last executing test programs: 25m16.986978707s ago: executing program 32 (id=72): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 18m20.287423259s ago: executing program 33 (id=1190): syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f00000004c0)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000000008b}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x20000040) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)='[o', 0x2}, {&(0x7f00000001c0)='d', 0x1}], 0x2) lchown(0x0, 0x0, 0xee01) setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [{0x2, 0x1}], {0x4, 0x3}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x6}}, 0x34, 0x1) fchmodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x160) 17m42.914457565s ago: executing program 34 (id=1267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x408d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000003640)={[{@undelete}, {@undelete}, {@utf8}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@adinicb}, {@unhide}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@lastblock={'lastblock', 0x3d, 0x5}}]}, 0x2, 0xc54, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0) 17m2.120554707s ago: executing program 2 (id=1367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000019c0)="b9ff0307684435", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m58.9578599s ago: executing program 2 (id=1373): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') 16m57.907181124s ago: executing program 2 (id=1379): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_vhci(0x0, 0x24) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) 16m56.646351972s ago: executing program 2 (id=1381): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001900)=ANY=[], 0xfd, 0x22b, &(0x7f00000006c0)="$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") chdir(&(0x7f0000004340)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14) mknod(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 16m56.142702928s ago: executing program 2 (id=1383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000019c0)="b9ff0307684435", 0x0, 0x100, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m51.60926158s ago: executing program 2 (id=1397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r1}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0) 16m51.089153307s ago: executing program 35 (id=1397): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r2, r1}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[], 0x0) 15m5.97983912s ago: executing program 7 (id=1633): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 15m4.168593464s ago: executing program 7 (id=1640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syslog(0x9, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8000, 0x2}, 0x18) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x40004) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="0f001f36400f0866baf80cb8c0b2a48fef66bafc0c66edf3450f7ef2b9330900000f320f18bf3648a35cc744240042000000c744240200500000ff1c2466b8ed000f00d866baf80cb8f8c5ad81ef66bafc0cb80d000000ef66bad10466ed", 0x5e}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) 15m2.25752363s ago: executing program 7 (id=1649): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, 0x0, 0x0) 15m1.952291884s ago: executing program 7 (id=1651): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) close(0x3) 15m1.699041808s ago: executing program 7 (id=1656): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$IPC_SET(0x0, 0x0, 0x13, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001680)=0x7d) 15m0.134664509s ago: executing program 7 (id=1660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a863726558"], 0xfdef) 14m45.22939857s ago: executing program 36 (id=1660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socket$kcm(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a863726558"], 0xfdef) 14m9.472299655s ago: executing program 0 (id=1822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 14m9.282319587s ago: executing program 0 (id=1823): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x800080, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x3, 0x45f, &(0x7f0000000900)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 14m2.128787905s ago: executing program 0 (id=1851): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) connect$packet(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 14m0.749456313s ago: executing program 0 (id=1859): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@lazytime}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x1538, &(0x7f0000001f80)="$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") write$binfmt_elf32(r1, &(0x7f0000000400)=ANY=[], 0x158) 13m57.28381764s ago: executing program 0 (id=1870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 13m48.165470773s ago: executing program 0 (id=1896): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000100), 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000100)=""/161, 0xa1}], 0x1, 0x8, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0xfc, 0x3, 0x0, 0x42, @mcast2, @empty, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 13m47.925533616s ago: executing program 37 (id=1896): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000100), 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) preadv(r6, &(0x7f0000000380)=[{&(0x7f0000000100)=""/161, 0xa1}], 0x1, 0x8, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x29, 0xfc, 0x3, 0x0, 0x42, @mcast2, @empty, 0x0, 0x0, 0x2, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 9m43.5307319s ago: executing program 9 (id=2931): r0 = syz_open_dev$usbfs(&(0x7f0000000380), 0x3fb8, 0x1) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x1) 9m43.298193833s ago: executing program 9 (id=2934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000480)={0x0, 0x0}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x380, 0x188, 0xd0, 0xffffffff, 0x230, 0x188, 0x2e8, 0x2e8, 0xffffffff, 0x2e8, 0x2e8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x15, @multicast2, @loopback, @port, @icmp_id}}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'vlan1\x00', 'geneve1\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'syzkaller0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@loopback, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121140, 0x0) socket(0x840000000002, 0x4, 0xff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x2, 0x0, 0x1, 0xfffd}, 0x20) pipe(0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000104c, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRES64, @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x14f5, &(0x7f0000001580)="$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") 9m42.311411315s ago: executing program 9 (id=2940): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x6}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 9m42.197938346s ago: executing program 9 (id=2941): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x1a1) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000400030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 9m41.89251777s ago: executing program 9 (id=2944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m41.637635903s ago: executing program 3 (id=2946): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2000, 0xffff, @loopback}, 0x1c) 9m41.636934703s ago: executing program 3 (id=2947): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x82a82, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa2041) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r0], 0x3c}}, 0x10) 9m41.467417855s ago: executing program 3 (id=2951): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x3, 0x0, @remote, 0x6}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 9m41.410739966s ago: executing program 9 (id=2952): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = timerfd_create(0x7, 0x80800) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9m41.379639316s ago: executing program 3 (id=2954): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$eJzs3MtrXFUYAPBv7mTSpM/4qNqHGl9YfDRN+rALN4qCCwVBF9VdTNNSm1ppIthSTBSpSym4F5eCf4Er3Yi6EtzqXgpBsml8gFfunXvzfk0yyUTn94MJ59x7Zu75zrlncu65MxNA2+rN/lQidkfEL1k6ybMz0qJQVm566vrQH1PXhyqRpq/9Xsn33Z66PlSWLZ+3u8gcSSKSjytxaInjjl69dnFwZGT4SpHvG7v0bt/o1WtPX7g0eH74/PA7A6dPnzje/8ypgZNNiXNPVteDH1w+fOClN26+MnTm5ls/fNVR1nVBHM3SG73z2nKux5p9sBbbMydd6WhhRWhINSKy7qrl439fVGO28/bFix+1tHLApkrTNN27/O6JFPgfq0SrawC0RvmP/vZUd3Rt0nXwdjb5XP0CKIt7unjU93REUpSpLbi+baauYt3kzMSfn0fe/jvaqv0BgK33TTb/eao+/ykf9T09cc+ccnvz9eBsa8QdEXFnRNwVEXdHxP6IvOy9EXFfg8fvXZBfPP9Mbq0rsDXK5n/PFve25s//itnfP2lPtcjtie7oiVrl3IWR4WNFmxyJ2o4s37/CMb594edPl9vXW8z9ykd2/HIuWNTjVseO+c85Ozg2uLGoZ01+mK8Bji+Of/bOVZY6EBEH1/H62bz5whNfHl5u/+rxr6AJ95nSLyIer/f/RKwQ/8L7k93FvlMDJ/u6YmT4WF95Viz24083Xl3u+BuKvwmy/t+55Pk/E39PZe792tHGj3Hj10+WvaZp4Px/s9ySnf+dldfzdGex7f3BsbEr/RGdlZcXbx+YfbUyX5af3L0/4pGlx3/2HpedY1n8hyIiO4nvj4gHIuLBou4PRcTDkb/EUsanI+L75x99ez3xJ6s1bBNk/X92Xv/HKv3feKJ68buv1xN/Xdb/J/LUkWLLWt7/1lrBjbQdAAAA/Fck+WfgK8nRmXSSHD0asStf292ZjFweHXvy3OX3/jpb/6x8T9SScqWrvh5cXw/tL9aGy/zAgvzxYt34s2p3nt9Z3PsGWmfX3PGfLzjWx3/mt2qLKwdsPt/XgvZl/EP7Mv6hfRn/0L7WOv7TTa4HsPWWGv/jLagHsPXM/6F9Gf/Qvox/aF/GP7SljXyvX2KVxHjDzdsVK5Xp3CZx5YlI8kQ63sJq/F38DMvaCm9efcpfy1i9cK0Yd9uhB1dOtO49CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJn+DQAA//85XdxN") open(&(0x7f0000000040)='./bus\x00', 0x1efb7e, 0x86d7ae2592eaaba6) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x1a1) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000400030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 9m41.229660478s ago: executing program 38 (id=2952): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = timerfd_create(0x7, 0x80800) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9m40.254752399s ago: executing program 3 (id=2960): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m39.312289321s ago: executing program 3 (id=2974): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) shutdown(r2, 0x1) shutdown(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 9m39.192446462s ago: executing program 39 (id=2974): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) shutdown(r2, 0x1) shutdown(r2, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1m12.476403642s ago: executing program 5 (id=5117): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}]}}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x20540, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r8, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x0, 0x0, 'queue1\x00', 0x8}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x1, 0x1, 0xfffffffffffffffc, 0x2, 0x5, 0x9, 0x7, 0x2, 0x0, 0x2, 0x6, 0x4, 0x2], 0xf000, 0x82106}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 1m11.258801397s ago: executing program 5 (id=5120): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b27, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x20101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x90, &(0x7f00000001c0)='\x01') ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) getpriority(0x1, r5) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x14444, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x1, 0xc17, &(0x7f0000000800)="$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") symlink(&(0x7f0000001000)='.\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x0) 1m1.902177759s ago: executing program 5 (id=5134): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x7fff, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x8, &(0x7f0000000000)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) sendmmsg(r5, 0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 1m0.621601394s ago: executing program 5 (id=5137): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x7fff, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x8, &(0x7f0000000000)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) sendmmsg(r5, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)="288e36b79c8e80ccfa9848b2f6b1df567de1c5d8330d8eff4a47c5bf4718d5b99b7c3a5eb8c2a37339e3903dd8dc1ed8713d4e48ea9b9304", 0x38) 58.946905465s ago: executing program 5 (id=5141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000280)) syz_emit_ethernet(0x4a, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}]}}}}}}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x101) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x20540, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r8, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000002c0)={0x3, 0x0, 0x0, 'queue1\x00', 0x8}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x3, 0x1, 0x1, 0xfffffffffffffffc, 0x2, 0x5, 0x9, 0x7, 0x2, 0x0, 0x2, 0x6, 0x4, 0x2], 0xf000, 0x82106}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 56.773531991s ago: executing program 5 (id=5143): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x7fff, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x8, &(0x7f0000000000)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) sendmmsg(r5, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)="288e36b79c8e80ccfa9848b2f6b1df567de1c5d8330d8eff4a47c5bf4718d5b99b7c3a5eb8c2a37339e3903dd8dc1ed8713d4e48ea9b930465cd7e0c3f6dcebae9", 0x41) 41.207476947s ago: executing program 40 (id=5143): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x7fff, 0x1}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0xfffffffa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087708, &(0x7f0000000540)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\xadP\x1c2\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd8\\\x99\xc7Dp\x98\xa4o\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12KL\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') ioctl$ASHMEM_PURGE_ALL_CACHES(r6, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r6, 0x40087707, &(0x7f0000000cc0)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642@\xb8\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc3\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5U\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x13\xc8\xdc\x00\x00\x00\x00\x00\x00\x00\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5h/41\x99\'\xd0\x1e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xaf\x03\x9bWwh\xca\xf5d\x8di\xe7\xc4\xdbx\xbc\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6NR\x13\x84~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaa\x868hB+\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99v.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\x02\x7f\xc4T\xa5\xc1,*\x8d\xf6\x1f\xbe\x10\x04\x97\x9d+\x81\xbb8|\xf3\x8bo\xa5\xf9\xab[-t\xdf6H\xc1\xb1\b\b\xcc\xbf\xb0c\xe8S\xea6\xf5\xd0\xda/\xbf\xe5p\x82\xb8V\xe9g[\x8d\x14e;\x11o\v\xb8\xb6\x0f\xd3\x16\x82\xc5$\xce\xe2\xab\a\x1c\x8c\x843\xf4\xbb\xc8\xd3\xf5R\xb5\x8dZ\xb7Jql\x05+i{\xc5w\xfcD\x1fE\xcc]\xb7~\xd3\x99\xde\x1dX\xdc}C,|\bf\x80&WeT\x98X\xeb\xef(\x1c9\x00'/623) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_GETSIGMASK(0x420a, r7, 0x8, &(0x7f0000000000)) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) sendmmsg(r5, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)="288e36b79c8e80ccfa9848b2f6b1df567de1c5d8330d8eff4a47c5bf4718d5b99b7c3a5eb8c2a37339e3903dd8dc1ed8713d4e48ea9b930465cd7e0c3f6dcebae9", 0x41) 18.36763943s ago: executing program 6 (id=5205): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000080000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={0x0}}, 0xee) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) move_pages(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) 15.753186561s ago: executing program 6 (id=5207): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8001) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x17) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@udp=r3}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=uni']) r8 = msgget(0x0, 0x210) msgctl$IPC_INFO(r8, 0x3, &(0x7f0000000200)=""/97) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) setsockopt$sock_int(r9, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) 13.176422262s ago: executing program 4 (id=5213): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x121500) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x3) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) setpgid(r3, 0x0) setpgid(0x0, r3) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x92) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000880)='./bus\x00', 0x0, 0x0, 0x0, 0x2) 10.982327469s ago: executing program 8 (id=5216): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') openat(r4, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 10.377048756s ago: executing program 4 (id=5217): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') openat(r4, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 8.908914783s ago: executing program 8 (id=5219): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') openat(r4, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 8.858456704s ago: executing program 4 (id=5220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') pipe2(&(0x7f0000000000), 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 8.726943555s ago: executing program 6 (id=5222): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 7.171266734s ago: executing program 4 (id=5223): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x84, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x26}}}}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 6.091440967s ago: executing program 8 (id=5224): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 5.992299218s ago: executing program 6 (id=5225): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) 4.871083592s ago: executing program 6 (id=5226): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x121500) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x3) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) setpgid(r3, 0x0) setpgid(0x0, r3) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000880)='./bus\x00', 0x0, 0x0, 0x0, 0x2) 4.797833612s ago: executing program 8 (id=5228): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat(r4, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2.852525496s ago: executing program 8 (id=5230): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') openat(r4, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2.851880036s ago: executing program 6 (id=5231): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8001) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x17) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000100)=@udp=r3}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$unix(0x1, 0x5, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=uni']) r8 = msgget(0x0, 0x210) msgctl$IPC_INFO(r8, 0x3, &(0x7f0000000200)=""/97) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) setsockopt$sock_int(r9, 0x1, 0x5, &(0x7f0000000100)=0x1, 0x4) 2.837414816s ago: executing program 4 (id=5233): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2.649367178s ago: executing program 1 (id=5234): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r3, &(0x7f00000000c0)='./file0\x00') openat(r3, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2.216791443s ago: executing program 1 (id=5235): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', r4, &(0x7f00000000c0)='./file0\x00') openat(r4, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1.340516304s ago: executing program 8 (id=5236): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000231ae090bb6a42df527f9df64fd19f5a5a2ac79e5ddec5536b14a1e7a8f30b66c18f7e65b8a1a19b5060e71358db"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000bc0)={0x1, &(0x7f0000000c00)=[{0x6}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'dvmrp0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'macsec0\x00', 0x200}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1000adbd7000fddbdf250300ed6c9492068008000600de38df4880ae02393bf88f410e000000080007008189c31eeb54ac25d0", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="050002005400000008000300ac1e0101080004007f000000080004000c000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x40448d0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newqdisc={0xdc, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xac, 0x2, {{0xfffffffe, 0x0, 0x0, 0x7fffffff, 0x2}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x5c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x6, 0x96, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x5, 0x7, 0x8, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x800, 0x7, 0x0, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x5, 0xfffffff8, 0x6, 0x0, 0x9}}]}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x89cc, 0x4, 0x5}}]}}}]}, 0xdc}}, 0x0) 1.245323835s ago: executing program 1 (id=5237): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2c00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 1.010266818s ago: executing program 4 (id=5238): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009efc999cb8e4f0cdce9c9a4fdad84c2e3960c1300048a048c368365ef94e332b02d40bed954c83f0a26e0ee1db78b31a4167b44e556d0a2f087280c307b00ce1f180023d16f055d895a2e0b10451824c36da45d2870bd20fdeb3269a503e6455df2e12db00000000000000000000000000000000d55e"], 0x0, 0x237, &(0x7f00000009c0)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3MtrXFUYAPDv3jyaNrGTiqgtggGpFcVp2hSFrlrXooIuuuyYTErI9GEmggldpHWvLkRcFKR/guDeunAluKgLrX9BEYsU3bQuInce6dBkktjO9PTx+8GZe86c6XzfN5fOPQfmJoAn1kTxkEfsjYiTWUSp9XweEcON3kjESvN1t2+eny5aFqur7/+VRRYRt26en26/V9Y6jrYGIxFx9a0snv50fdz60vJ8pVarLrTGBxdPnztYX1p+fe505VT1VPXMkak3j0y9MTXVw1qvn/vw6xd+eefli5c/m3z3q90/ZXEsxlpznXX0ykRMrH0mnQYjotLrYIkMtOrprDMbTJgQAACbyjvWcM9GKQbizuKtFD/+mjQ5AAAAoCdWByJWAQAAgMdcZv8PAAAAj7n27wBu3Tw/3W5pf5HwYN04HhHjzfrb9zc3ZwZjpXEciaGI2PV3Fp23tWbNf3bfJopI3/1cLVr06T7kzaxciIjnNzr/WaP+8cZd3OvrzyNisgfxJ+4aP0r1H+tB/NT1A/BkunK8eSFbf/3L19Y/scH1b3CDa9e9SH39a6//bq9b/92pf6DL+u+9bcbY9++rV7vNda7/Tnz++0wRvzjeV1H/w40LEfsGN6o/W6s/61L/yW3GGJ2+fqnbXFF/UW+7Pej6Vy9H7I+N62/LNvv7RAdn52rVyeZjlxj7fzhxoFv8zvNftCJ+ey/wIBTnf1eX+rc6/+e2GWP8uT/3dpvbuv78j+Hsg0ZvuPXMJ5XFxYVDEcPZ2+ufP7x5Lu3XtN+jqP+Vlzb//79R/cV3wkrrcyj2Ahdax2J88a6Yo/sPf3vv9fdXUf/MPZ7/L7YZ45vvL33UbS51/QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8GvKIGIssL6/187xcjhiNiGdiV147W198bfbsx2dmirmI8RjKZ+dq1cmIKDXHWTE+1OjfGR++azwVEXsi4svSzsa4PH22NpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaMRsRYZHk5IvKI+KeU5+Vy6qwAAACAnhtPnQAAAADQd/b/AAAA8Piz/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDP9rx45VoWEStHdzZaYbg1N5Q0M6Df8tQJAMkMpE4ASGYwdQJAMvb4QLbF/EjXmR09zwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh9eBvVeuZRGxcnRnoxWGW3NDSTMD+i1PnQCQzEDqBIBkBlMnACRjjw9kW8yPdJ3Z0fNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh4jTValpcjIm/087xcjngqIsZjKJudq1UnI2J3RPxWGtpRjA+lThoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICeqy8tz1dqteqCjo6Ozlon9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1JeW5yu1WnWhnjoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAILX60vJ8pVarLvSxk7pGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADS+S8AAP//szUGGQ==") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) chdir(&(0x7f0000000540)='./file0\x00') rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000002c0)='./file1\x00') rmdir(&(0x7f0000000480)='./file0\x00') 953.144088ms ago: executing program 1 (id=5239): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="080026008f0900000800b7"], 0x2c}}, 0x0) 859.384779ms ago: executing program 1 (id=5240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d92984160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x40037}, 0x60) r6 = syz_open_dev$vbi(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) r7 = dup(r0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000050000f5"]) 0s ago: executing program 1 (id=5241): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x121500) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x3) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) setpgid(r3, 0x0) setpgid(0x0, r3) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000880)='./bus\x00', 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): timeout [ 1040.276495][T13017] Bluetooth: hci1: command 0x040f tx timeout [ 1040.323130][T15574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.350297][T15574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.442108][T15623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.461362][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.494977][T15623] device bridge_slave_0 entered promiscuous mode [ 1040.579854][T15574] device hsr_slave_0 entered promiscuous mode [ 1040.594590][T15574] device hsr_slave_1 entered promiscuous mode [ 1040.616224][T15574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1040.628964][T15574] Cannot create hsr debugfs directory [ 1040.649051][T15623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.659849][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.683034][T15623] device bridge_slave_1 entered promiscuous mode [ 1041.094771][T15713] netlink: 'syz.4.3006': attribute type 1 has an invalid length. [ 1041.102559][T15713] netlink: 'syz.4.3006': attribute type 2 has an invalid length. [ 1041.595480][T15714] fuse: Bad value for 'fd' [ 1041.858359][T15623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.935922][T15623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.254380][T15623] team0: Port device team_slave_0 added [ 1042.295822][T15623] team0: Port device team_slave_1 added [ 1042.360133][T15723] fuse: Unknown parameter '0xffffffffffffffff' [ 1043.014758][T15623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.021784][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.108958][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 1043.115130][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 1043.121512][T15623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.139304][T15623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.146837][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.173492][T15623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.269852][T15623] device hsr_slave_0 entered promiscuous mode [ 1043.284195][T15623] device hsr_slave_1 entered promiscuous mode [ 1043.294181][T15623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1043.302974][T15623] Cannot create hsr debugfs directory [ 1043.468951][T15574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.530494][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1043.548154][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1043.583232][T15574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.616601][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1043.637729][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1043.668039][ T4622] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.675248][ T4622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.691267][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1043.896097][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1043.922621][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1044.170717][T15743] fuse: Bad value for 'fd' [ 1045.187408][ T8699] Bluetooth: hci0: command 0x0419 tx timeout [ 1045.206853][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.214558][ T4622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.242947][ T4622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1045.539047][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1045.631763][T15756] fuse: Unknown parameter '0xffffffffffffffff' [ 1046.458704][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1046.475143][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1046.488244][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1046.499436][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1046.509552][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1046.522066][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1046.538680][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1046.560514][T15623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1046.572429][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1046.592156][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1046.611606][T15574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1046.642324][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1046.661025][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1046.700811][T15623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1046.783994][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1046.817222][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1046.876931][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.884133][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.963997][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1046.994638][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1047.036612][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.043762][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1047.125025][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1047.175360][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1047.222786][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1047.298312][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1047.400689][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1047.426433][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1047.441762][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1047.449924][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1047.473023][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1047.494444][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1047.507553][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1047.516548][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1047.528701][T15623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1047.615684][T15784] fuse: Bad value for 'fd' [ 1047.630348][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1047.651999][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1048.394636][T15574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.475171][ T4407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.561707][ T4407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.642398][ T4407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.731700][ T4407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.776227][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1048.784430][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1048.805685][T15623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.820867][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1048.834712][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1048.872469][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1048.884630][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1048.902119][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1048.917266][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1048.935352][T15574] device veth0_vlan entered promiscuous mode [ 1049.005783][T15574] device veth1_vlan entered promiscuous mode [ 1049.182343][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1049.215317][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1049.258947][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1049.314405][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1049.345530][T15574] device veth0_macvtap entered promiscuous mode [ 1049.425411][T15574] device veth1_macvtap entered promiscuous mode [ 1049.497089][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.533682][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.553515][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.579852][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.593517][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.604442][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.633421][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1049.656696][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.679829][T15574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.712369][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1049.724342][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1049.750484][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1049.787984][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1049.813130][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.836576][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.869247][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.894584][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.921131][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.952981][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1049.971572][T15574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1049.994074][T15574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1050.014116][T15574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.064904][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1050.075045][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1050.089639][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1050.116411][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.329795][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1050.356773][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1050.413029][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1050.457202][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1050.504192][T15623] device veth0_vlan entered promiscuous mode [ 1050.634295][ T4463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.642858][ T4463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.653059][T15623] device veth1_vlan entered promiscuous mode [ 1050.714578][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1050.741218][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1050.865087][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1050.873098][ T6200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.903867][ T6200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.914813][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1050.944922][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1051.018708][T15623] device veth0_macvtap entered promiscuous mode [ 1051.056019][T15623] device veth1_macvtap entered promiscuous mode [ 1051.147854][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.188680][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.209334][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.242352][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.282313][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.310260][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.341135][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.377938][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.403003][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.444907][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.466309][T15623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.488959][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1051.527889][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1051.550144][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1051.576988][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.596299][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.621226][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.636322][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.658810][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.672497][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.691725][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.703852][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.714786][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.725205][T15623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.737512][T15623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.764200][T15623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.857928][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1051.891098][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1052.234557][ T4407] device hsr_slave_0 left promiscuous mode [ 1052.251186][ T4407] device hsr_slave_1 left promiscuous mode [ 1052.294693][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.302218][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.374634][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1052.398187][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.414798][ T4407] device veth1_macvtap left promiscuous mode [ 1052.428471][ T4407] device veth0_macvtap left promiscuous mode [ 1052.436923][ T4407] device veth1_vlan left promiscuous mode [ 1052.442883][ T4407] device veth0_vlan left promiscuous mode [ 1052.466286][T15924] 9pnet: Insufficient options for proto=fd [ 1052.890607][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 1052.930301][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 1052.964357][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1052.993764][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.172142][ T4407] bond0 (unregistering): Released all slaves [ 1053.306515][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.329568][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.349777][T15949] 9pnet: Insufficient options for proto=fd [ 1053.420896][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.447850][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.488925][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1053.672266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1053.989993][T15969] device bridge_slave_1 left promiscuous mode [ 1054.003736][T15969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.175147][T15978] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1054.232830][T15980] 9pnet: Insufficient options for proto=fd [ 1054.243428][T15985] netlink: 'syz.6.3099': attribute type 2 has an invalid length. [ 1054.257199][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.264382][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.304477][T15985] netlink: 'syz.6.3099': attribute type 1 has an invalid length. [ 1055.276958][T16009] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3107'. [ 1055.596482][T16024] loop5: detected capacity change from 0 to 1024 [ 1055.843741][T16024] EXT4-fs (loop5): Ignoring removed bh option [ 1055.849904][T16024] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1055.980390][T16024] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,jqfmt=vfsold,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nodioread_nolock,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 1056.066891][T16046] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1056.073030][T16024] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.3111: Allocating blocks 385-513 which overlap fs metadata [ 1056.182808][T16023] EXT4-fs (loop5): pa ffff888060171d20: logic 16, phys. 129, len 24 [ 1056.191109][T16023] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 1057.505370][T16074] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3124'. [ 1058.300480][T16095] fuse: Bad value for 'fd' [ 1060.361256][T16125] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3139'. [ 1060.818828][T16136] fuse: Bad value for 'fd' [ 1061.773726][T16137] fuse: Unknown parameter '0xffffffffffffffff' [ 1062.866541][T16145] loop1: detected capacity change from 0 to 2048 [ 1062.932499][T16145] loop1: p1 < > p3 [ 1062.959828][T16145] loop1: p3 size 134217728 extends beyond EOD, truncated [ 1063.163167][ T3546] loop1: p1 < > p3 [ 1063.177252][ T3546] loop1: p3 size 134217728 extends beyond EOD, truncated [ 1064.077891][T15815] udevd[15815]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1064.096442][T15812] udevd[15812]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1064.180111][T16145] loop1: detected capacity change from 0 to 4096 [ 1064.207281][T15812] udevd[15812]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1064.219717][T15815] udevd[15815]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 1064.247466][T16182] loop5: detected capacity change from 0 to 1764 [ 1066.951794][T16257] loop1: detected capacity change from 0 to 8 [ 1067.072397][T16257] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 1067.189140][T16263] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3183'. [ 1067.254736][T16268] loop1: detected capacity change from 0 to 512 [ 1067.392336][T16277] fuse: Bad value for 'fd' [ 1067.453487][T12283] Bluetooth: hci0: command 0x0c20 tx timeout [ 1067.464854][T16268] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 1067.533694][T16268] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1067.690383][T16268] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #12: comm syz.1.3184: invalid size [ 1067.823102][T16294] fuse: Bad value for 'fd' [ 1067.975753][T16268] EXT4-fs (loop1): Remounting filesystem read-only [ 1068.901461][T16319] fuse: Bad value for 'fd' [ 1069.225306][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3207'. [ 1069.421964][T16343] fuse: Bad value for 'fd' [ 1070.452342][T16353] loop1: detected capacity change from 0 to 512 [ 1070.676890][T16353] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 1070.706003][T16353] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1070.727891][T16373] netlink: 'syz.8.3217': attribute type 32 has an invalid length. [ 1070.770099][ T26] audit: type=1800 audit(1743504068.208:49): pid=16353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3212" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1070.807184][T16378] fuse: Bad value for 'fd' [ 1070.963054][T16375] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3217'. [ 1070.998214][T16391] loop1: detected capacity change from 0 to 512 [ 1071.062554][T16391] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1071.118048][T16391] EXT4-fs (loop1): 1 truncate cleaned up [ 1071.130003][T16391] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1071.171130][ T26] audit: type=1800 audit(1743504068.608:50): pid=16391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3220" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1071.431989][T16415] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1073.397645][T16468] loop1: detected capacity change from 0 to 512 [ 1073.773061][T16468] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1073.957317][T16468] UDF-fs: Scanning with blocksize 512 failed [ 1074.199171][T16468] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1074.237053][T16468] UDF-fs: Scanning with blocksize 1024 failed [ 1074.279790][T16468] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1074.303510][T16468] UDF-fs: Scanning with blocksize 2048 failed [ 1074.328755][T16468] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1074.370523][T16468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1074.715032][T16500] fuse: Bad value for 'fd' [ 1074.737177][T16503] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3260'. [ 1075.428351][T16521] fuse: Bad value for 'fd' [ 1076.859956][T16529] loop1: detected capacity change from 0 to 1024 [ 1076.981135][T16529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1077.012076][ T26] audit: type=1800 audit(1743504074.448:51): pid=16529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3267" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1077.041948][ T26] audit: type=1800 audit(1743504074.478:52): pid=16529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3267" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 1077.160187][T16582] fuse: Bad value for 'fd' [ 1077.343104][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3292'. [ 1077.366321][T16595] loop1: detected capacity change from 0 to 512 [ 1077.431057][T16595] EXT4-fs (loop1): Ignoring removed orlov option [ 1077.478531][T16595] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,orlov,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 1077.500108][T16595] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.117345][T16625] loop1: detected capacity change from 0 to 1024 [ 1080.170182][T16629] fuse: Bad value for 'fd' [ 1080.382247][T16625] EXT4-fs (loop1): Ignoring removed nobh option [ 1080.403934][T16625] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1080.481593][T16625] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,usrjquota=,nobarrier,dioread_lock,norecovery,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,delalloc,nodelalloc,dioread_nolock,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 1081.581771][T16672] fuse: Unknown parameter 'grou00000000000000000000' [ 1084.082917][T16717] fuse: Bad value for 'fd' [ 1084.569104][T16721] fuse: Bad value for 'fd' [ 1085.210933][T16741] loop1: detected capacity change from 0 to 256 [ 1086.539054][T16741] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 1086.548068][T16741] FAT-fs (loop1): Filesystem has been set read-only [ 1086.607557][ T26] audit: type=1800 audit(1743504083.958:53): pid=16741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3340" name="file1" dev="loop1" ino=1048654 res=0 errno=0 [ 1087.976285][T16775] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3352'. [ 1090.583122][T16878] netlink: 'syz.4.3381': attribute type 1 has an invalid length. [ 1090.591289][T16878] netlink: 'syz.4.3381': attribute type 2 has an invalid length. [ 1091.593117][T16900] loop1: detected capacity change from 0 to 512 [ 1091.613239][T16901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3387'. [ 1091.803248][T16900] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 1091.813300][T16900] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1092.016544][T16900] [EXT4 FS bs=4096, gc=1, bpg=64, ipg=32, mo=842e028, mo2=0000] [ 1092.078507][T16900] Quota error (device loop1): do_check_range: Getting dqdh_next_free 15 out of range 0-5 [ 1092.117536][T16900] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1092.144170][T16900] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.3388: Failed to acquire dquot type 1 [ 1092.164705][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.185909][T16900] EXT4-fs error (device loop1): mb_free_blocks:1865: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1092.204284][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.216249][T16900] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #12: comm syz.1.3388: corrupted inode contents [ 1092.257656][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.281781][T16900] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #12: comm syz.1.3388: mark_inode_dirty error [ 1092.324719][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.340614][T16900] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #12: comm syz.1.3388: corrupted inode contents [ 1092.387569][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.411559][T16900] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #12: comm syz.1.3388: mark_inode_dirty error [ 1092.476884][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.500042][T16900] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #12: comm syz.1.3388: corrupted inode contents [ 1092.543433][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.550015][T16900] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 1092.600784][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.614765][T16900] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #12: comm syz.1.3388: corrupted inode contents [ 1092.632469][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.654111][T16900] EXT4-fs error (device loop1): ext4_truncate:4272: inode #12: comm syz.1.3388: mark_inode_dirty error [ 1092.765068][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.779797][T16900] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 1092.819728][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1092.946440][T16900] EXT4-fs (loop1): 1 truncate cleaned up [ 1092.953527][T16900] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000200,noblock_validity,mblk_io_submit,nodiscard,noinit_itable,debug,nouid32,errors=remount-ro,resgid=0x000000000000ee002. Quota mode: writeback. [ 1093.110991][T16900] Quota error (device loop1): do_check_range: Getting dqdh_next_free 15 out of range 0-5 [ 1093.154943][T16947] netlink: 'syz.8.3397': attribute type 1 has an invalid length. [ 1093.162783][T16947] netlink: 'syz.8.3397': attribute type 2 has an invalid length. [ 1093.457278][T16900] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1093.804440][T16900] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.3388: Failed to acquire dquot type 1 [ 1093.900401][T16900] EXT4-fs (loop1): Remounting filesystem read-only [ 1093.959336][T16950] Quota error (device loop1): do_check_range: Getting dqdh_next_free 15 out of range 0-5 [ 1094.013773][T16950] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1094.043509][T16950] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.3388: Failed to acquire dquot type 1 [ 1094.072021][T16950] EXT4-fs (loop1): Remounting filesystem read-only [ 1094.325784][T16974] loop1: detected capacity change from 0 to 128 [ 1094.612472][T16989] attempt to access beyond end of device [ 1094.612472][T16989] loop1: rw=2049, want=457, limit=128 [ 1094.675552][T16974] attempt to access beyond end of device [ 1094.675552][T16974] loop1: rw=524288, want=457, limit=128 [ 1094.913404][T17000] netlink: 'syz.4.3412': attribute type 1 has an invalid length. [ 1094.921450][T17000] netlink: 'syz.4.3412': attribute type 2 has an invalid length. [ 1097.129955][T17030] netlink: 'syz.8.3423': attribute type 2 has an invalid length. [ 1097.417273][T17039] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3426'. [ 1098.625971][T17097] netlink: 'syz.6.3437': attribute type 2 has an invalid length. [ 1098.810661][T17102] netlink: 'syz.4.3428': attribute type 1 has an invalid length. [ 1098.818689][T17102] netlink: 'syz.4.3428': attribute type 2 has an invalid length. [ 1099.634914][T17120] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1099.693691][T17123] netlink: 'syz.1.3449': attribute type 2 has an invalid length. [ 1100.083068][T17138] loop1: detected capacity change from 0 to 2048 [ 1100.142310][T17138] loop1: p1 < > p3 [ 1100.154651][T17138] loop1: p3 size 134217728 extends beyond EOD, truncated [ 1100.341122][T17138] loop1: detected capacity change from 0 to 4096 [ 1100.629658][T17155] loop1: detected capacity change from 0 to 128 [ 1100.655715][T17157] netlink: 'syz.6.3454': attribute type 1 has an invalid length. [ 1100.772815][T17157] netlink: 'syz.6.3454': attribute type 2 has an invalid length. [ 1100.794412][T17155] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,,errors=continue. Quota mode: none. [ 1100.829577][T17155] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.823433][T17212] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3485'. [ 1105.289230][T17238] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3496'. [ 1107.829449][T17272] netlink: 'syz.6.3507': attribute type 32 has an invalid length. [ 1107.861627][T17272] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3507'. [ 1114.063323][T17308] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3519'. [ 1117.824869][T17354] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3535'. [ 1117.837544][ T4431] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1117.955123][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.010960][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.062713][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.069211][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.710701][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3546'. [ 1122.453180][T17391] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3551'. [ 1125.049633][T17419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3560'. [ 1126.339505][T17438] syz.6.3569 uses obsolete (PF_INET,SOCK_PACKET) [ 1126.773223][T17449] fuse: Bad value for 'fd' [ 1126.949982][T17454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3575'. [ 1127.374608][T17461] 9pnet: Could not find request transport: uni [ 1127.731360][T17467] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1127.786944][T17467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1127.825293][T17467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1128.315047][T17479] fuse: Bad value for 'fd' [ 1129.437867][T17498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3594'. [ 1130.829315][T17547] 9pnet: Could not find request transport: uni [ 1130.862108][T17548] fuse: Unknown parameter 'user_i00000000000000000000' [ 1131.101638][T17555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3615'. [ 1131.403929][T17566] autofs4:pid:17566:autofs_fill_super: called with bogus options [ 1131.500992][T17566] overlayfs: failed to clone upperpath [ 1132.060131][T17580] fuse: Unknown parameter 'user_i00000000000000000000' [ 1132.451175][T17600] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3633'. [ 1132.744077][T17610] fuse: Unknown parameter 'user_i00000000000000000000' [ 1132.804602][T17613] autofs4:pid:17613:autofs_fill_super: called with bogus options [ 1132.875687][T17620] 9pnet: Could not find request transport: uni [ 1132.897393][T17613] overlayfs: failed to clone upperpath [ 1133.530934][T17640] fuse: Bad value for 'fd' [ 1133.577693][T17642] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3651'. [ 1133.596572][T17642] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3651'. [ 1133.932179][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3658'. [ 1133.982165][T17662] autofs4:pid:17662:autofs_fill_super: called with bogus options [ 1134.059625][T17662] overlayfs: failed to clone upperpath [ 1134.066322][T17667] fuse: Unknown parameter 'user_id00000000000000000000' [ 1134.146139][T17669] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1134.164654][T17669] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1134.246634][T17675] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1134.360905][ T26] audit: type=1326 audit(1743504131.798:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1134.430001][ T26] audit: type=1326 audit(1743504131.828:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1134.446807][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3670'. [ 1134.488463][ T26] audit: type=1326 audit(1743504131.828:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1134.504866][T17690] fuse: Bad value for 'fd' [ 1134.538494][ T26] audit: type=1326 audit(1743504131.828:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1134.589948][ T26] audit: type=1326 audit(1743504131.828:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1134.775409][ T26] audit: type=1326 audit(1743504131.828:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1134.818753][ T26] audit: type=1326 audit(1743504131.828:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1134.832746][T17698] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3674'. [ 1134.866479][T17698] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3674'. [ 1134.888142][T17702] 9pnet: Could not find request transport: uni [ 1134.901251][ T26] audit: type=1326 audit(1743504131.828:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1134.992044][ T26] audit: type=1326 audit(1743504131.828:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1135.054398][ T26] audit: type=1326 audit(1743504131.828:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17638 comm="syz.5.3649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x7fc00000 [ 1135.311760][T17718] fuse: Bad value for 'fd' [ 1135.592651][T17728] netlink: 'syz.8.3685': attribute type 2 has an invalid length. [ 1136.333220][T17730] autofs4:pid:17730:autofs_fill_super: called with bogus options [ 1136.376111][T17733] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3688'. [ 1136.399691][T17733] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3688'. [ 1136.412273][T17730] overlayfs: failed to clone upperpath [ 1137.158773][T17768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1137.868689][T17771] autofs4:pid:17771:autofs_fill_super: called with bogus options [ 1138.027881][T17771] overlayfs: failed to clone upperpath [ 1140.198692][T17822] autofs4:pid:17822:autofs_fill_super: called with bogus options [ 1140.223022][T17821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3724'. [ 1140.272550][T17827] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1140.314990][T17822] overlayfs: failed to clone upperpath [ 1140.321878][T17827] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3725'. [ 1142.565129][T17862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3739'. [ 1143.385250][T17886] autofs4:pid:17886:autofs_fill_super: called with bogus options [ 1144.639364][T17903] netlink: 'syz.6.3753': attribute type 11 has an invalid length. [ 1144.699176][T17907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3755'. [ 1144.721527][T17909] syz.1.3756[17909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1144.721628][T17909] syz.1.3756[17909] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1145.788248][T17922] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1145.810980][T17922] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3761'. [ 1146.973063][T17935] autofs4:pid:17935:autofs_fill_super: called with bogus options [ 1148.039731][T17935] overlayfs: failed to clone upperpath [ 1148.085449][T17953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3770'. [ 1148.125197][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3769'. [ 1149.265542][T17967] netlink: 'syz.4.3775': attribute type 32 has an invalid length. [ 1149.478624][T17967] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3775'. [ 1149.511321][T17975] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3775'. [ 1150.301927][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3784'. [ 1151.426865][T17997] autofs4:pid:17997:autofs_fill_super: called with bogus options [ 1151.499635][T17997] overlayfs: failed to clone upperpath [ 1152.692944][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3795'. [ 1154.095926][T18043] autofs4:pid:18043:autofs_fill_super: called with bogus options [ 1154.946780][T18039] overlayfs: failed to clone upperpath [ 1157.916452][T18095] autofs4:pid:18095:autofs_fill_super: called with bogus options [ 1157.978041][T18095] overlayfs: failed to clone upperpath [ 1159.316297][T11993] Bluetooth: hci1: command 0x0406 tx timeout [ 1159.323141][T11993] Bluetooth: hci0: command 0x0406 tx timeout [ 1164.349734][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3857'. [ 1172.194882][T18294] device batadv_slave_0 entered promiscuous mode [ 1172.218097][T18294] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3897'. [ 1172.248910][T18294] net_ratelimit: 6168 callbacks suppressed [ 1172.248945][T18294] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1172.354621][T18304] syz.1.3900[18304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1172.354724][T18304] syz.1.3900[18304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1173.217674][T18334] syz.1.3912[18334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1173.229317][T18334] syz.1.3912[18334] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1174.664222][T18364] syz.8.3924[18364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1174.699527][T18364] syz.8.3924[18364] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1175.807888][T18384] 9pnet: Insufficient options for proto=fd [ 1177.830027][T18424] netlink: 'syz.6.3949': attribute type 32 has an invalid length. [ 1177.839832][T18424] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3949'. [ 1181.302320][T18462] syz.8.3963[18462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1181.302422][T18462] syz.8.3963[18462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1182.256404][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.275067][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.001222][T18504] syz.8.3977[18504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1184.001340][T18504] syz.8.3977[18504] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1186.318581][T18546] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3996'. [ 1186.453736][T18550] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3996'. [ 1188.099813][T18580] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4008'. [ 1188.125680][T18580] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4008'. [ 1189.498724][T18597] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4016'. [ 1189.533647][T18601] syz.5.4017[18601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1189.533749][T18601] syz.5.4017[18601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1189.598837][T18605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4018'. [ 1190.940851][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4030'. [ 1191.670899][T18679] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 1192.045261][T18686] 9pnet: Insufficient options for proto=fd [ 1192.341531][T18700] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4057'. [ 1193.354721][T18696] chnl_net:caif_netlink_parms(): no params data found [ 1193.692677][T18696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.701198][T18696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.710050][T18696] device bridge_slave_0 entered promiscuous mode [ 1193.759996][T18696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.786780][T18696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.810186][T18696] device bridge_slave_1 entered promiscuous mode [ 1193.853675][T18696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.870504][T18696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.905750][T18696] team0: Port device team_slave_0 added [ 1193.914718][T18696] team0: Port device team_slave_1 added [ 1193.946857][T18696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1193.954070][T18696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1193.980150][T18696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1193.997911][T18696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.007648][T18696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.040883][T18696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.083256][T18696] device hsr_slave_0 entered promiscuous mode [ 1194.090692][T18696] device hsr_slave_1 entered promiscuous mode [ 1194.097667][T18696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1194.106247][T18696] Cannot create hsr debugfs directory [ 1194.295512][T18696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.302692][T18696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.310184][T18696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.317328][T18696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.414945][ T8699] Bluetooth: hci4: command 0x0409 tx timeout [ 1194.431204][T18743] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1194.460914][ T6200] device hsr_slave_0 left promiscuous mode [ 1194.483205][ T6200] device hsr_slave_1 left promiscuous mode [ 1194.507276][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.531335][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.544874][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.558722][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.571575][ T6200] device bridge_slave_1 left promiscuous mode [ 1194.591460][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.610760][ T6200] device bridge_slave_0 left promiscuous mode [ 1194.632185][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.667316][ T6200] device veth1_macvtap left promiscuous mode [ 1194.689403][ T6200] device veth0_macvtap left promiscuous mode [ 1194.711887][ T6200] device veth1_vlan left promiscuous mode [ 1194.728829][ T6200] device veth0_vlan left promiscuous mode [ 1196.496111][T11993] Bluetooth: hci4: command 0x041b tx timeout [ 1196.548583][ T6200] team0 (unregistering): Port device team_slave_1 removed [ 1196.650182][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 1196.755439][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.825933][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.004467][T18789] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4091'. [ 1197.505236][ T6200] bond0 (unregistering): Released all slaves [ 1197.584361][ T4396] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.604994][ T4396] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.366912][T18696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.705562][ T5477] Bluetooth: hci4: command 0x040f tx timeout [ 1198.828044][T18696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.886501][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1198.899326][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1198.917968][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1198.937918][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1198.954359][T18823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4104'. [ 1198.969233][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.976798][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.081775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1199.098732][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1199.126960][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.135414][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.352158][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1199.384901][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1199.395040][T18836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4109'. [ 1199.431111][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1199.451381][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1199.479932][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1199.512700][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1199.531096][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1199.550223][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1199.600596][T18696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1199.620994][T18696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1199.670636][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1199.682226][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1199.696742][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1200.007042][T18696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.080554][T18858] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4118'. [ 1200.139094][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1200.153087][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1200.632646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1200.654372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1200.728815][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1200.737573][ T5477] Bluetooth: hci4: command 0x0419 tx timeout [ 1200.749889][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1200.772091][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1200.782573][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1200.814308][T18696] device veth0_vlan entered promiscuous mode [ 1200.926227][T18888] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4128'. [ 1200.960343][T18696] device veth1_vlan entered promiscuous mode [ 1201.057307][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1201.109183][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1201.216324][T18696] device veth0_macvtap entered promiscuous mode [ 1201.257484][T18696] device veth1_macvtap entered promiscuous mode [ 1201.363649][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.426419][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.497222][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.563404][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.614626][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1201.693568][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.767612][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1202.055836][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.285233][T18696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1202.313734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1202.350823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1202.386961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1202.412584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1202.447393][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.488455][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.539769][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.564674][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.606435][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.642115][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.682052][T18696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1202.702858][T18696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1202.754731][T18696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1202.766683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1202.797110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1203.162417][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1203.191561][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.271055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1203.433996][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1203.443142][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1203.481874][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1208.279124][T18987] 9pnet: Could not find request transport: uni [ 1208.302008][T18987] loop8: detected capacity change from 0 to 128 [ 1209.624415][T18987] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1209.635583][T18987] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1209.787728][ T5477] Bluetooth: hci5: command 0x0409 tx timeout [ 1209.936905][T18965] chnl_net:caif_netlink_parms(): no params data found [ 1210.150189][T18965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.168613][T18965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.187266][T18965] device bridge_slave_0 entered promiscuous mode [ 1210.224872][T18965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.235768][T18965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.270610][T18965] device bridge_slave_1 entered promiscuous mode [ 1210.303016][T19012] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1210.330996][T19012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1210.428158][T18965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.464996][T18965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.603066][T18965] team0: Port device team_slave_0 added [ 1210.632924][T18965] team0: Port device team_slave_1 added [ 1211.578490][T18965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.618625][T18965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1211.787718][T19031] loop8: detected capacity change from 0 to 8 [ 1211.824543][T18965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.854131][ T5477] Bluetooth: hci5: command 0x041b tx timeout [ 1211.915719][T18965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.933840][T18965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1212.140953][T18965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.263323][ T5477] Bluetooth: hci5: command 0x040f tx timeout [ 1216.342473][T18965] device hsr_slave_0 entered promiscuous mode [ 1216.357369][T18965] device hsr_slave_1 entered promiscuous mode [ 1216.407650][T18965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1216.454856][T18965] Cannot create hsr debugfs directory [ 1216.628864][T19048] loop8: detected capacity change from 0 to 64 [ 1217.192250][T18965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1217.248530][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1217.260950][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1217.300001][T18965] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.332172][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1217.354716][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1217.404107][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.411290][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.443880][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1217.477885][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1217.497868][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1217.528425][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.535578][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.602023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1217.634105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1217.684304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1217.755035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1217.784406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1217.813696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1217.853238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1217.884611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1217.920304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1218.059199][T18965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1218.168541][T18965] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1218.607879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1218.623053][ T5477] Bluetooth: hci5: command 0x0419 tx timeout [ 1218.644223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1219.123239][T19076] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4190'. [ 1219.177414][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1219.185088][T19078] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4190'. [ 1219.211317][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1219.244521][T18965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1219.361443][T19054] loop8: detected capacity change from 0 to 32768 [ 1219.567940][T19054] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.4183 (19054) [ 1219.712162][T19091] 9pnet: Could not find request transport: uni [ 1220.501281][T19054] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 1220.563058][T19054] BTRFS info (device loop8): force clearing of disk cache [ 1220.574936][T19054] BTRFS info (device loop8): enabling ssd optimizations [ 1220.603934][T19054] BTRFS info (device loop8): using spread ssd allocation scheme [ 1220.611625][T19054] BTRFS info (device loop8): using free space tree [ 1220.620769][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1220.630354][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1220.649476][T19054] BTRFS info (device loop8): has skinny extents [ 1220.669214][T18965] device veth0_vlan entered promiscuous mode [ 1220.686227][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1220.715778][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1220.818811][T18965] device veth1_vlan entered promiscuous mode [ 1220.835408][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1220.845889][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1220.915094][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1221.007020][T18965] device veth0_macvtap entered promiscuous mode [ 1221.052404][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1221.061233][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1221.079433][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1221.104768][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1221.133867][T18965] device veth1_macvtap entered promiscuous mode [ 1221.200849][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.257834][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.313423][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.349036][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.538277][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.581526][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.596677][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.623512][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.647565][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1221.673104][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.705627][T18965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.715441][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1221.745028][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1221.771939][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1221.780879][T19054] BTRFS error (device loop8): open_ctree failed: -12 [ 1221.800727][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.843334][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.853215][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.893858][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.923349][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.946335][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1221.977435][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1221.991127][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.031953][T18965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1222.053048][T18965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1222.084893][T18965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.103536][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1222.119642][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1222.433730][ T8372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.472314][ T8372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.482771][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.512012][ T8228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1222.530979][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.571421][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1222.630179][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 1222.630197][ T26] audit: type=1326 audit(1743504220.048:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19142 comm="syz.5.4203" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0aa942a169 code=0x0 [ 1222.765873][T19155] 9pnet: Could not find request transport: uni [ 1223.465083][T19162] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4207'. [ 1223.733864][T19171] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4210'. [ 1223.768548][T19170] loop8: detected capacity change from 0 to 256 [ 1223.902278][T19170] FAT-fs (loop8): Directory bread(block 64) failed [ 1223.941604][T19170] FAT-fs (loop8): Directory bread(block 65) failed [ 1223.953624][T19170] FAT-fs (loop8): Directory bread(block 66) failed [ 1223.973993][T19170] FAT-fs (loop8): Directory bread(block 67) failed [ 1223.990508][T19170] FAT-fs (loop8): Directory bread(block 68) failed [ 1224.003415][T19170] FAT-fs (loop8): Directory bread(block 69) failed [ 1224.020972][T19170] FAT-fs (loop8): Directory bread(block 70) failed [ 1224.050585][T19170] FAT-fs (loop8): Directory bread(block 71) failed [ 1224.094017][T19170] FAT-fs (loop8): Directory bread(block 72) failed [ 1224.113505][T19170] FAT-fs (loop8): Directory bread(block 73) failed [ 1224.412928][ T4692] device hsr_slave_0 left promiscuous mode [ 1224.434635][ T4692] device hsr_slave_1 left promiscuous mode [ 1224.455545][T19182] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4216'. [ 1224.523236][ T4692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1224.525965][T19182] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4216'. [ 1224.531341][ T4692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.593580][ T4692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1224.601060][ T4692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.718004][ T4692] device bridge_slave_1 left promiscuous mode [ 1224.740722][ T4692] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.770336][ T4692] device bridge_slave_0 left promiscuous mode [ 1224.790023][ T4692] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.851711][ T4692] device veth1_macvtap left promiscuous mode [ 1224.858521][ T4692] device veth0_macvtap left promiscuous mode [ 1224.922251][T19197] 9pnet: Could not find request transport: uni [ 1224.946294][T19197] loop8: detected capacity change from 0 to 128 [ 1225.208590][T19197] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1225.219961][T19197] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1225.277774][ T4692] device veth1_vlan left promiscuous mode [ 1225.404365][ T4692] device veth0_vlan left promiscuous mode [ 1225.554626][T19174] loop6: detected capacity change from 0 to 32768 [ 1225.907275][T19174] find_entry called with index >= next_index [ 1225.923704][T19174] find_entry called with index >= next_index [ 1225.930820][T19174] find_entry called with index >= next_index [ 1225.966841][T19174] find_entry called with index >= next_index [ 1225.983790][T19174] find_entry called with index >= next_index [ 1226.421108][ T4692] team0 (unregistering): Port device team_slave_1 removed [ 1226.456133][ T4692] team0 (unregistering): Port device team_slave_0 removed [ 1226.480897][ T4692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.495735][ T4692] device bond_slave_1 left promiscuous mode [ 1226.520729][ T4692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.542738][ T4692] device bond_slave_0 left promiscuous mode [ 1226.651633][ T4692] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1226.672160][ T4692] device batadv0 left promiscuous mode [ 1226.799917][ T4692] bond0 (unregistering): Released all slaves [ 1227.172326][T19223] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4229'. [ 1227.217002][T19223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4229'. [ 1227.403775][ T7] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1227.708056][ T7] usb 7-1: Using ep0 maxpacket: 8 [ 1227.957498][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1227.981119][ T7] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1228.299656][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.443345][ T7] usb 7-1: config 0 descriptor?? [ 1228.608460][T19242] loop8: detected capacity change from 0 to 1024 [ 1228.769409][T19219] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4227'. [ 1228.837002][T19219] loop6: detected capacity change from 0 to 512 [ 1229.780384][T19219] EXT4-fs (loop6): Unrecognized mount option "defcontext=root" or missing value [ 1229.970219][T19258] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4241'. [ 1230.069842][T19258] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4241'. [ 1230.476398][T19264] loop8: detected capacity change from 0 to 128 [ 1230.581466][T19266] loop6: detected capacity change from 0 to 128 [ 1230.595649][T19264] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1230.666229][T19264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1230.774524][ T7] usbhid 7-1:0.0: can't add hid device: -71 [ 1230.787648][ T7] usbhid: probe of 7-1:0.0 failed with error -71 [ 1231.223778][ T7] usb 7-1: USB disconnect, device number 16 [ 1231.935201][T19291] loop8: detected capacity change from 0 to 256 [ 1232.723471][T19298] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4255'. [ 1232.768924][T19298] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4255'. [ 1232.999216][ T5477] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1233.116552][T19307] loop6: detected capacity change from 0 to 128 [ 1233.201753][T19307] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1233.227196][T19307] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1233.253450][ T5477] usb 9-1: Using ep0 maxpacket: 8 [ 1233.373768][ T5477] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1233.414457][ T5477] usb 9-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1233.476823][ T5477] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.548758][ T5477] usb 9-1: config 0 descriptor?? [ 1233.715865][T19316] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1233.823577][T19297] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4254'. [ 1233.874179][T19297] loop8: detected capacity change from 0 to 512 [ 1233.979430][T19297] EXT4-fs (loop8): Unrecognized mount option "defcontext=root" or missing value [ 1234.319131][T19326] loop6: detected capacity change from 0 to 256 [ 1235.586128][T19329] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4266'. [ 1235.655234][T19329] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4266'. [ 1236.001526][T19342] loop8: detected capacity change from 0 to 256 [ 1236.033479][ T5477] usbhid 9-1:0.0: can't add hid device: -71 [ 1236.040081][ T5477] usbhid: probe of 9-1:0.0 failed with error -71 [ 1236.050025][T19336] overlayfs: failed to clone upperpath [ 1236.091203][ T5477] usb 9-1: USB disconnect, device number 12 [ 1236.097641][T19342] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1236.511677][T19354] loop6: detected capacity change from 0 to 512 [ 1236.859139][T19354] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1236.872951][T19354] System zones: 0-2, 18-18, 34-35 [ 1237.287051][T19354] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1237.509285][T19354] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1237.661238][T19368] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4279'. [ 1237.723523][T19368] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4279'. [ 1237.973400][T12282] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1242.512996][T12282] usb 9-1: Using ep0 maxpacket: 16 [ 1242.592126][T19385] autofs4:pid:19385:autofs_fill_super: called with bogus options [ 1242.667849][T19385] overlayfs: failed to resolve './file0': -2 [ 1242.976214][T12282] usb 9-1: device descriptor read/all, error -71 [ 1243.706299][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.743913][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.105271][T19403] netlink: 128 bytes leftover after parsing attributes in process `syz.8.4291'. [ 1246.106027][T19403] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4291'. [ 1248.361792][T19419] loop8: detected capacity change from 0 to 4096 [ 1248.574734][T19427] autofs4:pid:19427:autofs_fill_super: called with bogus options [ 1248.863626][T19427] overlayfs: failed to resolve './file0': -2 [ 1249.400490][T19436] loop6: detected capacity change from 0 to 512 [ 1249.402814][T19432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4302'. [ 1249.494853][T19439] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4302'. [ 1249.955931][T19447] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1249.972935][T19436] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1250.601020][T19436] System zones: 0-2, 18-18, 34-35 [ 1250.712544][T19436] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1250.768527][ T154] ntfs3: loop8: ino=1c, Internal error [ 1250.773536][T19436] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1250.775206][ T154] ntfs3: loop8: ntfs3_write_inode r=1c failed, -22. [ 1250.875539][T19455] 9pnet: Could not find request transport: uni [ 1253.100695][T19470] loop8: detected capacity change from 0 to 8192 [ 1253.274065][T19470] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 1253.350325][T19470] REISERFS (device loop8): using ordered data mode [ 1253.372658][T19473] loop6: detected capacity change from 0 to 8192 [ 1253.423402][T19470] reiserfs: using flush barriers [ 1253.463606][T19470] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1253.494263][T19470] REISERFS (device loop8): checking transaction log (loop8) [ 1253.510611][T19473] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 1253.545789][T19470] REISERFS (device loop8): Using r5 hash to sort names [ 1253.547305][T19473] REISERFS (device loop6): using ordered data mode [ 1253.559954][T19470] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1253.574633][T19470] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 1253.650080][T19473] reiserfs: using flush barriers [ 1253.680362][T19473] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1253.756252][T19473] REISERFS (device loop6): checking transaction log (loop6) [ 1254.576501][T19473] REISERFS (device loop6): Using tea hash to sort names [ 1254.620800][T19473] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 1254.740824][T19482] autofs4:pid:19482:autofs_fill_super: called with bogus options [ 1254.842196][T19482] overlayfs: failed to clone upperpath [ 1256.305988][T19497] loop8: detected capacity change from 0 to 32768 [ 1256.625676][T19497] JBD2: Ignoring recovery information on journal [ 1256.771013][T19497] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1256.912289][T19497] (syz.8.4321,19497,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 1256.994687][T19497] (syz.8.4321,19497,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 1257.038277][T19497] (syz.8.4321,19497,0):ocfs2_mknod:298 ERROR: status = -2 [ 1257.083893][T19497] (syz.8.4321,19497,1):ocfs2_mknod:502 ERROR: status = -2 [ 1257.093837][T19497] (syz.8.4321,19497,1):ocfs2_create:676 ERROR: status = -2 [ 1257.385609][T18696] ocfs2: Unmounting device (7,8) on (node local) [ 1258.574043][T19557] loop6: detected capacity change from 0 to 256 [ 1260.115048][T19591] loop6: detected capacity change from 0 to 256 [ 1260.859933][T19571] loop8: detected capacity change from 0 to 32768 [ 1260.968819][T19571] find_entry called with index >= next_index [ 1260.980157][T19571] find_entry called with index >= next_index [ 1260.993537][T19571] find_entry called with index >= next_index [ 1261.079452][T19601] find_entry called with index >= next_index [ 1261.114547][T19601] find_entry called with index >= next_index [ 1261.178039][T19571] jfs_rename did not expect dtDelete to return rc = -116 [ 1261.199541][T19571] ERROR: (device loop8): jfs_rename: [ 1261.199541][T19571] [ 1261.395967][T19571] ERROR: (device loop8): remounting filesystem as read-only [ 1263.073448][T19607] loop6: detected capacity change from 0 to 262144 [ 1263.753577][T19607] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by syz.6.4361 (19607) [ 1263.800559][T19607] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 1263.809942][T19607] BTRFS info (device loop6): force clearing of disk cache [ 1263.817368][T19607] BTRFS info (device loop6): turning off barriers [ 1263.823972][T19607] BTRFS info (device loop6): enabling disk space caching [ 1263.831029][T19607] BTRFS info (device loop6): disk space caching is enabled [ 1263.838359][T19607] BTRFS info (device loop6): has skinny extents [ 1263.844677][T19607] BTRFS info (device loop6): flagging fs with big metadata feature [ 1264.207735][T19607] BTRFS info (device loop6): clearing free space tree [ 1264.215879][T19607] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1264.226447][T19607] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1264.948129][T19687] syz.1.4384[19687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1264.948238][T19687] syz.1.4384[19687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1268.022055][T19787] autofs4:pid:19787:autofs_fill_super: called with bogus options [ 1268.179225][T19787] overlayfs: failed to clone upperpath [ 1268.455606][T19699] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1268.560875][T19812] 9pnet: Could not find request transport: uni [ 1268.584058][T19812] loop6: detected capacity change from 0 to 128 [ 1269.361637][T19812] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1269.372583][T19812] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1269.508680][T19825] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4439'. [ 1269.553627][T19699] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1269.571363][T19699] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1269.612502][T19699] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1269.656735][T19699] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1269.682178][T19699] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.716132][T19699] usb 9-1: config 0 descriptor?? [ 1269.875886][T19844] autofs4:pid:19844:autofs_fill_super: called with bogus options [ 1269.949804][T19844] overlayfs: failed to resolve './file0': -2 [ 1270.304108][T19699] usbhid 9-1:0.0: can't add hid device: -71 [ 1270.337721][T19699] usbhid: probe of 9-1:0.0 failed with error -71 [ 1270.365811][T19699] usb 9-1: USB disconnect, device number 15 [ 1270.580275][T19861] 9pnet: Could not find request transport: uni [ 1271.359252][T19877] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4458'. [ 1271.783462][ T8699] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1271.859718][T19899] 9pnet: Could not find request transport: uni [ 1272.163959][ T8699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.225890][ T8699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.322621][ T8699] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1272.475146][ T8699] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1272.515759][ T8699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.553154][ T8699] usb 7-1: config 0 descriptor?? [ 1272.810375][T19922] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4480'. [ 1273.226264][T19938] 9pnet: Could not find request transport: uni [ 1273.726985][ T8699] usbhid 7-1:0.0: can't add hid device: -71 [ 1273.776354][ T8699] usbhid: probe of 7-1:0.0 failed with error -71 [ 1273.919840][ T8699] usb 7-1: USB disconnect, device number 17 [ 1274.323582][T19957] netlink: 'syz.6.4493': attribute type 32 has an invalid length. [ 1276.284717][T19996] netlink: 'syz.6.4509': attribute type 32 has an invalid length. [ 1277.646471][ T5477] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1278.795640][T19699] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1278.920030][ T5477] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1278.976391][ T5477] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1278.998603][ T5477] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1279.012134][ T5477] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1279.261680][T19699] usb 7-1: Using ep0 maxpacket: 8 [ 1279.273359][ T5477] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.285002][ T5477] usb 9-1: config 0 descriptor?? [ 1281.403466][T19699] usb 7-1: device descriptor read/all, error -71 [ 1281.576182][ T5477] usb 9-1: can't set config #0, error -71 [ 1281.592762][ T5477] usb 9-1: USB disconnect, device number 16 [ 1298.633853][T20178] syz.4.4566[20178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1298.633956][T20178] syz.4.4566[20178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1303.566149][T20222] syz.8.4580[20222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1303.581631][T20222] syz.8.4580[20222] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1307.477819][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.504867][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.752651][T20282] 9pnet: Could not find request transport: uni [ 1310.785028][T20282] loop8: detected capacity change from 0 to 128 [ 1311.569326][T20282] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1311.580217][T20282] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.884493][ T5477] Bluetooth: hci4: command 0x0406 tx timeout [ 1322.788984][T20376] syz.5.4620[20376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1322.789085][T20376] syz.5.4620[20376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1323.352571][T20395] 9pnet: Could not find request transport: uni [ 1323.693714][T20395] loop8: detected capacity change from 0 to 128 [ 1326.538421][T20395] EXT4-fs: failed to create workqueue [ 1326.543916][T20395] EXT4-fs (loop8): mount failed [ 1329.051879][T20444] syz.6.4640[20444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1329.051980][T20444] syz.6.4640[20444] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1337.733388][T19131] Bluetooth: hci5: command 0x0406 tx timeout [ 1339.132809][T20519] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1340.605757][T20529] 9pnet: Could not find request transport: uni [ 1347.595365][T20545] loop8: detected capacity change from 0 to 1024 [ 1348.458309][T20545] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1348.512448][T20545] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1348.660527][T20557] syz.1.4681[20557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1348.660634][T20557] syz.1.4681[20557] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1354.217884][T20618] syz.4.4694[20618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1354.233591][T20618] syz.4.4694[20618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1360.677157][T20663] loop6: detected capacity change from 0 to 128 [ 1360.771422][T20663] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1360.781930][T20670] syz.8.4709[20670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1360.782027][T20670] syz.8.4709[20670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1360.810050][T20663] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1365.300888][T20723] syz.1.4723[20723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1365.300989][T20723] syz.1.4723[20723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1368.334171][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.384567][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1370.840318][T20765] syz.1.4736[20765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1370.840439][T20765] syz.1.4736[20765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1371.158512][T20769] 9pnet: Could not find request transport: uni [ 1371.212044][T20769] loop8: detected capacity change from 0 to 128 [ 1372.199045][T20769] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1372.210225][T20769] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1372.599488][T20781] loop8: detected capacity change from 0 to 512 [ 1372.880450][T20781] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 1372.893716][T20781] System zones: 0-2, 18-18, 34-35 [ 1372.927059][T20781] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1373.551685][T20781] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1377.649373][T20826] 9pnet: Could not find request transport: uni [ 1377.689360][T20826] loop8: detected capacity change from 0 to 128 [ 1378.658826][T20826] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1378.670000][T20826] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.718671][T20834] binder_alloc: 20833: pid 20833 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1378.846648][T20837] loop6: detected capacity change from 0 to 256 [ 1378.975469][T20837] exfat: Unknown parameter 'dyscar0ÿÿÿÿÿÿù´0000000000007' [ 1381.814163][T20870] syz.1.4765[20870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1381.814265][T20870] syz.1.4765[20870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1384.246279][T20885] loop8: detected capacity change from 0 to 128 [ 1384.329453][T20885] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1384.378570][T20885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1384.646365][T20898] 9pnet: Could not find request transport: uni [ 1390.567780][T20952] syz.8.4779[20952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1390.567882][T20952] syz.8.4779[20952] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1392.994274][T20978] loop8: detected capacity change from 0 to 2048 [ 1394.736378][T20978] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1394.757232][T20978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1395.296342][ T26] audit: type=1804 audit(1743504392.738:96): pid=20976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4785" name="/newroot/130/file0/file0" dev="loop8" ino=1367 res=1 errno=0 [ 1395.318614][T20996] loop6: detected capacity change from 0 to 128 [ 1395.559118][T20996] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1395.639955][T20996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1397.181592][T21017] syz.1.4795[21017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1397.181699][T21017] syz.1.4795[21017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1403.995444][T21081] syz.5.4808[21081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1405.066846][T21081] syz.5.4808[21081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1406.194454][T21095] 9pnet: Could not find request transport: uni [ 1406.846249][T21107] loop6: detected capacity change from 0 to 2048 [ 1407.199656][T21107] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1407.265681][T21107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1407.611969][ T26] audit: type=1804 audit(1743504405.048:97): pid=21104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4815" name="/newroot/107/file0/file0" dev="loop6" ino=1367 res=1 errno=0 [ 1410.461666][ T5477] Bluetooth: hci3: command 0x0409 tx timeout [ 1410.739993][T21111] chnl_net:caif_netlink_parms(): no params data found [ 1411.037487][T21111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.055223][T21111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.091953][T21111] device bridge_slave_0 entered promiscuous mode [ 1411.129167][T21111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.146863][T21111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.168566][T21111] device bridge_slave_1 entered promiscuous mode [ 1411.285164][T21111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.447270][T21111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.731655][T21111] team0: Port device team_slave_0 added [ 1411.753591][T21111] team0: Port device team_slave_1 added [ 1411.812763][T21111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.859738][T21111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.919878][T21111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.055408][T21111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.064702][T21111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.120195][T21111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.512250][T21109] device hsr_slave_0 left promiscuous mode [ 1412.535061][T21109] device hsr_slave_1 left promiscuous mode [ 1412.568334][T21109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.600027][T21109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.612544][ T5477] Bluetooth: hci3: command 0x041b tx timeout [ 1413.344271][T21109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.399754][T21109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.531317][T21109] device bridge_slave_1 left promiscuous mode [ 1413.543395][T21109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.614993][T21109] device bridge_slave_0 left promiscuous mode [ 1413.621338][T21109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.645603][T21109] device veth1_macvtap left promiscuous mode [ 1413.651997][T21109] device veth0_macvtap left promiscuous mode [ 1413.673516][T21109] device veth1_vlan left promiscuous mode [ 1413.679355][T21109] device veth0_vlan left promiscuous mode [ 1414.654202][ T5477] Bluetooth: hci3: command 0x040f tx timeout [ 1416.733389][T13017] Bluetooth: hci3: command 0x0419 tx timeout [ 1416.935581][T21109] team0 (unregistering): Port device team_slave_1 removed [ 1416.970490][T21109] team0 (unregistering): Port device team_slave_0 removed [ 1417.003010][T21109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.044904][T21109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.210848][T21109] bond0 (unregistering): Released all slaves [ 1417.329708][T21111] device hsr_slave_0 entered promiscuous mode [ 1417.339609][T21111] device hsr_slave_1 entered promiscuous mode [ 1418.089334][T21111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.382542][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1418.407146][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1418.441742][T21111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.521256][T21198] loop8: detected capacity change from 0 to 8 [ 1418.651744][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1418.666678][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1418.692260][ T4590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.699452][ T4590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.761260][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1419.168084][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1419.176792][ T4590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1419.183921][ T4590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1419.193121][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1419.226493][T21210] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1419.299616][ T6476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1419.336213][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1419.364178][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1419.574183][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1419.641516][T21219] 9pnet: Could not find request transport: uni [ 1419.881288][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1420.102418][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1420.307355][T21111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1420.338396][T21111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1420.411737][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1420.435104][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1420.453637][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1421.529064][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1421.540832][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1421.583100][ T4590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1422.033063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1422.075400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1422.106713][T21111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.223446][T19688] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1423.283631][T19688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1423.315297][T19688] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1423.356231][T19688] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1423.385227][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1423.398329][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1423.402662][T19688] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1423.442629][T19688] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.488427][T19688] usb 9-1: config 0 descriptor?? [ 1423.521883][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1423.554491][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1423.575468][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1423.596236][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1423.630183][T21111] device veth0_vlan entered promiscuous mode [ 1423.666638][T21111] device veth1_vlan entered promiscuous mode [ 1423.773174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1423.792777][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1423.837535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1423.855033][T21266] loop6: detected capacity change from 0 to 8 [ 1423.862386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1423.885584][T21111] device veth0_macvtap entered promiscuous mode [ 1423.908145][T21111] device veth1_macvtap entered promiscuous mode [ 1423.948327][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1423.983950][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.004416][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.033519][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.051929][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.063662][T19688] usbhid 9-1:0.0: can't add hid device: -71 [ 1424.069665][T19688] usbhid: probe of 9-1:0.0 failed with error -71 [ 1424.093352][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.103667][T19688] usb 9-1: USB disconnect, device number 17 [ 1424.124103][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1424.165980][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.225120][T21111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.267867][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1424.278539][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.288989][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1424.305357][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.360782][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1424.388242][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.418614][T21111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1424.446672][T21111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1424.470064][T21111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.479886][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1424.499134][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1424.530226][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1424.630097][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1424.643652][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1424.661032][ T1186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1424.854229][T21279] 9pnet: Could not find request transport: uni [ 1426.474745][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.509879][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.659050][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1427.057325][ T4431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.121058][ T4431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.297668][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1429.264298][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.270845][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.942143][T21317] loop4: detected capacity change from 0 to 128 [ 1429.950767][T21319] loop8: detected capacity change from 0 to 8 [ 1430.225294][ T1107] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1430.620547][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.669668][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.679882][T21317] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1430.703544][T21317] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1430.849822][ T1107] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1430.929637][ T1107] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1431.000616][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1431.088155][ T1107] usb 7-1: config 0 descriptor?? [ 1431.354698][T21329] 9pnet: Could not find request transport: uni [ 1431.974509][ T1107] usbhid 7-1:0.0: can't add hid device: -71 [ 1431.982454][ T1107] usbhid: probe of 7-1:0.0 failed with error -71 [ 1432.245074][ T1107] usb 7-1: USB disconnect, device number 20 [ 1436.127225][T21374] 9pnet: Could not find request transport: uni [ 1436.165933][T21374] loop8: detected capacity change from 0 to 128 [ 1437.133464][ T1107] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1437.721645][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.755956][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.796950][ T1107] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1437.852102][ T1107] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1437.883815][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.928705][ T1107] usb 7-1: config 0 descriptor?? [ 1438.205762][T21374] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1438.216560][T21374] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1439.296055][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1439.313648][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1439.321393][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1439.549565][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1439.568588][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1439.889531][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1440.644988][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1440.652491][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1440.660801][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1440.668623][ T1107] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1440.676936][ T1107] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 1440.689035][ T1107] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1440.705945][ T1107] usb 7-1: USB disconnect, device number 21 [ 1441.254762][T21422] loop6: detected capacity change from 0 to 2048 [ 1442.939281][T21422] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1442.951965][T21422] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1443.023491][ T26] audit: type=1804 audit(1743504440.418:98): pid=21418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4893" name="/newroot/123/file0/file0" dev="loop6" ino=1367 res=1 errno=0 [ 1444.294292][T21440] 9pnet: Could not find request transport: uni [ 1444.335244][T21440] loop4: detected capacity change from 0 to 128 [ 1444.551121][T21440] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1444.563507][T21440] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1446.553290][T19681] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1446.755148][T21466] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1447.083634][T19681] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.955873][T19681] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.966551][T19681] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1448.998189][T19681] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1449.020360][T19681] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.342631][T21495] loop8: detected capacity change from 0 to 128 [ 1449.362835][T19681] usb 9-1: config 0 descriptor?? [ 1451.793583][T19681] usb 9-1: can't set config #0, error -71 [ 1451.806272][T19681] usb 9-1: USB disconnect, device number 18 [ 1451.855221][T21495] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1451.890078][T21495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1454.263868][T19699] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1456.303468][T19699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1456.321090][T19699] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1456.357204][T19699] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1456.404777][T19699] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1456.414593][T19699] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.425365][T19699] usb 7-1: config 0 descriptor?? [ 1456.465368][T19699] usb 7-1: can't set config #0, error -71 [ 1456.492700][T19699] usb 7-1: USB disconnect, device number 22 [ 1456.601445][T21573] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4936'. [ 1463.253412][T21627] loop8: detected capacity change from 0 to 128 [ 1463.316715][T21627] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1463.345481][T21627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1465.650078][T13017] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1465.933369][T13017] usb 7-1: Using ep0 maxpacket: 8 [ 1466.220659][T13017] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1466.231203][T13017] usb 7-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1466.240805][T13017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.265531][T13017] usb 7-1: config 0 descriptor?? [ 1467.093384][T13017] usb 7-1: can't set config #0, error -71 [ 1467.115984][T13017] usb 7-1: USB disconnect, device number 23 [ 1467.126528][T21657] loop4: detected capacity change from 0 to 2048 [ 1467.287103][T21657] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1467.308502][T21657] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1470.250056][T21692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4969'. [ 1477.102748][T21767] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4990'. [ 1484.907576][T19681] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1487.109561][T19681] usb 5-1: Using ep0 maxpacket: 8 [ 1487.872446][T19681] usb 5-1: device descriptor read/all, error -71 [ 1489.552287][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.558755][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.601638][T13017] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1495.423715][T13017] usb 5-1: Using ep0 maxpacket: 8 [ 1495.888760][T13017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.003581][T13017] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1496.023262][T13017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.044936][T13017] usb 5-1: config 0 descriptor?? [ 1497.867861][T13017] usbhid 5-1:0.0: can't add hid device: -71 [ 1497.874053][T13017] usbhid: probe of 5-1:0.0 failed with error -71 [ 1499.574403][T13017] usb 5-1: USB disconnect, device number 11 [ 1501.923334][T19693] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1502.183338][T19693] usb 5-1: Using ep0 maxpacket: 8 [ 1502.303588][T19693] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1502.322833][T19693] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1502.350670][T19693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1502.398090][T19693] usb 5-1: config 0 descriptor?? [ 1502.667843][T21967] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5037'. [ 1502.723474][T21967] loop4: detected capacity change from 0 to 512 [ 1502.831307][T21967] EXT4-fs (loop4): Unrecognized mount option "defcontext=root" or missing value [ 1503.199342][T19693] usbhid 5-1:0.0: can't add hid device: -71 [ 1503.213489][T19693] usbhid: probe of 5-1:0.0 failed with error -71 [ 1503.224025][T19693] usb 5-1: USB disconnect, device number 12 [ 1508.871875][T22016] loop6: detected capacity change from 0 to 4096 [ 1508.928772][T22029] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5055'. [ 1510.106719][T22045] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1510.657598][T21109] ntfs3: loop6: ino=1c, Internal error [ 1510.665990][T21109] ntfs3: loop6: ntfs3_write_inode r=1c failed, -22. [ 1515.936126][T22094] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5070'. [ 1518.271982][T22122] fuse: Unknown parameter 'grou00000000000000000000' [ 1524.636225][T22176] fuse: Unknown parameter 'grou00000000000000000000' [ 1532.890565][T19131] Bluetooth: hci3: command 0x0406 tx timeout [ 1533.716384][T22263] loop8: detected capacity change from 0 to 128 [ 1533.859690][T22263] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1534.586297][T22263] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1542.351905][T22328] loop8: detected capacity change from 0 to 128 [ 1542.639957][T22328] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1542.672838][T22328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1548.262143][T22370] loop8: detected capacity change from 0 to 4096 [ 1550.539470][T22384] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1550.746167][ T8228] ntfs3: loop8: ino=1c, Internal error [ 1550.760520][ T8228] ntfs3: loop8: ntfs3_write_inode r=1c failed, -22. [ 1550.896257][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.902934][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.208413][T22392] 9pnet: Could not find request transport: uni [ 1552.219746][T22392] loop8: detected capacity change from 0 to 128 [ 1552.700735][T22392] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1552.712761][T22392] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1553.586768][T22406] fuse: Unknown parameter 'group_i00000000000000000000' [ 1561.044780][T22466] 9pnet: Could not find request transport: uni [ 1561.671844][T22468] fuse: Unknown parameter 'group_id00000000000000000000' [ 1567.867422][T22502] loop4: detected capacity change from 0 to 4096 [ 1577.768434][T22562] fuse: Bad value for 'fd' [ 1579.015385][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 1579.296802][T22574] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1579.498985][T22581] syz.4.5178[22581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.499089][T22581] syz.4.5178[22581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1579.577426][T22552] chnl_net:caif_netlink_parms(): no params data found [ 1581.172855][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 1581.201483][T22605] autofs4:pid:22605:autofs_fill_super: called with bogus options [ 1581.423418][T22552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.456938][T22552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.497104][T22552] device bridge_slave_0 entered promiscuous mode [ 1581.633731][T22552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.683967][T22552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.746053][T22552] device bridge_slave_1 entered promiscuous mode [ 1583.537183][T22552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.570293][T22552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.621575][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 1585.913093][T22552] team0: Port device team_slave_0 added [ 1585.991808][T22552] team0: Port device team_slave_1 added [ 1586.224194][T22641] syz.8.5190[22641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1586.240816][T22641] syz.8.5190[22641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1586.300320][T22552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.382535][T22552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.592209][T22552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.653515][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 1586.723343][T22552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.781389][T22552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.853484][T22552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.982994][T22645] loop6: detected capacity change from 0 to 4096 [ 1588.337271][T22552] device hsr_slave_0 entered promiscuous mode [ 1588.637116][T22552] device hsr_slave_1 entered promiscuous mode [ 1589.475872][T22552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1589.732736][T22552] Cannot create hsr debugfs directory [ 1590.489908][ T8228] device hsr_slave_0 left promiscuous mode [ 1590.531492][T22661] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1590.654238][ T8228] device hsr_slave_1 left promiscuous mode [ 1590.660850][ T4243] ntfs3: loop6: ino=1c, Internal error [ 1590.703107][ T4243] ntfs3: loop6: ntfs3_write_inode r=1c failed, -22. [ 1590.717851][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.827884][ T8228] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.899782][T22664] autofs4:pid:22664:autofs_fill_super: called with bogus options [ 1590.956586][ T8228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1591.024662][ T8228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.261440][ T8228] device bridge_slave_0 left promiscuous mode [ 1591.268476][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.444839][ T8228] device veth1_macvtap left promiscuous mode [ 1591.451523][ T8228] device veth0_macvtap left promiscuous mode [ 1591.459118][ T8228] device veth1_vlan left promiscuous mode [ 1591.465189][ T8228] device veth0_vlan left promiscuous mode [ 1594.190088][T22687] syz.6.5202[22687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1594.190190][T22687] syz.6.5202[22687] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1597.655776][ T8228] team0 (unregistering): Port device team_slave_1 removed [ 1597.814133][ T8228] team0 (unregistering): Port device team_slave_0 removed [ 1597.881944][ T8228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1597.953240][ T8228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1598.060349][T22717] 9pnet: Could not find request transport: uni [ 1598.416441][ T8228] bond0 (unregistering): Released all slaves [ 1599.385233][T22552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.497564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1599.564501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1599.618293][T22552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1599.667460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1599.787948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1599.874249][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.881398][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1600.194699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1600.205240][T22727] syz.8.5214[22727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1600.205342][T22727] syz.8.5214[22727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1600.244323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1600.300047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1600.328599][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.335763][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1600.380073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1600.457397][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1602.414543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1602.474686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1602.521264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1602.647507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1602.687682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1602.792114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1602.900278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1603.769619][T22552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1603.873662][T22552] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1603.931253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1603.983847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1607.619673][T19131] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1607.974384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1607.982165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1608.043258][T19131] usb 5-1: Using ep0 maxpacket: 16 [ 1608.203942][T19131] usb 5-1: config 1 has an invalid descriptor of length 172, skipping remainder of the config [ 1608.276188][T19131] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1608.363382][T22779] autofs4:pid:22779:autofs_fill_super: called with bogus options [ 1608.500075][T22552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1610.004619][T19131] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1610.060822][T19131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.146165][T19131] usb 5-1: Product: syz [ 1610.335465][T19131] usb 5-1: can't set config #1, error -71 [ 1610.488574][T19131] usb 5-1: USB disconnect, device number 13 [ 1611.868119][T22816] loop4: detected capacity change from 0 to 128 [ 1611.916268][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1611.931387][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1612.210699][T22552] device veth0_vlan entered promiscuous mode [ 1612.766982][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.799792][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.869069][T22552] device veth1_vlan entered promiscuous mode [ 1717.923103][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1717.930289][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4431/1:b..l [ 1717.938928][ C0] (detected by 0, t=10502 jiffies, g=85609, q=180) [ 1717.945526][ C0] task:kworker/u4:11 state:R running task stack:21656 pid: 4431 ppid: 2 flags:0x00004000 [ 1717.957961][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1717.965827][ C0] Call Trace: [ 1717.969202][ C0] [ 1717.972137][ C0] __schedule+0x12c4/0x45b0 [ 1717.977128][ C0] ? mark_lock+0x98/0x340 [ 1717.981468][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1717.987711][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1717.993765][ C0] ? mark_lock+0x98/0x340 [ 1717.998147][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 1718.003457][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 1718.008602][ C0] ? __cond_resched+0xf0/0xf0 [ 1718.013596][ C0] irqentry_exit+0x53/0x80 [ 1718.018036][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1718.024030][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 1718.029373][ C0] Code: 2b 00 74 08 4c 89 f7 e8 0c ac 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 1718.048996][ C0] RSP: 0018:ffffc900035cf8e0 EFLAGS: 00000206 [ 1718.055087][ C0] RAX: 0000000000000001 RBX: 1ffff920006b9f28 RCX: 1ffff920006b9ec8 [ 1718.063133][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab3d00 RDI: ffffffff8af9fa80 [ 1718.071220][ C0] RBP: ffffc900035cfa40 R08: dffffc0000000000 R09: fffffbfff2131e19 [ 1718.079205][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920006b9f24 [ 1718.087234][ C0] R13: dffffc0000000000 R14: ffffc900035cf940 R15: 0000000000000246 [ 1718.095284][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1718.100861][ C0] ? rcu_lock_release+0x5/0x20 [ 1718.105668][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 1718.110709][ C0] ? batadv_primary_if_get_selected+0x3b2/0x4c0 [ 1718.116993][ C0] rcu_lock_acquire+0x2a/0x30 [ 1718.121819][ C0] ? rcu_lock_acquire+0x5/0x30 [ 1718.126712][ C0] batadv_iv_ogm_schedule+0x429/0x1000 [ 1718.132198][ C0] ? skb_push+0x93/0x100 [ 1718.136642][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x800/0x800 [ 1718.143869][ C0] ? batadv_send_skb_packet+0x3bc/0x5f0 [ 1718.149484][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x6fa/0x800 [ 1718.156643][ C0] process_one_work+0x8a1/0x10c0 [ 1718.161685][ C0] ? worker_detach_from_pool+0x260/0x260 [ 1718.167337][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1718.172894][ C0] ? kthread_data+0x4e/0xc0 [ 1718.177493][ C0] ? wq_worker_running+0x97/0x170 [ 1718.182605][ C0] worker_thread+0xaca/0x1280 [ 1718.187306][ C0] kthread+0x3f6/0x4f0 [ 1718.191579][ C0] ? rcu_lock_release+0x20/0x20 [ 1718.197155][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1718.201886][ C0] ret_from_fork+0x1f/0x30 [ 1718.206339][ C0] [ 1718.209368][ C0] rcu: rcu_preempt kthread starved for 10160 jiffies! g85609 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1718.220587][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1718.230680][ C0] rcu: RCU grace-period kthread stack dump: [ 1718.236568][ C0] task:rcu_preempt state:R running task stack:26752 pid: 15 ppid: 2 flags:0x00004000 [ 1718.247697][ C0] Call Trace: [ 1718.251052][ C0] [ 1718.254001][ C0] __schedule+0x12c4/0x45b0 [ 1718.258626][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 1718.264573][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1718.270597][ C0] ? mod_timer_pending+0x20/0x20 [ 1718.275554][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 1718.281126][ C0] schedule+0x11b/0x1f0 [ 1718.285427][ C0] schedule_timeout+0x1b9/0x300 [ 1718.290381][ C0] ? console_conditional_schedule+0x40/0x40 [ 1718.296301][ C0] ? update_process_times+0x200/0x200 [ 1718.301723][ C0] ? prepare_to_swait_event+0x321/0x340 [ 1718.307270][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 1718.312142][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 1718.318318][ C0] ? rcu_gp_init+0x1140/0x1140 [ 1718.323161][ C0] ? finish_swait+0xc5/0x1d0 [ 1718.327789][ C0] rcu_gp_kthread+0xa4/0x360 [ 1718.332428][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1718.337344][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1718.342709][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1718.348655][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 1718.353723][ C0] kthread+0x3f6/0x4f0 [ 1718.357841][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1718.363050][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1718.367763][ C0] ret_from_fork+0x1f/0x30 [ 1718.373167][ C0] [ 1718.376939][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1718.383659][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1718.389292][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340