last executing test programs: 16.962161433s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000000c0)=0x2) setresuid(0x0, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4, 0x3f}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r7, 0x2}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x53, 0x3, 0x74, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x10, 0x700, 0xe3e1, 0xcfe}}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}]}, 0x38}}, 0x0) 15.510447268s ago: executing program 4 (id=12): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000100001070000000000002200"/28], 0x1c}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) chdir(&(0x7f0000000140)='./file0\x00') r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) 13.369990213s ago: executing program 4 (id=15): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@delchain={0x40, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) 12.860531644s ago: executing program 4 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") userfaultfd(0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x102, 0x20) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) 11.770599999s ago: executing program 32 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") userfaultfd(0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x102, 0x20) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) 7.378582919s ago: executing program 2 (id=27): socket$packet(0x11, 0x3, 0x300) unshare(0x62040200) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000180)=@generic={0x0, 0x2, 0xfffffffffffffffe}) 3.795879107s ago: executing program 3 (id=32): socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x0, 0x80000) dup(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)) open$dir(&(0x7f0000000140)='./file0\x00', 0x840, 0xd5) epoll_create1(0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x207e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x20c4, 0x100}}) 3.117853163s ago: executing program 0 (id=33): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f0000000340), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x240046}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0xffffffffffffff67) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.824274769s ago: executing program 3 (id=34): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents(r2, 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 2.584696118s ago: executing program 3 (id=35): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[], 0xb, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg") bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) socket$inet6(0xa, 0x80002, 0x0) io_setup(0x1ff, &(0x7f0000000440)=0x0) ftruncate(r0, 0x81fe) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 2.326500141s ago: executing program 2 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=ANY=[@ANYBLOB="1c000000140001032dbd7000fcdbdf250b00000008000100", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.917599699s ago: executing program 2 (id=37): socket$nl_route(0x10, 0x3, 0x0) getrlimit(0xf, &(0x7f00000000c0)) 1.764980745s ago: executing program 3 (id=38): getpid() setns(0xffffffffffffffff, 0x24020000) 1.65461583s ago: executing program 2 (id=39): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.535110163s ago: executing program 0 (id=40): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000440)="0200", 0x2}], 0x2, 0xfffffffd, 0x40000) 1.452265245s ago: executing program 3 (id=41): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xfffffffffffffdff, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200c0800}, 0x20040040) 1.246248827s ago: executing program 2 (id=42): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r4 = fsmount(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000580)='pedit\x00', &(0x7f00000005c0)='./file0\x00', r0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, r4, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1128, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10f8, 0x2, [@TCA_TCINDEX_ACT={0x10f4, 0x7, [@m_xt={0x1a0, 0x17, 0x0, 0x0, {{0x7}, {0xf0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x49, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039979e57"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x51, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c040169"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd0, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}]}, {0x71, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1128}, 0x1, 0x0, 0x0, 0x810}, 0x41) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1.078677192s ago: executing program 0 (id=43): getgroups(0x1, &(0x7f0000000280)=[0x0]) 1.041962662s ago: executing program 1 (id=44): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 828.545766ms ago: executing program 0 (id=45): unshare(0x22020600) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r0, 0x0, 0x262) 761.051511ms ago: executing program 0 (id=46): unshare(0x22020400) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='status\x00') lseek(r0, 0xfffffffffffffffd, 0x0) msgctl$MSG_INFO(0x0, 0xc, 0x0) 676.713484ms ago: executing program 1 (id=47): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xa795}, 0x8) 612.887797ms ago: executing program 0 (id=48): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x100c404, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,check=strict,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c6e6f646f74732c6e6f646f74732c6e66732c6e6f646f74732c646f74732c756d61736b3d30303030303030303030303030303030303030303030362c616c6c6f775f7574696d653d30303030303000000000000000023030303030303030352c6e6f646f74732c6e6f646f74732c6e66733d0704616c655f72772c64656275672c6e6f646f34732c73686f77657865632c666c7573682c646d61736b3d30303030303030303030303030303030303030303030332c646f74732c646f74732c00"], 0x1, 0x1fa, &(0x7f0000000800)="$eJzs3cFqE10UAOCT/Gky+XHRnSAIIy50VdQnqEgFMSBUstBdQVdm1W5SN+3Ch/AVfC8fQLrKRq7EmXRimsYQyQzW79v0zJx7e++ZIZNscpKi8PX258iyVrT3Yz8mrdiNdsycBwBwk0xSim+p0PReAIB6rPH+/73mLQEAW/b6zduXTweDg8M8zyIuzsfD8bD4W+SfvxgcPMp/2q1mXYzHw/8u84/zxc8O0/xO/F/mnxTz88t0NyKG3Xh4v8hPc89eDfJf5/fi3ZZrBwAAAAAAAAAAAAAAAAAAAACAptyNfGZpf5+9vcV8v8wXR3P9gRb693TiTqc8rNoDpbM6igIAAAAAAAAAAAAAAAAAAIC/zMnpxw9Ho9H74yroRcT8mc6SMdcHrfIfrzW4+aAdm03vl2VusGirvETbLbC//OauE0TnT1b/1Pg9PRrlNazVX3l5U5oGy18Fs7YY107vRsTq1R8cbrr5SUpp9OXe8clppJWDq2dEr9YnEgAAAAAAAAAAAAAAAAAA/LvmvvV9RdbEhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAdXv/0+Dq2dWBmcRcSt+O3i21k5kjdYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfUjAAD//3O1Ikk=") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x88a0}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 265.059063ms ago: executing program 1 (id=49): setitimer(0x2, &(0x7f0000000080)={{0x0, 0x1}, {0x8000000000000001, 0x6}}, 0x0) 207.724315ms ago: executing program 1 (id=50): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 67.776189ms ago: executing program 1 (id=51): r0 = fsopen(&(0x7f0000000340)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0xda, 0x1) 41.183977ms ago: executing program 2 (id=52): r0 = syz_open_dev$evdev(&(0x7f0000001200), 0x2, 0x80) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000001240)=""/30) 40.707714ms ago: executing program 3 (id=53): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) inotify_init1(0x800) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061115c00000000001600000000000000950074000000000059552ac209e29f456e80207ac53a6a01d6931dc2d04f52654d4da6dab982d865703217850208f70d7e7592241198618784af3f24185e95d7edc1d6c1e075c088d6a828610ca463ccb90a50a4b38d9bb9656528a6d92c7ceed1d0f375afcd65408ccac06a9f131ab1d0642bdeea21d307e97734e40bbcb962cee8b49ea2c376e68d6302f4d3f6"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r0], 0x20) 0s ago: executing program 1 (id=54): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x82, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000003, 0x31, 0xffffffffffffffff, 0x1cef000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 74.083152][ T5822] cgroup: Unknown subsys name 'net' [ 74.212128][ T5822] cgroup: Unknown subsys name 'cpuset' [ 74.221281][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.601458][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.898512][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.909704][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.921536][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.930916][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.940823][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.940851][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.950169][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.957542][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.967574][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.972678][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.978898][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.985193][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.994573][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.006719][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.007060][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.024836][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.026748][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.033553][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.042450][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.051750][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.056598][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.061240][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.069115][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.084749][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.106194][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.711574][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 78.796377][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.836807][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 78.885917][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 79.073504][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.081079][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.088321][ T5836] bridge_slave_0: entered allmulticast mode [ 79.096201][ T5836] bridge_slave_0: entered promiscuous mode [ 79.105254][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 79.144666][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.152112][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.159464][ T5836] bridge_slave_1: entered allmulticast mode [ 79.167206][ T5836] bridge_slave_1: entered promiscuous mode [ 79.195550][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.202817][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.210200][ T5835] bridge_slave_0: entered allmulticast mode [ 79.217696][ T5835] bridge_slave_0: entered promiscuous mode [ 79.226821][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.234256][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.241850][ T5835] bridge_slave_1: entered allmulticast mode [ 79.249327][ T5835] bridge_slave_1: entered promiscuous mode [ 79.280099][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.287395][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.294949][ T5838] bridge_slave_0: entered allmulticast mode [ 79.302261][ T5838] bridge_slave_0: entered promiscuous mode [ 79.375582][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.383304][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.390625][ T5838] bridge_slave_1: entered allmulticast mode [ 79.397933][ T5838] bridge_slave_1: entered promiscuous mode [ 79.430265][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.463600][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.471011][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.478314][ T5834] bridge_slave_0: entered allmulticast mode [ 79.486145][ T5834] bridge_slave_0: entered promiscuous mode [ 79.497405][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.510380][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.553721][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.561140][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.568376][ T5834] bridge_slave_1: entered allmulticast mode [ 79.576916][ T5834] bridge_slave_1: entered promiscuous mode [ 79.586957][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.631120][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.668098][ T5836] team0: Port device team_slave_0 added [ 79.674126][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.682198][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.689676][ T5837] bridge_slave_0: entered allmulticast mode [ 79.697082][ T5837] bridge_slave_0: entered promiscuous mode [ 79.708047][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.731680][ T5835] team0: Port device team_slave_0 added [ 79.740145][ T5836] team0: Port device team_slave_1 added [ 79.746389][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.753739][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.761322][ T5837] bridge_slave_1: entered allmulticast mode [ 79.769824][ T5837] bridge_slave_1: entered promiscuous mode [ 79.791718][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.803827][ T5835] team0: Port device team_slave_1 added [ 79.846545][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.892061][ T5838] team0: Port device team_slave_0 added [ 79.934026][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.941680][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.968910][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.984726][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.996647][ T5838] team0: Port device team_slave_1 added [ 80.013443][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.020629][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.046862][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.059443][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.066389][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.092436][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.106666][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.130029][ T5848] Bluetooth: hci1: command tx timeout [ 80.136187][ T5855] Bluetooth: hci2: command tx timeout [ 80.142084][ T5857] Bluetooth: hci3: command tx timeout [ 80.142114][ T5160] Bluetooth: hci4: command tx timeout [ 80.154130][ T5834] team0: Port device team_slave_0 added [ 80.154773][ T5852] Bluetooth: hci0: command tx timeout [ 80.163914][ T5834] team0: Port device team_slave_1 added [ 80.172278][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.179263][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.205214][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.268443][ T5837] team0: Port device team_slave_0 added [ 80.276228][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.283290][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.309482][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.334714][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.341718][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.367645][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.396334][ T5837] team0: Port device team_slave_1 added [ 80.420158][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.427141][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.453268][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.475011][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.482463][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.508462][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.551175][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.558288][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.584691][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.625801][ T5835] hsr_slave_0: entered promiscuous mode [ 80.632739][ T5835] hsr_slave_1: entered promiscuous mode [ 80.645653][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.652733][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.678853][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.699054][ T5836] hsr_slave_0: entered promiscuous mode [ 80.705848][ T5836] hsr_slave_1: entered promiscuous mode [ 80.712908][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 80.718900][ T5836] Cannot create hsr debugfs directory [ 80.851255][ T5834] hsr_slave_0: entered promiscuous mode [ 80.858034][ T5834] hsr_slave_1: entered promiscuous mode [ 80.864729][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 80.870548][ T5834] Cannot create hsr debugfs directory [ 80.882399][ T5838] hsr_slave_0: entered promiscuous mode [ 80.889256][ T5838] hsr_slave_1: entered promiscuous mode [ 80.895678][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 80.901691][ T5838] Cannot create hsr debugfs directory [ 80.959569][ T5837] hsr_slave_0: entered promiscuous mode [ 80.966217][ T5837] hsr_slave_1: entered promiscuous mode [ 80.973024][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 80.978888][ T5837] Cannot create hsr debugfs directory [ 81.527962][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.552378][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.573338][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.584334][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.648336][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.661701][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.679951][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.694815][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.810772][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.824483][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.842523][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.853596][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.981128][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.996103][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.031158][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.061925][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.075464][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.138405][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.146761][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.157507][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.169589][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.181829][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.209226][ T5160] Bluetooth: hci4: command tx timeout [ 82.210596][ T5855] Bluetooth: hci2: command tx timeout [ 82.214770][ T5852] Bluetooth: hci0: command tx timeout [ 82.220132][ T5848] Bluetooth: hci1: command tx timeout [ 82.220217][ T5857] Bluetooth: hci3: command tx timeout [ 82.258244][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.266406][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.318603][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.325761][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.344184][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.414613][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.457904][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.486618][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.493778][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.527288][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.534445][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.598915][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.637271][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.644601][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.661691][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.694792][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.702013][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.766613][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.811911][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.819113][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.856734][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.863921][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.889830][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.986005][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.003371][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.035052][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.042421][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.104138][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.111317][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.298341][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.328358][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.340264][ T5835] veth0_vlan: entered promiscuous mode [ 83.430316][ T5835] veth1_vlan: entered promiscuous mode [ 83.561708][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.614553][ T5836] veth0_vlan: entered promiscuous mode [ 83.636458][ T5836] veth1_vlan: entered promiscuous mode [ 83.651961][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.662375][ T5835] veth0_macvtap: entered promiscuous mode [ 83.694752][ T5835] veth1_macvtap: entered promiscuous mode [ 83.723678][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.808671][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.843103][ T5836] veth0_macvtap: entered promiscuous mode [ 83.862928][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.911425][ T5838] veth0_vlan: entered promiscuous mode [ 83.925267][ T5836] veth1_macvtap: entered promiscuous mode [ 83.956843][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.972415][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.993598][ T5834] veth0_vlan: entered promiscuous mode [ 84.003614][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.027691][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.058255][ T5834] veth1_vlan: entered promiscuous mode [ 84.081116][ T5838] veth1_vlan: entered promiscuous mode [ 84.105257][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.130387][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.165463][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.198226][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.212190][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.236807][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.291053][ T5852] Bluetooth: hci0: command tx timeout [ 84.291084][ T5160] Bluetooth: hci4: command tx timeout [ 84.302162][ T5852] Bluetooth: hci2: command tx timeout [ 84.302193][ T5852] Bluetooth: hci3: command tx timeout [ 84.302214][ T5852] Bluetooth: hci1: command tx timeout [ 84.331817][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.345037][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.373555][ T5838] veth0_macvtap: entered promiscuous mode [ 84.420531][ T5834] veth0_macvtap: entered promiscuous mode [ 84.445129][ T5834] veth1_macvtap: entered promiscuous mode [ 84.460624][ T5838] veth1_macvtap: entered promiscuous mode [ 84.471058][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.471605][ T5837] veth0_vlan: entered promiscuous mode [ 84.480490][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.526407][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.558014][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.568329][ T5837] veth1_vlan: entered promiscuous mode [ 84.618076][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.624612][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.647159][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.671721][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.688348][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.730510][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.751011][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.760739][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.770552][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.786667][ T5956] loop3: detected capacity change from 0 to 512 [ 84.795150][ T5956] ======================================================= [ 84.795150][ T5956] WARNING: The mand mount option has been deprecated and [ 84.795150][ T5956] and is ignored by this kernel. Remove the mand [ 84.795150][ T5956] option from the mount to silence this warning. [ 84.795150][ T5956] ======================================================= [ 84.832049][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.848344][ T5956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.872147][ T5956] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.901646][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.910896][ T5956] EXT4-fs (loop3): 1 truncate cleaned up [ 84.928330][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.942005][ T5956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.118216][ T5960] loop1: detected capacity change from 0 to 1024 [ 85.156387][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.171319][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.184026][ T5960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 85.203678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.224005][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.245217][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.727138][ T5960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.756949][ T5837] veth0_macvtap: entered promiscuous mode [ 85.790849][ T5837] veth1_macvtap: entered promiscuous mode [ 85.827749][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.849243][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.879352][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.893109][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.990001][ T5913] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.226747][ T5971] loop2: detected capacity change from 0 to 512 [ 86.238967][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 86.397634][ T5160] Bluetooth: hci1: command tx timeout [ 86.397784][ T5857] Bluetooth: hci0: command tx timeout [ 86.403369][ T5848] Bluetooth: hci4: command tx timeout [ 86.408668][ T5852] Bluetooth: hci2: command tx timeout [ 86.420446][ T5855] Bluetooth: hci3: command tx timeout [ 86.427920][ T5971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.448104][ T5913] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.480469][ T5913] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.492393][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.501857][ T5971] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.514128][ T5913] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 86.528661][ T5966] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.531165][ T5913] usb 4-1: config 0 interface 0 has no altsetting 0 [ 86.546375][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.546422][ T5913] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 86.568119][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.585258][ T5966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.593174][ T5966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.607478][ T5913] usb 4-1: config 0 descriptor?? [ 86.700436][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.715642][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.344877][ T5976] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.3: corrupted inode contents [ 87.358389][ T5976] EXT4-fs error (device loop2): ext4_dirty_inode:6453: inode #2: comm syz.2.3: mark_inode_dirty error [ 87.373434][ T5976] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.3: corrupted inode contents [ 87.385780][ T5976] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.3: mark_inode_dirty error [ 87.438330][ T5975] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.3: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 87.438330][ T5975] [ 87.474383][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.497543][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.661997][ T5980] loop1: detected capacity change from 0 to 512 [ 87.687623][ T5980] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.781135][ T5980] EXT4-fs (loop1): 1 truncate cleaned up [ 87.794508][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.832946][ T5980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.867788][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.894371][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.924308][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.928506][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.050362][ T5983] loop2: detected capacity change from 0 to 512 [ 88.173694][ T5983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.194664][ T5983] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.795751][ T5913] usbhid 4-1:0.0: can't add hid device: -71 [ 88.825413][ T5913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 88.886074][ T5913] usb 4-1: USB disconnect, device number 2 [ 89.065383][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.292355][ T5990] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.8: corrupted inode contents [ 89.330420][ T5990] EXT4-fs error (device loop2): ext4_dirty_inode:6453: inode #2: comm syz.2.8: mark_inode_dirty error [ 89.363627][ T5990] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.8: corrupted inode contents [ 89.380020][ T5990] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.8: mark_inode_dirty error [ 89.448190][ T5991] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.8: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 89.448190][ T5991] [ 89.536718][ T807] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.953989][ T807] usb 2-1: Using ep0 maxpacket: 16 [ 89.962534][ T807] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.007631][ T807] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.325478][ T807] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 90.593907][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.764615][ T807] usb 2-1: config 0 interface 0 has no altsetting 0 [ 90.775897][ T807] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 90.785123][ T807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.817343][ T6005] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 90.958392][ T807] usb 2-1: config 0 descriptor?? [ 90.973009][ T6003] block nbd0: Unsupported socket: should be TCP or UNIX. [ 90.987091][ T807] usb 2-1: can't set config #0, error -71 [ 91.007955][ T807] usb 2-1: USB disconnect, device number 2 [ 91.070677][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.774562][ T6012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10'. [ 91.831206][ T6017] loop1: detected capacity change from 0 to 512 [ 91.862879][ T6017] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.920153][ T9] cfg80211: failed to load regulatory.db [ 91.940883][ T6017] EXT4-fs (loop1): 1 truncate cleaned up [ 92.072770][ T6017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.348810][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.089411][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 93.113008][ T5846] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 93.154739][ T5846] usb 3-1: config 1 has no interface number 0 [ 93.186108][ T5846] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 93.214500][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.238506][ T5846] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 93.291518][ T5846] usb 3-1: config 1 interface 105 has no altsetting 0 [ 93.335375][ T5846] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 93.395325][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 93.422409][ T5846] usb 3-1: Product: syz [ 93.436877][ T5846] usb 3-1: Manufacturer: syz [ 93.452436][ T5846] usb 3-1: SerialNumber: syz [ 93.481097][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.510076][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.640951][ T6037] loop3: detected capacity change from 0 to 256 [ 93.781843][ T5966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.966696][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.013913][ T6028] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 94.785224][ T5846] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 94.799090][ T5966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.963637][ T5966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.025177][ T5846] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 95.073056][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.088281][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.104693][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.115400][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.130193][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.166864][ T5846] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, aa:71:8e:3e:55:2e [ 95.199028][ T5846] usb 3-1: USB disconnect, device number 2 [ 95.246679][ T5846] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 95.266050][ T5966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.500113][ T5846] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 95.525545][ T5846] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 95.555647][ T5846] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 96.370004][ T6062] netlink: 'syz.1.22': attribute type 9 has an invalid length. [ 96.377874][ T6062] netlink: 'syz.1.22': attribute type 11 has an invalid length. [ 96.386372][ T6062] netlink: 'syz.1.22': attribute type 12 has an invalid length. [ 96.394289][ T6062] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.22'. [ 97.234911][ T5852] Bluetooth: hci3: command tx timeout [ 98.169596][ T6074] loop1: detected capacity change from 0 to 512 [ 98.233326][ T5966] bridge_slave_1: left allmulticast mode [ 98.281165][ T5966] bridge_slave_1: left promiscuous mode [ 98.352046][ T6074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.363288][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.420781][ T6074] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.990202][ T5966] bridge_slave_0: left allmulticast mode [ 99.024208][ T5966] bridge_slave_0: left promiscuous mode [ 99.030130][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.041049][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.269934][ T5852] Bluetooth: hci3: command tx timeout [ 99.348815][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 99.566136][ T6089] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #2: comm syz.1.26: corrupted inode contents [ 99.591441][ T6089] EXT4-fs error (device loop1): ext4_dirty_inode:6453: inode #2: comm syz.1.26: mark_inode_dirty error [ 99.613651][ T6089] EXT4-fs error (device loop1): ext4_do_update_inode:5572: inode #2: comm syz.1.26: corrupted inode contents [ 99.636142][ T6089] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.26: mark_inode_dirty error [ 99.746162][ T6089] EXT4-fs warning (device loop1): ext4_es_cache_extent:1082: inode #2: comm syz.1.26: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 99.746162][ T6089] [ 99.841167][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.859024][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.869638][ T24] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 99.883411][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.899470][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 99.899496][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.919265][ T24] usb 1-1: config 0 descriptor?? [ 100.323175][ T6099] loop3: detected capacity change from 0 to 512 [ 100.374957][ T6099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.422673][ T6099] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.451639][ T5966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.477658][ T5966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.492595][ T5966] bond0 (unregistering): Released all slaves [ 100.635828][ T6047] chnl_net:caif_netlink_parms(): no params data found [ 101.470038][ T5852] Bluetooth: hci3: command tx timeout [ 101.531000][ T6102] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #2: comm syz.3.29: corrupted inode contents [ 101.545911][ T6102] EXT4-fs error (device loop3): ext4_dirty_inode:6453: inode #2: comm syz.3.29: mark_inode_dirty error [ 101.559682][ T6102] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #2: comm syz.3.29: corrupted inode contents [ 101.576863][ T6102] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.29: mark_inode_dirty error [ 101.595654][ T6102] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.29: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 101.595654][ T6102] [ 101.630083][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.920722][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.100823][ T6109] loop1: detected capacity change from 0 to 512 [ 102.209050][ T6109] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.306265][ T6119] loop3: detected capacity change from 0 to 1024 [ 102.310603][ T6109] EXT4-fs (loop1): 1 truncate cleaned up [ 102.330907][ T6119] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.363927][ T6109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.482268][ T6119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.719900][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.879191][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 102.889819][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 103.382939][ T24] usb 1-1: USB disconnect, device number 2 [ 103.434434][ T5927] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.488982][ T5852] Bluetooth: hci3: command tx timeout [ 103.542324][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.550188][ T6135] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.576825][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.607874][ T6047] bridge_slave_0: entered allmulticast mode [ 103.619484][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 103.632657][ T6047] bridge_slave_0: entered promiscuous mode [ 103.640067][ T5927] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.685001][ T5927] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.715832][ T5927] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 103.717864][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.740537][ T5927] usb 2-1: config 0 interface 0 has no altsetting 0 [ 103.757430][ T5927] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 103.783810][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.784701][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.804220][ T6047] bridge_slave_1: entered allmulticast mode [ 103.831685][ T5927] usb 2-1: config 0 descriptor?? [ 103.838946][ T6047] bridge_slave_1: entered promiscuous mode [ 103.936913][ T6141] loop3: detected capacity change from 0 to 128 [ 104.032831][ T6047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.097080][ T6047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.202306][ T5966] hsr_slave_0: left promiscuous mode [ 104.234287][ T5966] hsr_slave_1: left promiscuous mode [ 104.258472][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.286990][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.326291][ T5966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.355563][ T5966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.460416][ T5966] veth1_macvtap: left promiscuous mode [ 104.480545][ T5966] veth0_macvtap: left promiscuous mode [ 104.492228][ T5966] veth1_vlan: left promiscuous mode [ 104.504860][ T5966] veth0_vlan: left promiscuous mode [ 105.050702][ T6159] process 'syz.2.39' launched './file1' with NULL argv: empty string added [ 105.427377][ T5927] usbhid 2-1:0.0: can't add hid device: -71 [ 105.446448][ T5927] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 105.451966][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.465173][ T5927] usb 2-1: USB disconnect, device number 3 [ 105.881684][ T5966] team0 (unregistering): Port device team_slave_1 removed [ 105.920582][ T5966] team0 (unregistering): Port device team_slave_0 removed [ 106.327507][ T6162] team0: entered promiscuous mode [ 106.334797][ T6192] capability: warning: `syz.1.50' uses 32-bit capabilities (legacy support in use) [ 106.340189][ T6162] team_slave_0: entered promiscuous mode [ 106.353328][ T6162] team_slave_1: entered promiscuous mode [ 106.361132][ T6162] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.376186][ T6162] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 106.466469][ T6047] team0: Port device team_slave_0 added [ 106.499143][ T6047] team0: Port device team_slave_1 added [ 106.600327][ T6200] node ffff8880238df9c0 offset 0 parent ffff888056c32940 shift 0 count 1 values 0 array ffff8880206e3a80 list ffff8880238df9d8 ffff8880238df9d8 marks 0 0 0 [ 106.627001][ T6047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.631037][ T6200] ------------[ cut here ]------------ [ 106.639647][ T6200] kernel BUG at ./include/linux/xarray.h:1441! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 106.643433][ T6047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.709178][ T6200] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 106.715493][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.1.54 Not tainted syzkaller #0 PREEMPT(full) [ 106.724874][ T6200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 106.734938][ T6200] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 106.740941][ T6200] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 106.760737][ T6200] RSP: 0018:ffffc900051e6e20 EFLAGS: 00010246 [ 106.766795][ T6200] RAX: 0000000000000000 RBX: ffff8880238df9c0 RCX: fa1905e063637800 [ 106.774855][ T6200] RDX: ffffc9000db92000 RSI: 0000000000006cdb RDI: 0000000000006cdc [ 106.782816][ T6200] RBP: ffffc900051e7130 R08: ffffc900051e6ba7 R09: 1ffff92000a3cd74 [ 106.790794][ T6200] R10: dffffc0000000000 R11: fffff52000a3cd75 R12: ffffea0001246c70 [ 106.798769][ T6200] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900051e7010 [ 106.806745][ T6200] FS: 00007f61e48166c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 106.815678][ T6200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.822257][ T6200] CR2: 00007f0ce15456b8 CR3: 000000007bdde000 CR4: 00000000003526f0 [ 106.830320][ T6200] Call Trace: [ 106.833616][ T6200] [ 106.836550][ T6200] ? collapse_scan_file+0x1c1/0x5230 [ 106.841854][ T6200] ? __pfx_collapse_scan_file+0x10/0x10 [ 106.847408][ T6200] ? lockdep_unlock+0x5d/0xd0 [ 106.852084][ T6200] ? __lock_acquire+0x146e/0x2cf0 [ 106.857106][ T6200] ? __up_read+0x291/0x6b0 [ 106.861518][ T6200] ? __pfx___up_read+0x10/0x10 [ 106.866274][ T6200] collapse_single_pmd+0x22b/0x4510 [ 106.871478][ T6200] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.877100][ T6200] ? debug_object_free+0x2d7/0x490 [ 106.882245][ T6200] ? __flush_work+0xa26/0xc50 [ 106.886914][ T6200] ? __pfx_collapse_single_pmd+0x10/0x10 [ 106.892534][ T6200] ? __flush_work+0x100/0xc50 [ 106.897220][ T6200] ? madvise_collapse+0x18c/0x820 [ 106.902256][ T6200] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 106.907906][ T6200] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.913902][ T6200] madvise_collapse+0x34c/0x820 [ 106.918751][ T6200] madvise_vma_behavior+0x1094/0x4460 [ 106.924203][ T6200] ? rcu_is_watching+0x15/0xb0 [ 106.929058][ T6200] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 106.934790][ T6200] ? update_cfs_rq_load_avg+0x3fb/0x4e0 [ 106.940423][ T6200] ? __lock_acquire+0x6b5/0x2cf0 [ 106.945372][ T6200] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.950488][ T6200] ? do_raw_spin_lock+0x12b/0x2f0 [ 106.955502][ T6200] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 106.961122][ T6200] ? debug_object_assert_init+0x209/0x370 [ 106.966869][ T6200] ? rcu_is_watching+0x15/0xb0 [ 106.971632][ T6200] ? trace_hrtimer_start+0x82/0x230 [ 106.976992][ T6200] ? finish_task_switch+0x41f/0xbe0 [ 106.982288][ T6200] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.987823][ T6200] ? mas_prev_slot+0xb7b/0xbf0 [ 106.992711][ T6200] ? find_vma_prev+0x123/0x1b0 [ 106.997587][ T6200] ? __pfx_find_vma_prev+0x10/0x10 [ 107.002717][ T6200] ? __pfx___resched_curr+0x10/0x10 [ 107.007916][ T6200] madvise_walk_vmas+0x573/0xae0 [ 107.012869][ T6200] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 107.018326][ T6200] ? blk_start_plug+0x6e/0x1b0 [ 107.023257][ T6200] madvise_do_behavior+0x386/0x540 [ 107.028372][ T6200] ? __pfx_madvise_do_behavior+0x10/0x10 [ 107.034030][ T6200] ? down_read+0x270/0x2e0 [ 107.038491][ T6200] ? madvise_lock+0x146/0x2e0 [ 107.043179][ T6200] do_madvise+0x1fa/0x2e0 [ 107.047507][ T6200] ? __pfx_do_madvise+0x10/0x10 [ 107.052371][ T6200] ? __se_sys_futex+0x3a8/0x450 [ 107.057226][ T6200] ? rcu_is_watching+0x15/0xb0 [ 107.061975][ T6200] __x64_sys_madvise+0xa6/0xc0 [ 107.066827][ T6200] do_syscall_64+0x14d/0xf80 [ 107.071418][ T6200] ? trace_irq_disable+0x3b/0x150 [ 107.076434][ T6200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.082571][ T6200] ? clear_bhb_loop+0x40/0x90 [ 107.087235][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.093112][ T6200] RIP: 0033:0x7f61e399c799 [ 107.097610][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.117294][ T6200] RSP: 002b:00007f61e4816028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 107.125723][ T6200] RAX: ffffffffffffffda RBX: 00007f61e3c15fa0 RCX: 00007f61e399c799 [ 107.133700][ T6200] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 107.141688][ T6200] RBP: 00007f61e3a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 107.149656][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.157613][ T6200] R13: 00007f61e3c16038 R14: 00007f61e3c15fa0 R15: 00007ffc32af4638 [ 107.165591][ T6200] [ 107.168685][ T6200] Modules linked in: [ 107.173712][ T6200] ---[ end trace 0000000000000000 ]--- [ 107.183931][ T6047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.436657][ T6200] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 107.448058][ T6200] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 107.485265][ T6200] RSP: 0018:ffffc900051e6e20 EFLAGS: 00010246 [ 107.528455][ T6200] RAX: 0000000000000000 RBX: ffff8880238df9c0 RCX: fa1905e063637800 [ 107.542373][ T6200] RDX: ffffc9000db92000 RSI: 0000000000006cdb RDI: 0000000000006cdc [ 107.557842][ T6200] RBP: ffffc900051e7130 R08: ffffc900051e6ba7 R09: 1ffff92000a3cd74 [ 107.588913][ T6200] R10: dffffc0000000000 R11: fffff52000a3cd75 R12: ffffea0001246c70 [ 107.606474][ T6200] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc900051e7010 [ 107.628856][ T6200] FS: 00007f61e48166c0(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 107.653680][ T5966] bridge_slave_1: left allmulticast mode [ 107.662170][ T5966] bridge_slave_1: left promiscuous mode [ 107.674241][ T6200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.682080][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.698982][ T6200] CR2: 00007f0b6bbd4368 CR3: 000000007bdde000 CR4: 00000000003526f0 [ 107.711579][ T5966] bridge_slave_0: left allmulticast mode [ 107.729108][ T6200] Kernel panic - not syncing: Fatal exception [ 107.735535][ T6200] Kernel Offset: disabled [ 107.739871][ T6200] Rebooting in 86400 seconds..