last executing test programs: 6m32.82476496s ago: executing program 32 (id=147): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x6}]}}}]}, 0x44}}, 0x24000804) 5m51.198765935s ago: executing program 33 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x0, 0x5004) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000718000/0x2000)=nil) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./trace\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./trace/events/kvm/kvm_entry/enable\x00', 0x282, 0x0) read$FUSE(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = fsopen(&(0x7f0000000500)='cgroup2\x00', 0x0) fsmount(r4, 0x0, 0x80) syz_clone3(0x0, 0x0) capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000300)={0x0, 0x6, 0xa, 0x0, 0x9}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000005c0), 0x4) 3m2.905679715s ago: executing program 3 (id=880): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000380)={&(0x7f00000003c0)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f0000000480)={&(0x7f0000000500)="c94522e546f93f6dedf11f1509685636", 0x60}) 3m1.940396214s ago: executing program 3 (id=883): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000940)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2}}}], 0x20}}], 0x1, 0x48040) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x10}}], 0x2, 0x800) 3m1.708211148s ago: executing program 3 (id=886): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) fcntl$setown(r1, 0x8, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)='$|', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000002100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x181441, 0x148) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) lseek(r5, 0x9, 0x3) 2m58.404991156s ago: executing program 3 (id=891): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000c80)="$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") keyctl$join(0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x15, 0x0, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000000c0)) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000006c0)='.\x00', 0x40001a2) 2m57.158553333s ago: executing program 3 (id=899): syz_mount_image$f2fs(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x80401c, &(0x7f0000000880)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000002d40)="$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") syz_mount_image$fuse(0x0, 0x0, 0x7004046, 0x0, 0x1, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x7, 0x200, 0x1000, 0x409, 0x7, 0x9, 0x5, 0xf64, 0xfffffffe}) 2m55.211668772s ago: executing program 3 (id=911): open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x4c, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000001540)="$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") sched_setscheduler(r0, 0x1, &(0x7f0000001940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000019c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001a80), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x7129825978c5e542, &(0x7f0000000000)=0xf7) syz_mount_image$fuse(0x0, 0x0, 0x3000042, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./mnt\x00', 0x844, &(0x7f0000000200)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x24c, &(0x7f0000000b40)="$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") syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000640)) mknod$loop(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) 2m39.634845604s ago: executing program 34 (id=911): open(0x0, 0x108842, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x4c, &(0x7f0000000240)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000001540)="$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") sched_setscheduler(r0, 0x1, &(0x7f0000001940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000019c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001a40), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001a80), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r0, 0x7129825978c5e542, &(0x7f0000000000)=0xf7) syz_mount_image$fuse(0x0, 0x0, 0x3000042, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./mnt\x00', 0x844, &(0x7f0000000200)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x24c, &(0x7f0000000b40)="$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") syz_mount_image$vfat(&(0x7f0000000500), &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000640)) mknod$loop(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) 2m37.108886292s ago: executing program 0 (id=962): write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x1c}, @val={0x3, 0x0, 0x2, 0x0, 0x1, 0x2}, @llc={@snap={0x1, 0xa8, "9559", "b7291d", 0x800, "14ea67f83eb909f498f5c12f0409c48de66592b2ab443dfca83fa06d6e996b5d926a1f75f985890f17cf5448a40a6aba0a909ac1576656dd306d7ccdc1199e5a60d0232d64cd6c22b6a92bed715b841d6f5391a10faf5ef0d3366e1b86a08f5fe2824fee128c005006b163b358715b374d8f61b18c75b30011b38f9bc52027b48349a36b16683a1179c75511fff756baec22be446754ac77f2d954a2c2b8841a845ebde620b7442d1f5ff77cd4181b14826b348b4f397ddb7935d46cd740d214ed7526008d4085a060523838f75e3115"}}}, 0xe7) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x400, &(0x7f0000000600), 0x1, 0x4a6, &(0x7f0000000840)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000dc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ec0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000f40), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x268, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00', {}, {}, 0x300}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 2m35.585903377s ago: executing program 0 (id=965): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f0000000840)={0xa, 0x4e20, 0x3, @remote, 0x77}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000290000000400000032000000000000001400000000000000290000000300"], 0x30}}], 0x1, 0x4000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000500)='GPL\x00', 0x5, 0x29e, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) socket$key(0xf, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./tracefs_dir\x00', 0x0, 0x0, 0x0) capset(0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000140), 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_mmap_file\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e40)={0xc, 0x0, &(0x7f0000000e80)=[@freeze_done={0x40086315, 0x1}]}) 2m34.248142434s ago: executing program 0 (id=967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001140)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f00000011c0)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f00000012c0), &(0x7f0000001300)}, 0x2a) 2m33.232436298s ago: executing program 0 (id=973): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000bc0)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./bus\x00', 0x1c5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f00000001c0)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000001c40)='.\x00', &(0x7f0000001c80)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00), 0x40, &(0x7f0000001d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001d80)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000001dc0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x1, 0x0) write$binfmt_elf64(r2, &(0x7f0000000ac0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0x80, 0x8, 0x3, 0x3, 0x6, 0x380, 0x36f, 0x40, 0x2c, 0x7f, 0x60, 0x38, 0x3, 0x656, 0x1, 0xad}, [{0x6474e550, 0x7, 0x80000000000, 0x401, 0x5247f4d2, 0x8, 0x40, 0xff}, {0x7, 0x5, 0x8, 0xa49, 0x3, 0xffffffffffffff00, 0x89ef, 0x6}, {0x7, 0x1000, 0x4ab3, 0x6, 0x5, 0x9, 0x8, 0x8}]}, 0xe8) 2m32.695077613s ago: executing program 0 (id=976): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') fchdir(r0) mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000200)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='personality\x00') read$FUSE(r2, &(0x7f00000010c0)={0x2020}, 0x1a3e) 2m27.15201132s ago: executing program 0 (id=990): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000300)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000340)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000013c0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000001440)={0x2020}, 0xfffffeb1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80001) recvmsg(0xffffffffffffffff, 0x0, 0x9bd182cc6786b7d0) unshare(0x2c020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x9, 0x40, 0x80, 0x100, 0x5de0d1e1, 0x2480130, r4}) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000e40)='E', 0x1, 0x4fed3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000e80)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x23b, 0x3}) 2m26.912981094s ago: executing program 35 (id=990): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000300)={[{@init_itable}]}, 0x1, 0x79f, &(0x7f0000000340)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}]}, 0x1, 0x490, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000013c0)='\f', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) read$FUSE(r1, &(0x7f0000001440)={0x2020}, 0xfffffeb1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) userfaultfd(0x80001) recvmsg(0xffffffffffffffff, 0x0, 0x9bd182cc6786b7d0) unshare(0x2c020400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000040)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @empty, 0x9, 0x40, 0x80, 0x100, 0x5de0d1e1, 0x2480130, r4}) openat(0xffffffffffffff9c, 0x0, 0x40040, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file1\x00', 0x101042, 0x0) pwrite64(r5, &(0x7f0000000e40)='E', 0x1, 0x4fed3) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000e80)={0x17c04, 0xffffffffffffffff, 0x4f003, 0x23b, 0x3}) 1m42.226359822s ago: executing program 4 (id=1128): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x318, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x1ff) mount(&(0x7f0000000000)=@sg0, &(0x7f00000004c0)='./trace\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000005c0), 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000640)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe2500"}, 0xd8) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x1) writev(r6, &(0x7f0000000380)=[{&(0x7f00000005c0)="580000001400add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1m41.544128531s ago: executing program 4 (id=1130): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="bd8e30b5f274c9f18fd0e5bf203150ac253373898731354ae6775f895c9d690329f0164cde58ed7a12e0cc0331b939b41ca9f28a6b71322e93e96cb20150e91b97984227d848ddcae3669eb6dc6755b741da513bf74e53793014f13a54797e", @ANYRESDEC=0x0], &(0x7f0000000380)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000540)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000640), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r4 = creat(&(0x7f0000000700)='./bus\x00', 0xe2) io_setup(0x5, &(0x7f0000000740)=0x0) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f00000007c0)={0x0, 0x0, 0x0, 0x2, 0x0, r4, 0x0, 0x23, 0x0, 0x0, 0x0, r4}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./trace\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./trace/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000940), 0x1000) setsockopt(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x2, 0x1c, &(0x7f0000000b40)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf980000000000005608000000000000850000"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m40.454096502s ago: executing program 4 (id=1133): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socket$unix(0x1, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0) 1m40.118325737s ago: executing program 4 (id=1135): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000bc0)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./bus\x00', 0x1c5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f00000001c0)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000001c40)='.\x00', &(0x7f0000001c80)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00), 0x40, &(0x7f0000001d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000001dc0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x1, 0x0) 1m39.411596089s ago: executing program 4 (id=1136): syz_open_dev$hiddev(0x0, 0x0, 0x4000) syz_open_dev$evdev(0xfffffffffffffffe, 0x0, 0x105000) 1m37.377789867s ago: executing program 4 (id=1141): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x2fd7d23824e8a2a0, 0x5, 0x54, "3b5e931ebe4330a2807320e66c74a8b5b80f6ba9e892f4ffa176ba766c837a173b31d84677bb1c719e9d8ed9be99a8e5f563d76fdbea7d6fd08be9d7c6e2f423cf3cc998b314902756705c4919d2df0a982b1e48"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x25}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x81, 0x3, "857d27"}, &(0x7f0000000340)={0x20, 0x82, 0x2, "b0a6"}, &(0x7f0000000380)={0x20, 0x83, 0x3, 'W*\''}, 0x0, &(0x7f0000000400)={0x20, 0x85, 0x3, "c67b39"}}) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a10075089501093081"], 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000500)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x57, {0x57, 0x30, "18c70351a42783899040ece1a0387edbf61d0127f245ea73956bbc42a93dc5e1cad10edd572c60860faece2f2a2f36643dedf4a634e656d163675ef2acdf7ea1598681dcccbffaea86ff48f02f5f3d948d3e916b9f"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, 0x0) 1m37.247235371s ago: executing program 36 (id=1141): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x2fd7d23824e8a2a0, 0x5, 0x54, "3b5e931ebe4330a2807320e66c74a8b5b80f6ba9e892f4ffa176ba766c837a173b31d84677bb1c719e9d8ed9be99a8e5f563d76fdbea7d6fd08be9d7c6e2f423cf3cc998b314902756705c4919d2df0a982b1e48"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x25}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000300)={0x20, 0x81, 0x3, "857d27"}, &(0x7f0000000340)={0x20, 0x82, 0x2, "b0a6"}, &(0x7f0000000380)={0x20, 0x83, 0x3, 'W*\''}, 0x0, &(0x7f0000000400)={0x20, 0x85, 0x3, "c67b39"}}) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb0e, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a10075089501093081"], 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000500)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x57, {0x57, 0x30, "18c70351a42783899040ece1a0387edbf61d0127f245ea73956bbc42a93dc5e1cad10edd572c60860faece2f2a2f36643dedf4a634e656d163675ef2acdf7ea1598681dcccbffaea86ff48f02f5f3d948d3e916b9f"}}, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, 0x0) 1m23.079504508s ago: executing program 7 (id=1172): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402f0700220001000000010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000220)="837d7e") 1m19.24860741s ago: executing program 7 (id=1183): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891b, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) 1m18.057518612s ago: executing program 7 (id=1187): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socket$unix(0x1, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0) 1m17.820776286s ago: executing program 7 (id=1190): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000c00)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m14.485994967s ago: executing program 7 (id=1199): write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x1c}, @val={0x3, 0x0, 0x2, 0x0, 0x1, 0x2}, @llc={@snap={0x1, 0xa8, "9559", "b7291d", 0x800, "14ea67f83eb909f498f5c12f0409c48de66592b2ab443dfca83fa06d6e996b5d926a1f75f985890f17cf5448a40a6aba0a909ac1576656dd306d7ccdc1199e5a60d0232d64cd6c22b6a92bed715b841d6f5391a10faf5ef0d3366e1b86a08f5fe2824fee128c005006b163b358715b374d8f61b18c75b30011b38f9bc52027b48349a36b16683a1179c75511fff756baec22be446754ac77f2d954a2c2b8841a845ebde620b7442d1f5ff77cd4181b14826b348b4f397ddb7935d46cd740d214ed7526008d4085a060523838f75e3115"}}}, 0xe7) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x400, &(0x7f0000000600), 0x1, 0x4a6, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000d00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000d40)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000dc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000ec0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000f40), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYBLOB="110000"], 0x18}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000f80)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x268, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00', {}, {}, 0x300}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) 1m11.777835423s ago: executing program 7 (id=1208): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x4ab, &(0x7f0000001780)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000005}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2000000000000118, &(0x7f0000000100)}) nanosleep(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x1, 0x0) pwritev2(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="56c36ee810616f", 0x7}], 0x1, 0x1000400, 0x1, 0x2) 55.578437019s ago: executing program 37 (id=1208): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x4ab, &(0x7f0000001780)="$eJzs3M1vVFUbAPDnTj9oXz7al5cXBUEraCR+tLSgsnCBRhMXmpjoApe1LYgMlLQ1AUK0GINLQ+LeuDTxL3DnxqgLY+JWE5eGhCgbwFXN/Wqn7bR0StuBzu+XTOee+zHnPPeeM3PuPb03gJbVl/5JIrZFxG8R0ZMn56/Ql7/dvnl55M7NyyNJzMy8/VeSrXfr5uWRctVyu61F4lAlovJpEseTxflOXrx0ZrhaHZso0gNTZ88PTF689NzpHedPjZ0aOzd07NjRI4MvvjD0/JrEmcZ1a+9H4/v2vP7utTdHTlx778dv0mLt3p8vr43jru7UCaiOvnSv/T2TmZ3Zmb892WD573fba6aT9iYWhIa0RUR6uDqy9t8TbTF38HritU+aWjhgXaW/TVuWXjw9A2xiSTS7BEBzlD/06flv+dqgrsd94cbLs6fk2fWN27Pxt0elmN+xjvn3RcSJ6X++TF/R6HUIAIBVyPo2z9br/1Vid/aej3XsKMZQeiPivxGxMyL+FxG7IuL/Edm6D0XEw/nGMz2zOXQtm3/fgvTi/k/let0yr5G0//dSTd/vdk38xVtvW5HansXfkZw8XR07XOyTQ9GxJU0PLpPHd6/++vlSy2r7f+krzb/sCxYFuN6+4ALd6PDU8FrthBtXIva214s/mR0JSGvAnojY29hH7ygnTj/99b6lVrp7/MtYg3Gmma8insqP/3QsiL+UzBufPDu8YHxyoCuqY4cHylqx2E+/XH1rqfzvKf41cOPAI/nE3PFfsEZNRatWxyYmG8/j6u+fLXlOs9r635m8k41Z//x+Pu/C8NTUxGBEZ/JGli7P6bL5Q3PbXhie6k7T5fpp/T90sH7731lskx7/dC+llXh/RDwaEY8VZX88Ig5ExMFl4v/hlSc+WCb+JJJo3vG/EjFa9/tvtv73JrXj9auYaDvz/bdLjZiv7PgfjensuzaXff/dxUoLeI+7DwAAAB4IlYjYFkmlP5/u2xaVSn9//j/8u+I/ler45NQzJ8c/PDea3yPQGx2V8kpXT8310MFkuvjEPD1UXCsulx8prht/0dadpftHxqujTY4dWt3W+e0/yvaf+rOt2aUD1p37taB1LWz/lSaVA9h4K/n9dy4Am9P89p/9w2Z3s8oCbCzn/9C66rX/jxek9f9hc1rc/v+ofWQdsInp/0Pr0v6hdWn/0JIauZ0/ji+1qCsiVvo5ydjEZHmzwOqfKtC14jv8W2WifOLFeubVHZfOdBZzotKkSNsaqGybZiJtMRub6dwzVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5k/wYAAP//UIzdog==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x1000005}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2000000000000118, &(0x7f0000000100)}) nanosleep(0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x1, 0x0) pwritev2(r2, &(0x7f0000000280)=[{&(0x7f0000000300)="56c36ee810616f", 0x7}], 0x1, 0x1000400, 0x1, 0x2) 53.228587179s ago: executing program 6 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, r1, 0x733, 0x70bd28, 0x259fdbff, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) 53.132689519s ago: executing program 6 (id=1314): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newsa={0xf0, 0x29, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x9, 0x4e22, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x200, 0x400000000000, 0xc6b, 0x3, 0x4, 0xefffffffffffffff}, {0x5680000000}, {0x10, 0x9, 0xa}, 0x0, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0) 53.084884264s ago: executing program 6 (id=1316): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000001040), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001500)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 52.798251153s ago: executing program 6 (id=1321): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') write$binfmt_script(r0, &(0x7f0000000bc0)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f00000001c0)={0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000001c40)='.\x00', &(0x7f0000001c80)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00), 0x40, &(0x7f0000001d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001d80)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000001dc0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x1, 0x0) 52.797304713s ago: executing program 6 (id=1322): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x40000, 0x2) fcntl$notify(r0, 0x402, 0x8000000e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002000)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002080)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000029) fcntl$notify(0xffffffffffffffff, 0x402, 0x1c) getdents(r2, 0x0, 0x0) 51.483087528s ago: executing program 6 (id=1327): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000c40), 0x4) 51.290621037s ago: executing program 38 (id=1327): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f0000000c40), 0x4) 8.096337492s ago: executing program 2 (id=1592): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socket$unix(0x1, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0) 8.001332982s ago: executing program 2 (id=1594): syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x101301) io_setup(0x8, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 7.798860593s ago: executing program 2 (id=1597): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./bus\x00', 0x1c5) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000001c80)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00), 0x40, &(0x7f0000001d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001d80)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000001dc0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x1, 0x0) 7.605617022s ago: executing program 2 (id=1602): getpid() r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000001180)={'veth1_to_bond\x00'}) prlimit64(0x0, 0xe, &(0x7f00000011c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x4000087, 0x2, 0x0) clock_getres(0xd6c79f3ee28bc1b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001400)={'pimreg1\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x4076cbba9945d516, &(0x7f0000001480)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000001580)={&(0x7f00000015c0), 0xc, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="50000000f300100027bd7000fbdbdf250a2041fe", @ANYRES32, @ANYBLOB="14000100200100000000000000000000000000020800090004000000080008002001000014000100ff020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x24048050) sendmsg$nl_route(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68cf1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044058}, 0x0) 7.228726791s ago: executing program 1 (id=1606): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) keyctl$join(0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000400)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000440)={&(0x7f0000000480), 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="f7", 0x101d0}], 0x1}, 0x0) 5.703840057s ago: executing program 1 (id=1610): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x6c0000, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x480d0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c00028014000300200100000000faffffffffffffff000114000200fc02"], 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000140)={0x1}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000001c0)={0x0, 0x4, 0x0, 0xec}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=""/218, &(0x7f0000000400)=""/168, &(0x7f0000000540)=""/148, 0x1000}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, 0x0, &(0x7f0000002100)) r8 = socket$netlink(0x10, 0x3, 0x2) writev(r8, 0x0, 0x0) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/sda\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.391602239s ago: executing program 8 (id=1611): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000c80)="$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") keyctl$join(0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x15, 0x0, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000000c0)) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f00000006c0)='.\x00', 0x40001a2) 5.308784957s ago: executing program 2 (id=1612): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./bus\x00', 0x1c5) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001c00)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000001c80)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00), 0x40, &(0x7f0000001d40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001d80)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000001dc0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/bind_mode\x00', 0x1, 0x0) 5.197655779s ago: executing program 2 (id=1613): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000100)={0x88, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0xffde, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 4.190296481s ago: executing program 5 (id=1614): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000c40)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000c80)={r0}, 0x8) close(r1) unshare(0x2040400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000cc0)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={r1, 0x58, &(0x7f0000000d80)}, 0x6) 4.142796696s ago: executing program 8 (id=1615): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800), 0x0, 0x4000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000000000000711142000000000085100000020000008500"], &(0x7f0000000500)='GPL\x00', 0x5, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000980)={0x3, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x700, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xe0, 0x0, @in6={0xa, 0x4e23, 0x1, @private0, 0x3ff}}]}, 0x38}, 0x1, 0x7}, 0x3400c014) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./tracefs_dir\x00', 0x0, 0x0, 0x0) capset(0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000140), 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_mmap_file\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e40)={0xc, 0x0, &(0x7f0000000e80)=[@freeze_done={0x40086315, 0x1}]}) 4.135509777s ago: executing program 1 (id=1616): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socket$unix(0x1, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0) 3.945180996s ago: executing program 9 (id=1618): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000500)={'sit0\x00', 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x91fb, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r0, r3, 0x0) 3.921353299s ago: executing program 5 (id=1619): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000010002ba99979f4474eec0000000e0000c045775f6fdbc5ee6f3f14a6a40a7fc5803974b5263829356b93225c9665d067ec4c0df36f4f8c139966810fa9404439efa536c3a3c84800"/87, @ANYRES32, @ANYBLOB="1100030000000000180012800b00010069703667726500000800028004"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6000, 0x1) open(0x0, 0x108843, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB="08002700020001000800a0"], 0x34}}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 3.823009459s ago: executing program 9 (id=1620): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) keyctl$join(0x1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000400)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000440)={&(0x7f0000000480), 0x10, &(0x7f00000004c0)=[{&(0x7f0000000500)="f7", 0x101d0}], 0x1}, 0x0) 3.784035773s ago: executing program 1 (id=1621): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xf, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xc8001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) socket$inet6(0xa, 0x80002, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000440), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000440), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) dup2(r4, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r1, 0x24, &(0x7f00000000c0)={0x0, 0x2, 0xffff, 0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_create_resource$futex(&(0x7f0000000240)) futex(0x0, 0x8c, 0x1, 0x0, r5, 0x101) write(r0, &(0x7f0000000200)="89", 0xffe3) 2.593850155s ago: executing program 9 (id=1622): getpid() r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000001180)={'veth1_to_bond\x00'}) prlimit64(0x0, 0xe, &(0x7f00000011c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001200)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000013c0), 0x4000087, 0x2, 0x0) clock_getres(0xd6c79f3ee28bc1b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001400)={'pimreg1\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x4076cbba9945d516, &(0x7f0000001480)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000001580)={&(0x7f00000015c0), 0xc, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="50000000f300100027bd7000fbdbdf250a2041fe", @ANYRES32, @ANYBLOB="14000100200100000000000000000000000000020800090004000000080008002001000014000100ff020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x24048050) sendmsg$nl_route(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68cf1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xa}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20044058}, 0x0) 2.391994595s ago: executing program 8 (id=1623): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x110) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='10', 0x2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) 2.389277626s ago: executing program 1 (id=1624): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x3, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000240)=""/90) 1.612738205s ago: executing program 1 (id=1625): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f00000000c0)={[{@nobh}, {@auto_da_alloc}, {@grpquota}]}, 0x3, 0x4c7, &(0x7f0000000c80)="$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") keyctl$join(0x1, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x15, 0x0, 0x0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000000c0)) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000006c0)='.\x00', 0x40001a2) 1.400422627s ago: executing program 5 (id=1626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0x1, 0x1, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x16, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150102000000002018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000e40)='\x00\x00\b[\x00'/14, 0x0, 0xd6f6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 693.888009ms ago: executing program 5 (id=1627): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x84055}, 0x240880c0) 693.642579ms ago: executing program 5 (id=1628): syz_extract_tcp_res$synack(&(0x7f0000000840), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='numa_maps\x00') 380.662271ms ago: executing program 5 (id=1629): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000580)=[@in6={0xa, 0x4623, 0x1a, @private0={0xfc, 0x0, '\x00', 0x7f}, 0xa2}], 0x1c) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000005c0)) 355.512943ms ago: executing program 8 (id=1630): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 256.418454ms ago: executing program 9 (id=1631): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc2400, 0x0) socket$unix(0x1, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b70400000000000085000000330000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000680)=ANY=[], 0x0) 182.995431ms ago: executing program 9 (id=1632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000011c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 71.427923ms ago: executing program 8 (id=1633): r0 = io_uring_setup(0xf69, &(0x7f0000000140)={0x0, 0x1889, 0x1, 0x0, 0x308}) r1 = eventfd2(0x40, 0x800) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f00000001c0)=r1, 0x1) 70.202943ms ago: executing program 9 (id=1634): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000000800), 0x0, 0x4000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="0500000000000000711142000000000085100000020000008500"], &(0x7f0000000500)='GPL\x00', 0x5, 0xc3, &(0x7f0000000540)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000980)={0x3, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x700, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0xe0, 0x0, @in6={0xa, 0x4e23, 0x1, @private0, 0x3ff}}]}, 0x38}, 0x1, 0x7}, 0x3400c014) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./tracefs_dir\x00', 0x0, 0x0, 0x0) capset(0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000140), 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000280)='bpf_lsm_mmap_file\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000e40)={0xc, 0x0, &(0x7f0000000e80)=[@freeze_done={0x40086315, 0x1}]}) 0s ago: executing program 8 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/devices/system/cpu/cpu1/firmware_node/eject\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1', 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) kernel console output (not intermixed with test programs): [ T8518] ? unwind_get_return_address+0x49/0x80 [ 377.227989][ T8518] ? zone_statistics+0x170/0x170 [ 377.232969][ T8518] ? alloc_pages+0x452/0x560 [ 377.237661][ T8518] stack_depot_save+0x356/0x460 [ 377.242558][ T8518] save_stack+0x12f/0x230 [ 377.246992][ T8518] ? __reset_page_owner+0x180/0x180 [ 377.252217][ T8518] ? seqcount_lockdep_reader_access+0x144/0x190 [ 377.258484][ T8518] ? get_page_from_freelist+0x24f6/0x2670 [ 377.264233][ T8518] ? __alloc_pages+0x1ee/0x480 [ 377.269023][ T8518] ? stack_depot_save+0x356/0x460 [ 377.274074][ T8518] ? __kasan_kmalloc+0xc6/0xe0 [ 377.278932][ T8518] ? __request_module+0x300/0x980 [ 377.284013][ T8518] ? dev_load+0x156/0x1b0 [ 377.288452][ T8518] ? wext_ioctl_dispatch+0xaa/0x470 [ 377.293727][ T8518] ? wext_handle_ioctl+0x114/0x1d0 [ 377.298866][ T8518] ? sock_ioctl+0x143/0x700 [ 377.303435][ T8518] ? __se_sys_ioctl+0xfa/0x170 [ 377.308235][ T8518] ? do_syscall_64+0x4c/0xa0 [ 377.312857][ T8518] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.318958][ T8518] ? lock_chain_count+0x20/0x20 [ 377.323912][ T8518] ? preempt_count_add+0x8d/0x190 [ 377.329029][ T8518] __set_page_owner+0x41/0x2d0 [ 377.333842][ T8518] ? post_alloc_hook+0x106/0x220 [ 377.338875][ T8518] get_page_from_freelist+0x24f6/0x2670 [ 377.344494][ T8518] ? __alloc_pages+0x11b/0x480 [ 377.349314][ T8518] ? __alloc_pages+0x480/0x480 [ 377.354120][ T8518] ? prepare_alloc_pages+0x359/0x5b0 [ 377.359444][ T8518] __alloc_pages+0x1ee/0x480 [ 377.364059][ T8518] ? unwind_get_return_address+0x49/0x80 [ 377.369747][ T8518] ? zone_statistics+0x170/0x170 [ 377.374740][ T8518] ? alloc_pages+0x452/0x560 [ 377.379368][ T8518] stack_depot_save+0x356/0x460 [ 377.384265][ T8518] ? lock_chain_count+0x20/0x20 [ 377.389154][ T8518] __kasan_kmalloc+0xc6/0xe0 [ 377.393787][ T8518] ? __kasan_kmalloc+0xaf/0xe0 [ 377.398582][ T8518] ? __request_module+0x300/0x980 [ 377.403629][ T8518] ? dev_load+0x156/0x1b0 [ 377.407984][ T8518] ? wext_ioctl_dispatch+0xaa/0x470 [ 377.413215][ T8518] ? wext_handle_ioctl+0x114/0x1d0 [ 377.418354][ T8518] ? sock_ioctl+0x143/0x700 [ 377.422909][ T8518] ? __se_sys_ioctl+0xfa/0x170 [ 377.427698][ T8518] ? do_syscall_64+0x4c/0xa0 [ 377.432312][ T8518] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.438468][ T8518] __request_module+0x300/0x980 [ 377.443353][ T8518] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 377.449372][ T8518] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 377.455393][ T8518] ? umd_cleanup+0x110/0x110 [ 377.460024][ T8518] ? aa_get_newest_label+0xf5/0x5a0 [ 377.465352][ T8518] ? apparmor_capable+0x12c/0x190 [ 377.470404][ T8518] ? bpf_lsm_capable+0x5/0x10 [ 377.475183][ T8518] dev_load+0x156/0x1b0 [ 377.479373][ T8518] ? wext_ioctl_dispatch+0x470/0x470 [ 377.484686][ T8518] ? iw_handler_get_private+0x1e0/0x1e0 [ 377.490352][ T8518] wext_ioctl_dispatch+0xaa/0x470 [ 377.495429][ T8518] ? iw_handler_get_private+0x1e0/0x1e0 [ 377.501002][ T8518] wext_handle_ioctl+0x114/0x1d0 [ 377.505981][ T8518] ? call_commit_handler+0xf0/0xf0 [ 377.511242][ T8518] ? preempt_schedule_irq+0xe6/0x160 [ 377.516624][ T8518] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 377.522635][ T8518] ? lock_chain_count+0x20/0x20 [ 377.527518][ T8518] sock_ioctl+0x143/0x700 [ 377.531878][ T8518] ? sock_poll+0x420/0x420 [ 377.536318][ T8518] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 377.541982][ T8518] ? sock_poll+0x420/0x420 [ 377.546449][ T8518] ? __se_sys_ioctl+0xee/0x170 [ 377.551246][ T8518] ? sock_poll+0x420/0x420 [ 377.555709][ T8518] __se_sys_ioctl+0xfa/0x170 [ 377.560342][ T8518] do_syscall_64+0x4c/0xa0 [ 377.564789][ T8518] ? clear_bhb_loop+0x30/0x80 [ 377.569579][ T8518] ? clear_bhb_loop+0x30/0x80 [ 377.574299][ T8518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.580262][ T8518] RIP: 0033:0x7f1e32bc8559 [ 377.584714][ T8518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.604349][ T8518] RSP: 002b:00007f1e30ddd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.612798][ T8518] RAX: ffffffffffffffda RBX: 00007f1e32e4f180 RCX: 00007f1e32bc8559 [ 377.620822][ T8518] RDX: 0000200000000ec0 RSI: 0000000000008b1a RDI: 0000000000000007 [ 377.628848][ T8518] RBP: 00007f1e32c5fb20 R08: 0000000000000000 R09: 0000000000000000 [ 377.636847][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.644847][ T8518] R13: 00007f1e32e4f218 R14: 00007f1e32e4f180 R15: 00007fff5c230d38 [ 377.652910][ T8518] [ 377.662460][ T8515] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 378.137033][ T8515] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,discard,bh,min_batch_time=0x0000000000000004,dioread_nolock,noquota,,errors=continue. Quota mode: writeback. [ 378.253217][ T8515] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.688087][ T8406] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 378.757033][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.763452][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.779342][ T4412] Bluetooth: hci0: command 0x0419 tx timeout [ 378.790102][ T8406] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 378.857434][ T8406] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 378.926240][ T8406] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 378.974257][ T8527] tipc: Started in network mode [ 378.989512][ T8527] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 379.051310][ T8527] tipc: Enabled bearer , priority 0 [ 379.134706][ T8530] tipc: Disabling bearer [ 379.481062][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.672280][ T8406] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.734865][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.927867][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.539823][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.565431][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.609189][ T8549] loop7: detected capacity change from 0 to 1024 [ 380.624383][ T1249] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.631516][ T1249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.696994][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 380.754897][ T8549] EXT4-fs (loop7): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,bsdgroups,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,usrquota,noauto_da_alloc,init_itable,init_itable,,errors=continue. Quota mode: writeback. [ 380.787190][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.822119][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.932899][ T1249] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.940056][ T1249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.994898][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 381.024555][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 381.080975][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 381.113281][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 381.174736][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 381.206172][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 381.250412][ T8406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.277234][ T8406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 381.310835][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.341910][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 381.373186][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.414959][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.434346][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.464737][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.599728][ T8562] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.959136][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.972366][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.012735][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.335670][ T4732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.449091][ T4732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.528651][ T8584] loop7: detected capacity change from 0 to 512 [ 382.588449][ T4732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.666138][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.714472][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.725086][ T8584] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 382.744031][ T8584] System zones: 1-12 [ 382.765250][ T8584] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1025: missing EA_INODE flag [ 382.825313][ T8584] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1025: error while reading EA inode 12 err=-117 [ 382.828803][ T4732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.858582][ T8584] EXT4-fs (loop7): 1 orphan inode deleted [ 382.892627][ T8584] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 383.032632][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 383.044719][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.089219][ T8406] device veth0_vlan entered promiscuous mode [ 383.131570][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.163702][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.192122][ T8406] device veth1_vlan entered promiscuous mode [ 383.884026][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 384.094637][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 384.134656][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 384.188897][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 384.216348][ T8406] device veth0_macvtap entered promiscuous mode [ 384.287301][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1038'. [ 384.299308][ T8406] device veth1_macvtap entered promiscuous mode [ 384.630029][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.869002][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.098178][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.221587][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.239312][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.381936][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.427744][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.439154][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.450216][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.462707][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 385.478260][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.492641][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.041013][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.066415][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.091850][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.108857][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.120957][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.141488][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.159983][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.206362][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.237629][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.298827][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.403878][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.435526][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.465177][ T8406] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.484550][ T8406] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.493318][ T8406] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.544238][ T8406] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.568526][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.578489][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.649057][ T8652] netlink: 324 bytes leftover after parsing attributes in process `syz.6.1044'. [ 388.193479][ T8660] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 388.348652][ T8665] netlink: 13 bytes leftover after parsing attributes in process `syz.5.1049'. [ 388.599329][ T4564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.608136][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.634491][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.643203][ T4564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.667168][ T8678] loop7: detected capacity change from 0 to 512 [ 388.714742][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 388.755317][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.789557][ T8685] loop4: detected capacity change from 0 to 256 [ 388.826979][ T8678] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 388.859883][ T8678] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e018, mo2=0002] [ 388.963247][ T8678] System zones: 0-1, 15-15, 18-18, 34-34 [ 389.059539][ T8678] EXT4-fs (loop7): orphan cleanup on readonly fs [ 389.099982][ T8678] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 389.165196][ T8678] EXT4-fs warning (device loop7): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 389.216460][ T8678] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 389.235419][ T8678] EXT4-fs error (device loop7): ext4_orphan_get:1436: comm syz.7.1053: bad orphan inode 16 [ 389.257382][ T8678] ext4_test_bit(bit=15, block=18) = 1 [ 389.262891][ T8678] is_bad_inode(inode)=0 [ 389.574086][ T8702] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1056'. [ 389.702212][ T8678] NEXT_ORPHAN(inode)=0 [ 389.732001][ T8678] max_ino=32 [ 389.763146][ T8678] i_nlink=2 [ 389.774146][ T8678] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,,errors=continue. Quota mode: writeback. [ 390.124045][ T4494] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 390.634223][ T4494] usb 8-1: not running at top speed; connect to a high speed hub [ 390.784339][ T4494] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 390.979096][ T4494] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.030334][ T4494] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 391.048387][ T8724] loop4: detected capacity change from 0 to 128 [ 391.065694][ T4494] usb 8-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 391.092822][ T4494] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.103800][ T8730] loop8: detected capacity change from 0 to 1024 [ 391.257973][ T8730] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 391.270423][ T8730] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.287028][ T8730] EXT4-fs error (device loop8): ext4_map_blocks:741: inode #15: comm syz.8.1065: lblock 0 mapped to illegal pblock 0 (length 1) [ 391.303534][ T8730] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 391.315944][ T8730] EXT4-fs (loop8): This should not happen!! Data will be lost [ 391.315944][ T8730] [ 391.327734][ T8730] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: comm syz.8.1065: lblock 0 mapped to illegal pblock 0 (length 1) [ 391.346480][ T8730] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: comm syz.8.1065: lblock 0 mapped to illegal pblock 0 (length 1) [ 391.384066][ T8730] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: comm syz.8.1065: lblock 0 mapped to illegal pblock 0 (length 1) [ 391.450256][ T8737] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #15: comm syz.8.1065: lblock 0 mapped to illegal pblock 0 (length 1) [ 391.530426][ T8738] EXT4-fs error (device loop8): ext4_free_blocks:6231: comm syz.8.1065: Freeing blocks not in datazone - block = 0, count = 1 [ 391.716009][ T4494] usb 8-1: can't set config #1, error -71 [ 391.725285][ T4494] usb 8-1: USB disconnect, device number 2 [ 392.039614][ T8749] loop7: detected capacity change from 0 to 256 [ 392.159377][ T8755] loop8: detected capacity change from 0 to 512 [ 392.273631][ T8755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 392.315164][ T8755] System zones: 1-12 [ 392.320561][ T8755] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.1071: missing EA_INODE flag [ 392.335418][ T8755] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1071: error while reading EA inode 12 err=-117 [ 392.364009][ T8755] EXT4-fs (loop8): 1 orphan inode deleted [ 392.398701][ T8755] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 394.417586][ T8740] loop6: detected capacity change from 0 to 40427 [ 394.839025][ T8740] F2FS-fs (loop6): invalid crc value [ 394.847409][ T8740] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-4) [ 395.761840][ T4732] device hsr_slave_0 left promiscuous mode [ 395.813995][ T4505] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 395.854006][ T4732] device hsr_slave_1 left promiscuous mode [ 395.877726][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.884404][ T4494] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 395.906540][ T4732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.927400][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.944117][ T4732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.965389][ T4732] device bridge_slave_1 left promiscuous mode [ 395.979758][ T4732] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.998229][ T4732] device bridge_slave_0 left promiscuous mode [ 396.017919][ T4732] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.069793][ T4732] device veth1_macvtap left promiscuous mode [ 396.074232][ T4505] usb 8-1: Using ep0 maxpacket: 32 [ 396.086927][ T4732] device veth0_macvtap left promiscuous mode [ 396.112123][ T4732] device veth1_vlan left promiscuous mode [ 396.127452][ T4732] device veth0_vlan left promiscuous mode [ 396.254102][ T4505] usb 8-1: unable to get BOS descriptor or descriptor too short [ 396.344068][ T4505] usb 8-1: config 10 has an invalid interface number: 251 but max is 0 [ 396.352380][ T4505] usb 8-1: config 10 has no interface number 0 [ 396.368896][ T4505] usb 8-1: config 10 interface 251 has no altsetting 0 [ 396.414072][ T4494] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 396.433419][ T4494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.441639][ T4494] usb 5-1: Product: syz [ 396.451740][ T4494] usb 5-1: Manufacturer: syz [ 396.461870][ T4494] usb 5-1: SerialNumber: syz [ 396.473982][ T4494] r8152-cfgselector 5-1: config 0 descriptor?? [ 396.544157][ T4505] usb 8-1: New USB device found, idVendor=14f7, idProduct=0004, bcdDevice=d1.8f [ 396.559789][ T4505] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.573082][ T4505] usb 8-1: Product: syz [ 396.599188][ T4505] usb 8-1: Manufacturer: syz [ 396.611962][ T4505] usb 8-1: SerialNumber: syz [ 396.728508][ T8818] udc-core: couldn't find an available UDC or it's busy [ 396.758842][ T8818] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 396.857601][ T4732] team0 (unregistering): Port device team_slave_1 removed [ 396.902267][ T4732] team0 (unregistering): Port device team_slave_0 removed [ 396.940350][ T4732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.194509][ T4494] r8152-cfgselector 5-1: Unknown version 0x0000 [ 397.224607][ T4505] dvb-usb: found a 'TechniSat AirStar TeleStick 2' in warm state. [ 397.241368][ T4494] r8152-cfgselector 5-1: bad CDC descriptors [ 397.504044][ T4494] r8152-cfgselector 5-1: Unknown version 0x0000 [ 397.578645][ T4505] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 397.672275][ T4494] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 397.844735][ T4505] dvbdev: DVB: registering new adapter (TechniSat AirStar TeleStick 2) [ 397.871530][ T4505] usb 8-1: media controller created [ 397.878299][ T4732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.912663][ T4505] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.043322][ T4505] DVB: Unable to find symbol dib7000p_attach() [ 398.049859][ T4505] dvb-usb: no frontend was attached by 'TechniSat AirStar TeleStick 2' [ 398.157395][ T4732] bond0 (unregistering): Released all slaves [ 398.183905][ T4505] rc_core: IR keymap rc-dib0700-rc5 not found [ 398.190037][ T4505] Registered IR keymap rc-empty [ 398.206475][ T4505] dvb-usb: could not initialize remote control. [ 398.212793][ T4505] dvb-usb: TechniSat AirStar TeleStick 2 successfully initialized and connected. [ 398.289233][ T4494] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 398.334750][ T4505] usb 8-1: USB disconnect, device number 3 [ 398.405516][ T4505] dvb-usb: TechniSat AirStar TeleStick 2 successfully deinitialized and disconnected. [ 398.543981][ T4494] usb 5-1: Using ep0 maxpacket: 16 [ 398.707579][ T4494] usb 5-1: unable to get BOS descriptor or descriptor too short [ 398.814094][ T4505] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 398.927543][ T23] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 398.954157][ T4494] usb 5-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 398.964588][ T4494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.972620][ T4494] usb 5-1: Product: syz [ 398.997455][ T4494] usb 5-1: Manufacturer: syz [ 399.007635][ T4494] usb 5-1: SerialNumber: syz [ 399.038192][ T4494] usb 5-1: config 0 descriptor?? [ 399.280398][ T1112] usb 5-1: USB disconnect, device number 7 [ 399.334098][ T4505] usb 8-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 399.344071][ T23] usb 7-1: unable to get BOS descriptor or descriptor too short [ 399.355948][ T4505] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.373957][ T4505] usb 8-1: Product: syz [ 399.384292][ T23] usb 7-1: not running at top speed; connect to a high speed hub [ 399.392462][ T4505] usb 8-1: Manufacturer: syz [ 399.402363][ T4505] usb 8-1: SerialNumber: syz [ 399.488870][ T23] usb 7-1: config 3 has an invalid interface number: 5 but max is 1 [ 399.629080][ T23] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 399.852027][ T23] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 400.035192][ T23] usb 7-1: config 3 has no interface number 0 [ 400.283334][ T23] usb 7-1: config 3 interface 5 has no altsetting 0 [ 400.290467][ T4505] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 400.334016][ T4505] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 400.484359][ T23] usb 7-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice=26.79 [ 400.514204][ T4505] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0 [ 400.533920][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.582989][ T23] usb 7-1: Product: syz [ 400.593877][ T23] usb 7-1: Manufacturer: syz [ 400.598936][ T23] usb 7-1: SerialNumber: syz [ 400.674054][ T1112] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 400.884018][ T4505] kalmia 8-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 400.924221][ T1112] usb 5-1: Using ep0 maxpacket: 16 [ 400.984007][ T1112] usb 5-1: device descriptor read/all, error -71 [ 400.997251][ T4505] kalmia 8-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.7-1, Samsung Kalmia LTE USB dongle, d6:9e:6f:1b:8e:de [ 402.319097][ T23] msi2500 7-1:3.5: Registered as swradio24 [ 402.393881][ T23] msi2500 7-1:3.5: SDR API is still slightly experimental and functionality changes may follow [ 402.651019][ T23] usb 7-1: USB disconnect, device number 2 [ 402.962483][ T4494] usb 8-1: USB disconnect, device number 4 [ 403.196321][ T4494] kalmia 8-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.7-1, Samsung Kalmia LTE USB dongle [ 404.200182][ T8897] device syzkaller0 entered promiscuous mode [ 404.533935][ T4413] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 404.933972][ T4494] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 405.204477][ T4494] usb 8-1: Using ep0 maxpacket: 8 [ 405.474788][ T4494] usb 8-1: unable to get BOS descriptor or descriptor too short [ 405.724292][ T4413] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 405.738746][ T4413] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.783920][ T1112] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 405.839892][ T4413] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 405.858411][ T4413] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 405.876893][ T4413] usb 7-1: Manufacturer: syz [ 405.929426][ T4413] usb 7-1: config 0 descriptor?? [ 406.063972][ T4494] usb 8-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice= 0.40 [ 406.073116][ T4494] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.086561][ T4494] usb 8-1: Product: é’ﭪ똪䬮뜬鷚泞輸Ⱶ4ã¾· [ 406.093366][ T4494] usb 8-1: SerialNumber: syz [ 406.274326][ T1112] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 406.343969][ T8912] udc-core: couldn't find an available UDC or it's busy [ 406.365315][ T1112] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 406.417390][ T8912] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 406.495213][ T1112] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 406.795564][ T4494] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 406.824118][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 406.876492][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 406.929337][ T4413] rc_core: IR keymap rc-hauppauge not found [ 406.936336][ T4413] Registered IR keymap rc-empty [ 406.946826][ T4494] usb 8-1: selecting invalid altsetting 1 [ 406.946979][ T4413] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 406.972113][ T4413] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 406.977451][ T4494] snd-usb-caiaq 8-1:1.2: can't set alt interface. [ 406.989450][ T1112] usb 5-1: config 168 interface 0 has no altsetting 0 [ 407.054478][ T4494] usb 8-1: unable to init card! (ret=-5) [ 407.061400][ T4413] usb 7-1: USB disconnect, device number 3 [ 407.072208][ T4494] snd-usb-caiaq: probe of 8-1:1.2 failed with error -5 [ 407.114188][ T1112] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 407.121924][ T1112] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 407.241479][ T8952] rxe_eth0 speed is unknown, defaulting to 1000 [ 407.592311][ T8969] loop6: detected capacity change from 0 to 512 [ 407.615199][ T1112] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 407.626382][ T4494] usb 8-1: USB disconnect, device number 5 [ 407.642896][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 407.661426][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 407.676951][ T1112] usb 5-1: config 168 interface 0 has no altsetting 0 [ 407.745682][ T8969] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 407.764228][ T1112] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 407.774033][ T1112] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 407.803560][ T1112] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 407.855294][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 407.884369][ T8969] System zones: 1-12 [ 407.942763][ T1112] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 407.996569][ T8969] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1117: missing EA_INODE flag [ 408.023938][ T4494] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 408.146207][ T8969] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1117: error while reading EA inode 12 err=-117 [ 408.220570][ T1112] usb 5-1: config 168 interface 0 has no altsetting 0 [ 408.434427][ T4494] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 408.460945][ T8969] EXT4-fs (loop6): 1 orphan inode deleted [ 408.671518][ T8969] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 408.684047][ T4494] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.706208][ T4494] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.716181][ T4494] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 408.733969][ T1112] usb 5-1: string descriptor 0 read error: -71 [ 408.740484][ T1112] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 408.750039][ T1112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.932311][ T4494] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 408.942944][ T4494] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 408.952459][ T4494] usb 8-1: Manufacturer: syz [ 408.964034][ T1112] usb 5-1: can't set config #168, error -71 [ 408.971514][ T4494] usb 8-1: config 0 descriptor?? [ 408.983017][ T1112] usb 5-1: USB disconnect, device number 10 [ 409.091898][ T8952] x86/PAT: syz.8.1115:8952 freeing invalid memtype [mem 0xfe006000-0xfe006fff] [ 409.333963][ T1112] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 409.469418][ T4412] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 409.509926][ T4494] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 409.530831][ T4494] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 409.584162][ T1112] usb 5-1: Using ep0 maxpacket: 16 [ 409.620089][ T4494] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 409.744087][ T1112] usb 5-1: unable to get BOS descriptor or descriptor too short [ 409.823949][ T1112] usb 5-1: config 1 has an invalid interface number: 169 but max is 0 [ 409.847206][ T1112] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.877252][ T1112] usb 5-1: config 1 has no interface number 0 [ 409.893723][ T1112] usb 5-1: config 1 interface 169 altsetting 93 endpoint 0xE has invalid wMaxPacketSize 0 [ 409.904232][ T4412] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.923956][ T4412] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 409.942957][ T1112] usb 5-1: config 1 interface 169 altsetting 93 bulk endpoint 0xE has invalid maxpacket 0 [ 409.976834][ T4412] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 409.990050][ T1112] usb 5-1: config 1 interface 169 altsetting 93 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.023952][ T4412] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.039180][ T4412] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 410.050387][ T1112] usb 5-1: config 1 interface 169 has no altsetting 0 [ 410.052336][ T4412] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.224081][ T1112] usb 5-1: New USB device found, idVendor=1608, idProduct=0302, bcdDevice=ff.4c [ 410.243584][ T1112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.274097][ T1112] usb 5-1: Product: syz [ 410.289624][ T1112] usb 5-1: Manufacturer: syz [ 410.304009][ T1112] usb 5-1: SerialNumber: syz [ 410.402779][ T4413] usb 8-1: USB disconnect, device number 6 [ 410.554274][ T4412] gud: probe of 9-1:1.0 failed with error -71 [ 410.568502][ T8981] udc-core: couldn't find an available UDC or it's busy [ 410.603087][ T4412] usb 9-1: USB disconnect, device number 2 [ 410.614454][ T8981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 410.938825][ T8981] udc-core: couldn't find an available UDC or it's busy [ 411.000090][ T8981] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 411.466918][ T1112] io_ti 5-1:1.169: Edgeport TI 1 port adapter converter detected [ 411.657384][ T1112] io_ti 5-1:1.169: Direct firmware load for edgeport/down3.bin failed with error -2 [ 411.667269][ T1112] io_ti 5-1:1.169: Falling back to sysfs fallback for: edgeport/down3.bin [ 412.044061][ T4494] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 412.324293][ T4494] usb 8-1: Using ep0 maxpacket: 16 [ 412.449196][ T4494] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC6, skipping [ 412.692304][ T4494] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 107 [ 412.791397][ T4412] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 412.904640][ T4494] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 412.946787][ T4494] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.033982][ T4494] usb 8-1: Product: syz [ 413.044498][ T4494] usb 8-1: Manufacturer: syz [ 413.059495][ T4494] usb 8-1: SerialNumber: syz [ 413.104775][ T4494] usb 8-1: config 0 descriptor?? [ 413.124370][ T9034] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 413.172832][ T4494] port100 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 413.373742][ T4494] usb 8-1: USB disconnect, device number 7 [ 414.422358][ T4412] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.432981][ T4412] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 414.442128][ T4412] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.452849][ T4412] usb 9-1: config 0 descriptor?? [ 414.521297][ T9060] loop7: detected capacity change from 0 to 512 [ 414.536947][ T4412] pwc: Askey VC010 type 2 USB webcam detected. [ 414.676583][ T9060] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 414.696828][ T9060] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.748014][ T4412] pwc: send_video_command error -71 [ 414.753270][ T4412] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 414.955191][ T4412] Philips webcam: probe of 9-1:0.0 failed with error -71 [ 414.965843][ T4412] usb 9-1: USB disconnect, device number 3 [ 415.000277][ T26] audit: type=1400 audit(1792805785.665:144): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9075 comm="syz.4.1135" [ 415.079694][ T9082] Cannot find add_set index 0 as target [ 417.793893][ T4500] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 418.043906][ T4500] usb 8-1: Using ep0 maxpacket: 16 [ 418.164185][ T4500] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.200433][ T4500] usb 8-1: config 0 interface 0 has no altsetting 0 [ 418.221324][ T1286] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.290722][ T9116] rxe_eth0 speed is unknown, defaulting to 1000 [ 418.311224][ T1286] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.366984][ T4500] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 418.432298][ T4500] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.600634][ T4500] usb 8-1: Product: syz [ 418.677713][ T4500] usb 8-1: Manufacturer: syz [ 418.763213][ T4500] usb 8-1: SerialNumber: syz [ 419.030938][ T4500] usb 8-1: config 0 descriptor?? [ 419.231478][ T1286] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.302022][ T1286] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.502817][ T4500] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input9 [ 419.515089][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 419.548192][ T4500] imon:send_packet: packet tx failed (-71) [ 419.584245][ T4500] imon 8-1:0.0: panel buttons/knobs setup failed [ 419.673962][ T4500] rc_core: IR keymap rc-imon-pad not found [ 419.680059][ T4500] Registered IR keymap rc-empty [ 419.690089][ T4500] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 419.713857][ T4500] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 419.727723][ T9116] chnl_net:caif_netlink_parms(): no params data found [ 419.755161][ T4500] imon:send_packet: packet tx failed (-71) [ 419.776006][ T1286] tipc: Left network mode [ 419.793949][ T4500] imon 8-1:0.0: remote input dev register failed [ 419.802738][ T4500] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 419.911992][ T9147] loop6: detected capacity change from 0 to 512 [ 419.919795][ T4500] imon 8-1:0.0: unable to initialize intf0, err 0 [ 419.929683][ T4500] imon:imon_probe: failed to initialize context! [ 419.936586][ T4500] imon 8-1:0.0: unable to register, err -19 [ 419.963937][ T4500] usb 8-1: USB disconnect, device number 8 [ 420.033783][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.042151][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.050543][ T9147] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 420.064127][ T9116] device bridge_slave_0 entered promiscuous mode [ 420.064800][ T9147] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.077181][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.088195][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.096999][ T9116] device bridge_slave_1 entered promiscuous mode [ 420.164044][ T4418] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 420.181902][ T4413] Bluetooth: hci1: command 0x0409 tx timeout [ 420.201549][ T9116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.233394][ T9116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.288808][ T9116] team0: Port device team_slave_0 added [ 420.313059][ T9116] team0: Port device team_slave_1 added [ 420.357899][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.367135][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.393457][ T9116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.434267][ T9158] Cannot find add_set index 0 as target [ 420.473593][ T9116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.510577][ T9116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.537904][ T4500] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 420.813780][ T9116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.914232][ T4500] usb 8-1: device descriptor read/all, error -71 [ 421.012678][ T9116] device hsr_slave_0 entered promiscuous mode [ 421.132319][ T9116] device hsr_slave_1 entered promiscuous mode [ 422.031229][ T4418] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 422.043559][ T4418] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 422.060494][ T4418] usb 9-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 422.070051][ T4418] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.134729][ T9116] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 422.161442][ T9116] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 422.170997][ T9116] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 422.181881][ T9116] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 422.254090][ T4413] Bluetooth: hci1: command 0x041b tx timeout [ 422.333934][ T4500] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 422.371122][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.401247][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 422.427510][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.584010][ T4500] usb 8-1: Using ep0 maxpacket: 32 [ 422.596634][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.774592][ T4500] usb 8-1: unable to get BOS descriptor or descriptor too short [ 422.894759][ T4500] usb 8-1: config 14 has an invalid interface number: 57 but max is 1 [ 422.995033][ T4500] usb 8-1: config 14 has an invalid interface number: 228 but max is 1 [ 423.157043][ T4500] usb 8-1: config 14 has no interface number 0 [ 423.360205][ T4500] usb 8-1: config 14 has no interface number 1 [ 423.367726][ T4500] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 423.379097][ T4500] usb 8-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 423.386069][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 423.391757][ T4500] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 423.410177][ T4500] usb 8-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.434570][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 423.451657][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.454198][ T4500] usb 8-1: config 14 interface 57 has no altsetting 0 [ 423.458860][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.470831][ T4500] usb 8-1: config 14 interface 228 has no altsetting 0 [ 423.487102][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 423.496404][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.505693][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.512815][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.523459][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 423.535331][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 423.542819][ T9195] loop6: detected capacity change from 0 to 512 [ 423.561742][ T1286] device hsr_slave_0 left promiscuous mode [ 423.592007][ T1286] device hsr_slave_1 left promiscuous mode [ 423.603216][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.625905][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.635073][ T9195] EXT4-fs (loop6): Ignoring removed nobh option [ 423.647209][ T1286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.661602][ T1286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.671865][ T1286] device bridge_slave_1 left promiscuous mode [ 423.685270][ T1286] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.699499][ T1286] device bridge_slave_0 left promiscuous mode [ 423.708070][ T1286] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.721190][ T9143] udc-core: couldn't find an available UDC or it's busy [ 423.756480][ T9143] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 423.774218][ T1286] device veth1_macvtap left promiscuous mode [ 423.792706][ T9195] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1156: invalid indirect mapped block 256 (level 2) [ 423.816608][ T1286] device veth0_macvtap left promiscuous mode [ 423.822788][ T1286] device veth1_vlan left promiscuous mode [ 423.837871][ T9195] EXT4-fs (loop6): 2 truncates cleaned up [ 423.860219][ T4500] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 423.871530][ T9195] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 423.885027][ T4500] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.893042][ T4500] usb 8-1: Product: syz [ 423.897518][ T4500] usb 8-1: Manufacturer: syz [ 423.902149][ T4500] usb 8-1: SerialNumber: syz [ 423.907016][ T1286] device veth0_vlan left promiscuous mode [ 423.963989][ T9199] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 424.642863][ T4413] Bluetooth: hci1: command 0x040f tx timeout [ 424.655256][ T4500] legousbtower 8-1:14.57: interrupt endpoints not found [ 424.704048][ T4418] pegasus 9-1:1.0: setup Pegasus II specific registers [ 424.863500][ T1286] team0 (unregistering): Port device team_slave_1 removed [ 424.877076][ T4500] legousbtower 8-1:14.228: interrupt endpoints not found [ 424.915031][ T1286] team0 (unregistering): Port device team_slave_0 removed [ 424.974076][ T1286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.990447][ T1286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.072771][ T4418] pegasus 9-1:1.0: can't locate MII phy, using default [ 425.098587][ T1286] bond0 (unregistering): Released all slaves [ 425.133692][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.150827][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 425.168465][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 425.181236][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 425.190478][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 425.215961][ T4418] pegasus 9-1:1.0: eth21, 3Com USB Ethernet 3C460B, 26:91:ad:77:2c:60 [ 425.258167][ T4418] usb 9-1: USB disconnect, device number 4 [ 425.328451][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 425.344717][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 425.355199][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 425.378001][ T9116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.408311][ T9116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.450204][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 425.509705][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.765076][ T4418] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 425.783095][ T9217] loop6: detected capacity change from 0 to 512 [ 425.844949][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.874218][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 425.898283][ T9116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.998546][ T9217] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 426.033981][ T4418] usb 9-1: Using ep0 maxpacket: 16 [ 426.040421][ T9217] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.419463][ T9234] Cannot find add_set index 0 as target [ 426.940795][ T4504] usb 8-1: USB disconnect, device number 11 [ 426.992820][ T4412] Bluetooth: hci1: command 0x0419 tx timeout [ 426.999001][ T4418] usb 9-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 427.015866][ T4418] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.024008][ T4418] usb 9-1: Product: syz [ 427.028203][ T4418] usb 9-1: Manufacturer: syz [ 427.032830][ T4418] usb 9-1: SerialNumber: syz [ 427.050387][ T4418] usb 9-1: config 0 descriptor?? [ 427.116189][ T4418] gspca_main: spca508-2.14.0 probing 041e:4018 [ 427.235239][ T9116] device veth0_vlan entered promiscuous mode [ 427.354718][ T9116] device veth1_vlan entered promiscuous mode [ 427.384211][ T4418] gspca_spca508: reg_read err -32 [ 427.396064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 427.434491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.436711][ T4418] gspca_spca508: reg_read err -32 [ 427.454502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.474222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.494455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 427.504024][ T4418] gspca_spca508: reg_read err -32 [ 427.519530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.554391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.555341][ T4418] gspca_spca508: reg_read err -32 [ 427.604034][ T4418] gspca_spca508: reg_read err -32 [ 427.614990][ T4417] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 427.662862][ T9116] device veth0_macvtap entered promiscuous mode [ 427.678532][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 427.691760][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.709371][ T9116] device veth1_macvtap entered promiscuous mode [ 427.727741][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 427.740203][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 427.782325][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.799499][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.809430][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.827347][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.840697][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.858606][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.874980][ T9206] udc-core: couldn't find an available UDC or it's busy [ 427.882297][ T9206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 427.890201][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.912520][ T9206] udc-core: couldn't find an available UDC or it's busy [ 427.918140][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.940300][ T9206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 427.961052][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.000287][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.010641][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.052211][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.096543][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.141749][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.153967][ T4417] usb 7-1: unable to get BOS descriptor or descriptor too short [ 428.183735][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.219173][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.229744][ T4418] gspca_spca508: reg write: error -110 [ 428.229801][ T4418] spca508: probe of 9-1:0.0 failed with error -110 [ 428.234552][ T4417] usb 7-1: not running at top speed; connect to a high speed hub [ 428.285724][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.300167][ T9206] udc-core: couldn't find an available UDC or it's busy [ 428.316524][ T9206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 428.338317][ T9116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.339235][ T9206] udc-core: couldn't find an available UDC or it's busy [ 428.369399][ T9116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.384058][ T9206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 428.404205][ T4417] usb 7-1: config 9 has an invalid interface number: 108 but max is 0 [ 428.412479][ T4417] usb 7-1: config 9 has no interface number 0 [ 428.419166][ T9206] udc-core: couldn't find an available UDC or it's busy [ 428.434979][ T9116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.449435][ T9206] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 428.460696][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.478217][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.494254][ T4417] usb 7-1: language id specifier not provided by device, defaulting to English [ 428.517852][ T9116] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.543262][ T9116] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.578134][ T9116] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.603918][ T9116] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.644278][ T4417] usb 7-1: New USB device found, idVendor=04cb, idProduct=010b, bcdDevice=4f.5a [ 428.653384][ T4417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.693967][ T4417] usb 7-1: Product: 势é˜î’砤퀊ꬋ薂応⪈㪬䀨æžÂ³ï€€á»•é›šè«‡ï´‰ïš¸ã¤©ãž„ì¤ã·­ïœŒè½ ÌŠä´ç•©é²»ì¼µäœ™å²î’¸â¨®á†îššàªªæ°”뇴ᴋᄋ別栾輶êžç®¶ë¹Šì¯˜á·¦î ºë¥ì°ˆå¬‹ã¦ëµŽî‚²ã˜Œá­½î¥‘㞟趎韺ä£å‘µâ‡ï™†é©™ë›©ä‡•ê ‘ê¿æ™£ì³¥î—퉒剆䖘Ｚ췾쬙홀瞰俻鹻⾭}䮤嵥ç¥ï°ƒc礊âšî®½îº–ல홯⽫ì«ä•¹ë­®á«¥ [ 428.753888][ T4418] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 428.761603][ T4417] usb 7-1: Manufacturer: Ð¥ [ 428.788486][ T4417] usb 7-1: SerialNumber: â°Š [ 428.884074][ T5101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.899330][ T5101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.926998][ T4504] usb 9-1: USB disconnect, device number 5 [ 428.986662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 429.008863][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.026073][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.034081][ T4418] usb 8-1: Using ep0 maxpacket: 16 [ 429.062188][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 429.174030][ T4418] usb 8-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 429.204153][ T4418] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 429.315826][ T4417] gspca_main: finepix-2.14.0 probing 04cb:010b [ 429.360955][ T4417] usb 7-1: USB disconnect, device number 4 [ 429.413956][ T4418] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 429.432971][ T4418] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.461470][ T4418] usb 8-1: Product: syz [ 429.471585][ T4418] usb 8-1: Manufacturer: syz [ 429.483902][ T4418] usb 8-1: SerialNumber: syz [ 429.505380][ T4319] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 429.518045][ T4418] usb 8-1: config 0 descriptor?? [ 429.575614][ T4418] appledisplay 8-1:0.0: Could not find int-in endpoint [ 429.595543][ T4418] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 430.573926][ T4319] usb 10-1: Using ep0 maxpacket: 8 [ 430.719473][ T4319] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 430.733728][ T4319] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 430.760049][ T4319] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 430.782876][ T4319] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 430.811776][ T4319] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.849932][ T4319] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 430.863892][ T4417] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 430.904366][ T4319] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.282854][ T4505] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 431.661441][ T4505] usb 9-1: Using ep0 maxpacket: 16 [ 431.822621][ T4508] usb 8-1: USB disconnect, device number 12 [ 431.844351][ T4505] usb 9-1: unable to get BOS descriptor or descriptor too short [ 431.909323][ T4417] usb 7-1: Using ep0 maxpacket: 32 [ 431.914734][ T4319] usb 10-1: GET_CAPABILITIES returned 0 [ 431.920333][ T4319] usbtmc 10-1:16.0: can't read capabilities [ 432.064245][ T4417] usb 7-1: config 6 has an invalid interface number: 248 but max is 0 [ 432.082742][ T4417] usb 7-1: config 6 has no interface number 0 [ 432.091275][ T4417] usb 7-1: config 6 interface 248 altsetting 93 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 432.144008][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.155517][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.164714][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.173908][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.183111][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.192288][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.201492][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.210667][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.219922][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.229118][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.238299][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.247480][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.256639][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.265786][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.274966][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.284138][ C0] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 432.310449][ T4417] usb 7-1: config 6 interface 248 has no altsetting 0 [ 432.320982][ T7] usb 10-1: USB disconnect, device number 2 [ 432.365464][ T4505] usb 9-1: New USB device found, idVendor=0db0, idProduct=6869, bcdDevice=73.b3 [ 432.380644][ T4505] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.389300][ T4505] usb 9-1: Product: syz [ 432.393518][ T4505] usb 9-1: Manufacturer: syz [ 432.404507][ T4505] usb 9-1: SerialNumber: syz [ 432.423293][ T4505] usb 9-1: config 0 descriptor?? [ 432.494246][ T4417] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=df.99 [ 432.500938][ T4508] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 432.504261][ T4417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.519175][ T4417] usb 7-1: Product: syz [ 432.523440][ T4417] usb 7-1: Manufacturer: syz [ 432.528452][ T4417] usb 7-1: SerialNumber: syz [ 432.679379][ T4494] usb 9-1: USB disconnect, device number 6 [ 432.890250][ T4508] usb 8-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 432.910041][ T4508] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.985964][ T4417] ni6501 7-1:6.248: driver 'ni6501' failed to auto-configure device. [ 433.028605][ T4417] usb 7-1: USB disconnect, device number 5 [ 433.258378][ T4494] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 435.659679][ T4494] usb 9-1: Using ep0 maxpacket: 16 [ 435.684072][ C1] usb 8-1: NFC: Urb failure (status -71) [ 435.733594][ T4508] usb 8-1: NFC: Unable to get FW version [ 435.752334][ T4508] pn533_usb: probe of 8-1:1.0 failed with error -71 [ 435.761526][ T4494] usb 9-1: device descriptor read/all, error -71 [ 435.802986][ T9364] netlink: 'syz.6.1180': attribute type 10 has an invalid length. [ 435.828172][ T4508] usb 8-1: USB disconnect, device number 13 [ 435.837201][ T9366] netlink: 'syz.5.1181': attribute type 29 has an invalid length. [ 435.946769][ T9376] loop9: detected capacity change from 0 to 512 [ 436.168326][ T9376] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 436.188927][ T9364] team0: Device gre0 is of different type [ 436.194732][ T9376] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.466657][ T9385] Cannot find add_set index 0 as target [ 436.564736][ T9366] netlink: 'syz.5.1181': attribute type 29 has an invalid length. [ 437.271996][ T9396] loop6: detected capacity change from 0 to 512 [ 437.308460][ T9399] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1192'. [ 437.350249][ T9396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 437.403737][ T9396] System zones: 1-12 [ 437.424075][ T9396] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #12: comm syz.6.1191: missing EA_INODE flag [ 437.474310][ T9396] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1191: error while reading EA inode 12 err=-117 [ 437.489037][ T9396] EXT4-fs (loop6): 1 orphan inode deleted [ 437.494991][ T9396] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 437.524005][ T7] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 437.721262][ T9407] binder: 9386:9407 unknown command 1074291477 [ 437.745257][ T9407] binder: 9386:9407 ioctl c0306201 200000000e40 returned -22 [ 438.214071][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 438.384223][ T7] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 438.584262][ T7] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 438.619576][ T7] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 438.667928][ T7] usb 8-1: Product: syz [ 438.692773][ T7] usb 8-1: Manufacturer: syz [ 438.717532][ T7] usb 8-1: SerialNumber: syz [ 438.757689][ T9428] netlink: 'syz.8.1196': attribute type 10 has an invalid length. [ 438.825303][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.863942][ T9428] device bridge_slave_1 left promiscuous mode [ 438.890651][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.926311][ T9428] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 440.027696][ T7] usb 8-1: Handspring Visor / Palm OS: No valid connect info available [ 440.042473][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.049971][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.073670][ T7] usb 8-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 440.114436][ T7] usb 8-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 440.133666][ T7] usb 8-1: Handspring Visor / Palm OS: Number of ports: 2 [ 440.181764][ T7] usb 8-1: palm_os_3_probe - error -71 getting bytes available request [ 440.210738][ T7] visor 8-1:1.0: Handspring Visor / Palm OS converter detected [ 440.237689][ T7] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 440.262909][ T7] usb 8-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 440.302925][ T7] usb 8-1: USB disconnect, device number 14 [ 440.344452][ T7] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 440.399490][ T7] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 440.441660][ T7] visor 8-1:1.0: device disconnected [ 440.589787][ T9444] loop7: detected capacity change from 0 to 512 [ 441.571338][ T9459] loop6: detected capacity change from 0 to 512 [ 441.589260][ T9444] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 441.602480][ T9444] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.620982][ T9459] EXT4-fs (loop6): Ignoring removed nobh option [ 441.707255][ T9459] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1198: invalid indirect mapped block 256 (level 2) [ 441.807836][ T9459] EXT4-fs (loop6): 2 truncates cleaned up [ 441.813720][ T9459] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 442.032833][ T9475] Cannot find add_set index 0 as target [ 442.491807][ T9457] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1198: bg 0: block 5: invalid block bitmap [ 442.854223][ T9457] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 442.866797][ T9457] EXT4-fs (loop6): This should not happen!! Data will be lost [ 442.866797][ T9457] [ 442.876498][ T9457] EXT4-fs (loop6): Total free blocks count 0 [ 442.883417][ T9457] EXT4-fs (loop6): Free/Dirty block details [ 442.889392][ T9457] EXT4-fs (loop6): free_blocks=0 [ 442.894406][ T9457] EXT4-fs (loop6): dirty_blocks=33 [ 442.899566][ T9457] EXT4-fs (loop6): Block reservation details [ 442.905595][ T9457] EXT4-fs (loop6): i_reserved_data_blocks=33 [ 443.482170][ T9477] binder: 9472:9477 unknown command 1074291477 [ 443.520915][ T9477] binder: 9472:9477 ioctl c0306201 200000000e40 returned -22 [ 443.603682][ T9493] loop7: detected capacity change from 0 to 512 [ 443.712531][ T9493] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 443.724181][ T9493] System zones: 1-12 [ 443.755578][ T9493] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.1208: missing EA_INODE flag [ 443.839839][ T9493] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.1208: error while reading EA inode 12 err=-117 [ 443.897231][ T9493] EXT4-fs (loop7): 1 orphan inode deleted [ 443.907324][ T9493] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 444.249363][ T26] audit: type=1400 audit(1792805814.915:145): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9503 comm="syz.9.1211" [ 444.292281][ T9505] overlayfs: failed to resolve './file1/file0': -2 [ 444.510189][ T9515] netlink: 'syz.5.1215': attribute type 21 has an invalid length. [ 444.615799][ T9522] netlink: 'syz.8.1217': attribute type 10 has an invalid length. [ 444.695582][ T9522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.730110][ T9522] team0: Port device bond0 added [ 444.818747][ T9525] netlink: 1047 bytes leftover after parsing attributes in process `syz.9.1218'. [ 445.024181][ T9536] loop9: detected capacity change from 0 to 256 [ 445.122059][ T9537] Cannot find add_set index 0 as target [ 445.220894][ T9536] exfat: Deprecated parameter 'utf8' [ 445.363193][ T9536] exfat: Deprecated parameter 'namecase' [ 445.759518][ T9536] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 445.951295][ T26] audit: type=1400 audit(1792805816.615:146): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9546 comm="syz.6.1226" [ 445.970753][ T9548] overlayfs: failed to resolve './file1/file0': -2 [ 446.088484][ T9556] netlink: 'syz.8.1228': attribute type 2 has an invalid length. [ 446.468166][ T9578] loop6: detected capacity change from 0 to 512 [ 446.832637][ T9583] netlink: 4595 bytes leftover after parsing attributes in process `syz.9.1237'. [ 446.962512][ T9578] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 447.232311][ T9578] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.717079][ T9596] Cannot find add_set index 0 as target [ 448.067845][ T9598] loop8: detected capacity change from 0 to 512 [ 448.192823][ T9598] EXT4-fs (loop8): Ignoring removed nobh option [ 448.243280][ T9598] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1240: invalid indirect mapped block 256 (level 2) [ 448.343672][ T9598] EXT4-fs (loop8): 2 truncates cleaned up [ 448.351456][ T9598] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 448.408718][ T9606] netlink: 'syz.5.1244': attribute type 4 has an invalid length. [ 448.424644][ T9606] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1244'. [ 448.966542][ T9627] device bond0 entered promiscuous mode [ 449.054115][ T9627] device bond_slave_0 entered promiscuous mode [ 449.060517][ T9627] device bond_slave_1 entered promiscuous mode [ 449.678756][ T9633] loop9: detected capacity change from 0 to 512 [ 449.988427][ T9637] loop6: detected capacity change from 0 to 512 [ 450.051901][ T9633] EXT4-fs (loop9): Ignoring removed nobh option [ 450.100338][ T9637] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 450.150095][ T9633] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1250: invalid indirect mapped block 256 (level 2) [ 450.186290][ T9637] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.237695][ T9633] EXT4-fs (loop9): 2 truncates cleaned up [ 450.295191][ T9633] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 450.607967][ T9656] Cannot find add_set index 0 as target [ 451.055193][ T9631] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.1250: bg 0: block 5: invalid block bitmap [ 451.678216][ T9631] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 451.691486][ T9631] EXT4-fs (loop9): This should not happen!! Data will be lost [ 451.691486][ T9631] [ 451.701220][ T9631] EXT4-fs (loop9): Total free blocks count 0 [ 451.707264][ T9631] EXT4-fs (loop9): Free/Dirty block details [ 451.713181][ T9631] EXT4-fs (loop9): free_blocks=0 [ 451.718173][ T9631] EXT4-fs (loop9): dirty_blocks=33 [ 451.723303][ T9631] EXT4-fs (loop9): Block reservation details [ 451.729403][ T9631] EXT4-fs (loop9): i_reserved_data_blocks=33 [ 452.794173][ T9682] syz.6.1262 uses obsolete (PF_INET,SOCK_PACKET) [ 454.176688][ T9708] netlink: 324 bytes leftover after parsing attributes in process `syz.9.1266'. [ 455.133656][ T9712] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1269'. [ 458.081802][ T9790] netlink: 'syz.6.1290': attribute type 29 has an invalid length. [ 458.137310][ T9790] netlink: 'syz.6.1290': attribute type 29 has an invalid length. [ 459.185310][ T9790] netlink: 'syz.6.1290': attribute type 29 has an invalid length. [ 459.808547][ T9819] FAULT_INJECTION: forcing a failure. [ 459.808547][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 459.833912][ T9819] CPU: 1 PID: 9819 Comm: syz.6.1299 Not tainted syzkaller #0 [ 459.841362][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 459.851451][ T9819] Call Trace: [ 459.854784][ T9819] [ 459.857748][ T9819] dump_stack_lvl+0x188/0x250 [ 459.862506][ T9819] ? show_regs_print_info+0x20/0x20 [ 459.867744][ T9819] ? load_image+0x410/0x410 [ 459.872288][ T9819] ? __lock_acquire+0x7d40/0x7d40 [ 459.877359][ T9819] ? lockdep_softirqs_off+0x430/0x430 [ 459.882819][ T9819] should_fail+0x383/0x4b0 [ 459.887316][ T9819] should_failslab+0x5/0x20 [ 459.891888][ T9819] slab_pre_alloc_hook+0x51/0xc0 [ 459.896886][ T9819] __kmalloc+0x6b/0x340 [ 459.901089][ T9819] ? __netlink_kernel_create+0x1f8/0x7d0 [ 459.906870][ T9819] __netlink_kernel_create+0x1f8/0x7d0 [ 459.912376][ T9819] ? netlink_set_err+0x3c0/0x3c0 [ 459.917356][ T9819] ? fib_default_rule_add+0x1fa/0x390 [ 459.922920][ T9819] ? fib_net_init+0x1bb/0x360 [ 459.927707][ T9819] fib_net_init+0x1cd/0x360 [ 459.932242][ T9819] ? rcu_lock_release+0x20/0x20 [ 459.937115][ T9819] ? ip_fib_net_exit+0x330/0x330 [ 459.942084][ T9819] ? devinet_init_net+0x364/0x590 [ 459.947239][ T9819] ops_init+0x360/0x5f0 [ 459.951506][ T9819] setup_net+0x39e/0xa10 [ 459.955773][ T9819] ? copy_net_ns+0x5b0/0x5b0 [ 459.960407][ T9819] ? copy_net_ns+0x324/0x5b0 [ 459.965057][ T9819] ? down_read_killable+0x1ce/0x340 [ 459.970287][ T9819] copy_net_ns+0x33e/0x5b0 [ 459.974766][ T9819] create_new_namespaces+0x3ce/0x700 [ 459.980090][ T9819] unshare_nsproxy_namespaces+0x116/0x160 [ 459.985840][ T9819] ksys_unshare+0x4f6/0x8e0 [ 459.990367][ T9819] ? __lock_acquire+0x7d40/0x7d40 [ 459.995460][ T9819] ? sighand_ctor+0x40/0x40 [ 459.999999][ T9819] ? lock_chain_count+0x20/0x20 [ 460.004876][ T9819] ? syscall_enter_from_user_mode+0x21/0x70 [ 460.010847][ T9819] __x64_sys_unshare+0x34/0x40 [ 460.015635][ T9819] do_syscall_64+0x4c/0xa0 [ 460.020086][ T9819] ? clear_bhb_loop+0x30/0x80 [ 460.024791][ T9819] ? clear_bhb_loop+0x30/0x80 [ 460.029516][ T9819] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 460.035437][ T9819] RIP: 0033:0x7f26291cf559 [ 460.039871][ T9819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.059499][ T9819] RSP: 002b:00007f2627426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 460.067960][ T9819] RAX: ffffffffffffffda RBX: 00007f2629455fa0 RCX: 00007f26291cf559 [ 460.075948][ T9819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 460.083933][ T9819] RBP: 00007f2629266b20 R08: 0000000000000000 R09: 0000000000000000 [ 460.091936][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.099921][ T9819] R13: 00007f2629456038 R14: 00007f2629455fa0 R15: 00007ffc69ec4a48 [ 460.107920][ T9819] [ 460.515007][ T9839] rxe_eth0 speed is unknown, defaulting to 1000 [ 461.732274][ T9863] ip_tables: iptables: counters copy to user failed while replacing table [ 462.071946][ T4338] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.141388][ T9839] chnl_net:caif_netlink_parms(): no params data found [ 462.243931][ T26] audit: type=1400 audit(1792805832.875:147): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9889 comm="syz.6.1321" [ 462.264238][ T4338] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.494145][ T4415] Bluetooth: hci3: command 0x0409 tx timeout [ 463.217881][ T4338] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.326638][ T4338] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.352883][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.373021][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.407431][ T9839] device bridge_slave_0 entered promiscuous mode [ 463.452511][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.473042][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.509231][ T9839] device bridge_slave_1 entered promiscuous mode [ 463.621331][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.656772][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.790938][ T9915] binder: 9901:9915 unknown command 1074291477 [ 463.817722][ T9839] team0: Port device team_slave_0 added [ 463.833761][ T9915] binder: 9901:9915 ioctl c0306201 200000000e40 returned -22 [ 463.876390][ T9839] team0: Port device team_slave_1 added [ 463.964895][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.981278][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.083887][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.133263][ T4338] tipc: Left network mode [ 464.136524][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.180028][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.259726][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.323432][ T9939] loop9: detected capacity change from 0 to 512 [ 464.390378][ T9839] device hsr_slave_0 entered promiscuous mode [ 464.403475][ T9839] device hsr_slave_1 entered promiscuous mode [ 464.417828][ T9839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.429785][ T9839] Cannot create hsr debugfs directory [ 464.827877][ T9937] loop8: detected capacity change from 0 to 256 [ 465.648879][ T4415] Bluetooth: hci3: command 0x041b tx timeout [ 465.915711][ T9937] Cannot find add_set index 6 as target [ 466.798239][ T9939] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 466.861322][ T9939] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.938030][ T9932] rxe_eth0 speed is unknown, defaulting to 1000 [ 467.947711][ T4500] Bluetooth: hci3: command 0x040f tx timeout [ 467.954196][ T4500] Bluetooth: hci4: command 0x0409 tx timeout [ 468.439942][ T9982] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.1345'. [ 468.585918][ T9990] loop9: detected capacity change from 0 to 512 [ 468.640731][ T9932] chnl_net:caif_netlink_parms(): no params data found [ 468.692748][ T9990] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 468.714640][ T9990] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.903239][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.927322][ T9932] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.936081][ T9932] device bridge_slave_0 entered promiscuous mode [ 469.950376][ T9932] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.957721][ T9932] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.976717][ T9932] device bridge_slave_1 entered promiscuous mode [ 470.003953][ T4494] Bluetooth: hci4: command 0x041b tx timeout [ 470.011320][ T4494] Bluetooth: hci3: command 0x0419 tx timeout [ 470.079413][ T9932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.124767][ T9932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.305139][ T9932] team0: Port device team_slave_0 added [ 470.324628][ T4338] device hsr_slave_0 left promiscuous mode [ 470.341294][ T4338] device hsr_slave_1 left promiscuous mode [ 470.362514][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.381100][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.395481][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.413306][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.427495][ T4338] device bridge_slave_1 left promiscuous mode [ 470.438719][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.455469][ T4338] device bridge_slave_0 left promiscuous mode [ 470.471940][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.490133][ T4338] device veth1_macvtap left promiscuous mode [ 470.496397][ T4338] device veth0_macvtap left promiscuous mode [ 470.502800][T10038] binder: 10015:10038 unknown command 1074291477 [ 470.509678][ T4338] device veth1_vlan left promiscuous mode [ 470.515733][ T4338] device veth0_vlan left promiscuous mode [ 470.521824][T10038] binder: 10015:10038 ioctl c0306201 200000000e40 returned -22 [ 470.690522][T10040] loop8: detected capacity change from 0 to 512 [ 470.749724][T10040] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 470.763229][T10040] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.852660][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 470.893548][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 470.920679][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.952214][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.096161][ T4338] bond0 (unregistering): Released all slaves [ 471.236502][ T9932] team0: Port device team_slave_1 added [ 471.633450][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.671994][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.794285][ T9932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.829933][ T9932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.837020][ T9932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.869660][ T9932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.098367][ T4500] Bluetooth: hci4: command 0x040f tx timeout [ 472.897609][ T9932] device hsr_slave_0 entered promiscuous mode [ 472.918383][ T9932] device hsr_slave_1 entered promiscuous mode [ 472.968582][ T9932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.995567][ T9932] Cannot create hsr debugfs directory [ 473.130650][T10081] loop9: detected capacity change from 0 to 512 [ 473.177922][T10085] loop8: detected capacity change from 0 to 512 [ 473.242234][T10085] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 473.457863][T10085] EXT4-fs (loop8): 1 truncate cleaned up [ 473.463758][T10085] EXT4-fs (loop8): mounted filesystem without journal. Opts: acl,errors=remount-ro,. Quota mode: none. [ 473.717627][T10081] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 473.759371][T10081] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.154710][ T26] audit: type=1800 audit(1792805844.795:148): pid=10101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1372" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 474.265709][ T4500] Bluetooth: hci4: command 0x0419 tx timeout [ 475.386290][T10138] binder: 10121:10138 unknown command 1074291477 [ 475.449208][T10138] binder: 10121:10138 ioctl c0306201 200000000e40 returned -22 [ 475.686358][ T1112] io_ti 5-1:1.169: Failed to load image "edgeport/down3.bin" err -110 [ 475.735119][ T1112] io_ti: probe of 5-1:1.169 failed with error -110 [ 475.882466][ T1112] usb 5-1: USB disconnect, device number 11 [ 477.120848][T10161] loop8: detected capacity change from 0 to 512 [ 477.241352][ T9932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 477.300154][ T9932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 477.333561][T10164] netlink: 'syz.9.1391': attribute type 2 has an invalid length. [ 477.358802][T10161] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 477.388404][T10161] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61 [ 477.398003][ T9932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 477.416812][ T9932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 477.432438][T10161] EXT4-fs error (device loop8): ext4_orphan_get:1410: inode #13: comm syz.8.1389: iget: bad i_size value: 12154757448730 [ 477.464476][T10161] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.1389: couldn't read orphan inode 13 (err -117) [ 477.514981][ T9839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 477.524697][T10161] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=á[]*:[,,errors=continue. Quota mode: writeback. [ 477.566856][ T9839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 477.612768][ T9839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 477.634724][ T9839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 477.658768][T10161] fscrypt (loop8, inode 2): Error -61 getting encryption context [ 477.747557][ T9932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.806274][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 477.874664][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.918042][ T9932] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.318425][ T9839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.348799][T10196] binder: 10180:10196 unknown command 1074291477 [ 478.365166][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 478.401577][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 478.443891][T10196] binder: 10180:10196 ioctl c0306201 200000000e40 returned -22 [ 478.461549][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.468741][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.517714][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 478.579604][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 478.605777][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.612910][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.622890][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 478.633079][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 478.674360][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 478.695810][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 478.749104][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 478.772519][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 478.794840][T10205] loop8: detected capacity change from 0 to 512 [ 478.811990][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 478.846342][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 478.866013][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.937226][ T9839] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.965891][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 479.002624][T10205] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 479.045168][ T9932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.070224][T10205] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.089578][ T9932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.152868][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 479.184557][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 479.259129][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 479.308164][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 479.317082][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 479.326589][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 479.336288][ T4564] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.343378][ T4564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.351177][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.360697][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.377414][ T4564] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.384624][ T4564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.500089][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.698979][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.777085][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1407'. [ 479.837128][T10234] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1407'. [ 480.026961][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 480.072767][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.109684][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.123269][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.133409][ T4564] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.285153][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.300546][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.310158][T10247] overlayfs: failed to resolve './file1': -2 [ 480.379736][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.402161][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.439777][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.469270][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.518918][ T9839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.557668][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 480.574220][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 480.609389][ T9932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.708857][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 480.754959][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 480.831402][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 480.853313][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 480.886793][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 480.938125][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 480.968560][ T9932] device veth0_vlan entered promiscuous mode [ 481.018495][ T9932] device veth1_vlan entered promiscuous mode [ 481.080678][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 481.110904][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 481.162673][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 481.184703][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 481.225648][ T9932] device veth0_macvtap entered promiscuous mode [ 481.267244][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.286872][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 481.304570][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.327174][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.366028][ T9932] device veth1_macvtap entered promiscuous mode [ 481.698786][ T9839] device veth0_vlan entered promiscuous mode [ 481.775760][ T9839] device veth1_vlan entered promiscuous mode [ 481.911346][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 481.946527][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 481.966002][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 481.991351][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.015216][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.036821][T10297] overlayfs: failed to resolve './file1': -2 [ 482.062458][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 482.089102][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 482.136059][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.186323][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.221862][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.253580][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.286770][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.315421][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.345109][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.368965][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.416383][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.430700][ T9839] device veth0_macvtap entered promiscuous mode [ 482.465520][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.487193][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 483.437073][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 483.460397][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.472691][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 483.482064][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 483.493492][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 483.521806][ T4338] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.610056][ T9839] device veth1_macvtap entered promiscuous mode [ 483.645306][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.665037][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.681789][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.716385][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.754957][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.790854][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.832237][ T9932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.856225][ T9932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.880969][ T9932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.908283][ T9932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.941380][ T9932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.956791][ T9932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.987346][ T9932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.024884][T10321] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1427'. [ 484.055302][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 484.094680][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 484.131957][ T4338] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.177852][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.216779][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.245419][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.276896][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.307314][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.324382][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.345752][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.377131][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.398245][T10341] overlayfs: failed to resolve './file1': -2 [ 484.415056][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.439093][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.459072][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.492364][ T4338] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.536338][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 484.552386][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 484.593124][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.623290][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.647652][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.671562][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.696476][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.719224][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.736976][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.761416][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.785719][ T9839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.810203][ T9839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.852845][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.880848][T10349] netlink: 606 bytes leftover after parsing attributes in process `syz.8.1433'. [ 484.920672][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 484.935381][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.008496][ T4338] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.063748][ T9839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.093582][ T9839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.113956][ T9839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.122808][ T9839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.221756][ T5404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.251652][ T5404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.351034][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 485.383578][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.405094][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.432985][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 485.515571][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.523453][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.589716][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 485.605159][T10375] FAULT_INJECTION: forcing a failure. [ 485.605159][T10375] name fail_futex, interval 1, probability 0, space 0, times 1 [ 485.663873][T10375] CPU: 1 PID: 10375 Comm: syz.2.1328 Not tainted syzkaller #0 [ 485.671392][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.681494][T10375] Call Trace: [ 485.684802][T10375] [ 485.687765][T10375] dump_stack_lvl+0x188/0x250 [ 485.692489][T10375] ? show_regs_print_info+0x20/0x20 [ 485.696535][ T5110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.697721][T10375] ? load_image+0x410/0x410 [ 485.710059][T10375] should_fail+0x383/0x4b0 [ 485.714520][T10375] get_futex_key+0x1a1/0x12d0 [ 485.716308][ T5110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.719234][T10375] ? __lock_acquire+0x13b3/0x7d40 [ 485.731555][T10375] ? futex_wait_restart+0x250/0x250 [ 485.736805][T10375] futex_wake+0x101/0x540 [ 485.741176][T10375] ? futex_wait+0x680/0x680 [ 485.745719][T10375] ? verify_lock_unused+0x140/0x140 [ 485.750957][T10375] ? verify_lock_unused+0x140/0x140 [ 485.756200][T10375] do_futex+0xd83/0x12b0 [ 485.760484][T10375] ? __lock_acquire+0x7d40/0x7d40 [ 485.765563][T10375] ? futex_exit_release+0x1c0/0x1c0 [ 485.770816][T10375] ? __context_tracking_exit+0x4c/0x80 [ 485.776308][T10375] __se_sys_futex+0x389/0x420 [ 485.781020][T10375] ? __x64_sys_futex+0xf0/0xf0 [ 485.785816][T10375] ? __x64_sys_futex+0x1d/0xf0 [ 485.790047][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 485.790639][T10375] do_syscall_64+0x4c/0xa0 [ 485.802255][T10375] ? clear_bhb_loop+0x30/0x80 [ 485.806965][T10375] ? clear_bhb_loop+0x30/0x80 [ 485.811683][T10375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.817608][T10375] RIP: 0033:0x7f1f619b5559 [ 485.822057][T10375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.841695][T10375] RSP: 002b:00007f1f5fc0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 485.850149][T10375] RAX: ffffffffffffffda RBX: 00007f1f61c3bfa8 RCX: 00007f1f619b5559 [ 485.858150][T10375] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1f61c3bfac [ 485.866157][T10375] RBP: 00007f1f61c3bfa0 R08: 00211278670cbab8 R09: 0000000000000000 [ 485.874147][T10375] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 485.882141][T10375] R13: 00007f1f61c3c038 R14: 00007ffce7e987a0 R15: 00007ffce7e98888 [ 485.890158][T10375] [ 486.802002][T10410] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 486.964542][ T4338] device hsr_slave_0 left promiscuous mode [ 486.981277][T10416] binder: 10397:10416 unknown command 1074291477 [ 486.988994][ T4338] device hsr_slave_1 left promiscuous mode [ 487.022661][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.035407][T10416] binder: 10397:10416 ioctl c0306201 200000000e40 returned -22 [ 487.052987][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.092272][ T4338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.120680][ T4338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.169665][ T4338] device bridge_slave_1 left promiscuous mode [ 487.184455][ T4338] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.251960][ T4338] device bridge_slave_0 left promiscuous mode [ 487.269693][ T4338] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.559805][ T4338] device veth1_macvtap left promiscuous mode [ 487.567255][ T4338] device veth0_macvtap left promiscuous mode [ 487.592211][ T4338] device veth1_vlan left promiscuous mode [ 487.633157][ T4338] device veth0_vlan left promiscuous mode [ 487.728016][T10426] loop8: detected capacity change from 0 to 1024 [ 487.814413][T10426] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 487.880007][T10426] EXT4-fs (loop8): barriers disabled [ 487.904435][T10426] JBD2: no valid journal superblock found [ 487.930635][T10426] EXT4-fs (loop8): error loading journal [ 487.944724][T10428] FAULT_INJECTION: forcing a failure. [ 487.944724][T10428] name failslab, interval 1, probability 0, space 0, times 0 [ 487.995323][T10428] CPU: 0 PID: 10428 Comm: syz.2.1453 Not tainted syzkaller #0 [ 488.002880][T10428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 488.012961][T10428] Call Trace: [ 488.016269][T10428] [ 488.019244][T10428] dump_stack_lvl+0x188/0x250 [ 488.023980][T10428] ? show_regs_print_info+0x20/0x20 [ 488.029212][T10428] ? load_image+0x410/0x410 [ 488.033760][T10428] ? __might_sleep+0xf0/0xf0 [ 488.038387][T10428] ? __lock_acquire+0x7d40/0x7d40 [ 488.043447][T10428] ? mark_lock+0x94/0x320 [ 488.047809][T10428] should_fail+0x383/0x4b0 [ 488.052275][T10428] should_failslab+0x5/0x20 [ 488.056821][T10428] slab_pre_alloc_hook+0x51/0xc0 [ 488.061811][T10428] __kmalloc+0x6b/0x340 [ 488.066026][T10428] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 488.071795][T10428] tomoyo_realpath_from_path+0xed/0x5e0 [ 488.077387][T10428] tomoyo_path_number_perm+0x251/0x6b0 [ 488.082889][T10428] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 488.088381][T10428] ? do_futex+0xdc2/0x12b0 [ 488.092898][T10428] security_file_ioctl+0x6c/0xa0 [ 488.097890][T10428] __se_sys_ioctl+0x48/0x170 [ 488.102515][T10428] do_syscall_64+0x4c/0xa0 [ 488.106959][T10428] ? clear_bhb_loop+0x30/0x80 [ 488.111666][T10428] ? clear_bhb_loop+0x30/0x80 [ 488.116399][T10428] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 488.122325][T10428] RIP: 0033:0x7f1f619b5559 [ 488.126772][T10428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.146406][T10428] RSP: 002b:00007f1f5fc0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.154853][T10428] RAX: ffffffffffffffda RBX: 00007f1f61c3bfa0 RCX: 00007f1f619b5559 [ 488.162852][T10428] RDX: 0000200000000180 RSI: 0000000000004b6a RDI: 0000000000000005 [ 488.170857][T10428] RBP: 00007f1f61a4cb20 R08: 0000000000000000 R09: 0000000000000000 [ 488.178856][T10428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.186855][T10428] R13: 00007f1f61c3c038 R14: 00007f1f61c3bfa0 R15: 00007ffce7e98888 [ 488.194876][T10428] [ 488.222956][T10431] sg_write: data in/out 358400/136 bytes for SCSI command 0x0-- guessing data in; [ 488.222956][T10431] program syz.9.1454 not setting count and/or reply_len properly [ 488.291802][T10428] ERROR: Out of memory at tomoyo_realpath_from_path. [ 488.807033][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1458'. [ 488.873964][T10445] loop8: detected capacity change from 0 to 256 [ 488.977697][T10452] overlayfs: failed to resolve './file1': -2 [ 489.354512][T10450] binder: 10449:10450 unknown command 1074291477 [ 489.361024][T10450] binder: 10449:10450 ioctl c0306201 200000000e40 returned -22 [ 489.964053][ T4494] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 490.203899][ T4494] usb 10-1: Using ep0 maxpacket: 16 [ 490.364882][ T4494] usb 10-1: unable to get BOS descriptor or descriptor too short [ 490.445031][ T4494] usb 10-1: config 3 has an invalid interface number: 105 but max is 1 [ 490.463569][ T4494] usb 10-1: config 3 has an invalid interface number: 164 but max is 1 [ 490.473681][ T4494] usb 10-1: config 3 has no interface number 0 [ 490.495019][ T4494] usb 10-1: config 3 has no interface number 1 [ 490.501238][ T4494] usb 10-1: config 3 interface 105 has no altsetting 0 [ 490.518439][ T4494] usb 10-1: config 3 interface 164 has no altsetting 0 [ 490.688555][ T4494] usb 10-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=4c.06 [ 490.708030][ T4494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.728304][ T4494] usb 10-1: Product: syz [ 490.732719][ T4494] usb 10-1: Manufacturer: syz [ 490.748592][ T4494] usb 10-1: SerialNumber: syz [ 491.030326][T10461] udc-core: couldn't find an available UDC or it's busy [ 491.047630][T10461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 491.062385][T10461] udc-core: couldn't find an available UDC or it's busy [ 491.079730][T10461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 491.095447][T10461] udc-core: couldn't find an available UDC or it's busy [ 491.112759][T10461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 491.135912][T10461] udc-core: couldn't find an available UDC or it's busy [ 491.142893][T10461] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 491.276041][ T4494] usb 10-1: USB disconnect, device number 3 [ 491.841722][ T4338] team0 (unregistering): Port device team_slave_1 removed [ 491.978543][ T4338] team0 (unregistering): Port device team_slave_0 removed [ 492.050991][ T4338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.078322][T10476] loop9: detected capacity change from 0 to 512 [ 492.086892][ T4338] device bond_slave_1 left promiscuous mode [ 492.152328][ T4338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.212381][T10481] overlayfs: failed to resolve './file1': -2 [ 492.221038][T10476] EXT4-fs (loop9): Ignoring removed nobh option [ 492.226978][ T4338] device bond_slave_0 left promiscuous mode [ 492.292763][T10476] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.1474: invalid indirect mapped block 256 (level 2) [ 492.354946][T10476] EXT4-fs (loop9): 2 truncates cleaned up [ 492.405689][T10476] EXT4-fs (loop9): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 493.058006][T10493] loop8: detected capacity change from 0 to 512 [ 493.100009][ T4338] bond0 (unregistering): Released all slaves [ 493.123932][ T4500] Bluetooth: hci0: command 0x0406 tx timeout [ 493.277665][T10486] rxe_eth0 speed is unknown, defaulting to 1000 [ 493.324879][T10493] EXT4-fs (loop8): Ignoring removed orlov option [ 493.362257][T10493] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 493.461590][T10493] EXT4-fs (loop8): orphan cleanup on readonly fs [ 493.522872][T10493] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3894: comm syz.8.1478: Allocating blocks 41-42 which overlap fs metadata [ 493.543022][T10493] Quota error (device loop8): write_blk: dquota write failed [ 493.593949][T10493] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 493.603417][T10493] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3894: comm syz.8.1478: Allocating blocks 41-42 which overlap fs metadata [ 493.642413][T10493] Quota error (device loop8): write_blk: dquota write failed [ 493.675488][T10493] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 493.718827][T10493] EXT4-fs error (device loop8): ext4_acquire_dquot:6236: comm syz.8.1478: Failed to acquire dquot type 1 [ 493.746296][T10493] EXT4-fs error (device loop8): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 493.833403][T10493] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #12: comm syz.8.1478: corrupted inode contents [ 493.864162][T10493] EXT4-fs error (device loop8): ext4_dirty_inode:6087: inode #12: comm syz.8.1478: mark_inode_dirty error [ 493.889435][T10493] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #12: comm syz.8.1478: corrupted inode contents [ 493.912426][T10493] EXT4-fs error (device loop8): __ext4_ext_dirty:183: inode #12: comm syz.8.1478: mark_inode_dirty error [ 493.940592][T10493] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #12: comm syz.8.1478: corrupted inode contents [ 493.989402][T10493] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 494.013998][T10493] EXT4-fs error (device loop8): ext4_do_update_inode:5229: inode #12: comm syz.8.1478: corrupted inode contents [ 494.047471][T10524] overlayfs: failed to resolve './file1': -2 [ 494.056593][T10493] EXT4-fs error (device loop8): ext4_truncate:4286: inode #12: comm syz.8.1478: mark_inode_dirty error [ 494.088670][T10493] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 494.111643][T10528] loop9: detected capacity change from 0 to 128 [ 494.128646][T10493] EXT4-fs (loop8): 1 truncate cleaned up [ 494.149378][T10493] EXT4-fs (loop8): mounted filesystem without journal. Opts: noauto_da_alloc,noblock_validity,inode_readahead_blks=0x0000000000200000,noload,noinit_itable,nouid32,orlov,nouid32,auto_da_alloc=0x00000000000085962,errors=continue. Quota mode: writeback. [ 494.254258][T10533] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 494.320404][T10493] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 494.450850][T10493] EXT4-fs (loop8): re-mounted. Opts: (null). Quota mode: writeback. [ 494.460190][T10539] FAULT_INJECTION: forcing a failure. [ 494.460190][T10539] name failslab, interval 1, probability 0, space 0, times 0 [ 494.515634][T10539] CPU: 1 PID: 10539 Comm: syz.1.1491 Not tainted syzkaller #0 [ 494.523207][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.533287][T10539] Call Trace: [ 494.536592][T10539] [ 494.539545][T10539] dump_stack_lvl+0x188/0x250 [ 494.544274][T10539] ? show_regs_print_info+0x20/0x20 [ 494.549509][T10539] ? load_image+0x410/0x410 [ 494.554064][T10539] ? __might_sleep+0xf0/0xf0 [ 494.558698][T10539] ? __lock_acquire+0x7d40/0x7d40 [ 494.563764][T10539] should_fail+0x383/0x4b0 [ 494.568215][T10539] should_failslab+0x5/0x20 [ 494.572767][T10539] slab_pre_alloc_hook+0x51/0xc0 [ 494.577732][T10539] kmem_cache_alloc_trace+0x47/0x290 [ 494.583047][T10539] ? call_usermodehelper_setup+0x8a/0x260 [ 494.588797][T10539] call_usermodehelper_setup+0x8a/0x260 [ 494.594369][T10539] ? __request_module+0x980/0x980 [ 494.599458][T10539] __request_module+0x3ea/0x980 [ 494.604349][T10539] ? umd_cleanup+0x110/0x110 [ 494.608981][T10539] ? __lock_acquire+0x7d40/0x7d40 [ 494.614047][T10539] ? rcu_lock_release+0x5/0x20 [ 494.618850][T10539] inet6_create+0x43d/0x1130 [ 494.623534][T10539] __sock_create+0x473/0x910 [ 494.628210][T10539] __sys_socket+0xe2/0x170 [ 494.632690][T10539] __x64_sys_socket+0x76/0x80 [ 494.637432][T10539] do_syscall_64+0x4c/0xa0 [ 494.641879][T10539] ? clear_bhb_loop+0x30/0x80 [ 494.646616][T10539] ? clear_bhb_loop+0x30/0x80 [ 494.651331][T10539] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 494.657254][T10539] RIP: 0033:0x7f2e9baa4559 [ 494.661693][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.681336][T10539] RSP: 002b:00007f2e99cfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 494.689796][T10539] RAX: ffffffffffffffda RBX: 00007f2e9bd2afa0 RCX: 00007f2e9baa4559 [ 494.697820][T10539] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000000000a [ 494.705859][T10539] RBP: 00007f2e9bb3bb20 R08: 0000000000000000 R09: 0000000000000000 [ 494.713873][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.721864][T10539] R13: 00007f2e9bd2b038 R14: 00007f2e9bd2afa0 R15: 00007fff24489ef8 [ 494.729878][T10539] [ 495.058549][T10552] loop8: detected capacity change from 0 to 512 [ 495.157949][T10552] EXT4-fs (loop8): Ignoring removed nobh option [ 495.235255][T10552] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1494: invalid indirect mapped block 256 (level 2) [ 495.327127][T10552] EXT4-fs (loop8): 2 truncates cleaned up [ 495.383933][T10552] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 496.345216][T10483] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 498.102876][T10630] loop1: detected capacity change from 0 to 512 [ 498.166797][T10630] FAT-fs (loop1): bogus logical sector size 0 [ 498.183350][T10630] FAT-fs (loop1): Can't find a valid FAT filesystem [ 500.467132][T10706] ip_tables: iptables: counters copy to user failed while replacing table [ 500.871117][T10716] binder: 10699:10716 unknown command 1074291477 [ 500.893832][T10716] binder: 10699:10716 ioctl c0306201 200000000e40 returned -22 [ 502.631088][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.637495][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.922556][T10737] block device autoloading is deprecated and will be removed. [ 503.088858][T10746] loop8: detected capacity change from 0 to 512 [ 503.209897][T10746] EXT4-fs (loop8): Ignoring removed nobh option [ 503.245823][T10746] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1554: invalid indirect mapped block 256 (level 2) [ 503.404496][T10746] EXT4-fs (loop8): 2 truncates cleaned up [ 503.410283][T10746] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 504.562727][T10787] loop8: detected capacity change from 0 to 512 [ 505.644997][T10815] loop8: detected capacity change from 0 to 512 [ 505.673737][T10815] EXT4-fs (loop8): Ignoring removed oldalloc option [ 505.779623][T10815] EXT4-fs (loop8): mounted filesystem without journal. Opts: oldalloc,block_validity,dioread_lock,,errors=continue. Quota mode: none. [ 506.087372][T10838] overlayfs: failed to resolve './file1/file0': -2 [ 506.244438][T10845] binder: 10813:10845 unknown command 1074291477 [ 506.250829][T10845] binder: 10813:10845 ioctl c0306201 200000000e40 returned -22 [ 506.752530][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1591'. [ 507.110603][T10880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1595'. [ 507.128541][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1595'. [ 507.325689][T10890] overlayfs: overlapping lowerdir path [ 507.361384][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 507.396076][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1598'. [ 507.419365][T10894] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.428777][T10894] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.437554][T10894] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.446541][T10894] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.199034][T10913] usb usb8: usbfs: process 10913 (syz.8.1603) did not claim interface 0 before use [ 509.651006][T10935] loop8: detected capacity change from 0 to 512 [ 509.693975][T10935] EXT4-fs (loop8): Ignoring removed nobh option [ 509.758902][T10940] overlayfs: overlapping lowerdir path [ 509.758898][T10935] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.1611: invalid indirect mapped block 256 (level 2) [ 509.784917][T10935] EXT4-fs (loop8): 2 truncates cleaned up [ 509.790807][T10935] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 509.864772][T10946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1613'. [ 510.202617][T10941] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 510.353181][T10897] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 510.894599][T10946] infiniband syz1: set active [ 510.900810][T10946] infiniband syz1: added veth1_to_hsr [ 511.009312][T10946] RDS/IB: syz1: added [ 511.018086][T10946] smc: adding ib device syz1 with port count 1 [ 511.084018][T10946] smc: ib device syz1 port 1 has pnetid [ 511.748118][T10960] binder: 10959:10960 unknown command 1074291477 [ 511.849563][T10960] binder: 10959:10960 ioctl c0306201 200000000e40 returned -22 [ 512.668950][T10990] FAULT_INJECTION: forcing a failure. [ 512.668950][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 512.908886][T10990] CPU: 1 PID: 10990 Comm: syz.8.1623 Not tainted syzkaller #0 [ 512.916454][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 512.926563][T10990] Call Trace: [ 512.929870][T10990] [ 512.932831][T10990] dump_stack_lvl+0x188/0x250 [ 512.937558][T10990] ? show_regs_print_info+0x20/0x20 [ 512.942831][T10990] ? load_image+0x410/0x410 [ 512.947381][T10990] should_fail+0x383/0x4b0 [ 512.951841][T10990] should_failslab+0x5/0x20 [ 512.956391][T10990] slab_pre_alloc_hook+0x51/0xc0 [ 512.961362][T10990] ? anon_vma_clone+0xbc/0x4d0 [ 512.966148][T10990] kmem_cache_alloc+0x3d/0x280 [ 512.970944][T10990] anon_vma_clone+0xbc/0x4d0 [ 512.975577][T10990] __split_vma+0x1ab/0x410 [ 512.980022][T10990] ? find_vma+0x1df/0x230 [ 512.984386][T10990] __do_munmap+0x40b/0xe10 [ 512.988845][T10990] mremap_to+0x363/0x6b0 [ 512.993124][T10990] __se_sys_mremap+0x412/0x950 [ 512.997916][T10990] ? __x64_sys_mremap+0xc0/0xc0 [ 513.002810][T10990] ? lock_chain_count+0x20/0x20 [ 513.007700][T10990] ? lockdep_hardirqs_on+0x94/0x140 [ 513.012937][T10990] ? __x64_sys_mremap+0x1c/0xc0 [ 513.017816][T10990] do_syscall_64+0x4c/0xa0 [ 513.022274][T10990] ? clear_bhb_loop+0x30/0x80 [ 513.027134][T10990] ? clear_bhb_loop+0x30/0x80 [ 513.031843][T10990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 513.037758][T10990] RIP: 0033:0x7fc25444a559 [ 513.042200][T10990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.061836][T10990] RSP: 002b:00007fc2526a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 513.070295][T10990] RAX: ffffffffffffffda RBX: 00007fc2546d0fa0 RCX: 00007fc25444a559 [ 513.078311][T10990] RDX: 0000000000002000 RSI: 0000000000003000 RDI: 0000200000001000 [ 513.086331][T10990] RBP: 00007fc2544e1b20 R08: 0000200000006000 R09: 0000000000000000 [ 513.094330][T10990] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 513.102344][T10990] R13: 00007fc2546d1038 R14: 00007fc2546d0fa0 R15: 00007ffd2e70f198 [ 513.110361][T10990] [ 513.472084][T10996] loop1: detected capacity change from 0 to 512 [ 513.568533][T10996] EXT4-fs (loop1): Ignoring removed nobh option [ 513.671494][T10996] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1625: invalid indirect mapped block 256 (level 2) [ 513.754718][T10996] EXT4-fs (loop1): 2 truncates cleaned up [ 513.760516][T10996] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,grpquota,,errors=continue. Quota mode: writeback. [ 515.118415][ T18] [ 515.120827][ T18] ====================================================== [ 515.127859][ T18] WARNING: possible circular locking dependency detected [ 515.135317][ T18] syzkaller #0 Not tainted [ 515.139776][ T18] ------------------------------------------------------ [ 515.146815][ T18] cpuhp/1/18 is trying to acquire lock: [ 515.152377][ T18] ffff88802cf5c008 (kn->active#32){++++}-{0:0}, at: kernfs_remove_by_name_ns+0x91/0x100 [ 515.162183][ T18] [ 515.162183][ T18] but task is already holding lock: [ 515.169559][ T18] ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40 [ 515.178927][ T18] [ 515.178927][ T18] which lock already depends on the new lock. [ 515.178927][ T18] [ 515.189346][ T18] [ 515.189346][ T18] the existing dependency chain (in reverse order) is: [ 515.198381][ T18] [ 515.198381][ T18] -> #4 (cpuhp_state-down){+.+.}-{0:0}: [ 515.206160][ T18] cpuhp_lock_acquire+0x3a/0x40 [ 515.209143][T11036] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 515.211567][ T18] cpuhp_kick_ap_work+0x7f/0x1b0 [ 515.211595][ T18] _cpu_down+0x35b/0xbb0 [ 515.229889][ T18] cpu_device_down+0x69/0xa0 [ 515.235027][ T18] device_offline+0x259/0x3a0 [ 515.240250][ T18] acpi_bus_offline+0x23e/0x400 [ 515.245655][ T18] acpi_device_hotplug+0x56c/0xc60 [ 515.251321][ T18] acpi_hotplug_work_fn+0x8f/0xc0 [ 515.256910][ T18] process_one_work+0x867/0xff0 [ 515.262321][ T18] worker_thread+0xad7/0x12a0 [ 515.267564][ T18] kthread+0x42e/0x520 [ 515.272178][ T18] ret_from_fork+0x1f/0x30 [ 515.277144][ T18] [ 515.277144][ T18] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 515.284928][ T18] percpu_down_write+0x52/0x2f0 [ 515.290347][ T18] _cpu_up+0x77/0x810 [ 515.294878][ T18] cpu_up+0x16d/0x1a0 [ 515.299408][ T18] bringup_nonboot_cpus+0x100/0x1a0 [ 515.301628][T11036] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 515.305154][ T18] smp_init+0x3a/0x150 [ 515.317869][ T18] kernel_init_freeable+0x3bc/0x560 [ 515.323615][ T18] kernel_init+0x19/0x1b0 [ 515.328500][ T18] ret_from_fork+0x1f/0x30 [ 515.333468][ T18] [ 515.333468][ T18] -> #2 (cpu_add_remove_lock){+.+.}-{3:3}: [ 515.341490][ T18] __mutex_lock_common+0x1e5/0x2400 [ 515.347350][ T18] mutex_lock_nested+0x17/0x20 [ 515.352664][ T18] cpu_device_down+0x3a/0xa0 [ 515.357824][ T18] device_offline+0x259/0x3a0 [ 515.363046][ T18] acpi_bus_offline+0x23e/0x400 [ 515.368445][ T18] acpi_device_hotplug+0x56c/0xc60 [ 515.374107][ T18] acpi_hotplug_work_fn+0x8f/0xc0 [ 515.379689][ T18] process_one_work+0x867/0xff0 [ 515.385101][ T18] worker_thread+0xad7/0x12a0 [ 515.390344][ T18] kthread+0x42e/0x520 [ 515.394955][ T18] ret_from_fork+0x1f/0x30 [ 515.399916][ T18] [ 515.399916][ T18] -> #1 (&device->physical_node_lock){+.+.}-{3:3}: [ 515.408631][ T18] __mutex_lock_common+0x1e5/0x2400 [ 515.412540][T11036] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 515.414378][ T18] mutex_lock_nested+0x17/0x20 [ 515.414403][ T18] acpi_companion_match+0x86/0x110 [ 515.433426][ T18] acpi_device_uevent_modalias+0x16/0x30 [ 515.439627][ T18] platform_uevent+0x38/0xb0 [ 515.444768][ T18] dev_uevent+0x3a5/0x740 [ 515.449652][ T18] kobject_uevent_env+0x465/0x890 [ 515.455227][ T18] kobject_synth_uevent+0x457/0x940 [ 515.460973][ T18] uevent_store+0x22/0x60 [ 515.465851][ T18] kernfs_fop_write_iter+0x3a8/0x500 [ 515.471776][ T18] vfs_write+0x748/0xd70 [ 515.476576][ T18] ksys_write+0x153/0x260 [ 515.481456][ T18] do_syscall_64+0x4c/0xa0 [ 515.486446][ T18] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 515.492884][ T18] [ 515.492884][ T18] -> #0 (kn->active#32){++++}-{0:0}: [ 515.500384][ T18] __lock_acquire+0x38f7/0x7d40 [ 515.505792][ T18] lock_acquire+0x19f/0x400 [ 515.510883][ T18] __kernfs_remove+0x5da/0xcb0 [ 515.516209][ T18] kernfs_remove_by_name_ns+0x91/0x100 [ 515.522242][ T18] device_del+0x62f/0xa80 [ 515.527116][ T18] device_unregister+0x1c/0xc0 [ 515.532420][ T18] mce_cpu_pre_down+0x33f/0x540 [ 515.537813][ T18] cpuhp_invoke_callback+0x423/0x7e0 [ 515.543643][ T18] cpuhp_thread_fun+0x3b2/0x7f0 [ 515.549046][ T18] smpboot_thread_fn+0x520/0x990 [ 515.554551][ T18] kthread+0x42e/0x520 [ 515.559183][ T18] ret_from_fork+0x1f/0x30 [ 515.564151][ T18] [ 515.564151][ T18] other info that might help us debug this: [ 515.564151][ T18] [ 515.574419][ T18] Chain exists of: [ 515.574419][ T18] kn->active#32 --> cpu_hotplug_lock --> cpuhp_state-down [ 515.574419][ T18] [ 515.585088][T11040] binder: 11032:11040 unknown command 1074291477 [ 515.587488][ T18] Possible unsafe locking scenario: [ 515.587488][ T18] [ 515.587500][ T18] CPU0 CPU1 [ 515.587506][ T18] ---- ---- [ 515.587512][ T18] lock(cpuhp_state-down); [ 515.616622][ T18] lock(cpu_hotplug_lock); [ 515.623672][ T18] lock(cpuhp_state-down); [ 515.630726][ T18] lock(kn->active#32); [ 515.635007][ T18] [ 515.635007][ T18] *** DEADLOCK *** [ 515.635007][ T18] [ 515.643178][ T18] 2 locks held by cpuhp/1/18: [ 515.647877][ T18] #0: ffffffff8cfbd670 (cpu_hotplug_lock){++++}-{0:0}, at: lockdep_acquire_cpus_lock+0x5/0x30 [ 515.658265][ T18] #1: ffffffff8cfbd7e0 (cpuhp_state-down){+.+.}-{0:0}, at: cpuhp_lock_acquire+0x8/0x40 [ 515.668054][ T18] [ 515.668054][ T18] stack backtrace: [ 515.673954][ T18] CPU: 1 PID: 18 Comm: cpuhp/1 Not tainted syzkaller #0 [ 515.680910][ T18] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 515.690985][ T18] Call Trace: [ 515.694296][ T18] [ 515.697259][ T18] dump_stack_lvl+0x188/0x250 [ 515.701968][ T18] ? load_image+0x410/0x410 [ 515.706502][ T18] ? show_regs_print_info+0x20/0x20 [ 515.711731][ T18] ? print_circular_bug+0x12b/0x1a0 [ 515.716965][ T18] check_noncircular+0x2f8/0x400 [ 515.721933][ T18] ? print_deadlock_bug+0x5d0/0x5d0 [ 515.727155][ T18] ? lockdep_lock+0xf1/0x1f0 [ 515.731787][ T18] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 515.737797][ T18] ? mark_lock+0x94/0x320 [ 515.738918][T11040] binder: 11032:11040 ioctl c0306201 200000000e40 returned -22 [ 515.742170][ T18] ? _find_first_zero_bit+0xd1/0xf0 [ 515.742197][ T18] __lock_acquire+0x38f7/0x7d40 [ 515.759805][ T18] ? _raw_spin_unlock+0x40/0x40 [ 515.764691][ T18] ? __lock_acquire+0x13b3/0x7d40 [ 515.769763][ T18] ? verify_lock_unused+0x140/0x140 [ 515.774992][ T18] ? kasan_set_free_info+0x1f/0x40 [ 515.780132][ T18] ? kmem_cache_free+0x8f/0x210 [ 515.785010][ T18] ? device_unregister+0x1c/0xc0 [ 515.789975][ T18] ? kthread+0x42e/0x520 [ 515.794249][ T18] ? ret_from_fork+0x1f/0x30 [ 515.798882][ T18] lock_acquire+0x19f/0x400 [ 515.803415][ T18] ? kernfs_remove_by_name_ns+0x91/0x100 [ 515.809093][ T18] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 515.815239][ T18] ? read_lock_is_recursive+0x10/0x10 [ 515.820648][ T18] ? up_write+0x1b6/0x410 [ 515.825014][ T18] __kernfs_remove+0x5da/0xcb0 [ 515.829813][ T18] ? kernfs_remove_by_name_ns+0x91/0x100 [ 515.835471][ T18] ? kernfs_next_descendant_post+0x200/0x200 [ 515.841486][ T18] ? kernfs_find_ns+0x49e/0x510 [ 515.846381][ T18] kernfs_remove_by_name_ns+0x91/0x100 [ 515.851899][ T18] device_del+0x62f/0xa80 [ 515.856258][ T18] ? kill_device+0x160/0x160 [ 515.860961][ T18] device_unregister+0x1c/0xc0 [ 515.865746][ T18] mce_cpu_pre_down+0x33f/0x540 [ 515.870709][ T18] ? mce_cpu_online+0x930/0x930 [ 515.875596][ T18] cpuhp_invoke_callback+0x423/0x7e0 [ 515.880918][ T18] cpuhp_thread_fun+0x3b2/0x7f0 [ 515.885886][ T18] ? cpuhp_should_run+0xa0/0xa0 [ 515.890763][ T18] ? trace_raw_output_cpuhp_exit+0x1a0/0x1a0 [ 515.896769][ T18] ? cpuhp_should_run+0xa0/0xa0 [ 515.901670][ T18] smpboot_thread_fn+0x520/0x990 [ 515.906645][ T18] kthread+0x42e/0x520 [ 515.910738][ T18] ? cpu_report_death+0x180/0x180 [ 515.915790][ T18] ? kthread_blkcg+0xd0/0xd0 [ 515.920405][ T18] ret_from_fork+0x1f/0x30 [ 515.924861][ T18] [ 515.935580][ T19] numa_remove_cpu cpu 1 node 0: mask now 0 [ 515.941432][ T19] numa_remove_cpu cpu 1 node 1: mask now 0 [ 515.966259][ T4732] smpboot: CPU 1 is now offline [ 516.347022][T11036] PM: hibernation: Basic memory bitmaps created [ 516.396316][ T4732] ACPI: \_SB_.C001: Eject incomplete - status 0xf [ 516.459843][T11036] PM: hibernation: Basic memory bitmaps freed