last executing test programs: 3m55.114862112s ago: executing program 2 (id=3): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x5b3393367dc26357) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket(0x18, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m52.295929589s ago: executing program 2 (id=14): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed5) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x36d) chown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') 3m51.834942246s ago: executing program 2 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r5) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010300000000000000000700d5d3d42ac3e4857bfebc29385a0000"], 0x14}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r7, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@dead_binder_done, @dead_binder_done, @dead_binder_done], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x2, 0x0, 0xfffffffd}, 0x13) 3m48.488588114s ago: executing program 2 (id=22): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@grpjquota}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@errors_remount}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x53}}]}, 0xfa, 0x561, &(0x7f0000000f00)="$eJzs3c1qG1cbAOB3ZDn/3xcHQqBdFEMWTUkjJ3Z/UugiXZY2NNDuU2FPjLEcBUsOsRtIsmg23ZRQKKWB0gvovsvQG+hVBNpAKMG0i25URho5ciLZjqPEivU8MPY5MyOdeXX0Hs5oJCaAoTWe/SlEvBYR3yYRhzu2FSPfON7ab/XR9elsSaLR+PyvJJJ8XXv/JP9/sF0pRvz2dcTJwtPt1pZX5suVSrqY1yfqC1cmassrp+YWyrPpbHp5cmrq7LtTkx+8/17fYn3rwj8/fHbv47PfHF/9/pcHR+4kcS4O5ds643gONzsr4zGevyajce6JHc/0obFBkuz0AbAtI3mej0Y2BhyOkTzrgd3vRkQ0gCGVyH8YUq1ZQDbnb53b9+k8+JXx8KNW+O3YH8dfbH02Evua50YHVpN1Z0bZ+e5YH9rP2vj1z7t3siX69zkEwKZu3oqI08Xi0+Nfko9/23d6C/s82YbxD16ee9n85+1u85/C2vwnusx/DnbJ3e3YPP8LD/rQTE/Z/O/D6B5/bmwkr/2vOecbTS7N3Whu+H9EnIjRvZfmKulG13POrt5v9NrWOf/Llqz99lwwP44Hxb3rHzNTrpe3H/F6D29FvN51/pus9X/Spf+z1+PC+qdq7O3RxrH07hu92t88/her8XPEm137//EVrWTj65MTWf+fbv3t2sbft4/93qv9nY4/6/8DG8c/lnRer609exs/7fs37bVtu+//PckXzfKefN21cr2+eCZiT/Lp0+snHz+2XW/vn8V/4vjG41+39//+iPhyi/HfPnq7566D0P8zz9T/z164/8lXP/Zqf2v9/06zdCJfs5Xxb6sH+DyvHQAAAAAAAAyaQkQciqRQWisXCqVS6/sdR+NAoVKt1U9eqi5dnonmb2XHYrTQvtJ9eO37EK3vP4x11CefqE9FxJGI+G5kf7Nemq5WZnY6eAAAAAAAAAAAAAAAAAAAABgQB3v8/j/zx8hOHx3wwq275bc7ucNQ2fSW//240xMwkDbNf2DXkv8wvOQ/DC/5D8NL/sPwkv8wvOQ/DC/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAH114fz5bGmsPro+ndVnri4vzVevnppJa/OlhaXp0nR18UpptlqdraSl6erCZs9XqVavnJmMpWsT9bRWn6gtr1xcqC5drl+cWyjPphfT0ZcSFQAAAAAAAAAAAAAAAAAAALxaassr8+VKJV3c1YWRPNpBOZ7dVCgOxmEo9LmwwwMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHT4LwAA//9fpTPL") r0 = open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) write$nbd(r0, &(0x7f00000003c0)=ANY=[], 0x31) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x200, 0x52) 3m47.128923014s ago: executing program 2 (id=29): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 3m46.723000488s ago: executing program 2 (id=31): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendto(0xffffffffffffffff, 0x0, 0x0, 0x24004000, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m46.257768926s ago: executing program 32 (id=31): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendto(0xffffffffffffffff, 0x0, 0x0, 0x24004000, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.115013137s ago: executing program 5 (id=322): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) ptrace$cont(0x7, r0, 0x2, 0x2d7) 1m50.975270735s ago: executing program 5 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020601010000000000000000150000000c000780080008000000009005000100060000000900020073797a32000000000500040002000000050005000a00000011000300686173683a4d06915b0c246e65742c6e"], 0x58}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$netlink(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50}, 0x50) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000020a01020000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000300657874686472000024000280080001400000000c0800034000000000080004400000000405000200070000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000000120900010073797a30"], 0x100}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b0001006261746164760000f200028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f00000004c0)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c0001"], 0x110}], 0x1}, 0x80) 1m49.690930222s ago: executing program 5 (id=331): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000049c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @local}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MCE_KILL(0x23, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffe00, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc, 0x3, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x60}}, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r3], 0x20}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) accept(r5, 0x0, &(0x7f0000000200)) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x7d, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x4004551e, &(0x7f0000000380)={0x0, 0x0, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82577ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x5514, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffd, 0x4}, 0x6) request_key(0x0, &(0x7f0000000d00)={'syz', 0x0}, &(0x7f0000000380)='G@\xf7\xff\xff\xff\xff\xff\xff\xff\xe3h;\x1d\xd3\xaa\x1a\x9c\xca+\xa2\f\xec\xdeq\xc8\xa2\xc0\xfb\xe7\x98\xa8\x94%\xeb8\xdc\xaf\x02\xe8\xb9g\xd9.k\\q5d\x7f\xaf\xa4\xacsl\xda\x8b\xfb\xdb\xde!\xe2@@G\vT\xa98\f\x1c\xc7D\x8b\xb3@\x96Z2\x1e\x13\x89\x80\xbf\x9f4\x17\xa8\xdd1\n\x05\x953\xd8)<\xcch{\xb3\xeed\xd2Kb\xf1\xdb<,]\x85\xd9}\xa9\xcdhz\xa7\xc5\x14\x8d\xe9R.\x7f\xa3\x9drc\x17\xa1\xe8\xae\x92\x92s\xc1\x98;\x04\xed\xd3\xf6:$n\x14V\xe7\x1c;\x15s\xb9\x82\xc1\fTP\xe5@\x86H\xdf\x93aB\xf2a&\x9c\tsV\"*\xc5\xa3\x0e(\xa6\b\xde\x19\xe8\xd1e\x01u?\xf9', 0xfffffffffffffffa) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 1m48.53279137s ago: executing program 5 (id=333): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000a, &(0x7f0000002900), 0x2, 0x287, &(0x7f0000000600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10b091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2187017, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x100800001) 1m47.023074929s ago: executing program 5 (id=340): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d00)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wg0\x00'}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x800, 0xc749, 0x0, 0xfffffffe, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffffffe, 0xfffffffd, 0xed2, 0xe, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x14}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 1m46.063074606s ago: executing program 5 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 1m45.623651382s ago: executing program 33 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 1m27.809421106s ago: executing program 1 (id=393): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x600}}]}}) 1m27.751074709s ago: executing program 1 (id=394): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7c000}], 0x1, 0x33000, 0x0, 0x3) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x20) mkdir(&(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xfab6ad98ec7a187c) 1m27.713035742s ago: executing program 1 (id=395): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x553b, &(0x7f000000ac00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9) r0 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) fallocate(r0, 0x0, 0x0, 0x9000f4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x14f862, 0x0) write$UHID_INPUT(r0, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 1m24.099046885s ago: executing program 1 (id=400): r0 = epoll_create(0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x1}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x7) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x28) recvmmsg(0xffffffffffffffff, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) 1m23.34225769s ago: executing program 1 (id=401): socket$igmp(0x2, 0x3, 0x2) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xfffffffffffffec9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0xa0000009, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="fc0000001a000708ab092504090007000aab0700a90100001d60369321000100fe800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a87", 0x148) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) accept$inet6(r2, 0x0, &(0x7f0000000200)) ioctl$AUTOFS_IOC_FAIL(r4, 0xae03, 0xb) mount$tmpfs(0x0, 0x0, 0x0, 0x20020, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) 1m21.840466939s ago: executing program 1 (id=406): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) write$evdev(r0, &(0x7f0000000000), 0xaa6f50) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 1m6.773124571s ago: executing program 34 (id=406): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) write$evdev(r0, &(0x7f0000000000), 0xaa6f50) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 1m6.764958171s ago: executing program 0 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f00000000c0)=0x10001, 0x4) 1m5.25947854s ago: executing program 0 (id=438): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0xfd, 0x11ff, &(0x7f0000003300)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r3, 0x0) listen(r1, 0x0) accept(r1, 0x0, 0x0) 1m4.289185467s ago: executing program 0 (id=444): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x11, 0x44, 0x0, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8000, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1m1.279462356s ago: executing program 0 (id=447): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 59.990249711s ago: executing program 6 (id=451): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="796100000000000000007e0000007b3ace73617ede898b772d6f861a58f689"], 0x14}}, 0x4000054) 58.923557785s ago: executing program 6 (id=452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) lseek(r0, 0xfff, 0x3) 58.695074178s ago: executing program 6 (id=454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="02"], 0x10) 58.536292268s ago: executing program 6 (id=455): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10008, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x6ed}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000098c0)="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", 0x2000, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x70c2, {0xfffffffffffffff9, 0x5f53, 0x0, {0x4, 0x1, 0xffffffffffffffff, 0x0, 0x3, 0x9, 0x4, 0xfd4, 0x4, 0x4000, 0x5, r2, r3, 0x5, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x6, 0x100002000}) 58.050880576s ago: executing program 0 (id=457): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xed, 0x0, 0xfffffffffffffffc, 0x80000000000}, {0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x0, 0x2, 0x6, 0xae, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 57.81937973s ago: executing program 6 (id=459): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000049c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @local}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_MCE_KILL(0x23, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffe00, 0x0, 0xffffffffffffffff}}]}, {0x4}, {0xc, 0x3, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}, 0x60}}, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r3], 0x20}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) accept(r5, 0x0, &(0x7f0000000200)) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02"], 0x7d, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x4004551e, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x5514, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 55.522213466s ago: executing program 0 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 55.235326453s ago: executing program 35 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_DPORT={0x6, 0x1d, 0xfffe}]}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 55.068485482s ago: executing program 6 (id=466): socket(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000800)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551087ed89e2312e678f38707c8f37e5c8fe3cb977b7035046ea60fc263c1f72c13c1c7be3f14407e96c832dd5b10a03966185a38402e2cf26722ddeb0e262b9354a7db169109b0adec288e14e03b42147a29ba7f26c6886c05bea9ef56a3bb171e67a92b838a19c3a646fbd5bc79dadd977983eb0587e61bbc7a2d3f3fc63e5704464ed8e57027a8dc835d5f71cf96a13d0a6440492610145b7f71a28bbc1834493d9c63412a741186a0d3a3d18e00f622045954020e1d4bf3c51439ec5ea6c35004bb016ec740a9c2bbccd7daec478949021a69ce9a14bcff85d518579526d616f3ed024cf414e6673b800dc8e6d690b48d3c7430cdd4f51fa4707cad5d91f17a4bd1d72839f8cc3e155239b30c9fca6ac331621f45ae30b730736915456dd4e252c41449f33b07009c3d66163e23d1cabd19c8060364d5739f93af6a37", 0x1a4}], 0x2}}], 0x1, 0x0) 54.660039737s ago: executing program 36 (id=466): socket(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="316f825a3d29f96a392ea917017b4cd300000000bee700d6dd1fb41a20baf7f7343067fd40cdd4f16742e94b000000005d0200b7f3028100ae8180db94b9de7456ae62b0e61861f615947de10ae3c4fa199fb5fe7766a0842912179154a96fa88e161d861e77a486e10d1d1d0b90c8997e6917226fe4bb5d77e85706336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d186ac9b2382a75ac68920ca3d542aece1ba7920a8f39b270458224e74a22fa1db2f647b55a4f113a476c5902ef", 0xd1}, {&(0x7f0000000800)="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", 0x1a4}], 0x2}}], 0x1, 0x0) 11.688574249s ago: executing program 3 (id=566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860600702c1ffe80"], 0xffdd) 10.14858744s ago: executing program 9 (id=569): sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x44010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder1\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x20, 0x0, &(0x7f0000000580)=[@dead_binder_done, @free_buffer, @decrefs], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}}, 0x0) 9.032775586s ago: executing program 9 (id=571): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 8.887008875s ago: executing program 9 (id=573): syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="e57dd04a1ce26166fe3028cdc859cfc459207e68dc20952e32a4e544474f5827fb2218dc94b5959d1957017f00867cd1d772bb48e33d8c7e6dfe5d8e8f61c765fb16e39263a72e9315de4a52ce5ba77bb9d9d5ae10d5bd5686ee5f2722d004b8a687109a86920be0f21513ac5961bdb34de53c4db065d1af888ddfb9dc12834ef28423e4ff9de4c566f5"], 0x47) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x116) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="270000000206010100000000000000831aa7d24c207322ca46aef7cb1f724e000000fffe1c000780060005404e210000050014000800000008000a40ffff078696960400020000000900020073797a30000000000c000780080012409efffffd"], 0x60}}, 0x0) 7.523517556s ago: executing program 4 (id=574): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x2044}, 0x60) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 6.568703211s ago: executing program 9 (id=576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 6.510966855s ago: executing program 4 (id=578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) brk(0xffffffffffff94a2) pread64(0xffffffffffffffff, &(0x7f0000002d80)=""/4143, 0x102f, 0x800000000d) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0xfffe, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x20000000, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3507, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 5.317398516s ago: executing program 4 (id=583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x0, &(0x7f0000000100), 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.184889464s ago: executing program 3 (id=584): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nfc_llcp(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000680)=ANY=[], 0x100c, 0x20000018}, 0x24048090) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000085c) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x0, 0x0, 0x0, 0x400001}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aa00450000300000000000019078ac1e0001e000000104019078030000004500000000000000000000006405000000141400"/62], 0x0) r5 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) readv(r5, &(0x7f0000000140)=[{0x0}], 0x1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27, 0x5}, 0x6) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r7 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r7, 0xc008551a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000008000000eb00000002d10000"]) r8 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) poll(&(0x7f00000000c0)=[{}], 0x1, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 5.07896104s ago: executing program 4 (id=585): r0 = epoll_create(0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x1}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x55000000, 0x0, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000220000000000000000050000"], 0x24}}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r6, &(0x7f00000000c0), 0x28) recvmmsg(r6, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) 5.07862771s ago: executing program 9 (id=586): syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB, @ANYBLOB="e57dd04a1ce26166fe3028cdc859cfc459207e68dc20952e32a4e544474f5827fb2218dc94b5959d1957017f00867cd1d772bb48e33d8c7e6dfe5d8e8f61c765fb16e39263a72e9315de4a52ce5ba77bb9d9d5ae10d5bd5686ee5f2722d004b8a687109a86920be0f21513ac5961bdb34de53c4db065d1af888ddfb9dc12834ef28423e4ff9de4c566f5"], 0x47) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x116) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="270000000206010100000000000000831aa7d24c207322ca46aef7cb1f724e000000fffe1c000780060005404e210000050014000800000008000a40ffff078696960400020000000900020073797a30000000000c000780080012409efffffd"], 0x60}}, 0x0) 5.020436263s ago: executing program 7 (id=587): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101001, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000500)) 3.999588623s ago: executing program 8 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000000)='host1x_channel_submitted\x00', r1, 0x0, 0x400000000}, 0x13) 3.927064088s ago: executing program 7 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.478765915s ago: executing program 3 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) close(0x3) 3.453291176s ago: executing program 4 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020601010000000000000000150000000c000780080008000000009005000100060000000900020073797a32000000000500040002000000050005000a00000011000300686173683a4d06915b0c246e65742c6e"], 0x58}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) chdir(&(0x7f0000000080)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x44, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc884}, 0x4004080) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, r6}, 0x50) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x3, 0x40008080, 0x7fff, 0xfd, 0x101, 0x6, 0x0, 0x0, 0x2, 0xfffff800}}, 0x50) r7 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000020a01020000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000000000000100000008000b400000000064000480340001800b000300657874686472000024000280080001400000000c0800034000000000080004400000000405000200070000002c0001800c00010062697477697365001c0002800800034000000004080001400000001408000240000000120900010073797a30"], 0x100}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800b0001006261746164760000f200028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f00000004c0)) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)=ANY=[@ANYBLOB="10010000220001000000000000000000020100800c0001"], 0x110}], 0x1}, 0x80) 3.367084341s ago: executing program 8 (id=592): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0xbe9bac6d2d0f4e0b) 3.307093834s ago: executing program 7 (id=593): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="010000201000"}) 3.229718749s ago: executing program 8 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) brk(0xffffffffffff94a2) pread64(0xffffffffffffffff, &(0x7f0000002d80)=""/4143, 0x102f, 0x800000000d) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0xfffe, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x20000000, 0x32}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3507, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3.088870298s ago: executing program 9 (id=595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x0, @ioapic={0xd000, 0x1, 0xffffffff, 0x0, 0x0, [{0x6, 0x7, 0x8, '\x00', 0xab}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x3}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xc, 0xc, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x6}, {0x94, 0x5, 0x9, '\x00', 0xfe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x8, '\x00', 0x33}, {0x1, 0xf, 0x57, '\x00', 0xa}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x7, 0x3, 0x8, '\x00', 0xff}, {0x2, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd, '\x00', 0x6}, {0x8, 0x80, 0x7d, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xe}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe2, '\x00', 0x6}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r1, 0x6, &(0x7f0000000300)=""/104, 0x68, 0xd}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206030000000000000000000000000005000100070000000900020073797a32000000000c00078008001240090000000500050002000000050004000000000013000300686173683a6e65742c6966616365"], 0x58}}, 0x0) 2.127081764s ago: executing program 3 (id=596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000047000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.126581485s ago: executing program 8 (id=597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 1.982972803s ago: executing program 7 (id=598): sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x44010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./bus/file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x6) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x20, 0x0, &(0x7f0000000580)=[@dead_binder_done, @free_buffer={0x40086303, r3}, @decrefs], 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}}, 0x0) 1.967059064s ago: executing program 8 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.535066059s ago: executing program 3 (id=600): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nfc_llcp(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f0000000680)=ANY=[], 0x100c, 0x20000018}, 0x24048090) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000085c) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x0, 0x0, 0x0, 0x400001}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@loopback}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="aa00450000300000000000019078ac1e0001e000000104019078030000004500000000000000000000006405000000141400"/62], 0x0) r5 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) readv(r5, &(0x7f0000000140)=[{0x0}], 0x1) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27, 0x5}, 0x6) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r7, 0xc008551a, 0x0) r8 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) poll(&(0x7f00000000c0)=[{}], 0x1, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 735.024897ms ago: executing program 7 (id=601): r0 = epoll_create(0x18) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x1}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7a) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x55000000, 0x0, 0x0, 0xfffffffe}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000220000000000000000050000"], 0x24}}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r6, &(0x7f00000000c0), 0x28) recvmmsg(r6, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) 734.815227ms ago: executing program 8 (id=602): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f00000005c0)=r0, 0x12) 100.103074ms ago: executing program 3 (id=603): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 21.781839ms ago: executing program 7 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 0s ago: executing program 4 (id=605): syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB, @ANYBLOB="e57dd04a1ce26166fe3028cdc859cfc459207e68dc20952e32a4e544474f5827fb2218dc94b5959d1957017f00867cd1d772bb48e33d8c7e6dfe5d8e8f61c765fb16e39263a72e9315de4a52ce5ba77bb9d9d5ae10d5bd5686ee5f2722d004b8a687109a86920be0f21513ac5961bdb34de53c4db065d1af888ddfb9dc12834ef28423e4ff9de4c566f5"], 0x47) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x116) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0xc048aec8, &(0x7f0000000980)={0x4, 0x0, @pic={0x52, 0x9, 0x2, 0x6, 0xbf, 0x4, 0xb, 0x6, 0x3, 0x1, 0x3, 0x23, 0xf, 0x0, 0x4e, 0x8}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$xdp(0x2c, 0x3, 0x0) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="270000000206010100000000000000831aa7d24c207322ca46aef7cb1f724e000000fffe1c000780060005404e210000050014000800000008000a40ffff078696960400020000000900020073797a30000000000c000780080012409efffffd"], 0x60}}, 0x0) kernel console output (not intermixed with test programs): ng removed mblk_io_submit option [ 74.252516][ T4358] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.33: invalid indirect mapped block 10 (level 1) [ 74.310939][ T4358] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.33: invalid indirect mapped block 8 (level 1) [ 74.344874][ T4358] EXT4-fs (loop3): 1 truncate cleaned up [ 74.397532][ T4358] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 74.445017][ T4212] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 74.748860][ T4362] chnl_net:caif_netlink_parms(): no params data found [ 75.008467][ T7] usb 5-1: USB disconnect, device number 2 [ 75.021376][ T4370] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #15: comm syz.3.33: inline data xattr refers to an external xattr inode [ 75.064846][ T4370] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #15: comm syz.3.33: inline data xattr refers to an external xattr inode [ 75.085721][ T4370] overlayfs: failed to resolve './file1': -117 [ 75.843986][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.866441][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.889903][ T4362] device bridge_slave_0 entered promiscuous mode [ 75.902538][ T4362] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.911587][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.923652][ T4362] device bridge_slave_1 entered promiscuous mode [ 76.026526][ T4362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.065858][ T4362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.158455][ T4362] team0: Port device team_slave_0 added [ 76.240227][ T4362] team0: Port device team_slave_1 added [ 76.344452][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.351526][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.460029][ T4362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.471001][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 76.530309][ T4362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.537535][ T4362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.432768][ T4362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.779299][ T4362] device hsr_slave_0 entered promiscuous mode [ 77.812113][ T4362] device hsr_slave_1 entered promiscuous mode [ 77.849478][ T4362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.859167][ T4362] Cannot create hsr debugfs directory [ 78.424202][ T4372] loop3: detected capacity change from 0 to 40427 [ 78.543557][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 78.559823][ T4372] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 78.617926][ T4372] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 78.721195][ T4372] F2FS-fs (loop3): Found nat_bits in checkpoint [ 78.769446][ T4362] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.817058][ T4362] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.875779][ T4362] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.937261][ T4362] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.077124][ T4362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.155751][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.171074][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.192419][ T4362] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.204975][ T4414] loop0: detected capacity change from 0 to 4096 [ 80.281207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.327174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.341206][ T4414] EXT4-fs (loop0): inline encryption not supported [ 80.346020][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.354878][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.415620][ T4414] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,inlinecrypt,min_batch_time=0x0000000000000005,max_batch_time=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 80.477063][ T4414] EXT4-fs (loop0): shut down requested (2) [ 80.515797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.544949][ T4414] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz.0.46: directory missing '..' [ 80.594320][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.633642][ T4252] Bluetooth: hci1: command 0x040f tx timeout [ 80.659942][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.706671][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.713841][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.933396][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.075815][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.348369][ T4432] netlink: 19 bytes leftover after parsing attributes in process `syz.3.50'. [ 81.441739][ T23] cfg80211: failed to load regulatory.db [ 81.717328][ T4428] loop0: detected capacity change from 0 to 1024 [ 81.742682][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.775058][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.815046][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.851725][ T4428] EXT4-fs (loop0): Ignoring removed orlov option [ 81.860741][ T4428] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 81.864224][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.915505][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.964168][ T4428] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,usrjquota=,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 81.986530][ T4429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 82.135162][ T4362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.211921][ T4362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.244865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.265376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.307977][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.345120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.419016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.498523][ T4444] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 82.703171][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 82.882855][ T4362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.042518][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.070613][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.095594][ T4465] loop0: detected capacity change from 0 to 128 [ 84.238877][ T4465] EXT4-fs (loop0): Invalid want_extra_isize 7 [ 84.296383][ T4462] netlink: 76 bytes leftover after parsing attributes in process `syz.4.56'. [ 84.486628][ T4210] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.545999][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 84.615616][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 84.669239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 84.692904][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.731350][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.800301][ T4474] loop0: detected capacity change from 0 to 512 [ 84.817340][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.857900][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.873253][ T4210] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.891143][ T4210] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.903338][ T4474] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 84.932128][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.940946][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.958752][ T4362] device veth0_vlan entered promiscuous mode [ 84.986477][ T4474] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.60: invalid indirect mapped block 10 (level 1) [ 85.003204][ T4210] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.012268][ T4210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.024289][ T4362] device veth1_vlan entered promiscuous mode [ 85.033073][ T4210] usb 4-1: SerialNumber: syz [ 85.051957][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.070262][ T4474] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.60: invalid indirect mapped block 8 (level 1) [ 85.074127][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.091762][ T4474] EXT4-fs (loop0): 1 truncate cleaned up [ 85.113094][ T4474] EXT4-fs (loop0): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none. [ 85.123778][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.136748][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.251801][ T4480] loop1: detected capacity change from 0 to 512 [ 85.474384][ T4362] device veth0_macvtap entered promiscuous mode [ 85.478162][ T4210] usb 4-1: 0:2 : does not exist [ 85.595573][ T4483] EXT4-fs error (device loop0): ext4_find_inline_data_nolock:163: inode #15: comm syz.0.60: inline data xattr refers to an external xattr inode [ 85.762863][ T4484] overlayfs: missing 'workdir' [ 86.491811][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.512086][ T4362] device veth1_macvtap entered promiscuous mode [ 86.521620][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 86.551544][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.690184][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.750869][ T4210] usb 4-1: USB disconnect, device number 2 [ 86.896150][ T4480] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 86.923299][ T4480] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.036316][ T4253] udevd[4253]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.062630][ T4480] EXT4-fs error (device loop1): ext4_xattr_block_find:1857: inode #15: comm syz.1.62: corrupted xattr block 33 [ 87.081974][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.115529][ T4501] loop3: detected capacity change from 0 to 256 [ 87.135147][ T4501] FAT-fs (loop3): Unrecognized mount option "0xffffffffffffffff0x0000000000000000" or missing value [ 87.160690][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.189619][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.201623][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.212447][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.223341][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.234134][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.244302][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.255075][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.265557][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.276335][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.290706][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.328170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.356429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.401520][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.670653][ T4503] loop1: detected capacity change from 0 to 40427 [ 87.740289][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.754226][ T4503] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 87.761995][ T4503] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.773873][ T4503] F2FS-fs (loop1): invalid crc value [ 87.799865][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.849623][ T4503] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.898893][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.917973][ T4503] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.925097][ T4503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.944965][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.965374][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.968998][ T4503] attempt to access beyond end of device [ 87.968998][ T4503] loop1: rw=2049, want=45224, limit=40427 [ 87.975542][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.000630][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.011059][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.022111][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.042319][ T4362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.062200][ T4362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.086746][ T4362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.195468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.197957][ T4496] loop0: detected capacity change from 0 to 40427 [ 88.211805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.224026][ T4362] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.238428][ T4362] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.250368][ T4362] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.363799][ T4362] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.577376][ T4496] F2FS-fs (loop0): invalid crc value [ 88.618664][ T4496] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.822994][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 88.832029][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 88.841613][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 89.643927][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 89.676649][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 89.777317][ T4496] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.913958][ T4524] netlink: 76 bytes leftover after parsing attributes in process `syz.4.70'. [ 90.603147][ T4525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.73'. [ 90.929077][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.183598][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.247421][ T4166] attempt to access beyond end of device [ 91.247421][ T4166] loop0: rw=2049, want=45104, limit=40427 [ 91.326182][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.358423][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.383266][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.473232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.555175][ T4567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 93.722564][ T4575] netlink: 76 bytes leftover after parsing attributes in process `syz.3.83'. [ 95.165342][ T4581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 96.190844][ T154] device hsr_slave_0 left promiscuous mode [ 96.216602][ T154] device hsr_slave_1 left promiscuous mode [ 96.241760][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.271956][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.308154][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.335932][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.375154][ T154] device bridge_slave_1 left promiscuous mode [ 96.382944][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.488592][ T154] device bridge_slave_0 left promiscuous mode [ 96.523273][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.646653][ T154] device veth1_macvtap left promiscuous mode [ 96.674486][ T154] device veth0_macvtap left promiscuous mode [ 96.680625][ T154] device veth1_vlan left promiscuous mode [ 96.724413][ T154] device veth0_vlan left promiscuous mode [ 96.945932][ T4615] process 'syz.4.90' launched './file0' with NULL argv: empty string added [ 97.412906][ T4599] loop0: detected capacity change from 0 to 40427 [ 97.481853][ T4599] F2FS-fs (loop0): invalid crc value [ 97.537576][ T4599] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.545377][ T4622] loop3: detected capacity change from 0 to 512 [ 97.641003][ T4622] EXT4-fs (loop3): inline encryption not supported [ 97.820282][ T4599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 98.173228][ T4622] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 98.344934][ T4622] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.850131][ T4695] netlink: 19 bytes leftover after parsing attributes in process `syz.1.95'. [ 98.933421][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.981355][ T154] team0 (unregistering): Port device team_slave_1 removed [ 99.122227][ T154] team0 (unregistering): Port device team_slave_0 removed [ 99.130124][ T4700] netlink: 76 bytes leftover after parsing attributes in process `syz.4.96'. [ 99.166845][ T4620] loop5: detected capacity change from 0 to 40427 [ 99.192784][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.214236][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 99.294453][ T4620] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 99.328229][ T4620] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 99.342601][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.353298][ T7] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 99.373177][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.398789][ T4620] F2FS-fs (loop5): invalid crc value [ 99.413139][ T7] usb 4-1: config 0 has no interface number 0 [ 99.472445][ T4620] F2FS-fs (loop5): Found nat_bits in checkpoint [ 99.594629][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 99.623351][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.676828][ T7] usb 4-1: Product: syz [ 99.690851][ T4620] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 99.704842][ T7] usb 4-1: Manufacturer: syz [ 99.723536][ T4620] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 99.734577][ T7] usb 4-1: SerialNumber: syz [ 99.768502][ T7] usb 4-1: config 0 descriptor?? [ 99.858596][ T154] bond0 (unregistering): Released all slaves [ 99.967326][ T4692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 100.494192][ T4715] loop0: detected capacity change from 0 to 40427 [ 101.882464][ T7] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 101.890984][ T7] usb 4-1: No valid video chain found. [ 101.913516][ T7] usb 4-1: USB disconnect, device number 3 [ 102.102413][ T4715] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 102.109176][ T4715] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.584797][ T4715] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.711573][ T4715] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 102.718843][ T4715] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.910945][ T4715] attempt to access beyond end of device [ 102.910945][ T4715] loop0: rw=2049, want=53256, limit=40427 [ 103.855185][ T1223] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 103.906735][ T1223] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 104.405123][ T4166] attempt to access beyond end of device [ 104.405123][ T4166] loop0: rw=2049, want=45104, limit=40427 [ 106.124828][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.108'. [ 106.718662][ T4769] netlink: 76 bytes leftover after parsing attributes in process `syz.4.109'. [ 108.376888][ T4751] loop0: detected capacity change from 0 to 40427 [ 109.916989][ T4808] xt_TPROXY: Can be used only with -p tcp or -p udp [ 109.992097][ T4808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.118'. [ 111.328242][ T4788] loop3: detected capacity change from 0 to 40427 [ 111.551301][ T4831] loop5: detected capacity change from 0 to 1024 [ 111.607898][ T4834] loop0: detected capacity change from 0 to 1024 [ 111.753744][ T4831] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 111.804531][ T4834] EXT4-fs (loop0): Ignoring removed bh option [ 111.811215][ T4831] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.121: bg 0: block 260: invalid block bitmap [ 111.892167][ T4831] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.945590][ T4834] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,i_version,user_xattr,bh,errors=remount-ro,. Quota mode: none. [ 111.997901][ T4831] EXT4-fs error (device loop5): ext4_free_inode:355: comm syz.5.121: bit already cleared for inode 15 [ 112.003215][ T4841] EXT4-fs error (device loop5): __ext4_new_inode:1076: comm syz.5.121: reserved inode found cleared - inode=1 [ 112.989387][ T2239] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 113.390506][ T4876] loop4: detected capacity change from 0 to 16 [ 113.424289][ T2239] usb 6-1: unable to get BOS descriptor or descriptor too short [ 113.573346][ T2239] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 113.611352][ T4876] erofs: (device loop4): mounted with root inode @ nid 36. [ 113.633738][ T2239] usb 6-1: can't read configurations, error -71 [ 113.728664][ T4876] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.818169][ T4858] loop3: detected capacity change from 0 to 40427 [ 113.996782][ T4858] F2FS-fs (loop3): Found nat_bits in checkpoint [ 114.333803][ T4858] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 114.420329][ T4909] loop1: detected capacity change from 0 to 128 [ 114.597546][ T4909] EXT4-fs (loop1): Invalid want_extra_isize 7 [ 115.019135][ T4168] attempt to access beyond end of device [ 115.019135][ T4168] loop3: rw=2049, want=45104, limit=40427 [ 116.472558][ T4908] loop4: detected capacity change from 0 to 40427 [ 116.583249][ T4908] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 116.613026][ T4908] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 116.674408][ T4908] F2FS-fs (loop4): invalid crc value [ 116.736356][ T4908] F2FS-fs (loop4): Found nat_bits in checkpoint [ 116.958597][ T4908] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 116.988872][ T4908] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 117.124207][ T4944] loop0: detected capacity change from 0 to 128 [ 119.119174][ T4908] overlayfs: failed to resolve './file0': -2 [ 119.377961][ T4973] loop1: detected capacity change from 0 to 2048 [ 119.507756][ T4315] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 119.526177][ T4315] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 119.539939][ T4973] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 119.774950][ T4973] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,minixdf,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 119.898264][ T4996] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 119.908763][ T4996] overlayfs: overlapping lowerdir path [ 120.697308][ T4997] loop5: detected capacity change from 0 to 512 [ 121.175506][ T4997] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.154: casefold flag without casefold feature [ 121.233823][ T4997] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.154: couldn't read orphan inode 15 (err -117) [ 121.401636][ T4997] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 126.013743][ T5066] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 126.023968][ T5066] overlayfs: overlapping lowerdir path [ 126.309790][ T5065] device hsr0 entered promiscuous mode [ 126.318190][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.167'. [ 126.333602][ T5065] device hsr_slave_0 left promiscuous mode [ 126.546986][ T5065] device hsr_slave_1 left promiscuous mode [ 127.188978][ T5065] device hsr0 left promiscuous mode [ 127.220698][ T5083] loop1: detected capacity change from 0 to 256 [ 127.508860][ T5083] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.429986][ T5109] loop0: detected capacity change from 0 to 512 [ 131.793947][ T5109] EXT4-fs (loop0): 1 orphan inode deleted [ 131.839788][ T5109] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 131.865441][ T5109] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.158375][ T5132] netlink: 'syz.1.178': attribute type 3 has an invalid length. [ 132.319832][ T5132] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.178' resets device [ 132.819885][ T5134] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 132.830220][ T5134] overlayfs: overlapping lowerdir path [ 132.843708][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850058][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.523094][ T4211] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 133.883574][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.904589][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.923070][ T4211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 133.939965][ T4211] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.952641][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.067868][ T4211] usb 2-1: config 0 descriptor?? [ 134.634266][ T5151] netlink: 'syz.5.185': attribute type 1 has an invalid length. [ 134.642723][ T5151] netlink: 240 bytes leftover after parsing attributes in process `syz.5.185'. [ 134.669192][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.185'. [ 134.767522][ T5153] device batadv1 entered promiscuous mode [ 134.904864][ T4211] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 134.915833][ T5161] ip6t_rpfilter: unknown options [ 134.924919][ T4211] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 134.980569][ T4211] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 136.300099][ T4211] usb 2-1: USB disconnect, device number 2 [ 136.316159][ T5179] loop5: detected capacity change from 0 to 2048 [ 136.463121][ T5181] loop0: detected capacity change from 0 to 512 [ 136.514964][ T5186] loop3: detected capacity change from 0 to 128 [ 136.538108][ T5181] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 136.562105][ T5186] EXT4-fs (loop3): Invalid want_extra_isize 7 [ 136.658233][ T5179] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000002,,errors=continue. Quota mode: none. [ 136.916357][ T5181] loop0: detected capacity change from 0 to 2048 [ 137.045019][ T5181] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,usrjquota=,errors=remount-ro,discard,auto_da_alloc,resgid=0x0000000000000000,nouid32,barrier=0x0000000000000000,init_itable=0x0000000000007fff,bsddf,. Quota mode: none. [ 137.204552][ T5199] loop5: detected capacity change from 0 to 1024 [ 139.183145][ T5191] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 139.331642][ T5199] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.367619][ T5191] EXT4-fs (loop0): Remounting filesystem read-only [ 139.422494][ T5199] EXT4-fs (loop5): shut down requested (0) [ 139.873118][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.962830][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.199'. [ 139.987159][ T5218] device batadv1 entered promiscuous mode [ 140.173140][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 140.587190][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.923721][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1455, setting to 1024 [ 140.977708][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.038466][ T13] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 141.088284][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.002012][ T13] usb 1-1: config 0 descriptor?? [ 142.033351][ T5215] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 142.041987][ T5237] loop1: detected capacity change from 0 to 1024 [ 142.137512][ T5241] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 142.208130][ T5237] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 142.237486][ T5237] EXT4-fs (loop1): invalid journal inode [ 142.256828][ T5237] EXT4-fs (loop1): can't get journal size [ 142.281723][ T5237] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,resgid=0x0000000000000000,norecovery,commit=0x0000000000000005,nombcache,,errors=continue. Quota mode: writeback. [ 142.517262][ T13] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 142.542822][ T13] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0 [ 142.582862][ T13] prodikeys 0003:041E:2801.0003: item fetching failed at offset 2/7 [ 142.629812][ T13] prodikeys 0003:041E:2801.0003: hid parse failed [ 142.664022][ T5250] loop4: detected capacity change from 0 to 40427 [ 142.668288][ T13] prodikeys: probe of 0003:041E:2801.0003 failed with error -22 [ 142.706315][ T5250] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 142.714521][ T5250] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 142.730093][ T5250] F2FS-fs (loop4): invalid crc value [ 142.733934][ T13] usb 1-1: USB disconnect, device number 2 [ 142.791708][ T5250] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.853122][ T5250] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 142.860236][ T5250] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.884289][ T5250] attempt to access beyond end of device [ 142.884289][ T5250] loop4: rw=2049, want=45224, limit=40427 [ 142.970584][ T5259] loop1: detected capacity change from 0 to 128 [ 143.097692][ T5259] EXT4-fs (loop1): Invalid want_extra_isize 7 [ 143.734662][ T5269] overlayfs: invalid redirect ((null)) [ 145.115496][ T5284] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 145.125776][ T5284] overlayfs: overlapping lowerdir path [ 145.219260][ T4306] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 145.254863][ T4306] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 146.208817][ T5315] loop5: detected capacity change from 0 to 512 [ 146.428103][ T5315] EXT4-fs (loop5): orphan cleanup on readonly fs [ 146.448350][ T5315] Quota error (device loop5): find_tree_dqentry: Getting block too big (196613 >= 6) [ 146.458883][ T5315] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 146.468829][ T5315] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.215: Failed to acquire dquot type 1 [ 146.495622][ T5315] EXT4-fs (loop5): 1 truncate cleaned up [ 146.515236][ T5315] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 149.514859][ T5344] loop1: detected capacity change from 0 to 2048 [ 149.524291][ T5343] loop3: detected capacity change from 0 to 128 [ 149.581375][ T5344] EXT4-fs (loop1): Ignoring removed orlov option [ 149.588091][ T5344] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 149.600952][ T5343] EXT4-fs (loop3): Invalid want_extra_isize 7 [ 149.669846][ T5344] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,acl,nomblk_io_submit,barrier,norecovery,barrier=0x0000000000000100,usrquota,nobarrier,,errors=continue. Quota mode: writeback. [ 149.682473][ T5352] loop4: detected capacity change from 0 to 512 [ 149.768123][ T5352] EXT4-fs (loop4): Unrecognized mount option "permit_directio" or missing value [ 150.908502][ T5368] xt_TPROXY: Can be used only with -p tcp or -p udp [ 151.250670][ T5376] netlink: 'syz.3.224': attribute type 3 has an invalid length. [ 151.276640][ T5376] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.224' resets device [ 151.375909][ T5350] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 152.169891][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 152.250299][ T5383] netlink: 'syz.3.225': attribute type 1 has an invalid length. [ 152.348495][ T5380] device batadv1 entered promiscuous mode [ 152.375567][ T5383] netlink: 240 bytes leftover after parsing attributes in process `syz.3.225'. [ 153.221907][ T5398] loop4: detected capacity change from 0 to 128 [ 153.457479][ T5402] loop3: detected capacity change from 0 to 2048 [ 153.575941][ T5403] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 153.586871][ T5403] overlayfs: overlapping lowerdir path [ 153.838736][ T5402] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.863621][ T5411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 154.867233][ T5426] loop4: detected capacity change from 0 to 2048 [ 154.919426][ T5426] EXT4-fs (loop4): Ignoring removed orlov option [ 154.926220][ T5426] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 154.951326][ T5430] loop5: detected capacity change from 0 to 512 [ 155.008421][ T5426] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,acl,nomblk_io_submit,barrier,norecovery,barrier=0x0000000000000100,usrquota,nobarrier,,errors=continue. Quota mode: writeback. [ 155.095798][ T5436] loop0: detected capacity change from 0 to 128 [ 155.200749][ T5430] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 155.225784][ T5436] EXT4-fs (loop0): Invalid want_extra_isize 7 [ 155.291313][ T5430] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.899181][ T4209] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 157.036797][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.238'. [ 157.062760][ T5464] device batadv1 entered promiscuous mode [ 157.111200][ T5465] netlink: 'syz.5.238': attribute type 1 has an invalid length. [ 157.193032][ T4209] usb 1-1: Using ep0 maxpacket: 32 [ 157.201616][ T5465] netlink: 240 bytes leftover after parsing attributes in process `syz.5.238'. [ 157.337003][ T4209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.383167][ T4209] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 157.456640][ T4209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.833455][ T5412] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 158.020396][ T4209] usb 1-1: config 0 descriptor?? [ 158.839287][ T4209] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0004/input/input6 [ 159.052403][ T4266] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 690 with error 28 [ 159.138134][ T4266] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.138134][ T4266] [ 159.188159][ T4266] EXT4-fs (loop3): Total free blocks count 0 [ 159.194321][ T4266] EXT4-fs (loop3): Free/Dirty block details [ 159.199376][ T4209] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 159.200289][ T4266] EXT4-fs (loop3): free_blocks=0 [ 159.237330][ T4266] EXT4-fs (loop3): dirty_blocks=704 [ 159.242574][ T4266] EXT4-fs (loop3): Block reservation details [ 159.272556][ T4266] EXT4-fs (loop3): i_reserved_data_blocks=44 [ 159.279621][ T4209] usb 1-1: USB disconnect, device number 3 [ 159.663308][ T5412] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 161.229229][ T5495] loop3: detected capacity change from 0 to 2048 [ 161.293803][ T5495] EXT4-fs (loop3): Ignoring removed orlov option [ 161.300199][ T5495] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 161.431113][ T5495] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,acl,nomblk_io_submit,barrier,norecovery,barrier=0x0000000000000100,usrquota,nobarrier,,errors=continue. Quota mode: writeback. [ 162.867713][ T5515] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 162.878142][ T5515] overlayfs: overlapping lowerdir path [ 163.630508][ T5520] fuse: Bad value for 'fd' [ 164.502997][ T13] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 165.014043][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.111491][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 165.453090][ T13] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 165.532635][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.600189][ T13] usb 6-1: config 0 descriptor?? [ 165.674699][ T13] usb 6-1: can't set config #0, error -71 [ 166.145688][ T5498] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 166.173418][ T13] usb 6-1: USB disconnect, device number 4 [ 166.398974][ T5542] loop5: detected capacity change from 0 to 2048 [ 166.524276][ T5542] EXT4-fs (loop5): Ignoring removed orlov option [ 166.530974][ T5542] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 166.648142][ T5542] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,acl,nomblk_io_submit,barrier,norecovery,barrier=0x0000000000000100,usrquota,nobarrier,,errors=continue. Quota mode: writeback. [ 168.428417][ T5565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 168.449648][ T5565] device batadv1 entered promiscuous mode [ 168.673630][ T5570] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 168.728529][ T5570] netlink: 240 bytes leftover after parsing attributes in process `syz.3.264'. [ 169.178945][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 171.183173][ T5549] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 173.526622][ T5612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.278'. [ 173.614000][ T5614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 173.628051][ T5614] device batadv1 entered promiscuous mode [ 177.436004][ T5028] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.843095][ T5028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 178.421169][ T5028] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 178.634393][ T5028] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.647919][ T5028] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.657456][ T5028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.668955][ T5028] usb 2-1: config 0 descriptor?? [ 178.706068][ T5639] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.832073][ T5654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 178.920454][ T5654] device batadv1 entered promiscuous mode [ 178.950244][ T5661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 179.120651][ T5669] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 179.129662][ T5669] netlink: 240 bytes leftover after parsing attributes in process `syz.0.288'. [ 179.175182][ T5028] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 179.195339][ T5028] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 179.204151][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 180.106629][ T5674] device batadv1 entered promiscuous mode [ 180.123239][ T5028] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 180.386990][ T5028] usb 2-1: USB disconnect, device number 3 [ 180.917720][ T1325] Bluetooth: hci0: command 0x0406 tx timeout [ 181.142240][ T1325] Bluetooth: hci2: command 0x0406 tx timeout [ 181.161478][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 181.222771][ T1325] Bluetooth: hci4: command 0x0406 tx timeout [ 181.230665][ T4253] udevd[4253]: setting mode of /dev/hidraw0 to 020600 failed: No such file or directory [ 181.261151][ T4253] udevd[4253]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: No such file or directory [ 181.265479][ T1223] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 181.350863][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 181.375036][ T4178] Bluetooth: hci5: sending frame failed (-49) [ 183.157289][ T5704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 183.846117][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 184.004336][ T4178] Bluetooth: hci5: sending frame failed (-49) [ 185.933147][ T5726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.311'. [ 185.976625][ T5728] loop0: detected capacity change from 0 to 128 [ 186.025755][ T5728] EXT4-fs (loop0): Invalid want_extra_isize 7 [ 186.053720][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 186.063127][ T1325] Bluetooth: hci5: command 0x1009 tx timeout [ 186.084795][ T5730] device batadv1 entered promiscuous mode [ 186.155275][ T1108] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 186.194462][ T5734] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 186.234915][ T5734] netlink: 240 bytes leftover after parsing attributes in process `syz.3.311'. [ 187.303115][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 187.349566][ T1108] usb 2-1: not running at top speed; connect to a high speed hub [ 187.443204][ T1108] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 187.451414][ T1108] usb 2-1: config 0 has no interface number 0 [ 187.621229][ T5748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.317'. [ 187.641999][ T1108] usb 2-1: config 0 interface 113 has no altsetting 0 [ 187.803141][ T1108] usb 2-1: New USB device found, idVendor=1b3d, idProduct=01e5, bcdDevice=d9.fa [ 187.845085][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.876766][ T1108] usb 2-1: Product: syz [ 187.892251][ T1108] usb 2-1: Manufacturer: syz [ 187.908160][ T1108] usb 2-1: SerialNumber: syz [ 187.959132][ T1108] usb 2-1: config 0 descriptor?? [ 188.304444][ T1108] ftdi_sio 2-1:0.113: FTDI USB Serial Device converter detected [ 188.348446][ T1108] usb 2-1: Detected FT-X [ 188.383925][ T1108] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 188.423057][ T1108] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 188.453128][ T1108] ftdi_sio 2-1:0.113: GPIO initialisation failed: -71 [ 188.476858][ T1108] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 188.548830][ T1108] usb 2-1: USB disconnect, device number 4 [ 188.656753][ T1108] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 188.731264][ T1108] ftdi_sio 2-1:0.113: device disconnected [ 189.059496][ T5760] netlink: 'syz.1.321': attribute type 3 has an invalid length. [ 189.071960][ T5760] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.321' resets device [ 189.537684][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.323'. [ 189.676462][ T5771] device batadv1 entered promiscuous mode [ 189.877869][ T5781] netlink: 'syz.0.327': attribute type 4 has an invalid length. [ 190.369319][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 190.389499][ T5784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 190.440924][ T5784] device batadv1 entered promiscuous mode [ 190.441538][ T5786] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 190.455457][ T5786] netlink: 240 bytes leftover after parsing attributes in process `syz.4.328'. [ 190.918950][ T5798] netlink: 'syz.5.331': attribute type 3 has an invalid length. [ 190.947610][ T5798] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.331' resets device [ 192.630803][ T5814] netlink: 'syz.3.334': attribute type 3 has an invalid length. [ 192.659934][ T5814] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.334' resets device [ 193.096002][ T5812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.336'. [ 193.251726][ T5817] capability: warning: `syz.4.339' uses 32-bit capabilities (legacy support in use) [ 193.577532][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 193.628291][ T5825] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 193.629823][ T5826] device batadv1 entered promiscuous mode [ 193.716273][ T5825] netlink: 240 bytes leftover after parsing attributes in process `syz.4.341'. [ 194.067664][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.075063][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.221312][ T4671] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.431440][ T4671] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.547465][ T4671] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.693676][ T4671] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.021488][ T5845] netlink: 'syz.4.348': attribute type 3 has an invalid length. [ 195.048514][ T5845] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.348' resets device [ 195.076492][ T5843] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 196.427504][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.350'. [ 197.195749][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.355'. [ 197.287755][ T5876] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 197.438186][ T5885] loop0: detected capacity change from 0 to 4096 [ 197.512358][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'. [ 197.605442][ T5888] device batadv1 entered promiscuous mode [ 197.768125][ T5893] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 197.776077][ T5893] netlink: 240 bytes leftover after parsing attributes in process `syz.1.357'. [ 197.800821][ T5885] EXT4-fs (loop0): Test dummy encryption mode enabled [ 198.417948][ T5885] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 198.463215][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 199.023057][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 199.602576][ T5910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.360'. [ 201.112854][ T5885] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 201.246474][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 201.499299][ T4671] device hsr_slave_0 left promiscuous mode [ 201.514243][ T4671] device hsr_slave_1 left promiscuous mode [ 201.660053][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.698181][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.747019][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.815884][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.872373][ T4671] device bridge_slave_1 left promiscuous mode [ 201.900486][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.939098][ T4671] device bridge_slave_0 left promiscuous mode [ 201.975625][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.085449][ T4671] device veth1_macvtap left promiscuous mode [ 202.113912][ T4671] device veth0_macvtap left promiscuous mode [ 202.140440][ T4671] device veth1_vlan left promiscuous mode [ 202.166866][ T4671] device veth0_vlan left promiscuous mode [ 203.536224][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 203.850329][ T5973] netlink: 'syz.4.371': attribute type 1 has an invalid length. [ 203.872797][ T5973] netlink: 240 bytes leftover after parsing attributes in process `syz.4.371'. [ 203.972611][ T4671] team0 (unregistering): Port device team_slave_1 removed [ 203.992686][ T4671] team0 (unregistering): Port device team_slave_0 removed [ 204.012827][ T4671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.063948][ T4671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.402715][ T4671] bond0 (unregistering): Released all slaves [ 204.575404][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.585347][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.624700][ T5867] device bridge_slave_0 entered promiscuous mode [ 204.724901][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.732651][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.791041][ T5867] device bridge_slave_1 entered promiscuous mode [ 204.801855][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 204.834890][ T5972] device batadv1 entered promiscuous mode [ 205.102188][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.182319][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.393060][ T1325] Bluetooth: hci1: command 0x0419 tx timeout [ 206.853054][ T5028] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 206.970945][ T5986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.374'. [ 207.069205][ T5867] team0: Port device team_slave_0 added [ 207.079209][ T5867] team0: Port device team_slave_1 added [ 207.113220][ T5028] usb 5-1: Using ep0 maxpacket: 8 [ 207.133159][ T4209] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 207.293331][ T5028] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.302411][ T5028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.543109][ T4209] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.439140][ T5028] usb 5-1: config 0 descriptor?? [ 208.453029][ T4209] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.623208][ T5028] usb 5-1: can't set config #0, error -71 [ 208.674896][ T5028] usb 5-1: USB disconnect, device number 3 [ 208.729954][ T4209] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.740964][ T4209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.835904][ T4209] usb 4-1: SerialNumber: syz [ 209.612168][ T4209] usb 4-1: 0:2 : does not exist [ 209.618100][ T6011] tipc: Started in network mode [ 209.623875][ T6011] tipc: Node identity e0000001, cluster identity 4711 [ 209.630718][ T6011] tipc: Enabling of bearer rejected, failed to enable media [ 209.758201][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.765573][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.891007][ T4209] usb 4-1: USB disconnect, device number 4 [ 209.921472][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.956919][ T6022] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 209.979407][ T6022] netlink: 240 bytes leftover after parsing attributes in process `syz.1.381'. [ 210.033353][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 210.214348][ T6021] device batadv1 entered promiscuous mode [ 210.743215][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.750364][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.764205][ T4253] udevd[4253]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.960065][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.133260][ T4264] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 211.206513][ T5867] device hsr_slave_0 entered promiscuous mode [ 211.240305][ T5867] device hsr_slave_1 entered promiscuous mode [ 211.258027][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.288909][ T5867] Cannot create hsr debugfs directory [ 212.172974][ T4264] usb 5-1: Using ep0 maxpacket: 16 [ 212.298101][ T6055] loop0: detected capacity change from 0 to 128 [ 212.323541][ T4264] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 212.357080][ T4264] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.377668][ T4264] usb 5-1: config 0 has no interface number 0 [ 212.383954][ T6055] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 212.384070][ T6055] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.485180][ T6064] /dev/loop0: Can't open blockdev [ 212.494672][ T5867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 212.573960][ T5867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 212.611086][ T5867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 212.623224][ T4264] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 212.633700][ T6055] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.391: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 212.672949][ T4264] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.673476][ T5867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 212.680968][ T4264] usb 5-1: Product: syz [ 212.762987][ T4264] usb 5-1: Manufacturer: syz [ 212.783096][ T6055] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem [ 212.791182][ T4264] usb 5-1: SerialNumber: syz [ 212.835154][ T4264] usb 5-1: config 0 descriptor?? [ 212.857570][ T6074] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 18: comm syz.0.391: bad entry in directory: inode out of bounds - offset=2012, inode=128, rec_len=36, size=1024 fake=1 [ 212.905163][ T4264] usb 5-1: Found UVC 0.00 device syz (046d:08d3) [ 212.927545][ T4264] usb 5-1: No valid video chain found. [ 213.110629][ T4264] usb 5-1: USB disconnect, device number 4 [ 213.170230][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.306965][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.318930][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.357820][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.391199][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.423758][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.463261][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.470360][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.519517][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.611956][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.634013][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.669875][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.677048][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.749593][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.828544][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.870500][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.945343][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.957642][ T6093] netlink: 'syz.4.397': attribute type 1 has an invalid length. [ 213.977595][ T6093] netlink: 240 bytes leftover after parsing attributes in process `syz.4.397'. [ 214.029112][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.073974][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.124682][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.202379][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.268816][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.334992][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.397'. [ 214.481103][ T6090] device batadv1 entered promiscuous mode [ 214.631213][ T6078] loop0: detected capacity change from 0 to 40427 [ 214.714670][ T5867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.777468][ T6078] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 214.811905][ T6078] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 214.820514][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.835505][ T6078] F2FS-fs (loop0): invalid crc value [ 214.841876][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.916028][ T6078] F2FS-fs (loop0): Found nat_bits in checkpoint [ 215.304268][ T6112] netlink: 'syz.4.398': attribute type 3 has an invalid length. [ 215.329594][ T6112] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.398' resets device [ 216.013986][ T6078] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 216.021056][ T6078] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 216.172958][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 216.180492][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 216.267398][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.899526][ T6078] overlayfs: failed to resolve './file0': -2 [ 217.104394][ T4313] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 217.139939][ T4313] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 217.217332][ T6134] overlayfs: failed to resolve './file1': -2 [ 217.238180][ T6132] netlink: 'syz.1.401': attribute type 3 has an invalid length. [ 217.488592][ T6143] overlayfs: failed to resolve './file0': -2 [ 217.609887][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 217.630287][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 217.705382][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 217.716524][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 217.755171][ T5867] device veth0_vlan entered promiscuous mode [ 217.782071][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 217.797648][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 217.854015][ T5867] device veth1_vlan entered promiscuous mode [ 218.005229][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.025516][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.071569][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.108564][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.157634][ T5867] device veth0_macvtap entered promiscuous mode [ 218.198248][ T5867] device veth1_macvtap entered promiscuous mode [ 218.265213][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.312202][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.362964][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.411001][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.421439][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.438306][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.508944][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.563089][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.584876][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.604917][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.619479][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.624314][ T4209] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 218.640637][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.683961][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.708354][ T6168] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.746942][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.772999][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.804239][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.826669][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.847429][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.872997][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.929306][ T4209] usb 1-1: Using ep0 maxpacket: 32 [ 218.943627][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.974344][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.011689][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.073240][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.083362][ T4209] usb 1-1: config 8 has an invalid interface number: 178 but max is 0 [ 219.096946][ T4694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 219.113651][ T4209] usb 1-1: config 8 has no interface number 0 [ 219.133006][ T4209] usb 1-1: config 8 interface 178 has no altsetting 0 [ 219.151163][ T5867] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.176689][ T5867] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.213335][ T5867] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.239863][ T5867] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.353461][ T4209] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=70.f6 [ 219.404558][ T4209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.412581][ T4209] usb 1-1: Product: syz [ 219.466048][ T4209] usb 1-1: Manufacturer: syz [ 219.501469][ T4209] usb 1-1: SerialNumber: syz [ 219.517558][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.546338][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.656488][ T4694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.669591][ T4694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.574467][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.609604][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.744132][ T4209] usb 1-1: USB disconnect, device number 4 [ 220.929351][ T6196] netlink: 36 bytes leftover after parsing attributes in process `syz.6.346'. [ 221.048414][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.346'. [ 221.083116][ T4264] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 221.098667][ T6198] device batadv1 entered promiscuous mode [ 221.133663][ T6200] netlink: 'syz.6.346': attribute type 1 has an invalid length. [ 221.147692][ T6200] netlink: 240 bytes leftover after parsing attributes in process `syz.6.346'. [ 221.443170][ T4264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.496237][ T4264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.611266][ T4264] usb 5-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00 [ 221.692384][ T4264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.829095][ T4264] usb 5-1: config 0 descriptor?? [ 222.203745][ T4264] usb 5-1: language id specifier not provided by device, defaulting to English [ 222.583700][ T4264] usbhid 5-1:0.0: can't add hid device: -71 [ 222.590338][ T4264] usbhid: probe of 5-1:0.0 failed with error -71 [ 222.733253][ T4264] usb 5-1: USB disconnect, device number 5 [ 223.020781][ T6226] loop6: detected capacity change from 0 to 256 [ 223.433747][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 224.593245][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.614223][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 224.664948][ T13] usb 5-1: config 1 has no interface number 0 [ 224.671118][ T13] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.735190][ T13] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 224.776529][ T13] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.013919][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.033352][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.067216][ T13] usb 5-1: Product: syz [ 225.081917][ T13] usb 5-1: Manufacturer: syz [ 225.099299][ T13] usb 5-1: SerialNumber: syz [ 225.178169][ T13] cdc_ncm 5-1:1.1: skipping garbage [ 226.053674][ T13] cdc_ncm 5-1:1.1: bind() failure [ 226.773678][ T6249] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 226.783893][ T6249] overlayfs: overlapping lowerdir path [ 226.905790][ T13] usb 5-1: USB disconnect, device number 6 [ 227.153041][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.419'. [ 227.352120][ T6254] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 230.621188][ T6297] netlink: 'syz.4.426': attribute type 3 has an invalid length. [ 230.842073][ T6297] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.426' resets device [ 232.013099][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.428'. [ 232.722250][ T6308] netlink: 19 bytes leftover after parsing attributes in process `syz.6.428'. [ 233.407618][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'. [ 233.475989][ T6316] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 235.517318][ T6335] loop0: detected capacity change from 0 to 8192 [ 235.589238][ T6350] loop6: detected capacity change from 0 to 512 [ 235.727705][ T6335] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.742713][ T6350] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 235.761405][ T6350] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.663025][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 239.113722][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.446'. [ 239.187403][ T6378] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 239.319061][ T6347] chnl_net:caif_netlink_parms(): no params data found [ 239.856786][ T4210] Bluetooth: hci5: command 0x041b tx timeout [ 240.187221][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.223265][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.231499][ T6347] device bridge_slave_0 entered promiscuous mode [ 240.252862][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.291782][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.374458][ T6347] device bridge_slave_1 entered promiscuous mode [ 240.667979][ T6403] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 240.677985][ T6403] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 240.736049][ T6347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.801652][ T6347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.011620][ T6347] team0: Port device team_slave_0 added [ 241.098394][ T6347] team0: Port device team_slave_1 added [ 241.505539][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.512518][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.633170][ T6347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.642510][ T6413] loop0: detected capacity change from 0 to 4096 [ 241.688525][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.705956][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.848006][ T6413] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.939988][ T6347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.952509][ T6413] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 241.987922][ T6423] loop6: detected capacity change from 0 to 4096 [ 242.063811][ T1325] Bluetooth: hci5: command 0x040f tx timeout [ 242.137609][ T6413] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: writeback. [ 242.162117][ T6347] device hsr_slave_0 entered promiscuous mode [ 242.199426][ T6423] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 242.213875][ T6347] device hsr_slave_1 entered promiscuous mode [ 242.323508][ T6347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.331104][ T6347] Cannot create hsr debugfs directory [ 242.338126][ T4166] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /84/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 242.388168][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 242.416982][ T4166] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 242.419211][ T6436] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 242.499666][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 242.525484][ T5867] EXT4-fs error (device loop6): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 242.564725][ T4166] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /84/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 242.644532][ T5867] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 242.673041][ T4166] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 242.724414][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 242.757658][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 242.763304][ T5867] EXT4-fs error (device loop6): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 242.829835][ T5867] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 242.868678][ T4166] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /84/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.025007][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.062811][ T4166] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.088123][ T5867] EXT4-fs error (device loop6): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.118396][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.137507][ T4166] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /84/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.170008][ T5867] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.170822][ T4166] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.223244][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.286475][ T5867] EXT4-fs error (device loop6): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.314986][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.329262][ T5867] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.357589][ T4166] EXT4-fs error (device loop0): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /84/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.365495][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.397659][ T5867] EXT4-fs error (device loop6): ext4_readdir:260: inode #12: block 80: comm syz-executor: path /15/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.463251][ T5867] EXT4-fs error (device loop6): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.502727][ T4166] EXT4-fs error (device loop0): ext4_empty_dir:3154: inode #12: block 80: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 243.616569][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.624662][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.641093][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.654633][ T6347] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 243.679819][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.704253][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.726865][ T6347] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 243.744335][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.757558][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.788516][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.801143][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.806099][ T6347] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.839883][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.861176][ T4166] EXT4-fs warning (device loop0): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 243.877061][ T6347] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.887616][ T5867] EXT4-fs warning (device loop6): ext4_empty_dir:3156: inode #12: comm syz-executor: directory missing '..' [ 244.143079][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 244.335410][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.573654][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.582016][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.604469][ T4673] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.626173][ T6347] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.656164][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.674040][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.682657][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.689812][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.760316][ T4673] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.889453][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.910186][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.947486][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.978295][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.985442][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.044011][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.112770][ T6347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.169106][ T6347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.265536][ T4673] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.341375][ T6485] overlayfs: invalid redirect ((null)) [ 245.358511][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 245.377804][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 245.470045][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.534557][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 245.590624][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.637152][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 245.678436][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.700140][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.738885][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.750325][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.758610][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 246.481481][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 246.674357][ T4673] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.763363][ T1325] Bluetooth: hci5: command 0x0405 tx timeout [ 246.772453][ T6495] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 247.099020][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.123245][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.136617][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.459136][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 247.483194][ T4210] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 247.733013][ T4210] usb 5-1: Using ep0 maxpacket: 16 [ 247.741394][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.767576][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.785488][ T6492] device bridge_slave_0 entered promiscuous mode [ 247.863380][ T4210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.885335][ T4210] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.903314][ T4210] usb 5-1: config 0 interface 0 has no altsetting 0 [ 247.920241][ T4210] usb 5-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 247.933904][ T4210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.948563][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.956278][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.971494][ T4210] usb 5-1: config 0 descriptor?? [ 247.982256][ T6492] device bridge_slave_1 entered promiscuous mode [ 248.086952][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.115234][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.185373][ T6511] chnl_net:caif_netlink_parms(): no params data found [ 248.213657][ T6347] device veth0_vlan entered promiscuous mode [ 248.225722][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.247347][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.260912][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.274937][ T6347] device veth1_vlan entered promiscuous mode [ 248.296972][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.314719][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.327549][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.458829][ T6492] team0: Port device team_slave_0 added [ 248.476128][ T4210] hid-generic 0003:060B:430A.0006: unexpected long global item [ 248.484408][ T4210] hid-generic: probe of 0003:060B:430A.0006 failed with error -22 [ 248.556094][ T6492] team0: Port device team_slave_1 added [ 248.658728][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.668831][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.681427][ T6347] device veth0_macvtap entered promiscuous mode [ 248.703812][ T5028] Bluetooth: hci0: command 0x0409 tx timeout [ 248.725205][ T2239] usb 5-1: USB disconnect, device number 7 [ 248.786057][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.814546][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.856881][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.958914][ T6347] device veth1_macvtap entered promiscuous mode [ 248.990361][ T4673] device hsr_slave_0 left promiscuous mode [ 249.036192][ T4673] device hsr_slave_1 left promiscuous mode [ 249.048689][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.062489][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.083783][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.091232][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.100198][ T4673] device bridge_slave_1 left promiscuous mode [ 249.107588][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.131558][ T4673] device bridge_slave_0 left promiscuous mode [ 249.140887][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.170334][ T4673] device veth1_macvtap left promiscuous mode [ 249.183461][ T4673] device veth0_macvtap left promiscuous mode [ 249.189564][ T4673] device veth1_vlan left promiscuous mode [ 249.206849][ T4673] device veth0_vlan left promiscuous mode [ 250.008734][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 250.451820][ T4673] team0 (unregistering): Port device team_slave_1 removed [ 250.479354][ T4673] team0 (unregistering): Port device team_slave_0 removed [ 250.500191][ T4673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.525743][ T4673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.649905][ T4673] bond0 (unregistering): Released all slaves [ 250.733179][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.740173][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.770028][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.791462][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.798936][ T5028] Bluetooth: hci0: command 0x041b tx timeout [ 250.813262][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.821408][ T6511] device bridge_slave_0 entered promiscuous mode [ 250.837049][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 250.857059][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 250.907409][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.929443][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.953278][ T6511] device bridge_slave_1 entered promiscuous mode [ 251.080848][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.226302][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.236294][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.247032][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.257062][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.309390][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.349020][ T6592] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 251.673179][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.693035][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.715021][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.748150][ T6492] device hsr_slave_0 entered promiscuous mode [ 251.768982][ T6492] device hsr_slave_1 entered promiscuous mode [ 251.782708][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.800398][ T6492] Cannot create hsr debugfs directory [ 251.810248][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.879839][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.933319][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 251.992381][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.012580][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.041268][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.073274][ T5028] Bluetooth: hci1: command 0x041b tx timeout [ 252.082794][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.110992][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.137516][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.171792][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.192287][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.202664][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.268155][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.288619][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.401180][ T6596] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 252.440044][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 252.458105][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 252.480625][ T6347] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.160056][ T4209] Bluetooth: hci0: command 0x040f tx timeout [ 253.168027][ T6347] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.207752][ T6347] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.226825][ T6347] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.276923][ T6511] team0: Port device team_slave_0 added [ 253.321031][ T6511] team0: Port device team_slave_1 added [ 253.454686][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.461655][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.513744][ T6511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.861272][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.037189][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.078022][ T6511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.919549][ T5028] Bluetooth: hci1: command 0x040f tx timeout [ 255.056451][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 255.193778][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 255.295156][ T6636] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 255.485118][ T6511] device hsr_slave_0 entered promiscuous mode [ 255.507205][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.514658][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.595500][ T6511] device hsr_slave_1 entered promiscuous mode [ 255.626464][ T6511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.667929][ T6511] Cannot create hsr debugfs directory [ 255.945644][ T4677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.961892][ T4677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.028353][ T6492] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.164258][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 256.182175][ T6492] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.197789][ T6492] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 256.214442][ T6492] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.347702][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.360627][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.278251][ T4252] Bluetooth: hci1: command 0x0419 tx timeout [ 257.491995][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 258.855873][ T6511] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 259.115398][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.495'. [ 259.139389][ T6687] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 259.193376][ T6511] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 259.229685][ T6492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.286255][ T6511] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 259.327681][ T6511] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 259.397421][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.407569][ T6693] loop7: detected capacity change from 0 to 256 [ 259.429109][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.464085][ T6492] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.527867][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.582327][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.702581][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.710101][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.974300][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 260.038005][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 260.110326][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.153617][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.160729][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.245486][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.683116][ T1108] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 260.824069][ T6511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.923783][ T6511] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.946479][ T1108] usb 8-1: Using ep0 maxpacket: 32 [ 261.074049][ T1108] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 261.084528][ T1108] usb 8-1: config 0 has no interface number 0 [ 261.140622][ T6511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.210900][ T6511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.243220][ T1108] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 261.261060][ T1108] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.894109][ T1108] usb 8-1: Product: syz [ 261.898482][ T1108] usb 8-1: Manufacturer: syz [ 262.014164][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.043345][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.080221][ T1108] usb 8-1: SerialNumber: syz [ 262.089029][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.173951][ T1108] usb 8-1: config 0 descriptor?? [ 262.216005][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.254183][ T1108] smsc95xx v2.0.0 [ 262.283294][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.341902][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.383974][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.404387][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.443432][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.485753][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.492924][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.581969][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.633319][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.696361][ T1108] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 262.727563][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.734757][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.830362][ T1108] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.979612][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 263.074059][ T1108] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 263.137978][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 263.148942][ T1108] smsc95xx: probe of 8-1:0.67 failed with error -61 [ 263.172343][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 263.235597][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 263.272478][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 263.307825][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 263.342854][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.370510][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.399489][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.430880][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.480373][ T6492] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.536211][ T6492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.888215][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.925021][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.943496][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 263.963768][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.019008][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 264.038514][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 264.051784][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 264.067581][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 264.082923][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 264.116725][ T6739] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 264.179443][ T6511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.188835][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.197107][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.226380][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 265.180562][ T1325] usb 8-1: USB disconnect, device number 2 [ 265.241983][ T6492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.307463][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 265.324780][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.036756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.070870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.235281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.263718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.309175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.340944][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.372065][ T6492] device veth0_vlan entered promiscuous mode [ 266.414093][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.428680][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.457966][ T6492] device veth1_vlan entered promiscuous mode [ 266.550203][ T4673] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.603242][ T7] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 266.639172][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.657768][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.680337][ T6511] device veth0_vlan entered promiscuous mode [ 266.749339][ T4673] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.821554][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.851712][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.879308][ T6511] device veth1_vlan entered promiscuous mode [ 266.949142][ T4673] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.021607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.031053][ T7] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.050571][ T7] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.060761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.074461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.082495][ T7] usb 8-1: config 1 has no interface number 0 [ 267.133854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.152318][ T7] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.167232][ T6492] device veth0_macvtap entered promiscuous mode [ 267.180019][ T7] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 267.229801][ T4673] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.403753][ T7] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.424003][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.453013][ T7] usb 8-1: Product: syz [ 267.465206][ T7] usb 8-1: Manufacturer: syz [ 267.486882][ T7] usb 8-1: SerialNumber: syz [ 267.592959][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.595576][ T7] cdc_ncm 8-1:1.1: skipping garbage [ 267.601578][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.657461][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.684175][ T6492] device veth1_macvtap entered promiscuous mode [ 267.724470][ T6511] device veth0_macvtap entered promiscuous mode [ 267.743960][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.839519][ T6511] device veth1_macvtap entered promiscuous mode [ 267.880989][ T6796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.515'. [ 267.904660][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.919920][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.930654][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.941722][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.953371][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.964373][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.974613][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.986104][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.021262][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.054457][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.072269][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.092162][ T6796] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 268.104204][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.143764][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.175567][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.188416][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.210147][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.226580][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.236814][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.279339][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.309900][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.369406][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.400000][ T6492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.429549][ T6492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.460193][ T6492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.473408][ T7] cdc_ncm 8-1:1.1: bind() failure [ 268.527430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.539699][ T7] usb 8-1: USB disconnect, device number 3 [ 268.548739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.577144][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.609834][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.620514][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.633565][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.708034][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.724995][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.744850][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.764592][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.807848][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.839770][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.866739][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.901945][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.932654][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.004995][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.022431][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.085434][ T6492] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.121634][ T6492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.148958][ T6830] loop7: detected capacity change from 0 to 2048 [ 269.169973][ T6492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.179251][ T6492] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.217861][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.267559][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.278771][ T6830] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 269.318797][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.371860][ T6834] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.520: bg 0: block 234: padding at end of block bitmap is not set [ 269.403120][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.430389][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.454608][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.519007][ T26] audit: type=1800 audit(1740202891.009:5): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.520" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 269.564712][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.582664][ T4694] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 269.613181][ T4694] EXT4-fs (loop7): This should not happen!! Data will be lost [ 269.613181][ T4694] [ 269.625623][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.642952][ T4694] EXT4-fs (loop7): Total free blocks count 0 [ 269.650338][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.670861][ T4694] EXT4-fs (loop7): Free/Dirty block details [ 269.686037][ T4694] EXT4-fs (loop7): free_blocks=0 [ 269.692277][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.707072][ T4694] EXT4-fs (loop7): dirty_blocks=2912 [ 269.725794][ T4694] EXT4-fs (loop7): Block reservation details [ 269.731793][ T4694] EXT4-fs (loop7): i_reserved_data_blocks=166 [ 269.733043][ T6511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.749952][ T6511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.762474][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.802978][ T4694] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 248 with error 28 [ 270.469936][ T4694] EXT4-fs (loop7): This should not happen!! Data will be lost [ 270.469936][ T4694] [ 270.580582][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.644596][ T4668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.674377][ T4673] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.735194][ T6511] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.761512][ T6511] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.802174][ T6511] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.802216][ T6511] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.837404][ T4673] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.927740][ T6849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 270.942754][ T4252] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 270.996824][ T4673] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.053197][ T6849] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 271.165226][ T4673] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.205941][ T4252] usb 5-1: Using ep0 maxpacket: 16 [ 271.403740][ T4252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.418752][ T4252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.480157][ T4677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.488782][ T4677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.530414][ T4252] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 271.563736][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.580130][ T4252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.644674][ T4252] usb 5-1: config 0 descriptor?? [ 271.668604][ T4677] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.736468][ T4677] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.736856][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.786621][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.837790][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.878285][ T4694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.896859][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.913604][ T4694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.763678][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 272.801619][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 272.847472][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 272.855846][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 272.881000][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 272.903638][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 272.948228][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 272.993629][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 273.053494][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 273.077915][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 273.089706][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 273.097333][ T4252] hid-picolcd 0003:04D8:F002.0007: unknown main item tag 0x0 [ 273.180735][ T4252] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 273.273429][ T4252] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 273.344947][ T4252] usb 5-1: USB disconnect, device number 8 [ 273.421229][ T6881] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 276.950517][ T6898] ODEBUG: Out of memory. ODEBUG disabled [ 277.631553][ T6907] loop7: detected capacity change from 0 to 40427 [ 278.462521][ T6913] loop9: detected capacity change from 0 to 512 [ 278.787972][ T6907] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 278.795760][ T6907] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 278.822540][ T6913] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 278.832760][ T6907] F2FS-fs (loop7): invalid crc value [ 278.993976][ T6907] F2FS-fs (loop7): Found nat_bits in checkpoint [ 279.032567][ T6907] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 279.034495][ T6913] EXT4-fs (loop9): 1 orphan inode deleted [ 279.039685][ T6907] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 279.048158][ T6913] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 279.083600][ T6913] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.377622][ T4677] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 280.430176][ T4677] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 281.667406][ T6944] netlink: 16 bytes leftover after parsing attributes in process `syz.9.545'. [ 282.512767][ T6953] IPv6: NLM_F_REPLACE set, but no existing node found! [ 282.930180][ T6962] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 283.480792][ T6954] loop7: detected capacity change from 0 to 512 [ 283.889712][ T6954] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback. [ 284.043190][ T6954] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 284.593163][ T6985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 289.386206][ T4673] device hsr_slave_0 left promiscuous mode [ 289.699249][ T4673] device hsr_slave_1 left promiscuous mode [ 290.113761][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.129538][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.145520][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.153331][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.161216][ T4673] device bridge_slave_1 left promiscuous mode [ 290.177995][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.240611][ T4673] device bridge_slave_0 left promiscuous mode [ 290.253071][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.345404][ T4673] device hsr_slave_0 left promiscuous mode [ 290.376461][ T4673] device hsr_slave_1 left promiscuous mode [ 290.392085][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.400066][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.408457][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.416581][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.424713][ T4673] device bridge_slave_1 left promiscuous mode [ 290.430949][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.526211][ T4673] device bridge_slave_0 left promiscuous mode [ 290.600166][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.144407][ T4673] device veth1_macvtap left promiscuous mode [ 291.163069][ T4673] device veth0_macvtap left promiscuous mode [ 291.191936][ T4673] device veth1_vlan left promiscuous mode [ 291.202080][ T4673] device veth0_vlan left promiscuous mode [ 291.228456][ T4673] device veth1_macvtap left promiscuous mode [ 291.246602][ T4673] device veth0_macvtap left promiscuous mode [ 291.285732][ T4673] device veth1_vlan left promiscuous mode [ 291.303065][ T4673] device veth0_vlan left promiscuous mode [ 292.940161][ T4673] team0 (unregistering): Port device team_slave_1 removed [ 292.956174][ T4673] team0 (unregistering): Port device team_slave_0 removed [ 292.969775][ T4673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.985243][ T4673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.054449][ T4673] bond0 (unregistering): Released all slaves [ 293.207020][ T4673] team0 (unregistering): Port device team_slave_1 removed [ 293.220842][ T4673] team0 (unregistering): Port device team_slave_0 removed [ 293.235090][ T4673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.250111][ T4673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.329204][ T4673] bond0 (unregistering): Released all slaves [ 293.376765][ T7030] netlink: 14 bytes leftover after parsing attributes in process `syz.7.565'. [ 293.419533][ T7030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.439658][ T7030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.458481][ T7030] bond0 (unregistering): Released all slaves [ 293.477322][ T7036] netlink: 'syz.7.565': attribute type 10 has an invalid length. [ 293.485205][ T7036] netlink: 156 bytes leftover after parsing attributes in process `syz.7.565'. [ 293.556764][ T7039] device syzkaller0 entered promiscuous mode [ 293.565406][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.9.573'. [ 293.755745][ T7080] device pim6reg1 entered promiscuous mode [ 296.710958][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.9.586'. [ 296.731509][ T7112] netlink: 19 bytes leftover after parsing attributes in process `syz.9.586'. [ 298.171886][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 298.660736][ T7133] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 298.669219][ T7133] netlink: 240 bytes leftover after parsing attributes in process `syz.4.591'. [ 298.688132][ T7142] device batadv1 entered promiscuous mode [ 300.323114][ C1] ------------[ cut here ]------------ [ 300.323191][ C1] [ 300.323198][ C1] ====================================================== [ 300.323205][ C1] WARNING: possible circular locking dependency detected [ 300.323213][ C1] 5.15.178-syzkaller #0 Not tainted [ 300.323225][ C1] ------------------------------------------------------ [ 300.323232][ C1] kworker/u4:3/305 is trying to acquire lock: [ 300.323243][ C1] ffffffff8c9fc538 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 300.323318][ C1] [ 300.323318][ C1] but task is already holding lock: [ 300.323324][ C1] ffff8880b8f28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 300.323370][ C1] [ 300.323370][ C1] which lock already depends on the new lock. [ 300.323370][ C1] [ 300.323376][ C1] [ 300.323376][ C1] the existing dependency chain (in reverse order) is: [ 300.323382][ C1] [ 300.323382][ C1] -> #3 (&base->lock){-.-.}-{2:2}: [ 300.323406][ C1] lock_acquire+0x1db/0x4f0 [ 300.323425][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 300.323448][ C1] lock_timer_base+0x120/0x260 [ 300.323469][ C1] __mod_timer+0x1d6/0xeb0 [ 300.323488][ C1] queue_delayed_work_on+0x156/0x250 [ 300.323508][ C1] enqueue_task+0x2fe/0x3a0 [ 300.323528][ C1] wake_up_new_task+0x515/0xb60 [ 300.323549][ C1] kernel_clone+0x44e/0x960 [ 300.323567][ C1] kernel_thread+0x168/0x1e0 [ 300.323584][ C1] rest_init+0x21/0x330 [ 300.323603][ C1] start_kernel+0x48c/0x540 [ 300.323624][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 300.323646][ C1] [ 300.323646][ C1] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 300.323670][ C1] lock_acquire+0x1db/0x4f0 [ 300.323687][ C1] _raw_spin_lock_nested+0x2d/0x40 [ 300.323707][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 300.323727][ C1] task_fork_fair+0x5d/0x350 [ 300.323744][ C1] sched_cgroup_fork+0x2d3/0x330 [ 300.323765][ C1] copy_process+0x224a/0x3ef0 [ 300.323782][ C1] kernel_clone+0x210/0x960 [ 300.323799][ C1] kernel_thread+0x168/0x1e0 [ 300.323816][ C1] rest_init+0x21/0x330 [ 300.323834][ C1] start_kernel+0x48c/0x540 [ 300.323853][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 300.323874][ C1] [ 300.323874][ C1] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 300.323899][ C1] lock_acquire+0x1db/0x4f0 [ 300.323915][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 300.323951][ C1] try_to_wake_up+0xae/0x1300 [ 300.323972][ C1] up+0x6e/0x90 [ 300.323989][ C1] __up_console_sem+0x11a/0x1e0 [ 300.324008][ C1] console_unlock+0x1145/0x12b0 [ 300.324032][ C1] vprintk_emit+0xbf/0x150 [ 300.324049][ C1] _printk+0xd1/0x120 [ 300.324068][ C1] __ext4_error_file+0x504/0x530 [ 300.324090][ C1] __ext4_check_dir_entry+0x687/0x870 [ 300.324108][ C1] ext4_readdir+0x14d0/0x3970 [ 300.324125][ C1] iterate_dir+0x224/0x570 [ 300.324144][ C1] __se_sys_getdents64+0x209/0x4f0 [ 300.324164][ C1] do_syscall_64+0x3b/0xb0 [ 300.324181][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 300.324204][ C1] [ 300.324204][ C1] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 300.324229][ C1] validate_chain+0x1649/0x5930 [ 300.324248][ C1] __lock_acquire+0x1295/0x1ff0 [ 300.324264][ C1] lock_acquire+0x1db/0x4f0 [ 300.324281][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 300.324301][ C1] down_trylock+0x1c/0xa0 [ 300.324320][ C1] __down_trylock_console_sem+0x105/0x250 [ 300.324340][ C1] console_trylock_spinning+0x8a/0x3f0 [ 300.324358][ C1] vprintk_emit+0xa6/0x150 [ 300.324380][ C1] _printk+0xd1/0x120 [ 300.324398][ C1] report_bug+0x1e5/0x2e0 [ 300.324418][ C1] handle_bug+0x3d/0x70 [ 300.324435][ C1] exc_invalid_op+0x16/0x40 [ 300.324452][ C1] asm_exc_invalid_op+0x16/0x20 [ 300.324473][ C1] copy_from_user_nofault+0x15c/0x1c0 [ 300.324492][ C1] bpf_probe_read_user+0x26/0x70 [ 300.324510][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0xb3c [ 300.324526][ C1] bpf_trace_run3+0x1d1/0x380 [ 300.324544][ C1] enqueue_timer+0x3ae/0x540 [ 300.324559][ C1] __mod_timer+0xa60/0xeb0 [ 300.324577][ C1] queue_delayed_work_on+0x156/0x250 [ 300.324595][ C1] srcu_gp_start_if_needed+0x5dc/0x8f0 [ 300.324613][ C1] rcu_core+0xa15/0x1650 [ 300.324630][ C1] handle_softirqs+0x3a7/0x930 [ 300.324647][ C1] __irq_exit_rcu+0x157/0x240 [ 300.324663][ C1] irq_exit_rcu+0x5/0x20 [ 300.324678][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 300.324697][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 300.324715][ C1] lock_acquire+0x252/0x4f0 [ 300.324731][ C1] rcu_lock_acquire+0x2a/0x30 [ 300.324749][ C1] batadv_nc_worker+0xc1/0x5b0 [ 300.324766][ C1] process_one_work+0x8a1/0x10c0 [ 300.324785][ C1] worker_thread+0xaca/0x1280 [ 300.324804][ C1] kthread+0x3f6/0x4f0 [ 300.324820][ C1] ret_from_fork+0x1f/0x30 [ 300.324839][ C1] [ 300.324839][ C1] other info that might help us debug this: [ 300.324839][ C1] [ 300.324844][ C1] Chain exists of: [ 300.324844][ C1] (console_sem).lock --> &rq->__lock --> &base->lock [ 300.324844][ C1] [ 300.324874][ C1] Possible unsafe locking scenario: [ 300.324874][ C1] [ 300.324879][ C1] CPU0 CPU1 [ 300.324884][ C1] ---- ---- [ 300.324889][ C1] lock(&base->lock); [ 300.324900][ C1] lock(&rq->__lock); [ 300.324913][ C1] lock(&base->lock); [ 300.324926][ C1] lock((console_sem).lock); [ 300.324937][ C1] [ 300.324937][ C1] *** DEADLOCK *** [ 300.324937][ C1] [ 300.324941][ C1] 8 locks held by kworker/u4:3/305: [ 300.324953][ C1] #0: ffff88814c3a3138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 300.325002][ C1] #1: ffffc90002e6fd20 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 300.325059][ C1] #2: ffffffff8cb1fce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 300.325105][ C1] #3: ffffffff8cb1fda0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire+0x0/0x20 [ 300.325150][ C1] #4: ffffffff8cb5f918 (tracepoint_srcu){....}-{0:0}, at: rcu_lock_acquire+0x0/0x20 [ 300.325195][ C1] #5: ffffffff8cb5f690 (tracepoint_srcu.lock){..-.}-{2:2}, at: srcu_gp_start_if_needed+0x460/0x8f0 [ 300.325241][ C1] #6: ffff8880b8f28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 300.325288][ C1] #7: ffffffff8cb1fce0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 300.325331][ C1] [ 300.325331][ C1] stack backtrace: [ 300.325336][ C1] CPU: 1 PID: 305 Comm: kworker/u4:3 Not tainted 5.15.178-syzkaller #0 [ 300.325357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 300.325369][ C1] Workqueue: bat_events batadv_nc_worker [ 300.325394][ C1] Call Trace: [ 300.325400][ C1] [ 300.325406][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 300.325428][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 300.325453][ C1] ? print_circular_bug+0x12b/0x1a0 [ 300.325474][ C1] check_noncircular+0x2f8/0x3b0 [ 300.325498][ C1] ? add_chain_block+0x850/0x850 [ 300.325518][ C1] ? lockdep_lock+0x11f/0x2a0 [ 300.325541][ C1] ? _find_first_zero_bit+0xcf/0xf0 [ 300.325566][ C1] validate_chain+0x1649/0x5930 [ 300.325588][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 300.325618][ C1] ? reacquire_held_locks+0x660/0x660 [ 300.325644][ C1] ? lockdep_lock+0x11f/0x2a0 [ 300.325664][ C1] ? lockdep_unlock+0x166/0x300 [ 300.325682][ C1] ? lockdep_lock+0x2a0/0x2a0 [ 300.325705][ C1] ? mark_lock+0x98/0x340 [ 300.325726][ C1] __lock_acquire+0x1295/0x1ff0 [ 300.325753][ C1] lock_acquire+0x1db/0x4f0 [ 300.325771][ C1] ? down_trylock+0x1c/0xa0 [ 300.325794][ C1] ? vsnprintf+0x1c70/0x1c70 [ 300.325822][ C1] ? read_lock_is_recursive+0x10/0x10 [ 300.325842][ C1] ? memcpy+0x3c/0x60 [ 300.325862][ C1] ? vsnprintf+0x1b93/0x1c70 [ 300.325885][ C1] ? _prb_commit+0x30a/0x3e0 [ 300.325907][ C1] ? prb_reserve+0x1240/0x1240 [ 300.325929][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 300.325952][ C1] ? down_trylock+0x1c/0xa0 [ 300.325974][ C1] ? _raw_spin_lock+0x40/0x40 [ 300.325997][ C1] ? vprintk_store+0xf1b/0x1300 [ 300.326026][ C1] down_trylock+0x1c/0xa0 [ 300.326049][ C1] __down_trylock_console_sem+0x105/0x250 [ 300.326071][ C1] ? printk_parse_prefix+0x2c0/0x2c0 [ 300.326091][ C1] ? vprintk_emit+0xa6/0x150 [ 300.326110][ C1] ? console_trylock+0x70/0x70 [ 300.326135][ C1] ? vprintk_emit+0xa6/0x150 [ 300.326154][ C1] console_trylock_spinning+0x8a/0x3f0 [ 300.326175][ C1] ? vprintk_emit+0x150/0x150 [ 300.326193][ C1] ? __pv_queued_spin_lock_slowpath+0x8f9/0xc40 [ 300.326216][ C1] ? reacquire_held_locks+0x660/0x660 [ 300.326239][ C1] ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0 [ 300.326263][ C1] vprintk_emit+0xa6/0x150 [ 300.326286][ C1] _printk+0xd1/0x120 [ 300.326308][ C1] ? report_bug+0x16e/0x2e0 [ 300.326331][ C1] ? panic+0x860/0x860 [ 300.326353][ C1] ? find_bug+0x9c/0x350 [ 300.326373][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 300.326394][ C1] report_bug+0x1e5/0x2e0 [ 300.326417][ C1] handle_bug+0x3d/0x70 [ 300.326436][ C1] exc_invalid_op+0x16/0x40 [ 300.326456][ C1] asm_exc_invalid_op+0x16/0x20 [ 300.326478][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 300.326500][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 300.326518][ C1] RSP: 0018:ffffc90000dd0760 EFLAGS: 00010046 [ 300.326534][ C1] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff88801f05bb80 [ 300.326550][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 300.326563][ C1] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: fffffbfff2131821 [ 300.326579][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 300.326592][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd07c8 [ 300.326609][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 300.326628][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 300.326654][ C1] bpf_probe_read_user+0x26/0x70 [ 300.326674][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0xb3c [ 300.326692][ C1] bpf_trace_run3+0x1d1/0x380 [ 300.326714][ C1] ? bpf_trace_run2+0x340/0x340 [ 300.326735][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 300.326757][ C1] ? _raw_spin_lock+0x40/0x40 [ 300.326783][ C1] enqueue_timer+0x3ae/0x540 [ 300.326804][ C1] __mod_timer+0xa60/0xeb0 [ 300.326831][ C1] ? mod_timer_pending+0x20/0x20 [ 300.326857][ C1] ? srcu_gp_start+0x149/0x200 [ 300.326875][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 300.326895][ C1] ? __queue_delayed_work+0x16b/0x210 [ 300.326916][ C1] queue_delayed_work_on+0x156/0x250 [ 300.326938][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 300.326961][ C1] ? _raw_spin_unlock+0x24/0x40 [ 300.326982][ C1] ? srcu_gp_start+0x149/0x200 [ 300.327002][ C1] srcu_gp_start_if_needed+0x5dc/0x8f0 [ 300.327037][ C1] ? syscall_unregfunc+0x190/0x190 [ 300.327057][ C1] rcu_core+0xa15/0x1650 [ 300.327084][ C1] ? local_bh_disable+0x20/0x20 [ 300.327108][ C1] ? rebalance_domains+0x918/0xa80 [ 300.327137][ C1] ? distribute_cfs_runtime+0x540/0x540 [ 300.327163][ C1] handle_softirqs+0x3a7/0x930 [ 300.327185][ C1] ? __irq_exit_rcu+0x157/0x240 [ 300.327207][ C1] ? do_softirq+0x240/0x240 [ 300.327228][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 300.327254][ C1] __irq_exit_rcu+0x157/0x240 [ 300.327272][ C1] ? irq_exit_rcu+0x20/0x20 [ 300.327297][ C1] irq_exit_rcu+0x5/0x20 [ 300.327314][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 300.327337][ C1] [ 300.327343][ C1] [ 300.327349][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 300.327369][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 300.327389][ C1] Code: 2b 00 74 08 4c 89 f7 e8 9c 9e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 300.327406][ C1] RSP: 0018:ffffc90002e6fa80 EFLAGS: 00000206 [ 300.327422][ C1] RAX: 0000000000000001 RBX: 1ffff920005cdf5c RCX: 1ffff920005cdefc [ 300.327437][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0 [ 300.327453][ C1] RBP: ffffc90002e6fbd8 R08: dffffc0000000000 R09: fffffbfff2131821 [ 300.327466][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005cdf58 [ 300.327480][ C1] R13: dffffc0000000000 R14: ffffc90002e6fae0 R15: 0000000000000246 [ 300.327505][ C1] ? read_lock_is_recursive+0x10/0x10 [ 300.327527][ C1] ? rcu_lock_release+0x5/0x20 [ 300.327548][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 300.327569][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 300.327592][ C1] rcu_lock_acquire+0x2a/0x30 [ 300.327610][ C1] ? rcu_lock_acquire+0x5/0x30 [ 300.327628][ C1] batadv_nc_worker+0xc1/0x5b0 [ 300.327653][ C1] process_one_work+0x8a1/0x10c0 [ 300.327681][ C1] ? worker_detach_from_pool+0x260/0x260 [ 300.327704][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 300.327725][ C1] ? kthread_data+0x4e/0xc0 [ 300.327745][ C1] ? wq_worker_running+0x97/0x170 [ 300.327765][ C1] worker_thread+0xaca/0x1280 [ 300.327799][ C1] kthread+0x3f6/0x4f0 [ 300.327817][ C1] ? rcu_lock_release+0x20/0x20 [ 300.327837][ C1] ? kthread_blkcg+0xd0/0xd0 [ 300.327857][ C1] ret_from_fork+0x1f/0x30 [ 300.327886][ C1] [ 301.646019][ C1] WARNING: CPU: 1 PID: 305 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 301.655224][ C1] Modules linked in: [ 301.659106][ C1] CPU: 1 PID: 305 Comm: kworker/u4:3 Not tainted 5.15.178-syzkaller #0 [ 301.667342][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 301.677387][ C1] Workqueue: bat_events batadv_nc_worker [ 301.683014][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 301.689164][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 301.709055][ C1] RSP: 0018:ffffc90000dd0760 EFLAGS: 00010046 [ 301.715175][ C1] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff88801f05bb80 [ 301.723164][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.731150][ C1] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: fffffbfff2131821 [ 301.739131][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 301.747099][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd07c8 [ 301.755068][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 301.763988][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.770573][ C1] CR2: 0000000000000000 CR3: 0000000025e82000 CR4: 00000000003506e0 [ 301.778557][ C1] Call Trace: [ 301.781841][ C1] [ 301.784681][ C1] ? __warn+0x15b/0x300 [ 301.788838][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 301.794378][ C1] ? report_bug+0x1b7/0x2e0 [ 301.798876][ C1] ? handle_bug+0x3d/0x70 [ 301.803196][ C1] ? exc_invalid_op+0x16/0x40 [ 301.807864][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 301.812883][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 301.818329][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 301.823868][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 301.829406][ C1] bpf_probe_read_user+0x26/0x70 [ 301.834333][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0xb3c [ 301.839868][ C1] bpf_trace_run3+0x1d1/0x380 [ 301.844539][ C1] ? bpf_trace_run2+0x340/0x340 [ 301.849379][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 301.854827][ C1] ? _raw_spin_lock+0x40/0x40 [ 301.859500][ C1] enqueue_timer+0x3ae/0x540 [ 301.864084][ C1] __mod_timer+0xa60/0xeb0 [ 301.868498][ C1] ? mod_timer_pending+0x20/0x20 [ 301.873432][ C1] ? srcu_gp_start+0x149/0x200 [ 301.878198][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 301.883218][ C1] ? __queue_delayed_work+0x16b/0x210 [ 301.888611][ C1] queue_delayed_work_on+0x156/0x250 [ 301.893908][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 301.899194][ C1] ? _raw_spin_unlock+0x24/0x40 [ 301.904044][ C1] ? srcu_gp_start+0x149/0x200 [ 301.908809][ C1] srcu_gp_start_if_needed+0x5dc/0x8f0 [ 301.914265][ C1] ? syscall_unregfunc+0x190/0x190 [ 301.919367][ C1] rcu_core+0xa15/0x1650 [ 301.923608][ C1] ? local_bh_disable+0x20/0x20 [ 301.928452][ C1] ? rebalance_domains+0x918/0xa80 [ 301.933560][ C1] ? distribute_cfs_runtime+0x540/0x540 [ 301.939099][ C1] handle_softirqs+0x3a7/0x930 [ 301.943866][ C1] ? __irq_exit_rcu+0x157/0x240 [ 301.948708][ C1] ? do_softirq+0x240/0x240 [ 301.953197][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 301.958390][ C1] __irq_exit_rcu+0x157/0x240 [ 301.963058][ C1] ? irq_exit_rcu+0x20/0x20 [ 301.967557][ C1] irq_exit_rcu+0x5/0x20 [ 301.971790][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 301.977418][ C1] [ 301.980337][ C1] [ 301.983255][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 301.989229][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 301.994508][ C1] Code: 2b 00 74 08 4c 89 f7 e8 9c 9e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 302.014244][ C1] RSP: 0018:ffffc90002e6fa80 EFLAGS: 00000206 [ 302.020337][ C1] RAX: 0000000000000001 RBX: 1ffff920005cdf5c RCX: 1ffff920005cdefc [ 302.028312][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0 [ 302.036300][ C1] RBP: ffffc90002e6fbd8 R08: dffffc0000000000 R09: fffffbfff2131821 [ 302.044277][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005cdf58 [ 302.052252][ C1] R13: dffffc0000000000 R14: ffffc90002e6fae0 R15: 0000000000000246 [ 302.060246][ C1] ? read_lock_is_recursive+0x10/0x10 [ 302.065623][ C1] ? rcu_lock_release+0x5/0x20 [ 302.070396][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 302.075434][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 302.081414][ C1] rcu_lock_acquire+0x2a/0x30 [ 302.086089][ C1] ? rcu_lock_acquire+0x5/0x30 [ 302.090849][ C1] batadv_nc_worker+0xc1/0x5b0 [ 302.095621][ C1] process_one_work+0x8a1/0x10c0 [ 302.100563][ C1] ? worker_detach_from_pool+0x260/0x260 [ 302.106191][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 302.111745][ C1] ? kthread_data+0x4e/0xc0 [ 302.116271][ C1] ? wq_worker_running+0x97/0x170 [ 302.121299][ C1] worker_thread+0xaca/0x1280 [ 302.125994][ C1] kthread+0x3f6/0x4f0 [ 302.130066][ C1] ? rcu_lock_release+0x20/0x20 [ 302.134935][ C1] ? kthread_blkcg+0xd0/0xd0 [ 302.139524][ C1] ret_from_fork+0x1f/0x30 [ 302.143951][ C1] [ 302.146983][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 302.154251][ C1] CPU: 1 PID: 305 Comm: kworker/u4:3 Not tainted 5.15.178-syzkaller #0 [ 302.162484][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 302.172529][ C1] Workqueue: bat_events batadv_nc_worker [ 302.178251][ C1] Call Trace: [ 302.181521][ C1] [ 302.184358][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 302.189035][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 302.194657][ C1] ? panic+0x860/0x860 [ 302.198724][ C1] ? panic+0x860/0x860 [ 302.202787][ C1] ? copy_from_user_nofault+0x60/0x1c0 [ 302.208240][ C1] ? copy_from_user_nofault+0x60/0x1c0 [ 302.213690][ C1] panic+0x318/0x860 [ 302.217582][ C1] ? __warn+0x16a/0x300 [ 302.221732][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 302.226935][ C1] ? ret_from_fork+0x1f/0x30 [ 302.231534][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 302.237068][ C1] __warn+0x2b2/0x300 [ 302.241046][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 302.246582][ C1] report_bug+0x1b7/0x2e0 [ 302.250929][ C1] handle_bug+0x3d/0x70 [ 302.255080][ C1] exc_invalid_op+0x16/0x40 [ 302.259575][ C1] asm_exc_invalid_op+0x16/0x20 [ 302.264419][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 302.270565][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 ab ba d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 94 ba d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 302.290250][ C1] RSP: 0018:ffffc90000dd0760 EFLAGS: 00010046 [ 302.296311][ C1] RAX: ffffffff81aacafc RBX: 0000000000000000 RCX: ffff88801f05bb80 [ 302.304275][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.312235][ C1] RBP: dffffc0000000000 R08: ffffffff81aaca0d R09: fffffbfff2131821 [ 302.320199][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 302.328163][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd07c8 [ 302.336130][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 302.341583][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 302.347125][ C1] bpf_probe_read_user+0x26/0x70 [ 302.352069][ C1] bpf_prog_02073d59a3c0f06f+0x3d/0xb3c [ 302.357869][ C1] bpf_trace_run3+0x1d1/0x380 [ 302.362543][ C1] ? bpf_trace_run2+0x340/0x340 [ 302.367384][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 302.372838][ C1] ? _raw_spin_lock+0x40/0x40 [ 302.377625][ C1] enqueue_timer+0x3ae/0x540 [ 302.382207][ C1] __mod_timer+0xa60/0xeb0 [ 302.386645][ C1] ? mod_timer_pending+0x20/0x20 [ 302.391584][ C1] ? srcu_gp_start+0x149/0x200 [ 302.396340][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 302.401358][ C1] ? __queue_delayed_work+0x16b/0x210 [ 302.406723][ C1] queue_delayed_work_on+0x156/0x250 [ 302.412005][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 302.417285][ C1] ? _raw_spin_unlock+0x24/0x40 [ 302.422125][ C1] ? srcu_gp_start+0x149/0x200 [ 302.426880][ C1] srcu_gp_start_if_needed+0x5dc/0x8f0 [ 302.432337][ C1] ? syscall_unregfunc+0x190/0x190 [ 302.437442][ C1] rcu_core+0xa15/0x1650 [ 302.441686][ C1] ? local_bh_disable+0x20/0x20 [ 302.446530][ C1] ? rebalance_domains+0x918/0xa80 [ 302.451635][ C1] ? distribute_cfs_runtime+0x540/0x540 [ 302.457174][ C1] handle_softirqs+0x3a7/0x930 [ 302.461935][ C1] ? __irq_exit_rcu+0x157/0x240 [ 302.466778][ C1] ? do_softirq+0x240/0x240 [ 302.471271][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 302.476460][ C1] __irq_exit_rcu+0x157/0x240 [ 302.481127][ C1] ? irq_exit_rcu+0x20/0x20 [ 302.485623][ C1] irq_exit_rcu+0x5/0x20 [ 302.489858][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 302.495486][ C1] [ 302.498409][ C1] [ 302.501330][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 302.507304][ C1] RIP: 0010:lock_acquire+0x252/0x4f0 [ 302.512579][ C1] Code: 2b 00 74 08 4c 89 f7 e8 9c 9e 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 302.532170][ C1] RSP: 0018:ffffc90002e6fa80 EFLAGS: 00000206 [ 302.538489][ C1] RAX: 0000000000000001 RBX: 1ffff920005cdf5c RCX: 1ffff920005cdefc [ 302.546452][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab3e20 RDI: ffffffff8af9f2c0 [ 302.554418][ C1] RBP: ffffc90002e6fbd8 R08: dffffc0000000000 R09: fffffbfff2131821 [ 302.562381][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920005cdf58 [ 302.570346][ C1] R13: dffffc0000000000 R14: ffffc90002e6fae0 R15: 0000000000000246 [ 302.578351][ C1] ? read_lock_is_recursive+0x10/0x10 [ 302.583760][ C1] ? rcu_lock_release+0x5/0x20 [ 302.588535][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 302.593573][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 302.599563][ C1] rcu_lock_acquire+0x2a/0x30 [ 302.604241][ C1] ? rcu_lock_acquire+0x5/0x30 [ 302.609003][ C1] batadv_nc_worker+0xc1/0x5b0 [ 302.613785][ C1] process_one_work+0x8a1/0x10c0 [ 302.618722][ C1] ? worker_detach_from_pool+0x260/0x260 [ 302.624351][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 302.629892][ C1] ? kthread_data+0x4e/0xc0 [ 302.634385][ C1] ? wq_worker_running+0x97/0x170 [ 302.639403][ C1] worker_thread+0xaca/0x1280 [ 302.644081][ C1] kthread+0x3f6/0x4f0 [ 302.648144][ C1] ? rcu_lock_release+0x20/0x20 [ 302.652991][ C1] ? kthread_blkcg+0xd0/0xd0 [ 302.657569][ C1] ret_from_fork+0x1f/0x30 [ 302.662005][ C1] [ 302.665339][ C1] Kernel Offset: disabled [ 302.669665][ C1] Rebooting in 86400 seconds..