.953494][ T4437] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.984646][ T4437] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.000265][ T4452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.36'. [ 85.105829][ T4437] EXT4-fs (loop3): 1 truncate cleaned up [ 85.188377][ T4437] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 85.222584][ T4454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 85.581182][ T4454] device hsr_slave_1 left promiscuous mode [ 85.760454][ T4463] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 87.701046][ T7] cfg80211: failed to load regulatory.db [ 87.940229][ T4494] device syzkaller0 entered promiscuous mode [ 88.540249][ T4536] tipc: Enabled bearer , priority 0 [ 88.688484][ T4520] tipc: Resetting bearer [ 88.730224][ T4505] tipc: Disabling bearer [ 90.047336][ T4561] loop2: detected capacity change from 0 to 512 [ 91.374723][ T4574] netlink: 48 bytes leftover after parsing attributes in process `syz.4.54'. [ 91.511508][ T4561] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.635638][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 91.682876][ T4561] EXT4-fs (loop2): 1 truncate cleaned up [ 91.704035][ T4561] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 91.976041][ T4590] device syzkaller0 entered promiscuous mode [ 92.067129][ T4592] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.290205][ T4589] tipc: Enabling of bearer rejected, failed to enable media [ 92.482747][ T4602] tipc: Started in network mode [ 92.507973][ T4602] tipc: Node identity ba4bde598418, cluster identity 4711 [ 92.590400][ T4602] tipc: Enabled bearer , priority 0 [ 92.662024][ T4596] tipc: Resetting bearer [ 92.752791][ T4595] tipc: Disabling bearer [ 95.466947][ T4618] loop3: detected capacity change from 0 to 4096 [ 97.666300][ T4637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 98.697693][ T4618] EXT4-fs: failed to create workqueue [ 98.927544][ T4618] EXT4-fs (loop3): mount failed [ 99.919333][ T4651] tipc: Enabling of bearer rejected, failed to enable media [ 100.810019][ T4669] loop0: detected capacity change from 0 to 512 [ 103.358212][ T4669] EXT4-fs (loop0): Unrecognized mount option "rootcontext=system_u" or missing value [ 103.410883][ T4691] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 104.535589][ T4686] device syzkaller0 entered promiscuous mode [ 105.048549][ T4705] input: syz0 as /devices/virtual/input/input5 [ 109.662762][ T4728] loop4: detected capacity change from 0 to 256 [ 110.398539][ T4734] loop0: detected capacity change from 0 to 1024 [ 110.555601][ T4742] loop3: detected capacity change from 0 to 512 [ 110.593395][ T4739] tipc: Enabled bearer , priority 0 [ 111.696305][ T4739] device syzkaller0 entered promiscuous mode [ 111.710039][ T4228] tipc: Node number set to 1045683801 [ 111.830049][ T4734] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 112.689713][ T4734] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 112.695492][ T4742] EXT4-fs (loop3): Unrecognized mount option "rootcontext=system_u" or missing value [ 114.129095][ T4734] EXT4-fs error (device loop0): ext4_get_journal_inode:5160: inode #5: comm syz.0.95: unexpected bad inode w/o EXT4_IGET_BAD [ 114.149022][ T4738] tipc: Resetting bearer [ 114.301307][ T4749] loop1: detected capacity change from 0 to 256 [ 114.313328][ T4749] exfat: Deprecated parameter 'namecase' [ 114.319118][ T4749] exfat: Unknown parameter 'keep_last_dots' [ 115.479452][ T4734] EXT4-fs (loop0): no journal found [ 115.485611][ T4734] EXT4-fs (loop0): can't get journal size [ 115.499929][ T4734] EXT4-fs: failed to create workqueue [ 115.543149][ T4734] EXT4-fs (loop0): mount failed [ 115.660452][ T4738] tipc: Disabling bearer [ 115.721262][ T4755] device syzkaller0 entered promiscuous mode [ 117.802324][ T4775] device syzkaller0 entered promiscuous mode [ 117.924845][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 118.674301][ T4785] loop2: detected capacity change from 0 to 512 [ 118.879811][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.065373][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.326945][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.660863][ T7] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 119.694487][ T4789] loop0: detected capacity change from 0 to 512 [ 119.783846][ T4789] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.845382][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.107909][ T4785] EXT4-fs (loop2): Unrecognized mount option "rootcontext=system_u" or missing value [ 120.319613][ T7] usb 5-1: config 0 descriptor?? [ 120.457505][ T4789] EXT4-fs (loop0): 1 truncate cleaned up [ 120.539281][ T7] usb 5-1: can't set config #0, error -71 [ 120.603423][ T4789] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 120.902632][ T7] usb 5-1: USB disconnect, device number 2 [ 121.823753][ T4787] tipc: Started in network mode [ 121.828679][ T4787] tipc: Node identity 323a4c074b59, cluster identity 4711 [ 121.839623][ T4787] tipc: Enabled bearer , priority 0 [ 121.913214][ T4799] loop4: detected capacity change from 0 to 256 [ 122.840123][ T4799] exfat: Deprecated parameter 'namecase' [ 122.845804][ T4799] exfat: Unknown parameter 'keep_last_dots' [ 123.039114][ T4228] tipc: Node number set to 2036550663 [ 124.047752][ T4787] tipc: Disabling bearer [ 124.232811][ T4817] loop0: detected capacity change from 0 to 512 [ 124.261226][ T4811] tipc: Enabled bearer , priority 0 [ 124.288377][ T4817] EXT4-fs (loop0): inline encryption not supported [ 124.298567][ T4817] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.321320][ T4807] device syzkaller0 entered promiscuous mode [ 124.410096][ T4807] tipc: Resetting bearer [ 124.450518][ T4817] EXT4-fs (loop0): 1 truncate cleaned up [ 124.456232][ T4817] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,discard,inlinecrypt,debug_want_extra_isize=0x0000000000000080,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 124.478997][ T4826] loop4: detected capacity change from 0 to 256 [ 124.540464][ T4807] tipc: Disabling bearer [ 124.595422][ T4826] FAT-fs (loop4): Directory bread(block 64) failed [ 124.615865][ T4826] FAT-fs (loop4): Directory bread(block 65) failed [ 124.641607][ T4826] FAT-fs (loop4): Directory bread(block 66) failed [ 124.665267][ T4826] FAT-fs (loop4): Directory bread(block 67) failed [ 124.695986][ T4821] device vlan2 entered promiscuous mode [ 124.744650][ T4826] FAT-fs (loop4): Directory bread(block 68) failed [ 124.754098][ T4827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 124.805308][ T4826] FAT-fs (loop4): Directory bread(block 69) failed [ 124.841104][ T4826] FAT-fs (loop4): Directory bread(block 70) failed [ 124.878436][ T4830] input: syz1 as /devices/virtual/input/input6 [ 124.891157][ T4826] FAT-fs (loop4): Directory bread(block 71) failed [ 124.898426][ T4826] FAT-fs (loop4): Directory bread(block 72) failed [ 124.908879][ T4826] FAT-fs (loop4): Directory bread(block 73) failed [ 125.673435][ T4835] device syzkaller0 entered promiscuous mode [ 126.105177][ T4842] loop4: detected capacity change from 0 to 256 [ 130.432472][ T4844] loop1: detected capacity change from 0 to 512 [ 134.709912][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.716288][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.975731][ T4865] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 135.454293][ T4871] loop0: detected capacity change from 0 to 512 [ 135.772574][ T4871] FAT-fs (loop0): Unrecognized mount option "rootcontext=system_u" or missing value [ 135.996292][ T4874] tipc: Enabled bearer , priority 0 [ 136.350313][ T4878] tipc: Enabled bearer , priority 0 [ 136.394915][ T4878] device syzkaller0 entered promiscuous mode [ 136.665331][ T4880] tipc: Disabling bearer [ 136.727606][ T4884] device vlan2 entered promiscuous mode [ 136.745083][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.135'. [ 137.955003][ T4256] tipc: Node number set to 522486811 [ 138.172043][ T4876] tipc: Resetting bearer [ 138.463364][ T4898] loop4: detected capacity change from 0 to 256 [ 141.749509][ T4900] loop3: detected capacity change from 0 to 512 [ 142.678870][ T4876] tipc: Disabling bearer [ 142.815138][ T4900] EXT4-fs (loop3): Unrecognized mount option "rootcontext=system_u" or missing value [ 146.714640][ T4923] loop3: detected capacity change from 0 to 256 [ 147.709486][ T4923] exfat: Deprecated parameter 'namecase' [ 147.715371][ T4923] exfat: Unknown parameter 'keep_last_dots' [ 149.441742][ T4929] tipc: Started in network mode [ 149.446874][ T4929] tipc: Node identity 4ae47fa002a8, cluster identity 4711 [ 149.464786][ T4929] tipc: Enabled bearer , priority 0 [ 149.549985][ T4929] device syzkaller0 entered promiscuous mode [ 149.568088][ T4930] tipc: Resetting bearer [ 149.583665][ T4932] loop3: detected capacity change from 0 to 512 [ 149.628819][ T4928] tipc: Resetting bearer [ 149.662619][ T4932] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.744194][ T4928] tipc: Disabling bearer [ 150.065087][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 150.115058][ T4941] tipc: Enabled bearer , priority 0 [ 150.140213][ T4941] device syzkaller0 entered promiscuous mode [ 150.313890][ T4947] loop2: detected capacity change from 0 to 512 [ 150.341459][ T4941] tipc: Resetting bearer [ 150.452608][ T4947] EXT4-fs (loop2): Unrecognized mount option "rootcontext=system_u" or missing value [ 150.708070][ T4940] tipc: Resetting bearer [ 150.908026][ T4940] tipc: Disabling bearer [ 151.804427][ T4949] netlink: 56 bytes leftover after parsing attributes in process `syz.3.155'. [ 152.373707][ T4951] loop0: detected capacity change from 0 to 128 [ 152.631329][ T4957] device syzkaller0 entered promiscuous mode [ 156.205347][ T4969] tipc: Enabled bearer , priority 0 [ 156.287337][ T4973] device vlan2 entered promiscuous mode [ 156.373035][ T4969] tipc: Resetting bearer [ 156.395167][ T4974] device syzkaller0 entered promiscuous mode [ 156.409748][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 156.503489][ T4973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 157.403368][ T4981] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 157.440066][ T4968] tipc: Resetting bearer [ 157.651869][ T4968] tipc: Disabling bearer [ 157.666400][ T4985] tipc: Enabled bearer , priority 0 [ 157.782646][ T4988] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 157.853634][ T4990] tipc: Disabling bearer [ 159.701668][ T5004] loop2: detected capacity change from 0 to 256 [ 162.550829][ T5004] FAT-fs (loop2): Directory bread(block 64) failed [ 162.557489][ T5004] FAT-fs (loop2): Directory bread(block 65) failed [ 162.564265][ T5004] FAT-fs (loop2): Directory bread(block 66) failed [ 162.570875][ T5004] FAT-fs (loop2): Directory bread(block 67) failed [ 162.577478][ T5004] FAT-fs (loop2): Directory bread(block 68) failed [ 162.584062][ T5004] FAT-fs (loop2): Directory bread(block 69) failed [ 162.590734][ T5004] FAT-fs (loop2): Directory bread(block 70) failed [ 162.597280][ T5004] FAT-fs (loop2): Directory bread(block 71) failed [ 162.603987][ T5004] FAT-fs (loop2): Directory bread(block 72) failed [ 162.610591][ T5004] FAT-fs (loop2): Directory bread(block 73) failed [ 163.440422][ T5017] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 164.527333][ T5023] loop2: detected capacity change from 0 to 1024 [ 164.600858][ T5013] chnl_net:caif_netlink_parms(): no params data found [ 164.611339][ T5008] loop0: detected capacity change from 0 to 40427 [ 164.656918][ T5023] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.699462][ T5008] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 164.747309][ T5008] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff [ 164.801778][ T5032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'. [ 164.998410][ T5039] device syzkaller0 entered promiscuous mode [ 165.023777][ T5013] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.031973][ T5013] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.040586][ T5013] device bridge_slave_0 entered promiscuous mode [ 165.049739][ T5013] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.057049][ T5013] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.066324][ T5013] device bridge_slave_1 entered promiscuous mode [ 165.251004][ T5013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.309275][ T1107] Bluetooth: hci5: command 0x0409 tx timeout [ 165.316206][ T5013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.495652][ T5050] loop0: detected capacity change from 0 to 256 [ 165.616422][ T5051] loop3: detected capacity change from 0 to 512 [ 166.139491][ T5013] team0: Port device team_slave_0 added [ 166.466088][ T5013] team0: Port device team_slave_1 added [ 166.691281][ T5051] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.704793][ T5050] FAT-fs (loop0): Directory bread(block 64) failed [ 166.810888][ T5050] FAT-fs (loop0): Directory bread(block 65) failed [ 166.888318][ T5051] EXT4-fs (loop3): 1 truncate cleaned up [ 166.894333][ T5051] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 167.264490][ T5050] FAT-fs (loop0): Directory bread(block 66) failed [ 167.329377][ T5050] FAT-fs (loop0): Directory bread(block 67) failed [ 167.390302][ T5050] FAT-fs (loop0): Directory bread(block 68) failed [ 167.428767][ T5013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.469440][ T5050] FAT-fs (loop0): Directory bread(block 69) failed [ 167.476107][ T5050] FAT-fs (loop0): Directory bread(block 70) failed [ 167.503158][ T5013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.625726][ T5050] FAT-fs (loop0): Directory bread(block 71) failed [ 167.669535][ T5050] FAT-fs (loop0): Directory bread(block 72) failed [ 167.671532][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 167.683123][ T5013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.696369][ T5013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.703415][ T5013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.872877][ T5050] FAT-fs (loop0): Directory bread(block 73) failed [ 167.988350][ T5013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.158503][ T5050] process 'syz.0.184' launched './file0' with NULL argv: empty string added [ 168.305864][ T5013] device hsr_slave_0 entered promiscuous mode [ 168.332966][ T5013] device hsr_slave_1 entered promiscuous mode [ 168.382691][ T5013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.401480][ T5013] Cannot create hsr debugfs directory [ 168.526929][ T4498] attempt to access beyond end of device [ 168.526929][ T4498] loop0: rw=1, want=1164, limit=256 [ 168.915476][ T5013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.926342][ T5013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.936442][ T5013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.947037][ T5013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 171.115366][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 171.152855][ T5075] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 177.966367][ T5013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.226827][ T5013] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.462017][ T5013] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 178.495128][ T5013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.523945][ T4228] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 178.752497][ T5013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.928134][ T4228] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 178.950609][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 178.983834][ T4228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 179.027903][ T4228] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 179.047837][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.083815][ T4228] usb 4-1: config 0 descriptor?? [ 179.111340][ T5090] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 179.158967][ T3985] Bluetooth: hci5: command 0x0419 tx timeout [ 179.195757][ T5108] loop0: detected capacity change from 0 to 1024 [ 179.209026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.220083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.228024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.237873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.247772][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.254937][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.263262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.272773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.282352][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.289555][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.304727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.314722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.366519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.409103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.418588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.438796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.455194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.465719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.483954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.500502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.509051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.516705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.524513][ T5088] tipc: Enabled bearer , priority 0 [ 179.532186][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.191'. [ 179.567017][ T5088] tipc: Disabling bearer [ 179.927404][ T5013] device veth0_vlan entered promiscuous mode [ 179.961359][ T5013] device veth1_vlan entered promiscuous mode [ 180.007923][ T5013] device veth0_macvtap entered promiscuous mode [ 180.028634][ T5013] device veth1_macvtap entered promiscuous mode [ 180.066768][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.085262][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.103426][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.157910][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.176247][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.187303][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.206111][ T4228] usbhid 4-1:0.0: can't add hid device: -71 [ 180.210888][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.223061][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.233049][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.233167][ T4228] usbhid: probe of 4-1:0.0 failed with error -71 [ 180.244216][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.247377][ T5013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.288206][ T5119] loop0: detected capacity change from 0 to 16 [ 180.317072][ T5119] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 180.333082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.349921][ T4228] usb 4-1: USB disconnect, device number 2 [ 180.367391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.376911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.393431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.406530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.410194][ T5119] loop0: detected capacity change from 0 to 256 [ 180.427028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.442691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.456518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.465281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.473972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.481864][ T5119] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 180.500871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.511592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.520372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.530975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.541815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.552414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.560703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.627745][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.659109][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.696118][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.715482][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.739222][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.755807][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.778057][ T5125] loop3: detected capacity change from 0 to 4096 [ 180.783865][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.807826][ T5125] EXT4-fs (loop3): Test dummy encryption mode enabled [ 180.816055][ T5125] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 180.819844][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.848727][ T5125] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 180.856120][ T5013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.892035][ T5013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.906773][ T5013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.933532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.002750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.032747][ T5013] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.054663][ T5013] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.066253][ T5013] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.075505][ T5013] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.487111][ T5139] loop4: detected capacity change from 0 to 512 [ 182.554623][ T5139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 182.612634][ T5139] EXT4-fs (loop4): 1 truncate cleaned up [ 182.632260][ T5139] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 182.878756][ T5133] device syzkaller0 entered promiscuous mode [ 182.975176][ T5151] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 183.598209][ T5155] device syzkaller0 entered promiscuous mode [ 184.668419][ T5152] tipc: Enabling of bearer rejected, failed to enable media [ 184.881733][ T4524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.910879][ T4524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.687920][ T4513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.909381][ T4513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.950183][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 186.010365][ T5168] loop3: detected capacity change from 0 to 512 [ 186.031219][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 186.087246][ T5161] tipc: Enabling of bearer rejected, failed to enable media [ 186.674198][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 186.680638][ T1107] Bluetooth: hci0: command 0x0406 tx timeout [ 186.687148][ T1107] Bluetooth: hci4: command 0x0406 tx timeout [ 186.693457][ T1107] Bluetooth: hci3: command 0x0406 tx timeout [ 187.689360][ T1107] Bluetooth: hci2: command 0x0406 tx timeout [ 187.702101][ T5168] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 187.788826][ T5180] HTB: quantum of class 8002000A is small. Consider r2q change. [ 187.850278][ T5168] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #17: comm syz.3.207: inline data xattr refers to an external xattr inode [ 187.941891][ T5186] device syzkaller0 entered promiscuous mode [ 188.029737][ T5168] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.207: couldn't read orphan inode 17 (err -117) [ 188.083608][ T5168] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,data_err=ignore,inode_readahead_blks=0x0000000000010000,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 188.333736][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 188.487541][ T5189] syz.3.207 (5189) used greatest stack depth: 16544 bytes left [ 188.782458][ T5191] device syzkaller0 entered promiscuous mode [ 189.051794][ T5197] device syzkaller0 entered promiscuous mode [ 189.173489][ T5199] loop4: detected capacity change from 0 to 256 [ 189.416074][ T5199] FAT-fs (loop4): Directory bread(block 64) failed [ 189.423081][ T5199] FAT-fs (loop4): Directory bread(block 65) failed [ 189.430426][ T5199] FAT-fs (loop4): Directory bread(block 66) failed [ 189.437397][ T5199] FAT-fs (loop4): Directory bread(block 67) failed [ 189.444705][ T5199] FAT-fs (loop4): Directory bread(block 68) failed [ 189.451516][ T5199] FAT-fs (loop4): Directory bread(block 69) failed [ 189.458410][ T5199] FAT-fs (loop4): Directory bread(block 70) failed [ 189.465208][ T5199] FAT-fs (loop4): Directory bread(block 71) failed [ 189.472450][ T5199] FAT-fs (loop4): Directory bread(block 72) failed [ 189.479216][ T5199] FAT-fs (loop4): Directory bread(block 73) failed [ 191.099589][ T5203] loop0: detected capacity change from 0 to 512 [ 191.685202][ T5203] EXT4-fs (loop0): Unrecognized mount option "rootcontext=system_u" or missing value [ 192.180945][ T5205] device syzkaller0 entered promiscuous mode [ 194.030453][ T5218] tipc: Enabled bearer , priority 0 [ 194.084293][ T5218] device syzkaller0 entered promiscuous mode [ 194.113619][ T5218] tipc: Resetting bearer [ 194.141357][ T5216] tipc: Resetting bearer [ 194.181610][ T5216] tipc: Disabling bearer [ 194.352909][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 195.458006][ T5233] netlink: 324 bytes leftover after parsing attributes in process `syz.4.223'. [ 195.491764][ T5233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.149489][ T1107] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 197.305921][ T5237] loop5: detected capacity change from 0 to 512 [ 197.395811][ T5237] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 197.512127][ T5237] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:163: inode #17: comm syz.5.226: inline data xattr refers to an external xattr inode [ 197.535018][ T1107] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 197.551987][ T1107] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 197.578484][ T5237] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.226: couldn't read orphan inode 17 (err -117) [ 197.599388][ T1107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 197.625195][ T1107] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 197.641628][ T5237] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,data_err=ignore,inode_readahead_blks=0x0000000000010000,resuid=0x0000000000000000,norecovery,,errors=continue. Quota mode: none. [ 197.849724][ T1107] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 197.879328][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 197.939444][ T1107] usb 1-1: Product: syz [ 197.943763][ T1107] usb 1-1: Manufacturer: syz [ 198.037812][ T5247] device syzkaller0 entered promiscuous mode [ 198.050958][ T1107] cdc_wdm 1-1:1.0: skipping garbage [ 198.056328][ T1107] cdc_wdm 1-1:1.0: skipping garbage [ 198.143522][ T1107] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 198.169347][ T1107] cdc_wdm 1-1:1.0: Unknown control protocol [ 198.271418][ T5249] tipc: Enabling of bearer rejected, failed to enable media [ 198.283521][ T4241] usb 1-1: USB disconnect, device number 2 [ 198.303126][ T5249] device syzkaller0 entered promiscuous mode [ 198.431763][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.226'. [ 198.540826][ T5256] loop2: detected capacity change from 0 to 512 [ 198.695765][ T5256] EXT4-fs (loop2): Unrecognized mount option "rootcontext=system_u" or missing value [ 199.320885][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.327397][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.683769][ T5237] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 199.693847][ T5237] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 200.575807][ T5264] loop0: detected capacity change from 0 to 512 [ 200.645960][ T5264] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.665241][ T5237] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 201.241931][ T5264] EXT4-fs (loop0): 1 truncate cleaned up [ 201.247776][ T5264] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 201.342542][ T5275] loop2: detected capacity change from 0 to 512 [ 202.006182][ T5275] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,resgid=0x0000000000000000,barrier=0x000000000000000b,,errors=continue. Quota mode: writeback. [ 202.369397][ T5275] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.012072][ T5291] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 203.774201][ T5282] chnl_net:caif_netlink_parms(): no params data found [ 204.047760][ T5282] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.086045][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.193272][ T5282] device bridge_slave_0 entered promiscuous mode [ 204.277324][ T5296] device syzkaller0 entered promiscuous mode [ 204.311730][ T5282] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.324342][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.369681][ T5282] device bridge_slave_1 entered promiscuous mode [ 204.480518][ T23] Bluetooth: hci6: command 0x0409 tx timeout [ 204.483543][ T5303] loop0: detected capacity change from 0 to 256 [ 204.517678][ T5303] exfat: Deprecated parameter 'utf8' [ 204.564344][ T5303] exfat: Deprecated parameter 'utf8' [ 204.574485][ T5306] loop4: detected capacity change from 0 to 16 [ 204.591476][ T5304] tipc: Enabling of bearer rejected, failed to enable media [ 204.604882][ T5303] exfat: Deprecated parameter 'namecase' [ 204.623052][ T5307] device syzkaller0 entered promiscuous mode [ 204.639088][ T5282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.678121][ T5306] erofs: (device loop4): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 204.687293][ T5303] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 204.991621][ T5282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.199716][ T5319] tipc: Started in network mode [ 206.204785][ T5319] tipc: Node identity 7e3a8d65f059, cluster identity 4711 [ 206.220012][ T5319] tipc: Enabled bearer , priority 0 [ 206.232682][ T5282] team0: Port device team_slave_0 added [ 206.283411][ T5282] team0: Port device team_slave_1 added [ 206.343358][ T5319] tipc: Disabling bearer [ 206.463051][ T5282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.479307][ T5282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.531068][ T23] Bluetooth: hci6: command 0x041b tx timeout [ 206.584528][ T5282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.615414][ T5282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.637262][ T5282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.510910][ T5282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.598619][ T5334] tipc: Enabled bearer , priority 0 [ 207.621989][ T5336] loop5: detected capacity change from 0 to 512 [ 207.763050][ T5336] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 207.848267][ T5282] device hsr_slave_0 entered promiscuous mode [ 207.858037][ T5282] device hsr_slave_1 entered promiscuous mode [ 207.873279][ T5282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.885845][ T5282] Cannot create hsr debugfs directory [ 207.947292][ T5336] EXT4-fs (loop5): 1 truncate cleaned up [ 207.965564][ T5336] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 208.032312][ T5334] device syzkaller0 entered promiscuous mode [ 208.426803][ T5347] device syzkaller0 entered promiscuous mode [ 209.134365][ T5345] tipc: Resetting bearer [ 209.180169][ T5345] tipc: Disabling bearer [ 209.416708][ T5282] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.437103][ T5282] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.448625][ T5282] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.467995][ T5282] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.647970][ T5282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.666494][ T4242] Bluetooth: hci6: command 0x040f tx timeout [ 209.686413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 209.694728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 209.760301][ T5282] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.792029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 209.805783][ T5359] loop5: detected capacity change from 0 to 16 [ 209.830249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.852614][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.859817][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.886600][ T5359] erofs: (device loop5): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 209.895325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 209.923028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.946743][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.954039][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.970493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 209.998003][ T5370] tipc: Enabling of bearer rejected, failed to enable media [ 210.009101][ T5365] tipc: Enabled bearer , priority 0 [ 210.032170][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 210.071449][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.112464][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.141889][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 210.164042][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 210.188187][ T5373] Zero length message leads to an empty skb [ 210.196212][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 210.218430][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 210.235661][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 210.247288][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 210.268239][ T5363] device syzkaller0 entered promiscuous mode [ 210.277286][ T5365] device syzkaller0 entered promiscuous mode [ 210.292477][ T5282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.333819][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 210.358258][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 210.370982][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 210.380211][ T5376] tipc: Enabled bearer , priority 0 [ 210.393097][ T5375] device syzkaller0 entered promiscuous mode [ 210.476348][ T5373] tipc: Resetting bearer [ 210.517979][ T5373] tipc: Disabling bearer [ 210.548991][ T5376] tipc: Resetting bearer [ 210.586764][ T5371] tipc: Resetting bearer [ 210.627366][ T5371] tipc: Disabling bearer [ 211.658070][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.666584][ T1440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.681437][ T5394] loop4: detected capacity change from 0 to 16 [ 211.709689][ T4242] Bluetooth: hci6: command 0x0419 tx timeout [ 211.727936][ T5282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.777585][ T5394] erofs: (device loop4): mounted with root inode @ nid 36. [ 211.822234][ T5398] loop5: detected capacity change from 0 to 512 [ 211.838718][ T4191] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 211.864463][ T5394] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 211.869841][ T5403] tipc: Enabled bearer , priority 0 [ 211.885575][ T5403] device syzkaller0 entered promiscuous mode [ 211.906759][ T5403] tipc: Resetting bearer [ 211.936674][ T5402] tipc: Resetting bearer [ 211.954469][ T5402] tipc: Disabling bearer [ 211.975643][ T26] audit: type=1800 audit(1759352428.936:2): pid=5394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.262" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 212.031737][ T5398] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 212.322938][ T5398] EXT4-fs (loop5): 1 truncate cleaned up [ 212.328661][ T5398] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 212.526788][ T5416] loop4: detected capacity change from 0 to 512 [ 212.626999][ T5418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 214.775344][ T5416] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.266: dx entry: limit 0 != root limit 125 [ 214.998622][ T5416] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.266: Corrupt directory, running e2fsck is recommended [ 215.272916][ T5416] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 215.436010][ T5416] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.266: corrupted in-inode xattr [ 215.569101][ T5416] EXT4-fs (loop4): Remounting filesystem read-only [ 215.592123][ T5416] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.266: couldn't read orphan inode 15 (err -117) [ 215.624775][ T5416] EXT4-fs (loop4): Remounting filesystem read-only [ 215.656334][ T5416] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,user_xattr,user_xattr,grpjquota=.max_batch_time=0x0000000000000001,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 215.728190][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.738228][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.764881][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.783955][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.803699][ T5426] tipc: Enabled bearer , priority 0 [ 215.818820][ T5282] device veth0_vlan entered promiscuous mode [ 215.826361][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.858987][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.876180][ T5282] device veth1_vlan entered promiscuous mode [ 215.896602][ T5424] tipc: Resetting bearer [ 215.932965][ T5422] tipc: Disabling bearer [ 215.969615][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 215.987697][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 215.997837][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.015913][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.050367][ T5282] device veth0_macvtap entered promiscuous mode [ 216.065677][ T5282] device veth1_macvtap entered promiscuous mode [ 216.098139][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.108730][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.128830][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.173657][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.184297][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.196806][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.208666][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.220385][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.257824][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.268798][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.402042][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.552131][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.750317][ T5282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.099828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.121839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.138690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.152174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.168384][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.190468][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.200416][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.212171][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.222358][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.235400][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.235421][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.235438][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.235449][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.235462][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.235490][ T5282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.235504][ T5282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.237106][ T5282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.239624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.240418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.247127][ T5436] tipc: Enabled bearer , priority 0 [ 217.247661][ T5436] device syzkaller0 entered promiscuous mode [ 217.315333][ T5436] tipc: Resetting bearer [ 217.317503][ T5282] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.317581][ T5282] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.317607][ T5282] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.317632][ T5282] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.342211][ T5435] tipc: Resetting bearer [ 217.371368][ T5435] tipc: Disabling bearer [ 217.552969][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.553047][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.559281][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.621376][ T4242] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 217.640737][ T4513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.640802][ T4513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.643879][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.041126][ T4242] usb 1-1: Using ep0 maxpacket: 16 [ 218.509312][ T5464] loop6: detected capacity change from 0 to 256 [ 219.621547][ T5466] device syzkaller0 entered promiscuous mode [ 219.659248][ T4242] usb 1-1: config 0 has no interfaces? [ 219.737565][ T5464] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.748327][ T5464] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 219.762221][ T5464] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012112, chksum : 0xbf1871ed, utbl_chksum : 0xe619d30d) [ 219.879519][ T4242] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 219.897625][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.932791][ T4242] usb 1-1: Product: syz [ 219.937021][ T4242] usb 1-1: Manufacturer: syz [ 219.965377][ T4242] usb 1-1: SerialNumber: syz [ 220.006402][ T4242] r8152-cfgselector 1-1: config 0 descriptor?? [ 220.129257][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 220.280461][ T4242] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 220.498769][ T2239] usb 1-1: USB disconnect, device number 3 [ 220.528506][ T5472] tipc: Enabled bearer , priority 0 [ 220.551425][ T21] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.645737][ T5478] device syzkaller0 entered promiscuous mode [ 221.754881][ T5472] tipc: Resetting bearer [ 222.661331][ T21] usb 7-1: config 0 has no interfaces? [ 222.681468][ T5471] tipc: Resetting bearer [ 222.689296][ T21] usb 7-1: string descriptor 0 read error: -71 [ 222.699703][ T21] usb 7-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 222.833833][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 222.844726][ T21] usb 7-1: config 0 descriptor?? [ 222.992478][ T21] usb 7-1: can't set config #0, error -71 [ 223.029962][ T21] usb 7-1: USB disconnect, device number 2 [ 224.512685][ T5471] tipc: Disabling bearer [ 224.863877][ T5493] loop0: detected capacity change from 0 to 4096 [ 224.877777][ T5500] xt_limit: Overflow, try lower: 268435456/134217728 [ 224.955958][ T5506] device syzkaller0 entered promiscuous mode [ 225.062729][ T5493] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 227.780461][ T5525] device syzkaller0 entered promiscuous mode [ 227.978976][ T5527] loop6: detected capacity change from 0 to 4096 [ 229.664740][ T5527] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 230.003205][ T5545] loop4: detected capacity change from 0 to 512 [ 230.086333][ T5547] tipc: Enabled bearer , priority 0 [ 230.094196][ T5547] device syzkaller0 entered promiscuous mode [ 230.144185][ T5545] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 230.189027][ T5547] tipc: Resetting bearer [ 230.217690][ T5546] tipc: Resetting bearer [ 230.226915][ T5545] EXT4-fs (loop4): 1 truncate cleaned up [ 230.263418][ T5545] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 230.301440][ T5546] tipc: Disabling bearer [ 231.542406][ T5556] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 233.751261][ T5566] device syzkaller0 entered promiscuous mode [ 236.365434][ T5578] loop0: detected capacity change from 0 to 1024 [ 236.431180][ T5580] device vlan2 entered promiscuous mode [ 236.445007][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.310'. [ 236.479508][ T5578] EXT4-fs (loop0): Ignoring removed nobh option [ 236.528626][ T5578] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.309: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 236.570184][ T5578] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.309: couldn't read orphan inode 11 (err -117) [ 236.594322][ T5578] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 237.693351][ T5593] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.309: Invalid block bitmap block 0 in block_group 0 [ 237.719861][ T5593] Quota error (device loop0): write_blk: dquota write failed [ 237.727775][ T5593] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 237.737836][ T5593] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.309: Failed to acquire dquot type 0 [ 239.954552][ T5613] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 242.352997][ T5635] tipc: Enabling of bearer rejected, failed to enable media [ 242.369383][ T4790] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 242.387396][ T5635] device syzkaller0 entered promiscuous mode [ 242.698097][ T5643] loop0: detected capacity change from 0 to 512 [ 242.762023][ T4790] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.779216][ T4790] usb 5-1: config 0 interface 0 has no altsetting 0 [ 242.800848][ T4790] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 242.810977][ T5643] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 242.854581][ T4790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.884943][ T4790] usb 5-1: config 0 descriptor?? [ 243.038219][ T5643] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 244.847108][ T5643] EXT4-fs (loop0): 1 truncate cleaned up [ 244.854212][ T4790] usb 5-1: can't set config #0, error -71 [ 244.862578][ T4359] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 244.949211][ T4359] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:9: Failed to release dquot type 1 [ 244.964553][ T5643] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 245.649990][ T4790] usb 5-1: USB disconnect, device number 3 [ 247.705165][ T5675] tipc: Enabling of bearer rejected, failed to enable media [ 247.735970][ T5675] device syzkaller0 entered promiscuous mode [ 255.460752][ T5700] loop2: detected capacity change from 0 to 512 [ 255.703089][ T5700] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 255.836592][ T5713] loop0: detected capacity change from 0 to 512 [ 255.839557][ T5710] loop6: detected capacity change from 0 to 8192 [ 255.958524][ T5700] EXT4-fs (loop2): 1 truncate cleaned up [ 255.967698][ T5713] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 256.111175][ T5700] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 257.753547][ T5721] loop4: detected capacity change from 0 to 128 [ 257.786685][ T5713] EXT4-fs (loop0): 1 truncate cleaned up [ 257.809984][ T5713] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 258.254128][ T5709] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 260.271298][ T5739] loop5: detected capacity change from 0 to 4096 [ 260.318881][ T5739] EXT4-fs (loop5): Test dummy encryption mode enabled [ 260.399823][ T5739] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 260.544166][ T5739] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 260.753486][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.760098][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.050537][ T5739] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 263.669416][ T4790] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 263.703740][ T5765] tipc: Enabled bearer , priority 0 [ 263.883039][ T5765] tipc: Resetting bearer [ 263.940133][ T5768] device syzkaller0 entered promiscuous mode [ 263.956797][ T5768] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 264.860941][ T5764] tipc: Resetting bearer [ 264.891029][ T5764] tipc: Disabling bearer [ 265.099614][ T4790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.133374][ T4790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.176990][ T4790] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 265.217158][ T4790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.340702][ T4790] usb 3-1: config 0 descriptor?? [ 266.429675][ T4790] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 266.507821][ T4790] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 266.580512][ T4790] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 266.629753][ T4790] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 266.637231][ T4790] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 266.758659][ T4790] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 266.801233][ T5781] serio: Serial port ptm0 [ 268.129367][ T4790] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 268.138741][ T4790] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 268.169235][ T4790] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 268.177981][ T4790] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 268.202987][ T4790] playstation: probe of 0003:054C:0DF2.0001 failed with error -71 [ 268.239934][ T4790] usb 3-1: USB disconnect, device number 2 [ 268.329911][ T5788] device syzkaller0 entered promiscuous mode [ 268.422951][ T5789] fido_id[5789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 269.787206][ T5806] loop0: detected capacity change from 0 to 1024 [ 272.056526][ T5817] netlink: 148 bytes leftover after parsing attributes in process `syz.2.372'. [ 272.068624][ T5817] netlink: 116 bytes leftover after parsing attributes in process `syz.2.372'. [ 272.078063][ T5817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.372'. [ 272.571973][ T5820] loop4: detected capacity change from 0 to 256 [ 272.670532][ T5820] FAT-fs (loop4): Unrecognized mount option "codepage==50" or missing value [ 274.294019][ T5835] overlayfs: failed to resolve './file0': -2 [ 275.833265][ T5837] device syzkaller0 entered promiscuous mode [ 276.662776][ T4249] Bluetooth: hci7: command 0x0409 tx timeout [ 279.536429][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 279.887541][ T5877] loop5: detected capacity change from 0 to 1024 [ 279.979620][ T5877] EXT4-fs (loop5): Test dummy encryption mode enabled [ 280.039332][ T5877] EXT4-fs (loop5): inline encryption not supported [ 280.049579][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.056674][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.150091][ T5877] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 280.178647][ T5825] device bridge_slave_0 entered promiscuous mode [ 280.273208][ T4790] Bluetooth: hci7: command 0x041b tx timeout [ 280.323028][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.384834][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.437332][ T5825] device bridge_slave_1 entered promiscuous mode [ 281.318599][ T5877] bridge0: port 3(vlan2) entered blocking state [ 281.363703][ T5874] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 281.390087][ T5877] bridge0: port 3(vlan2) entered disabled state [ 281.632358][ T4538] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.796788][ T5903] tipc: Enabling of bearer rejected, failed to enable media [ 281.812701][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.994728][ T4848] Bluetooth: hci7: command 0x040f tx timeout [ 283.007090][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.146743][ T4538] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.321905][ T5825] team0: Port device team_slave_0 added [ 283.372049][ T5825] team0: Port device team_slave_1 added [ 283.449742][ T4538] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.520643][ T5914] device syzkaller0 entered promiscuous mode [ 283.570802][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.581535][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.621089][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.648607][ T4538] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.705218][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.716186][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.756964][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.838196][ T5825] device hsr_slave_0 entered promiscuous mode [ 283.853885][ T5825] device hsr_slave_1 entered promiscuous mode [ 283.868272][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.881902][ T5825] Cannot create hsr debugfs directory [ 285.263231][ T3985] Bluetooth: hci7: command 0x0419 tx timeout [ 286.673348][ T5940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 286.688097][ T5942] tipc: Enabling of bearer rejected, failed to enable media [ 286.961344][ T5825] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 287.010348][ T5825] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 287.076619][ T5825] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 287.146255][ T5825] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 288.459179][ T3985] Bluetooth: hci5: command 0x0406 tx timeout [ 288.485136][ T5971] device syzkaller0 entered promiscuous mode [ 288.544550][ T5976] tipc: Enabling of bearer rejected, failed to enable media [ 288.736324][ T5985] loop4: detected capacity change from 0 to 256 [ 288.865283][ T5985] FAT-fs (loop4): Directory bread(block 64) failed [ 288.872916][ T5985] FAT-fs (loop4): Directory bread(block 65) failed [ 288.879667][ T5985] FAT-fs (loop4): Directory bread(block 66) failed [ 288.886235][ T5985] FAT-fs (loop4): Directory bread(block 67) failed [ 288.893978][ T5985] FAT-fs (loop4): Directory bread(block 68) failed [ 288.900629][ T5985] FAT-fs (loop4): Directory bread(block 69) failed [ 288.908852][ T5985] FAT-fs (loop4): Directory bread(block 70) failed [ 288.915838][ T5985] FAT-fs (loop4): Directory bread(block 71) failed [ 288.922700][ T5985] FAT-fs (loop4): Directory bread(block 72) failed [ 288.929315][ T5985] FAT-fs (loop4): Directory bread(block 73) failed [ 289.080811][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.174451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 289.190176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 289.341058][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.315382][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 290.353564][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.496264][ T4535] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.503464][ T4535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.562034][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 290.859836][ T6009] device syzkaller0 entered promiscuous mode [ 291.465112][ T6014] tipc: Enabling of bearer rejected, failed to enable media [ 291.700654][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 291.940239][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.142200][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.149401][ T4535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.761950][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.776310][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.849039][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.923431][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.974858][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.032278][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.319704][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.339320][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.370317][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.400204][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.439314][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.450057][ T5825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.480570][ T6031] tipc: Enabled bearer , priority 0 [ 293.592410][ T6030] tipc: Resetting bearer [ 294.619337][ T3985] tipc: Node number set to 1212972960 [ 294.690495][ T6029] tipc: Disabling bearer [ 295.165132][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.669995][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.678197][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.385401][ T6090] loop0: detected capacity change from 0 to 256 [ 296.476061][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.513176][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.522655][ T6090] FAT-fs (loop0): Directory bread(block 64) failed [ 296.529648][ T6090] FAT-fs (loop0): Directory bread(block 65) failed [ 296.536262][ T6090] FAT-fs (loop0): Directory bread(block 66) failed [ 296.542930][ T6090] FAT-fs (loop0): Directory bread(block 67) failed [ 296.549625][ T6090] FAT-fs (loop0): Directory bread(block 68) failed [ 296.556230][ T6090] FAT-fs (loop0): Directory bread(block 69) failed [ 296.562931][ T6090] FAT-fs (loop0): Directory bread(block 70) failed [ 296.570744][ T6090] FAT-fs (loop0): Directory bread(block 71) failed [ 296.577452][ T6090] FAT-fs (loop0): Directory bread(block 72) failed [ 296.584117][ T6090] FAT-fs (loop0): Directory bread(block 73) failed [ 296.883211][ T5825] device veth0_vlan entered promiscuous mode [ 296.931041][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.960751][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.033726][ T5825] device veth1_vlan entered promiscuous mode [ 297.051391][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.062522][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.087787][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.288765][ T6115] loop0: detected capacity change from 0 to 16 [ 297.440644][ T6115] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 298.878485][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 299.027089][ T4538] device hsr_slave_0 left promiscuous mode [ 300.271042][ T4538] device hsr_slave_1 left promiscuous mode [ 300.313676][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.328443][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.562179][ T6139] loop4: detected capacity change from 0 to 256 [ 300.585591][ T6141] loop0: detected capacity change from 0 to 512 [ 300.633668][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.649704][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.668962][ T4538] device bridge_slave_1 left promiscuous mode [ 300.679836][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.713361][ T4538] device bridge_slave_0 left promiscuous mode [ 300.725778][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.788578][ T4538] device veth1_macvtap left promiscuous mode [ 300.798179][ T4538] device veth0_macvtap left promiscuous mode [ 300.814265][ T4538] device veth1_vlan left promiscuous mode [ 300.825285][ T4538] device veth0_vlan left promiscuous mode [ 301.138797][ T6141] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 301.165224][ T6139] FAT-fs (loop4): Directory bread(block 64) failed [ 301.172060][ T6139] FAT-fs (loop4): Directory bread(block 65) failed [ 301.179474][ T6139] FAT-fs (loop4): Directory bread(block 66) failed [ 301.186146][ T6139] FAT-fs (loop4): Directory bread(block 67) failed [ 301.193343][ T6139] FAT-fs (loop4): Directory bread(block 68) failed [ 301.199970][ T6139] FAT-fs (loop4): Directory bread(block 69) failed [ 301.206594][ T6139] FAT-fs (loop4): Directory bread(block 70) failed [ 301.213207][ T6139] FAT-fs (loop4): Directory bread(block 71) failed [ 301.219879][ T6139] FAT-fs (loop4): Directory bread(block 72) failed [ 301.226454][ T6139] FAT-fs (loop4): Directory bread(block 73) failed [ 301.430751][ T6141] EXT4-fs (loop0): 1 truncate cleaned up [ 301.439379][ T6141] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nobarrier,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,block_validity,dioread_lock,. Quota mode: none. [ 301.522842][ T6146] syz.2.430[6146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.522961][ T6146] syz.2.430[6146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.699635][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 301.732479][ T6141] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 301.756142][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 301.802951][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.829686][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.026894][ T4538] bond0 (unregistering): Released all slaves [ 302.102274][ T6152] tipc: Failed to remove unknown binding: 66,1,1/1045683801:3091825175/3091825177 [ 302.116215][ T6152] tipc: Failed to remove unknown binding: 66,1,1/1045683801:3091825175/3091825177 [ 302.183229][ T6157] loop0: detected capacity change from 0 to 512 [ 302.198976][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.214179][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.225570][ T6157] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.432: iget: bad extended attribute block 1 [ 302.241902][ T5825] device veth0_macvtap entered promiscuous mode [ 302.269033][ T6157] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.432: couldn't read orphan inode 15 (err -117) [ 302.335112][ T5825] device veth1_macvtap entered promiscuous mode [ 302.362380][ T6157] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 302.670140][ T4296] Bluetooth: hci6: command 0x0409 tx timeout [ 302.742669][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.019300][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.141870][ T6169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 304.261665][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.856045][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.866743][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.877234][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.909630][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.955847][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.959291][ T4228] Bluetooth: hci6: command 0x041b tx timeout [ 304.973415][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.984018][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.994378][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.005111][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.024681][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.055101][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 305.093859][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.217244][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.362974][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.418169][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.428466][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.441196][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.451562][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.462354][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.472438][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.486007][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.496247][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.514546][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.528601][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.546840][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.568617][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.669827][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.678799][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.694642][ T5825] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.703938][ T5825] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.854353][ T5825] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.874225][ T5825] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.315120][ T4242] Bluetooth: hci6: command 0x040f tx timeout [ 307.892586][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.912321][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 307.979939][ T6185] loop2: detected capacity change from 0 to 128 [ 307.998733][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.023769][ T6187] loop4: detected capacity change from 0 to 128 [ 308.060708][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.086112][ T6187] FAT-fs (loop4): Unrecognized mount option "0xffffffffffffffff01777777777777777777777=d̞ YS38`" or missing value [ 308.166279][ T6185] EXT4-fs (loop2): Ignoring removed nobh option [ 308.305704][ T6185] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none. [ 308.319477][ T6185] ext4 filesystem being mounted at /105/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 308.541799][ T6194] netlink: 11 bytes leftover after parsing attributes in process `syz.0.442'. [ 310.245102][ T4228] Bluetooth: hci6: command 0x0419 tx timeout [ 310.429495][ T6098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.489481][ T6098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.515072][ T6203] loop0: detected capacity change from 0 to 512 [ 310.543691][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 310.581093][ T6135] chnl_net:caif_netlink_parms(): no params data found [ 310.639394][ T6203] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.721330][ T6203] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8001e119, mo2=0000] [ 310.887433][ T6203] EXT4-fs (loop0): 1 truncate cleaned up [ 310.899606][ T4354] Quota error (device loop0): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 310.919628][ T6203] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nombcache,norecovery,acl,resgid=0x000000000000ee01,norecovery,noauto_da_alloc,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 310.972818][ T4354] EXT4-fs error (device loop0): ext4_release_dquot:6245: comm kworker/u4:8: Failed to release dquot type 1 [ 311.001578][ T6214] tipc: Started in network mode [ 311.021220][ T6214] tipc: Node identity 0a8bdb488e41, cluster identity 4711 [ 311.072477][ T6214] tipc: Enabled bearer , priority 0 [ 311.089260][ T6135] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.097695][ T6135] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.125046][ T6135] device bridge_slave_0 entered promiscuous mode [ 311.168491][ T6216] device syzkaller0 entered promiscuous mode [ 311.186246][ T6135] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.196256][ T6135] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.215500][ T6135] device bridge_slave_1 entered promiscuous mode [ 311.236616][ T6214] tipc: Resetting bearer [ 311.267574][ T26] audit: type=1804 audit(1759352528.226:3): pid=6198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.440" name="/newroot/105/mnt/bus" dev="loop2" ino=12 res=1 errno=0 [ 311.362937][ T6213] tipc: Resetting bearer [ 311.393404][ T6213] tipc: Disabling bearer [ 311.460007][ T6135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.545571][ T6135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.712489][ T6135] team0: Port device team_slave_0 added [ 311.746457][ T6135] team0: Port device team_slave_1 added [ 311.863391][ T6230] loop7: detected capacity change from 0 to 512 [ 313.716360][ T6230] EXT4-fs (loop7): Unrecognized mount option "rootcontext=system_u" or missing value [ 313.806885][ T6227] tipc: Enabled bearer , priority 0 [ 313.919399][ T6231] device syzkaller0 entered promiscuous mode [ 314.729884][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.777101][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.882456][ T6135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.925269][ T6231] tipc: Resetting bearer [ 314.995321][ T6231] tipc: Disabling bearer [ 315.028895][ T6243] device bridge0 entered promiscuous mode [ 315.035507][ T6243] device macsec1 entered promiscuous mode [ 315.043218][ T6243] bridge0: port 3(macsec1) entered blocking state [ 315.096728][ T6243] bridge0: port 3(macsec1) entered disabled state [ 315.135622][ T6243] device bridge0 left promiscuous mode [ 315.196770][ T6135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.215588][ T6135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.298565][ T6135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.226053][ T6135] device hsr_slave_0 entered promiscuous mode [ 316.273133][ T6135] device hsr_slave_1 entered promiscuous mode [ 316.294696][ T6135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.319296][ T6135] Cannot create hsr debugfs directory [ 316.696911][ T6267] loop0: detected capacity change from 0 to 512 [ 316.774192][ T6267] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 317.108466][ T6267] EXT4-fs (loop0): 1 truncate cleaned up [ 317.114427][ T6267] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 317.184910][ T26] audit: type=1326 audit(1759352534.136:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6261 comm="syz.0.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff194406ec9 code=0x0 [ 317.451978][ T6272] loop4: detected capacity change from 0 to 16 [ 318.514603][ T6276] loop2: detected capacity change from 0 to 512 [ 319.702271][ T6272] erofs: (device loop4): mounted with root inode @ nid 36. [ 320.996086][ T6135] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 321.091489][ T6135] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 321.166874][ T6135] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 321.213087][ T6278] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 321.229678][ T6135] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 321.239478][ T6278] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 321.292725][ T6287] tipc: Enabled bearer , priority 0 [ 321.353352][ T6283] device syzkaller0 entered promiscuous mode [ 321.371397][ T6293] loop0: detected capacity change from 0 to 512 [ 321.439769][ T6283] tipc: Resetting bearer [ 321.454891][ T6293] EXT4-fs (loop0): Unrecognized mount option "rootcontext=system_u" or missing value [ 321.493189][ T6282] tipc: Resetting bearer [ 321.624491][ T6298] loop7: detected capacity change from 0 to 256 [ 321.645911][ T6282] tipc: Disabling bearer [ 322.357907][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.364412][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.452111][ T6298] FAT-fs (loop7): Directory bread(block 64) failed [ 322.458751][ T6298] FAT-fs (loop7): Directory bread(block 65) failed [ 322.465478][ T6298] FAT-fs (loop7): Directory bread(block 66) failed [ 322.472126][ T6298] FAT-fs (loop7): Directory bread(block 67) failed [ 322.479612][ T6298] FAT-fs (loop7): Directory bread(block 68) failed [ 322.486197][ T6298] FAT-fs (loop7): Directory bread(block 69) failed [ 322.497328][ T6298] FAT-fs (loop7): Directory bread(block 70) failed [ 322.504023][ T6298] FAT-fs (loop7): Directory bread(block 71) failed [ 322.510693][ T6298] FAT-fs (loop7): Directory bread(block 72) failed [ 322.517279][ T6298] FAT-fs (loop7): Directory bread(block 73) failed [ 322.562263][ T6301] loop0: detected capacity change from 0 to 16 [ 322.649471][ T6301] erofs: (device loop0): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 322.825071][ T6135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.277659][ T6135] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.367426][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.376224][ T6301] loop0: detected capacity change from 0 to 256 [ 324.395754][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.446399][ T6311] loop2: detected capacity change from 0 to 1024 [ 324.480012][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.488865][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.508326][ T6079] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.515573][ T6079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.536669][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.549072][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.567628][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.574789][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.624615][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.665607][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.703318][ T6079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.703847][ T6313] loop7: detected capacity change from 0 to 40427 [ 324.751573][ T6311] EXT4-fs (loop2): Test dummy encryption mode enabled [ 324.763779][ T6313] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 324.771912][ T6313] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 324.775290][ T6316] tipc: Enabled bearer , priority 0 [ 324.790266][ T6313] F2FS-fs (loop7): invalid crc value [ 324.797958][ T6301] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 324.808048][ T6311] EXT4-fs (loop2): inline encryption not supported [ 324.847293][ T6313] F2FS-fs (loop7): Found nat_bits in checkpoint [ 324.861076][ T6311] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 324.913017][ T6313] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 324.920488][ T6313] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 324.959281][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.007173][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.060969][ T6317] device syzkaller0 entered promiscuous mode [ 325.158584][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.179907][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.250836][ T6328] overlayfs: failed to resolve './file1/file0': -2 [ 326.520487][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.583942][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.676820][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.704758][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.760286][ T4502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.805508][ T6135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 327.026997][ T6317] tipc: Resetting bearer [ 327.587688][ T6317] tipc: Disabling bearer [ 327.770156][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 327.850592][ T6348] loop0: detected capacity change from 0 to 512 [ 328.046552][ T6348] EXT4-fs (loop0): Unrecognized mount option "rootcontext=system_u" or missing value [ 328.071481][ T6350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.474'. [ 328.939317][ T4538] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.138319][ T6359] loop4: detected capacity change from 0 to 1024 [ 330.237969][ T6359] EXT4-fs (loop4): Test dummy encryption mode enabled [ 330.266475][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.290809][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.299394][ T6359] EXT4-fs (loop4): inline encryption not supported [ 330.358542][ T26] audit: type=1326 audit(1759352547.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3281dec9 code=0x7ffc0000 [ 330.382259][ T26] audit: type=1326 audit(1759352547.316:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3281dec9 code=0x7ffc0000 [ 330.387356][ T6359] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 330.435292][ T6365] loop0: detected capacity change from 0 to 256 [ 330.445542][ T26] audit: type=1326 audit(1759352547.346:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efd3281dec9 code=0x7ffc0000 [ 330.465132][ T6135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.495875][ T26] audit: type=1326 audit(1759352547.396:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3281dec9 code=0x7ffc0000 [ 330.523577][ T26] audit: type=1326 audit(1759352547.396:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3281dec9 code=0x7ffc0000 [ 330.547054][ T26] audit: type=1326 audit(1759352547.436:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7efd3281dec9 code=0x7ffc0000 [ 330.560731][ T4538] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.587244][ T26] audit: type=1326 audit(1759352547.436:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3281dec9 code=0x7ffc0000 [ 330.617095][ T6377] loop2: detected capacity change from 0 to 512 [ 330.642762][ T6365] FAT-fs (loop0): Directory bread(block 64) failed [ 330.659815][ T6365] FAT-fs (loop0): Directory bread(block 65) failed [ 330.666476][ T6365] FAT-fs (loop0): Directory bread(block 66) failed [ 330.675560][ T26] audit: type=1326 audit(1759352547.436:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3281dec9 code=0x7ffc0000 [ 330.703885][ T6365] FAT-fs (loop0): Directory bread(block 67) failed [ 330.711621][ T6365] FAT-fs (loop0): Directory bread(block 68) failed [ 330.718202][ T6365] FAT-fs (loop0): Directory bread(block 69) failed [ 330.738033][ T26] audit: type=1326 audit(1759352547.436:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd3281c710 code=0x7ffc0000 [ 330.738867][ T6377] EXT4-fs (loop2): Unrecognized mount option "subj_type=\-" or missing value [ 330.809293][ T6365] FAT-fs (loop0): Directory bread(block 70) failed [ 330.841772][ T4538] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.866982][ T6365] FAT-fs (loop0): Directory bread(block 71) failed [ 330.875478][ T26] audit: type=1326 audit(1759352547.436:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3281dec9 code=0x7ffc0000 [ 330.909594][ T6365] FAT-fs (loop0): Directory bread(block 72) failed [ 330.916196][ T6365] FAT-fs (loop0): Directory bread(block 73) failed [ 331.724130][ T4538] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.824523][ T6391] tipc: Enabled bearer , priority 0 [ 331.849925][ T6392] device syzkaller0 entered promiscuous mode [ 331.905806][ T6401] tipc: Enabled bearer , priority 0 [ 331.977463][ T6401] tipc: Resetting bearer [ 332.056192][ T6398] tipc: Disabling bearer [ 332.087140][ T6392] tipc: Resetting bearer [ 332.803140][ T6392] tipc: Disabling bearer [ 332.985244][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 333.000220][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 333.019742][ T6411] loop7: detected capacity change from 0 to 512 [ 333.190228][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 333.208461][ T6411] EXT4-fs (loop7): Unrecognized mount option "rootcontext=system_u" or missing value [ 333.223567][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 333.244344][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 333.265567][ T1219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 333.315676][ T6135] device veth0_vlan entered promiscuous mode [ 333.366399][ T6135] device veth1_vlan entered promiscuous mode [ 333.493687][ T6423] device syzkaller0 entered promiscuous mode [ 333.568884][ T6135] device veth0_macvtap entered promiscuous mode [ 334.096106][ T6432] loop7: detected capacity change from 0 to 256 [ 334.107193][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 334.162960][ T6432] FAT-fs (loop7): Directory bread(block 64) failed [ 334.169737][ T6432] FAT-fs (loop7): Directory bread(block 65) failed [ 334.176411][ T6432] FAT-fs (loop7): Directory bread(block 66) failed [ 334.183041][ T6432] FAT-fs (loop7): Directory bread(block 67) failed [ 334.189879][ T6432] FAT-fs (loop7): Directory bread(block 68) failed [ 334.196418][ T6432] FAT-fs (loop7): Directory bread(block 69) failed [ 334.203164][ T6432] FAT-fs (loop7): Directory bread(block 70) failed [ 334.209796][ T6432] FAT-fs (loop7): Directory bread(block 71) failed [ 334.216446][ T6432] FAT-fs (loop7): Directory bread(block 72) failed [ 334.223098][ T6432] FAT-fs (loop7): Directory bread(block 73) failed [ 334.286138][ T6432] attempt to access beyond end of device [ 334.286138][ T6432] loop7: rw=2051, want=1256, limit=256 [ 334.322233][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 334.365309][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.398937][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.428585][ T6081] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 334.468586][ T6135] device veth1_macvtap entered promiscuous mode [ 334.484122][ T4538] tipc: Left network mode [ 334.551556][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.583819][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.614524][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.645643][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.676172][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.694651][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.722210][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.732896][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.744043][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.755023][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.777545][ T6436] loop0: detected capacity change from 0 to 1024 [ 334.796747][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.818074][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.828324][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.839322][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.851899][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.862984][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.875680][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.886126][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.897203][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.911210][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.925497][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.949590][ T6436] EXT4-fs (loop0): Ignoring removed bh option [ 334.988414][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.028123][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.038850][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.049661][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.059571][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.078144][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.319329][ T6135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.557694][ T6436] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,noauto_da_alloc,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=continue,stripe=0x0000000000000005,bh,init_itable,,errors=continue. Quota mode: none. [ 335.604422][ T6135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.815133][ T6135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.869358][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.939675][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.948721][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.990863][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.012526][ T6448] syz.4.494 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 336.110830][ T6135] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.313126][ T6135] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.553438][ T6135] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.597877][ T6135] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.035121][ T6450] loop7: detected capacity change from 0 to 256 [ 337.050877][ T6459] tipc: Enabled bearer , priority 0 [ 337.071463][ T6459] tipc: Resetting bearer [ 337.078873][ T6098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.945913][ T6098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.012428][ T6458] tipc: Disabling bearer [ 338.023722][ T6450] FAT-fs (loop7): Directory bread(block 64) failed [ 338.035262][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 338.086009][ T6450] FAT-fs (loop7): Directory bread(block 65) failed [ 338.094386][ T6450] FAT-fs (loop7): Directory bread(block 66) failed [ 338.100272][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.109492][ T6450] FAT-fs (loop7): Directory bread(block 67) failed [ 338.109656][ T6450] FAT-fs (loop7): Directory bread(block 68) failed [ 338.128995][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.149331][ T6450] FAT-fs (loop7): Directory bread(block 69) failed [ 338.158654][ T6450] FAT-fs (loop7): Directory bread(block 70) failed [ 338.165758][ T6450] FAT-fs (loop7): Directory bread(block 71) failed [ 338.174886][ T6450] FAT-fs (loop7): Directory bread(block 72) failed [ 338.189592][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 338.209787][ T6450] FAT-fs (loop7): Directory bread(block 73) failed [ 338.366473][ T6471] loop0: detected capacity change from 0 to 4096 [ 338.449734][ T6471] EXT4-fs (loop0): Test dummy encryption mode enabled [ 338.457531][ T6471] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 338.489693][ T6473] tipc: Enabling of bearer rejected, failed to enable media [ 338.511578][ T6473] device syzkaller0 entered promiscuous mode [ 338.547457][ T6471] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 339.875425][ T6484] loop7: detected capacity change from 0 to 512 [ 339.992637][ T6484] EXT4-fs (loop7): Ignoring removed nobh option [ 340.044018][ T6484] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 340.127799][ T6484] EXT4-fs (loop7): 1 truncate cleaned up [ 340.167037][ T6484] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none. [ 340.952361][ T6491] loop8: detected capacity change from 0 to 512 [ 341.626567][ T6491] EXT4-fs (loop8): 1 orphan inode deleted [ 341.633340][ T6491] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 341.645342][ T6491] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.974055][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 341.974073][ T26] audit: type=1800 audit(1759352558.936:45): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.501" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 342.056456][ T6484] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:476: comm syz.7.501: Invalid block bitmap block 7608 in block_group 0 [ 342.075835][ T6497] device syzkaller0 entered promiscuous mode [ 342.200024][ T6484] EXT4-fs (loop7): Remounting filesystem read-only [ 343.011982][ T6500] tipc: Enabling of bearer rejected, failed to enable media [ 344.021035][ T6510] loop8: detected capacity change from 0 to 512 [ 344.205184][ T6510] EXT4-fs (loop8): Unrecognized mount option "rootcontext=system_u" or missing value [ 345.402535][ T6526] loop8: detected capacity change from 0 to 256 [ 345.518501][ T6526] FAT-fs (loop8): Directory bread(block 64) failed [ 345.565982][ T6526] FAT-fs (loop8): Directory bread(block 65) failed [ 345.660778][ T6526] FAT-fs (loop8): Directory bread(block 66) failed [ 345.667375][ T6526] FAT-fs (loop8): Directory bread(block 67) failed [ 345.729415][ T6526] FAT-fs (loop8): Directory bread(block 68) failed [ 345.746575][ T6529] tipc: Enabling of bearer rejected, failed to enable media [ 345.749687][ T6526] FAT-fs (loop8): Directory bread(block 69) failed [ 345.792355][ T6526] FAT-fs (loop8): Directory bread(block 70) failed [ 345.809224][ T6526] FAT-fs (loop8): Directory bread(block 71) failed [ 345.818140][ T6526] FAT-fs (loop8): Directory bread(block 72) failed [ 345.852913][ T6526] FAT-fs (loop8): Directory bread(block 73) failed [ 347.684627][ T6543] loop7: detected capacity change from 0 to 1024 [ 347.803648][ T27] INFO: task syz.3.207:5168 blocked for more than 144 seconds. [ 347.827396][ T27] Not tainted syzkaller #0 [ 347.847557][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.884752][ T27] task:syz.3.207 state:D stack:25664 pid: 5168 ppid: 4182 flags:0x00004004 [ 350.248694][ T6560] loop0: detected capacity change from 0 to 512 [ 350.271537][ T27] Call Trace: [ 350.343586][ T27] [ 350.414008][ T27] __schedule+0x11bb/0x4390 [ 350.494058][ T27] ? release_firmware_map_entry+0x190/0x190 [ 350.581801][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 350.649796][ T4256] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 350.692637][ T27] ? lock_chain_count+0x20/0x20 [ 350.780312][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 350.867524][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 350.930621][ T27] schedule+0x11b/0x1e0 [ 350.949320][ T4256] usb 9-1: Using ep0 maxpacket: 16 [ 351.000105][ T27] schedule_preempt_disabled+0xf/0x20 [ 351.080074][ T4256] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.094953][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 351.139395][ T4256] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.174873][ T27] ? down_write_killable_nested+0x90/0x90 [ 351.237303][ T27] ? read_lock_is_recursive+0x10/0x10 [ 351.316273][ T27] ? __rwlock_init+0x140/0x140 [ 351.338580][ T27] ? ksys_sync+0x150/0x150 [ 351.355910][ T27] down_read+0x96/0x2e0 [ 351.370631][ T27] ? ksys_sync+0x150/0x150 [ 351.381406][ T27] iterate_supers+0xa4/0x1d0 [ 351.392097][ T27] ksys_sync+0x91/0x150 [ 351.400848][ T27] ? sync_filesystem+0x220/0x220 [ 351.412990][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 351.426235][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 351.437741][ T27] __ia32_sys_sync+0xa/0x10 [ 351.450563][ T27] do_syscall_64+0x4c/0xa0 [ 351.462858][ T27] ? clear_bhb_loop+0x30/0x80 [ 351.469482][ T4256] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.483123][ T27] ? clear_bhb_loop+0x30/0x80 [ 351.488006][ T4256] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.501853][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.516136][ T27] RIP: 0033:0x7fcc45463ec9 [ 351.525340][ T27] RSP: 002b:00007fcc436cb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 351.539017][ T27] RAX: ffffffffffffffda RBX: 00007fcc456bafa0 RCX: 00007fcc45463ec9 [ 351.563149][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.579591][ T4256] usb 9-1: can't set config #1, error -71 [ 351.587110][ T4256] usb 9-1: USB disconnect, device number 2 [ 351.598970][ T27] RBP: 00007fcc456bafa0 R08: 0000000000000000 R09: 0000000000000000 [ 351.620464][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.638044][ T27] R13: 00007fcc456bb038 R14: 00007fcc456bafa0 R15: 00007fff79b17f38 [ 351.655178][ T27] [ 351.666049][ T27] [ 351.666049][ T27] Showing all locks held in the system: [ 351.697841][ T27] 1 lock held by khungtaskd/27: [ 351.703863][ T27] #0: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 351.724519][ T27] 3 locks held by kworker/0:2/1107: [ 351.736582][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 351.758224][ T27] #1: ffffc90004b3fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 351.782362][ T27] #2: ffffffff8c1210e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0 [ 351.805766][ T27] 2 locks held by udevd/3560: [ 351.813417][ T27] #0: ffff88801ff48518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 351.830651][ T27] #1: ffff88802000d468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 351.850958][ T27] 2 locks held by getty/3946: [ 351.856474][ T27] #0: ffff88802bcf6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 351.881538][ T27] #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 351.903919][ T27] 1 lock held by syz-executor/4183: [ 351.914398][ T27] #0: ffff88801fefe0e0 (&type->s_umount_key#56){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 351.932766][ T27] 3 locks held by kworker/1:3/4227: [ 351.943938][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 351.970016][ T27] #1: ffffc900031afd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 351.991904][ T27] #2: ffffffff8c120ff0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0xa1/0x4b0 [ 352.010745][ T27] 2 locks held by kworker/0:5/4249: [ 352.018610][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 352.039423][ T27] #1: ffffc900032ffd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 352.061225][ T27] 3 locks held by kworker/u4:9/4359: [ 352.066800][ T27] #0: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 352.089001][ T27] #1: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 352.098811][ T27] #2: ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 352.120762][ T27] 7 locks held by kworker/u4:24/4538: [ 352.127593][ T27] #0: ffff8880169cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 352.147899][ T27] #1: ffffc900043c7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 352.158476][ T27] #2: ffffffff8d22c3d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 352.177647][ T27] #3: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x4d/0x220 [ 352.198445][ T27] #4: ffff888073658628 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x4b4/0x1160 [ 352.219327][ T27] #5: ffff88805177cd40 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x4ca/0x1160 [ 352.241388][ T27] #6: ffff8880736597b0 (&local->sta_mtx){+.+.}-{3:3}, at: __sta_info_flush+0x17c/0x450 [ 352.261999][ T27] 1 lock held by syz.3.207/5168: [ 352.267978][ T27] #0: ffff88801fefe0e0 (&type->s_umount_key#56){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 352.291221][ T27] 3 locks held by syz.0.519/6559: [ 352.302004][ T27] [ 352.306679][ T27] ============================================= [ 352.306679][ T27] [ 352.325223][ T27] NMI backtrace for cpu 1 [ 352.329605][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 352.336818][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.346891][ T27] Call Trace: [ 352.350189][ T27] [ 352.353133][ T27] dump_stack_lvl+0x168/0x230 [ 352.357841][ T27] ? show_regs_print_info+0x20/0x20 [ 352.363065][ T27] ? load_image+0x3b0/0x3b0 [ 352.367588][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 352.372984][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 352.378124][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 352.383136][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 352.389321][ T27] ? _printk+0xcc/0x110 [ 352.393519][ T27] ? load_image+0x3b0/0x3b0 [ 352.398061][ T27] ? load_image+0x3b0/0x3b0 [ 352.402597][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 352.408794][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 352.414795][ T27] watchdog+0xe0f/0xe50 [ 352.419051][ T27] kthread+0x436/0x520 [ 352.423139][ T27] ? hungtask_pm_notify+0x40/0x40 [ 352.428280][ T27] ? kthread_blkcg+0xd0/0xd0 [ 352.432957][ T27] ret_from_fork+0x1f/0x30 [ 352.437385][ T27] [ 352.442083][ T27] Sending NMI from CPU 1 to CPUs 0: [ 352.447334][ C0] NMI backtrace for cpu 0 [ 352.447347][ C0] CPU: 0 PID: 4354 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 352.447365][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.447376][ C0] Workqueue: bat_events batadv_nc_worker [ 352.447401][ C0] RIP: 0010:lockdep_hardirqs_on+0xca/0x140 [ 352.447422][ C0] Code: 89 b3 90 0a 00 00 8b 83 88 0a 00 00 ff c0 89 83 88 0a 00 00 89 83 a0 0a 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 08 75 6e <48> 83 c4 10 5b 41 5e c3 e8 a9 be 2e fa 85 c0 74 df 83 3d 26 d6 c0 [ 352.447437][ C0] RSP: 0018:ffffc90004137a78 EFLAGS: 00000046 [ 352.447450][ C0] RAX: ad7e47e8936bb800 RBX: ffff88807a92bb80 RCX: ad7e47e8936bb800 [ 352.447463][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b1820 RDI: ffffffff8a59a480 [ 352.447480][ C0] RBP: ffffc90004137b38 R08: dffffc0000000000 R09: fffffbfff1ff7837 [ 352.447492][ C0] R10: fffffbfff1ff7837 R11: 1ffffffff1ff7836 R12: ffffffff897ea836 [ 352.447504][ C0] R13: dffffc0000000000 R14: ffffffff8148734a R15: 1ffff92000826f54 [ 352.447516][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 352.447530][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.447541][ C0] CR2: 00007ffd82595df8 CR3: 000000002a1a7000 CR4: 00000000003506f0 [ 352.447556][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.447565][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.447575][ C0] Call Trace: [ 352.447581][ C0] [ 352.447589][ C0] __local_bh_enable_ip+0x12a/0x1b0 [ 352.447613][ C0] ? _local_bh_enable+0xa0/0xa0 [ 352.447630][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 352.447647][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 352.447662][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 352.447680][ C0] batadv_nc_purge_paths+0x316/0x3b0 [ 352.447701][ C0] batadv_nc_worker+0x327/0x5c0 [ 352.447723][ C0] process_one_work+0x863/0x1000 [ 352.447750][ C0] ? worker_detach_from_pool+0x240/0x240 [ 352.447766][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 352.447784][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 352.447803][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 352.447823][ C0] ? wq_worker_running+0x97/0x170 [ 352.447839][ C0] worker_thread+0xaa8/0x12a0 [ 352.447856][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 352.447875][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 352.447897][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 352.447921][ C0] kthread+0x436/0x520 [ 352.447935][ C0] ? rcu_lock_release+0x20/0x20 [ 352.447950][ C0] ? kthread_blkcg+0xd0/0xd0 [ 352.447966][ C0] ret_from_fork+0x1f/0x30 [ 352.447990][ C0] [ 352.634779][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 352.713074][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 352.720286][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.730346][ T27] Call Trace: [ 352.733637][ T27] [ 352.736578][ T27] dump_stack_lvl+0x168/0x230 [ 352.741284][ T27] ? show_regs_print_info+0x20/0x20 [ 352.746492][ T27] ? load_image+0x3b0/0x3b0 [ 352.751010][ T27] panic+0x2c9/0x7f0 [ 352.754912][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 352.760561][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 352.765115][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 352.771277][ T27] watchdog+0xe4e/0xe50 [ 352.775460][ T27] kthread+0x436/0x520 [ 352.779637][ T27] ? hungtask_pm_notify+0x40/0x40 [ 352.784680][ T27] ? kthread_blkcg+0xd0/0xd0 [ 352.789371][ T27] ret_from_fork+0x1f/0x30 [ 352.793896][ T27] [ 352.797132][ T27] Kernel Offset: disabled [ 352.801470][ T27] Rebooting in 86400 seconds..