last executing test programs: 11m42.201768319s ago: executing program 32 (id=42): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100030000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10000000040000000400000002000000ff987c1dd5b388000000003d9cfcffdc86c153e8a4a3458cf667d75bfb9ce1f39fede5f97927831158576cc0b61121b58f062e19782de5b3c2b32e817c1dc140e9fdfdf12940291cffce1b33db37b21befbcb2fb0619eb310e1d65e5a9744fbe3e2d1447a02d8850cfe9eeac89af36032b1b047c0d55fdbdfb1d9c2670951491dbaccd2dfb", @ANYRES32=0x1, @ANYRES32=0x0], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") 10m55.466378621s ago: executing program 33 (id=121): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7906f4d105bb87086783d92068cf1a8ca2688eb57312ffb8a90a324bc14504ec5943fd40c6dc9ca1613c7deb5d9b4dcbf82e34f2368b9e1f6b22793fa9c0e7b3b94cb868c50621e25d0ba33892510e277986329aadf44aee18c37b1fb855333aac346861752e68b398fcdc7568f348b3058ac96085235d2f83906a967ea49843164bd176542e339c21b18f95bf927e8bdd8815548b86decda035d2f3e316cabdba30012eb77a79d8f63ea4b95468912ac9a0e09c66a99f2f85602e9c0efbca13dbc49df819dde25855745742016104dd5e9a664ed9a950b11a", @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES16=0x0, @ANYRES32=0x0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) syz_mount_image$erofs(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES32], 0xfe, 0x1d1, &(0x7f0000000640)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) 10m30.817716706s ago: executing program 34 (id=152): socket$vsock_stream(0x28, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 10m14.919923902s ago: executing program 35 (id=171): socket$inet_tcp(0x2, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m26.96587581s ago: executing program 36 (id=1504): sendmmsg(0xffffffffffffffff, &(0x7f0000007dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="3f5c5495f8a1d92fd70cc0ce268a5a3f9624475b567711e3a51610aafb624481a54f14a2abc4dc4ebe3a5e4bee988cd37a63091103dcda61", 0x38}], 0x1}}], 0x1, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977770a"], 0xa) 3m23.92021588s ago: executing program 37 (id=1523): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000002740)=""/4078}, 0x20) 2m43.38367353s ago: executing program 7 (id=1705): r0 = syz_create_resource$binfmt(0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) symlinkat(&(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 2m42.543027081s ago: executing program 38 (id=1705): r0 = syz_create_resource$binfmt(0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) symlinkat(&(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 1m47.506862339s ago: executing program 1 (id=1977): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) pwritev2(r0, 0x0, 0x0, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r5, &(0x7f0000006180)={0x2020}, 0x2020) 1m45.682530646s ago: executing program 1 (id=1982): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000ec0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dmode={'dmode', 0x3d, 0xd5ce}}, {@check_relaxed}, {@nojoliet}, {@overriderock}, {@session={'session', 0x3d, 0x52}}, {@showassoc}, {}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@check_relaxed}, {@uid}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m45.289376714s ago: executing program 1 (id=1987): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 1m44.615593728s ago: executing program 1 (id=1993): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r3 = dup2(r2, r1) sendmmsg(r3, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f0000006140)="dc3d9f1fa8006c73d2aab62515573429b04a48e8e9429e8ec01f24fb0063600251bca0f0a3b0c05443d93ab05936b4ef8e90364f337b6283e9c6a1f3f2ba69122ad46635515220503a28061b488bb87e202c5a7911722f76caaa2723998ecc7524c5242fded742dca34f6ef83e5228f70a715a5221e9a5ee05f0e204158ec7a31a1a", 0x82}, {&(0x7f0000006200)="767d97d5615ccaa1869cfc67b66dc9c5baae07b0af9adc8c5dd3139c2b74bcaa9782e3c31a01d58f0e0670489bc1582296723402a15ad9073230f213bba40a3243c9fc2f26a88b54fe98c890704f1c8f7c963c3228136fc352486f0eff308f946eb53488d8496f0ca8978f14da5ef96c2c1d8335a8637371effcaa7365a1d0ff8d5f97b7649e85743731dfd3d8df3987437092dd281043bf", 0x98}, {&(0x7f00000062c0)="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", 0x4c3}], 0x3}}], 0x6, 0x20004095) 1m42.957282107s ago: executing program 39 (id=1993): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r3 = dup2(r2, r1) sendmmsg(r3, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f0000006140)="dc3d9f1fa8006c73d2aab62515573429b04a48e8e9429e8ec01f24fb0063600251bca0f0a3b0c05443d93ab05936b4ef8e90364f337b6283e9c6a1f3f2ba69122ad46635515220503a28061b488bb87e202c5a7911722f76caaa2723998ecc7524c5242fded742dca34f6ef83e5228f70a715a5221e9a5ee05f0e204158ec7a31a1a", 0x82}, {&(0x7f0000006200)="767d97d5615ccaa1869cfc67b66dc9c5baae07b0af9adc8c5dd3139c2b74bcaa9782e3c31a01d58f0e0670489bc1582296723402a15ad9073230f213bba40a3243c9fc2f26a88b54fe98c890704f1c8f7c963c3228136fc352486f0eff308f946eb53488d8496f0ca8978f14da5ef96c2c1d8335a8637371effcaa7365a1d0ff8d5f97b7649e85743731dfd3d8df3987437092dd281043bf", 0x98}, {&(0x7f00000062c0)="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", 0x4c3}], 0x3}}], 0x6, 0x20004095) 1m42.95201293s ago: executing program 9 (id=1995): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x1c, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) 1m41.886479793s ago: executing program 9 (id=2000): sendmsg$alg(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x40c1}, 0x24008044) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001e00072000"/18, @ANYRES32=0x0, @ANYBLOB="0000000008000700040034"], 0x48}, 0x1, 0x0, 0x0, 0x4048050}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) 1m40.961343206s ago: executing program 40 (id=2002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x15ba42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) 1m40.955469233s ago: executing program 9 (id=2004): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m40.753161974s ago: executing program 9 (id=2007): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000ec0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dmode={'dmode', 0x3d, 0xd5ce}}, {@check_relaxed}, {@nojoliet}, {@overriderock}, {@session={'session', 0x3d, 0x52}}, {@showassoc}, {}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@check_relaxed}, {@uid}]}, 0x1, 0xa00, &(0x7f00000003c0)="$eJzs3UtsXFf9B/Dv9SNx3SpJ2/z7L1XbTFKSuq1xbIcmRF2UxJ4kLn4g25EasWhK46AQQ6EBqa2QmkqIFRVIIBawq1jBplI3dIO6gx2sWCChrthXrMLK6M6M49eMx3YdO00/n+h67uN3z/nd58mMr+eEz5eF/SumFhZqwxanL/5hBzLmLnZ29JP3P3ivHN69mT3pzPPFn5KeJJWkK8mjSffI6PTURJuCrieXk3ycFEn2pv66IZdT/CIPLE1/nOJ3Zb0t7dloybSzwBfabp9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNypGRgcHh4o9GZu8+HKlLqmsMTI6PVVkYWHtksV16j6q9fpdfNS23qQoh/T0LHb1/ejBpcWPJKkcyeP1qcdrHZKnJ2/f/8iBFx7u6lhcv1U2n8nejRd74623r786Pz/3RuuQhXfq27A9ud1lzlcnx2amxibOnK9WxmamKqdPnhw8fuHcTOXc2Hh15tLMbHWiMjJdPTM7NV3pG3mmMnT69IlKdeDS1MXJ86MD49XFmae+Mjw4eLLy0sA3q2emZ6Ymj780MDNyYWx8fGzyfC2mXFzGnCpPxG+MzVZmq2cmKpWr1+bnTqzKqXP1zi6DhtptSRk03C5oeHB4eGhoeHjo3Ubv2bdnnHz+9POnBge7BlfJmog7dNJyd7mv9WHe5js4bF1Hvf3Pd8czlslczMupNP03ktFMZyoTLZY3LLb/R49X1613efvfaOW7li1+rPxxJE82JntatP8tctm5fzfyVt7O9bya+cxnLm/sekY7++98qpnMWGYylbFM5ExtTqUxp5LTOZmTGcwruZBDmUkl5zKW8VQzk0uZyWyqtTNqJNOp5kxmM5XpVNKXkTyTSoZyOqdzIpVUM5BLmcrFTOZ8RnOmVsrVXKvt9xPr5Hg7aGgjQcPrBK1uzMtzfXPtf/Ve/Z8gG7b9N3HYooVG+7+nfWjfyE4kBAAAAGy7L/01+w4+9Jd/JUWeqH0uf25svPribqcFAAAAbKPa43qPly/d5dgTPbX3/4O7nRYAAACwjYra39gVSXpzqD62+JdQPgQAAACAe0Tt9/9Ppji0NMP7fwAAALjHtP+O/bYRRf/i1/9WrtRfrzQi6lNF77mx8erAyNT4C0M5VvuWgSRPrC2tMym6a39+8GwO16MO99Zfe5dKLOvsKaOGBl4YyrM50tiQvqfKl6f6mkQO1yOfrkc+vTyyMysiT5SRAHCvO7JOe7zR9v/Z9Ncj+h+rNfldjzVpgwe1rABwt7jdx85/G12aNWn/GxFPtmr/v7rO+/8y4qFcPVR/pGAgr+X1zOdK+tN44uBQs1IXeyOoP4bQ3+bTgN7GIwt/P9WR/jWfB/Tc3tblsXMZTn/TTwSWlVss5nCiHtd5Z44BAOy0I+u2wxtr//vbvP/v9UghANxVbvdgv4mRdzYTPPfGjd3eRgBgJa00AAAAAAAAAAAAAAAAAAAAAAAAAAAAbL8NfYH/344l8/NzyRY6C9jySM9mMlx/pCM7lPOuj3Qm2a3aX8ym1yqP8Weo9I/3NVb/9+7v+XtuZJdvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyIIulsNr8j2ZtkMMnxnc/qzrm52wlsl8qeLa1W3MqtvJl9254PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAXXOP7/ztSf72/PitdHcnRJJeTfGu3c9xOt3Y7gTujaB/yvXrg0vf/dyTdWSjSVT/sKbpHRqenJsqiir3l8k/e/+C9cmhf9tpeFcoCyhpWdC7RqGHZnO6Vaz1YW6t3dO7G9R+9/oPK6NnaiXl29tz46MT56a8vBT5SfJhUUh8WLeb7k6N//uWy2Y2OEooPyy1tbnW952r1jq6t9/+brd2i3g24Nj83XNY0W3159sffv/bmskUP5XDyVF/St7Km75RDi5oOr96fKxWfFj8r9uU3uVw7/uXeKBaK8hDtr23/fVevzc8NvPb6/JXbOb2zIqcDOZTkStKz8ZwOtT43a2ddR3dZ62AtqPxxsE1561pW4lCL/fpg7ZTp3dQ2VNpcX232eyOjE00z+tUPH86xTR/pY21qbKr4tPhncSH/yE+X9f/RUR7/o2l6dTYpoha57ExZvmzF5dVRj6xt+fDyBa+sLrPlVckd8PN8O1+7ffw7lt3/G8dqZ+5Hy2psfl0km78ufr9/TYuypNYiHVzVIjXuPq3WaeR5sB7VIs//y3P1MjdxR3muXYt9h67/3xZ9+U9u6v8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4+xVJZ7P5HcnRJAeS7C+nK8nC6pibW6ivo7fYSprbZis5f/4ULTe0uJVbeTP7djojAAAAAAAAAO6Ms6OfvP/Be+VQ+318Z77c0VhSSbqSHCh+3T0yOj010aag7uTy4q/0ezaXw+XyxwNL0x+XU4+2WWl3Hx8AgM+1/wUAAP//p2dujQ==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m40.647506882s ago: executing program 4 (id=2008): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00'], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x408) 1m40.399703681s ago: executing program 9 (id=2009): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000b00)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m40.243992619s ago: executing program 4 (id=2011): r0 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000480)="054a9e1b11f19e119c391d03764bc2dd9c39cb21eb616021974aa35e9d387da4cef78622a9899446f047b890f26a04f4e6b8985b4aee89d16972b68f2ccb1bf2d1215a1fd3804df1c44f640b10035698fcc85c904a4f9c9aeb7d3e", &(0x7f0000000500)="773f87496b9876045d115c0179d7e9587802d60ebb41f604aff4ff509c788b904dd24a8a48d0e66c8472cbd27b9be82637cf2ac946f30a8c7b41883f6de7606a7e5872e06012e365a4400d468a3d7d685e5b6eed804509f3b86ebf2d47233bd66fd8c6550f884eb85d82783ac3e252d7081ca954eb5d2036dcc047dc64bb7d8b9312aad0d6fc322ac92ef250df9aef912214f04c342b29d5ff22f9f0d9648465c153d145392220b8a07f4adde734559a5996fa0adc28ab0caac02d79da36b3eb9f1b3ee00f1a3404c98f5ab638b5"}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@delqdisc={0x68, 0x25, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0xfff1, 0x8}, {0xfff1, 0x5}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xca, 0xf, 0x6, 0xe, 0xc6a522af8314ba3d, 0x6, 0x8000}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x6, 0x5, 0x7, 0x0, 0xff8, 0x1}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() readlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', &(0x7f0000000400)=""/30, 0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000440)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x149a82, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x5, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x68}}, 0x24000084) 1m39.24394141s ago: executing program 4 (id=2012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b70300000000000085000000750000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10) close(r0) 1m38.307573591s ago: executing program 9 (id=2014): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x70bd27, 0x25dfdbfc, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NDA_VNI={0x8, 0x7, 0x1}]}, 0x38}}, 0x20000000) 1m37.981684315s ago: executing program 41 (id=2014): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@bridge_delneigh={0x38, 0x1e, 0x1, 0x70bd27, 0x25dfdbfc, {0xa}, [@NDA_DST_IPV6={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NDA_VNI={0x8, 0x7, 0x1}]}, 0x38}}, 0x20000000) 1m37.968509782s ago: executing program 4 (id=2017): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000ec0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dmode={'dmode', 0x3d, 0xd5ce}}, {@check_relaxed}, {@nojoliet}, {@overriderock}, {@session={'session', 0x3d, 0x52}}, {@showassoc}, {}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@check_relaxed}, {@uid}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m37.774857796s ago: executing program 4 (id=2018): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) 1m37.315603701s ago: executing program 4 (id=2020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x6, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x205}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x8, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x2, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000500)=[@code={0x1, 0x70, {"4a0f38f6ab000000006426470f01cf66baf80cb89077a28def66bafc0c66b8b60066ef66b8f3008ee0f2406d66ba4200b00cee6467670f01b99db41414b9430a00000f32b9800000c00f3235010000000f30b805000000b9350000000f01d9"}}, @uexit={0x0, 0x18, 0x94}, @cpuid={0x2, 0x18, {0x0, 0x8}}, @cpuid={0x2, 0x18, {0x0, 0x100}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x6, 0xfffffff8}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x2}}, @cpuid={0x2, 0x18, {0x6fa799ad, 0x7fff}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x7, 0xe712}}, @cpuid={0x2, 0x18, {0x0, 0x5}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x78, {"2e0f6fe3b9800000c00f3235008000000f3066ba610066b8f50066efda0535a80000c74424007d000000c744240200000000ff1c24410f01df66baf80cb824fa3f85ef66bafc0c66ed2e2e0f23aac4e1637cbc790080000066baf80cb850be3889ef66bafc0ced"}}, @uexit={0x0, 0x18, 0x9b}, @code={0x1, 0x72, {"0fc76ea10f850000000048b87eba0000000000000f23c80f21f835040070000f23f866baf80cb8e2bc2181ef66bafc0c66edc402b0f7460c66baa000ecb9800000c00f3235010000000f30c40185dc3e0f01c2b9800000c00f3235000100000f30"}}, @cpuid={0x2, 0x18, {0x2, 0x101}}, @cpuid={0x2, 0x18, {0xb, 0x10001}}], 0x2c2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m36.995411392s ago: executing program 42 (id=2020): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc003, 0x3, 0x6, 0x0, 0x4, 0x7, 0xd, 0xb9, 0x0, 0xe, 0x5, 0x205}, {0x804, 0x1, 0x4, 0x45, 0x7, 0xff, 0x8, 0xff, 0x0, 0x4, 0x4, 0x7b, 0x20c}, {0x1, 0x6, 0x18, 0x5, 0x80, 0xfd, 0x3, 0x2, 0x0, 0x70, 0x2, 0x7}], 0xfbffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x5ffffffffff, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0x1, 0x202}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000500)=[@code={0x1, 0x70, {"4a0f38f6ab000000006426470f01cf66baf80cb89077a28def66bafc0c66b8b60066ef66b8f3008ee0f2406d66ba4200b00cee6467670f01b99db41414b9430a00000f32b9800000c00f3235010000000f30b805000000b9350000000f01d9"}}, @uexit={0x0, 0x18, 0x94}, @cpuid={0x2, 0x18, {0x0, 0x8}}, @cpuid={0x2, 0x18, {0x0, 0x100}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0x6, 0xfffffff8}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x2}}, @cpuid={0x2, 0x18, {0x6fa799ad, 0x7fff}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0x7, 0xe712}}, @cpuid={0x2, 0x18, {0x0, 0x5}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x78, {"2e0f6fe3b9800000c00f3235008000000f3066ba610066b8f50066efda0535a80000c74424007d000000c744240200000000ff1c24410f01df66baf80cb824fa3f85ef66bafc0c66ed2e2e0f23aac4e1637cbc790080000066baf80cb850be3889ef66bafc0ced"}}, @uexit={0x0, 0x18, 0x9b}, @code={0x1, 0x72, {"0fc76ea10f850000000048b87eba0000000000000f23c80f21f835040070000f23f866baf80cb8e2bc2181ef66bafc0c66edc402b0f7460c66baa000ecb9800000c00f3235010000000f30c40185dc3e0f01c2b9800000c00f3235000100000f30"}}, @cpuid={0x2, 0x18, {0x2, 0x101}}, @cpuid={0x2, 0x18, {0xb, 0x10001}}], 0x2c2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m36.969742575s ago: executing program 3 (id=2022): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 1m36.886201631s ago: executing program 3 (id=2023): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x613, &(0x7f0000001240)="$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") socket$inet_tcp(0x2, 0x1, 0x0) 1m36.693105999s ago: executing program 3 (id=2024): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000840)=ANY=[], 0x5e}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[], 0x85}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = eventfd2(0x2, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r5, 0xb}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m36.31544679s ago: executing program 3 (id=2025): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000ec0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dmode={'dmode', 0x3d, 0xd5ce}}, {@check_relaxed}, {@nojoliet}, {@overriderock}, {@session={'session', 0x3d, 0x52}}, {@showassoc}, {}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@check_relaxed}, {@uid}]}, 0x1, 0xa00, &(0x7f00000003c0)="$eJzs3UtsXFf9B/Dv9SNx3SpJ2/z7L1XbTFKSuq1xbIcmRF2UxJ4kLn4g25EasWhK46AQQ6EBqa2QmkqIFRVIIBawq1jBplI3dIO6gx2sWCChrthXrMLK6M6M49eMx3YdO00/n+h67uN3z/nd58mMr+eEz5eF/SumFhZqwxanL/5hBzLmLnZ29JP3P3ivHN69mT3pzPPFn5KeJJWkK8mjSffI6PTURJuCrieXk3ycFEn2pv66IZdT/CIPLE1/nOJ3Zb0t7dloybSzwBfabp9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwNypGRgcHh4o9GZu8+HKlLqmsMTI6PVVkYWHtksV16j6q9fpdfNS23qQoh/T0LHb1/ejBpcWPJKkcyeP1qcdrHZKnJ2/f/8iBFx7u6lhcv1U2n8nejRd74623r786Pz/3RuuQhXfq27A9ud1lzlcnx2amxibOnK9WxmamKqdPnhw8fuHcTOXc2Hh15tLMbHWiMjJdPTM7NV3pG3mmMnT69IlKdeDS1MXJ86MD49XFmae+Mjw4eLLy0sA3q2emZ6Ymj780MDNyYWx8fGzyfC2mXFzGnCpPxG+MzVZmq2cmKpWr1+bnTqzKqXP1zi6DhtptSRk03C5oeHB4eGhoeHjo3Ubv2bdnnHz+9POnBge7BlfJmog7dNJyd7mv9WHe5js4bF1Hvf3Pd8czlslczMupNP03ktFMZyoTLZY3LLb/R49X1613efvfaOW7li1+rPxxJE82JntatP8tctm5fzfyVt7O9bya+cxnLm/sekY7++98qpnMWGYylbFM5ExtTqUxp5LTOZmTGcwruZBDmUkl5zKW8VQzk0uZyWyqtTNqJNOp5kxmM5XpVNKXkTyTSoZyOqdzIpVUM5BLmcrFTOZ8RnOmVsrVXKvt9xPr5Hg7aGgjQcPrBK1uzMtzfXPtf/Ve/Z8gG7b9N3HYooVG+7+nfWjfyE4kBAAAAGy7L/01+w4+9Jd/JUWeqH0uf25svPribqcFAAAAbKPa43qPly/d5dgTPbX3/4O7nRYAAACwjYra39gVSXpzqD62+JdQPgQAAACAe0Tt9/9Ppji0NMP7fwAAALjHtP+O/bYRRf/i1/9WrtRfrzQi6lNF77mx8erAyNT4C0M5VvuWgSRPrC2tMym6a39+8GwO16MO99Zfe5dKLOvsKaOGBl4YyrM50tiQvqfKl6f6mkQO1yOfrkc+vTyyMysiT5SRAHCvO7JOe7zR9v/Z9Ncj+h+rNfldjzVpgwe1rABwt7jdx85/G12aNWn/GxFPtmr/v7rO+/8y4qFcPVR/pGAgr+X1zOdK+tN44uBQs1IXeyOoP4bQ3+bTgN7GIwt/P9WR/jWfB/Tc3tblsXMZTn/TTwSWlVss5nCiHtd5Z44BAOy0I+u2wxtr//vbvP/v9UghANxVbvdgv4mRdzYTPPfGjd3eRgBgJa00AAAAAAAAAAAAAAAAAAAAAAAAAAAAbL8NfYH/344l8/NzyRY6C9jySM9mMlx/pCM7lPOuj3Qm2a3aX8ym1yqP8Weo9I/3NVb/9+7v+XtuZJdvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyIIulsNr8j2ZtkMMnxnc/qzrm52wlsl8qeLa1W3MqtvJl9254PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAXXOP7/ztSf72/PitdHcnRJJeTfGu3c9xOt3Y7gTujaB/yvXrg0vf/dyTdWSjSVT/sKbpHRqenJsqiir3l8k/e/+C9cmhf9tpeFcoCyhpWdC7RqGHZnO6Vaz1YW6t3dO7G9R+9/oPK6NnaiXl29tz46MT56a8vBT5SfJhUUh8WLeb7k6N//uWy2Y2OEooPyy1tbnW952r1jq6t9/+brd2i3g24Nj83XNY0W3159sffv/bmskUP5XDyVF/St7Km75RDi5oOr96fKxWfFj8r9uU3uVw7/uXeKBaK8hDtr23/fVevzc8NvPb6/JXbOb2zIqcDOZTkStKz8ZwOtT43a2ddR3dZ62AtqPxxsE1561pW4lCL/fpg7ZTp3dQ2VNpcX232eyOjE00z+tUPH86xTR/pY21qbKr4tPhncSH/yE+X9f/RUR7/o2l6dTYpoha57ExZvmzF5dVRj6xt+fDyBa+sLrPlVckd8PN8O1+7ffw7lt3/G8dqZ+5Hy2psfl0km78ufr9/TYuypNYiHVzVIjXuPq3WaeR5sB7VIs//y3P1MjdxR3muXYt9h67/3xZ9+U9u6v8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4+xVJZ7P5HcnRJAeS7C+nK8nC6pibW6ivo7fYSprbZis5f/4ULTe0uJVbeTP7djojAAAAAAAAAO6Ms6OfvP/Be+VQ+318Z77c0VhSSbqSHCh+3T0yOj010aag7uTy4q/0ezaXw+XyxwNL0x+XU4+2WWl3Hx8AgM+1/wUAAP//p2dujQ==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m36.193768524s ago: executing program 3 (id=2026): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x40) 1m35.988042021s ago: executing program 3 (id=2027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x2000080) 1m35.71420964s ago: executing program 43 (id=2027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x2000080) 1m22.46706665s ago: executing program 5 (id=2029): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) 1m22.286866318s ago: executing program 5 (id=2030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 1m22.019390281s ago: executing program 5 (id=2031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) connect$netlink(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 1m20.919064714s ago: executing program 5 (id=2032): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000ec0)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dmode={'dmode', 0x3d, 0xd5ce}}, {@check_relaxed}, {@nojoliet}, {@overriderock}, {@session={'session', 0x3d, 0x52}}, {@showassoc}, {}, {@block={'block', 0x3d, 0x400}}, {@gid}, {@check_relaxed}, {@uid}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m20.785338512s ago: executing program 5 (id=2033): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x8) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 1m20.415662259s ago: executing program 5 (id=2034): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 1m19.531618917s ago: executing program 44 (id=2034): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) 1m14.248045399s ago: executing program 7 (id=2028): openat$dir(0xffffffffffffff9c, 0x0, 0x10100, 0x44) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) 1m13.476047327s ago: executing program 7 (id=2053): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m13.276665961s ago: executing program 7 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0x12, 0x0, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 1m11.190050587s ago: executing program 7 (id=2056): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x26, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x12, 0x0, @opaque="6a984ab4d800b9dafef9"}}}}}, 0x0) 1m5.625359803s ago: executing program 7 (id=2059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x5, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "80a9"}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x6, 0x6}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40081}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 54.478829688s ago: executing program 2 (id=2072): prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$eJzs28tvG8UfAPDvrpP019cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgJC5YgqcUcckfgLOMEFASckrsAZVapQLi2cjNbebRzXdpNg1yH+fKRNZnbHmfl6duzZnWwAA2ss+5FE7IqIXyNitJ5dXWCs/uvm8uWZv5YvzyRRrb7xZ1Ird2P58kxRtHjdziIzFJF+ksSBFvUuXLx0drpSmbuQ5ycWz707sXDx0jNnzk2fnjs9d37qxIljRyefOz71bFfizOK6sf+D+YP7Xnnr6mszJ6++/ePXSRF/UxxdMtbp4OPVaper66/dDelkqI8NYV1K9WEaw7XxPxqlWOm80Xj54742DuiparVava/94aUqsIUl0e8WAP1RfNFn17/FdpemHpvC9RfqF0BZ3DfzrX5kKNK8zHDT9W03jUXEyaW/v8i2aL4Psb1HlQIAA+3bbP7zdKv5XxqN94X+n6+hlCPinojYExHHI2JvRNwbUSt7f0Q8sM76mxdJbp9/ptc2FNgaZfO/5/O1rdXzv2L2F+VSnttdi384OXWmMnckf08Ox/C2LD/ZoY7vXvrls3bHGud/2ZbVX8wF83ZcG9q2+jWz04vT/ybmRtc/itg/1Cr+5NZKQBIR+yJi/wbrOPPkVwfbHWsT/8ia/nAX1pmqX0Y8Ue//pWiKv5B0Xp+c+F9U5o5MFGfF7X76+crr7eq/c//3Vtb/O1qe/0X8v5eTxvXahfXXceW3T9teU270/B9J3ly17/3pxcULkxEjyau1fLlx/1RTuamV8ln8hw+1Hv97YuWdOBAR2Un8YEQ8FBEP521/JCIejYhDHeL/4cXH3tl4/L2VxT/bsf+jqf9XEiPRvKd1onT2+29WVVpeT/xZ/x+rpQ7ne9by+beWdm3sbAYAAID/njQidkWSjt9Kp+n4eP1/+PfGjrQyv7D41Kn5987P1p8RKMdwWtzpGm24HzqZX9YX+amm/NH8vvHnpe21/PjMfGW238HDgNvZZvxn/ij1u3VAz3leCwaX8Q+Dy/iHwWX8w+BqMf49egYDotX3/4d9aAdw9zWN/47LfiYGsLW4/ofBZfzD4DL+YSAtbI87PyS/NRJpRGyCZmyVRKSbohkSPUr0+5MJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4JAAD//5025W8=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 53.404973261s ago: executing program 2 (id=2075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x1f8, 0x12, 0x60d, 0x1f8, 0x202, 0x2e0, 0x2e8, 0x2e8, 0x2e0, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @broadcast}, [], [], 'tunl0\x00', 'macsec0\x00', {}, {0xff}}, 0x0, 0x1b0, 0x1f8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @common=@hbh={{0x48}, {0x8001, 0x4, 0x1, [0x7, 0x3, 0xa, 0x3, 0x4, 0x8, 0xffff, 0x7, 0xff7f, 0x43a, 0x6, 0x1, 0xd, 0x6, 0xf, 0x7], 0x4}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x16, 0xe, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 50.14881568s ago: executing program 45 (id=2059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x5, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "80a9"}, @TCA_NETEM_CORR={0x10, 0x1, {0x3, 0x6, 0x6}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40081}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 45.971149311s ago: executing program 2 (id=2078): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 45.638780805s ago: executing program 2 (id=2079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff030768040600000014fd88a8", 0x0, 0x7fc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x105}, 0x37) 45.475840562s ago: executing program 2 (id=2081): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20d41, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r5) 41.492249938s ago: executing program 0 (id=2083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 38.543461234s ago: executing program 0 (id=2084): prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 37.663316947s ago: executing program 2 (id=2085): pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) umount2(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) rt_sigaction(0x40, &(0x7f00000027c0)={&(0x7f0000002700)="f3dfd2c4237d390b35650fa8c4831d02fc06c42191d9eff3400f7edfc4e2dd288f00000000473c0167660f71e5d12e660f7f0e", 0x1, 0x0, {[0xab8]}}, 0x0, 0x8, &(0x7f00000028c0)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r5, 0x9, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) unshare(0x64000600) 37.457105261s ago: executing program 0 (id=2086): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000002440)={&(0x7f0000000000)=@in={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000000040)="08ccb2323913a7b444b5e761c881308d06203096a4e635fc92bf0b2f01558e501fa92b20b9cdcfcda53df15ce6871ce5015deb0e49394f2ceb52ba69c73d98f0aaf0b07616cf8e190dc304989b6e4168c2aa0b9cd6127c145c9bb150a680346b2dec48edcadae0269caf8fba687385a8743b05df277bd45900dfe57fe374545eb99c1f711ac9b0badc2a7c8167b01492fefaeb52e2fe605bee39d896b524e1c8e213009781b9c09449027f5f772ae1ea38d199e9c5c357e7cc8be96a9b210d917288dedb3f45f8d8156870128d7d6738bff1f410f82ba82a9864bbe0a660e7d9b26bf7543783001477752efb4bd54dc14e", 0xf1}], 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$inet_sctp(r1, &(0x7f00000009c0)={&(0x7f0000000700)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000740)="3d9ec04f4ab352fcb4f20a7390220feff61dc338", 0x14}, {&(0x7f0000000780)="8570b8d980e2e5a54c73e09b404f7af6c47ea6cfa522c43951c813713a27d50ed3edae6424171ca9437101b0dbfec4b9bd544171bb4519d42b76b2ae3a6ae864437451f82f6c4d4edd580c75476b0f25c221fed073c4c2ead6c710683e76eb7b4b28aae708726727e77d8f438951dd46168bc85c67b699f3e9edfe54735733973d75c7bba2206ad105c102b24b947b809539ea3516e3398710ecfe644c7151a066bdbf742af77ac3b734b06850d7049ac419a75af881871e5030c4184765d27939284355d01f8efcf25a878561ce0b56d8", 0xd1}, {&(0x7f0000000880)="72e539aed1d285b725d079cb", 0xc}], 0x3, 0x0, 0x0, 0x4000000}, 0x4000050) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000004dc0)=0x2, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 36.978798919s ago: executing program 1 (id=2036): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 36.783388409s ago: executing program 0 (id=2087): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x120044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 36.62693221s ago: executing program 1 (id=2088): sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x18, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x1c) openat$vcsu(0xffffff9c, 0x0, 0x242742, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x2, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x2}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x5}, {0x8, 0x3}, {0x5, 0x2}, {0xa, 0x5}, {0x1}, {0x4, 0x4}]}]}}, &(0x7f0000000340)=""/172, 0x7a, 0xac, 0x0, 0xd920}, 0x28) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESOCT], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b8"], 0xb8) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 36.277572164s ago: executing program 0 (id=2089): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) request_key(0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0xa) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x800010, &(0x7f0000000240)={[{@nodots}, {@fat=@debug}, {@fat=@gid}, {@nodots}, {@fat=@sys_immutable}, {@dots}, {@nodots}, {@fat=@gid}]}, 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) truncate(&(0x7f0000000000)='./file1\x00', 0xffff) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff8b, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 33.313904431s ago: executing program 0 (id=2092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 29.995460814s ago: executing program 6 (id=2094): prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$eJzs28tvG8UfAPDvrpP019cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgJC5YgqcUcckfgLOMEFASckrsAZVapQLi2cjNbebRzXdpNg1yH+fKRNZnbHmfl6duzZnWwAA2ss+5FE7IqIXyNitJ5dXWCs/uvm8uWZv5YvzyRRrb7xZ1Ird2P58kxRtHjdziIzFJF+ksSBFvUuXLx0drpSmbuQ5ycWz707sXDx0jNnzk2fnjs9d37qxIljRyefOz71bFfizOK6sf+D+YP7Xnnr6mszJ6++/ePXSRF/UxxdMtbp4OPVaper66/dDelkqI8NYV1K9WEaw7XxPxqlWOm80Xj54742DuiparVava/94aUqsIUl0e8WAP1RfNFn17/FdpemHpvC9RfqF0BZ3DfzrX5kKNK8zHDT9W03jUXEyaW/v8i2aL4Psb1HlQIAA+3bbP7zdKv5XxqN94X+n6+hlCPinojYExHHI2JvRNwbUSt7f0Q8sM76mxdJbp9/ptc2FNgaZfO/5/O1rdXzv2L2F+VSnttdi384OXWmMnckf08Ox/C2LD/ZoY7vXvrls3bHGud/2ZbVX8wF83ZcG9q2+jWz04vT/ybmRtc/itg/1Cr+5NZKQBIR+yJi/wbrOPPkVwfbHWsT/8ia/nAX1pmqX0Y8Ue//pWiKv5B0Xp+c+F9U5o5MFGfF7X76+crr7eq/c//3Vtb/O1qe/0X8v5eTxvXahfXXceW3T9teU270/B9J3ly17/3pxcULkxEjyau1fLlx/1RTuamV8ln8hw+1Hv97YuWdOBAR2Un8YEQ8FBEP521/JCIejYhDHeL/4cXH3tl4/L2VxT/bsf+jqf9XEiPRvKd1onT2+29WVVpeT/xZ/x+rpQ7ne9by+beWdm3sbAYAAID/njQidkWSjt9Kp+n4eP1/+PfGjrQyv7D41Kn5987P1p8RKMdwWtzpGm24HzqZX9YX+amm/NH8vvHnpe21/PjMfGW238HDgNvZZvxn/ij1u3VAz3leCwaX8Q+Dy/iHwWX8w+BqMf49egYDotX3/4d9aAdw9zWN/47LfiYGsLW4/ofBZfzD4DL+YSAtbI87PyS/NRJpRGyCZmyVRKSbohkSPUr0+5MJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4JAAD//5025W8=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 29.052998399s ago: executing program 6 (id=2095): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 25.367611849s ago: executing program 8 (id=2099): unshare(0x20060400) syz_clone(0x84200600, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 24.99624024s ago: executing program 8 (id=2100): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000cc38a67543830000000100000000000000000000000000000000cb022a4da57883622e0ee61962303c4e7b62ad9da9e71c2611c244f32826f106dae8958ac3c2c7b60758f222b5d5f1a6cfb042dcf6cc93b1147b2fc39649a57389"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x4, 0x10408}}, 0x50) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) umount2(&(0x7f0000000300)='./file0\x00', 0x9) 20.325339741s ago: executing program 46 (id=2088): sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x18, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000080)='%pi6 \x00'}, 0x1c) openat$vcsu(0xffffff9c, 0x0, 0x242742, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x2, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x2}, {0x4, 0x3}, {0x1, 0x3}, {0x2, 0x5}, {0x8, 0x3}, {0x5, 0x2}, {0xa, 0x5}, {0x1}, {0x4, 0x4}]}]}}, &(0x7f0000000340)=""/172, 0x7a, 0xac, 0x0, 0xd920}, 0x28) mkdirat$cgroup_root(0xffffff9c, 0x0, 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESOCT], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b8"], 0xb8) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r4, r3, 0x0) 20.096919778s ago: executing program 47 (id=2085): pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) umount2(&(0x7f0000000280)='./cgroup.cpu/cpuset.cpus\x00', 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) rt_sigaction(0x40, &(0x7f00000027c0)={&(0x7f0000002700)="f3dfd2c4237d390b35650fa8c4831d02fc06c42191d9eff3400f7edfc4e2dd288f00000000473c0167660f71e5d12e660f7f0e", 0x1, 0x0, {[0xab8]}}, 0x0, 0x8, &(0x7f00000028c0)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r5, 0x9, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) unshare(0x64000600) 20.045118615s ago: executing program 8 (id=2103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19.735791162s ago: executing program 8 (id=2104): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff801}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r8}, 0x40) syz_emit_ethernet(0xfef3, &(0x7f00000004c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(r2, 0x0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@errors_remount}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x500, &(0x7f0000000b00)="$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") 19.735388242s ago: executing program 6 (id=2105): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x242, 0x18e) ftruncate(r0, 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8820, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x80002, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 18.924370486s ago: executing program 6 (id=2106): unshare(0x400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx2\x00'}, 0x58) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x118a62) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0xa, 0x4000000000000ffd, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "05000000000000f7ff00e600000000000200", [0x2, 0x7]}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) splice(r0, 0x0, r3, 0x0, 0x1800, 0x8) 17.97003994s ago: executing program 48 (id=2092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 17.41723031s ago: executing program 6 (id=2108): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000002c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) 17.002426603s ago: executing program 6 (id=2109): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000500)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@dax_always}, {@dax_never}, {@data_journal}, {}], [{@audit}]}, 0xc3, 0x7bb, &(0x7f0000003000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe2$9p(0x0, 0x0) 15.834612206s ago: executing program 8 (id=2110): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) 15.425174937s ago: executing program 8 (id=2111): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20d41, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r5) 949.868994ms ago: executing program 49 (id=2109): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000500)={[{@inlinecrypt}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@norecovery}, {@mblk_io_submit}, {@dax_always}, {@dax_never}, {@data_journal}, {}], [{@audit}]}, 0xc3, 0x7bb, &(0x7f0000003000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe2$9p(0x0, 0x0) 0s ago: executing program 50 (id=2111): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20d41, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x0, r5) kernel console output (not intermixed with test programs): ] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.808546][ T7329] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 637.836437][ T7329] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 637.865243][T12556] chnl_net:caif_netlink_parms(): no params data found [ 637.923327][ T9914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.013590][T12508] team0: Port device team_slave_0 added [ 638.085273][T12508] team0: Port device team_slave_1 added [ 638.814725][ T5856] Bluetooth: hci2: command tx timeout [ 639.061419][ T9914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.203426][ T5856] Bluetooth: hci1: command tx timeout [ 639.239057][T12508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.269828][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.339220][T12508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.372817][T12508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.380476][T12508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.445852][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.472806][T12508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.532483][T12556] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.558389][T12556] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.572083][T12556] bridge_slave_0: entered allmulticast mode [ 639.592318][T12556] bridge_slave_0: entered promiscuous mode [ 639.611862][T12556] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.628516][T12556] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.642534][T12556] bridge_slave_1: entered allmulticast mode [ 639.652477][T12556] bridge_slave_1: entered promiscuous mode [ 639.778653][T12692] loop7: detected capacity change from 0 to 256 [ 639.819951][T12692] FAT-fs (loop7): Directory bread(block 64) failed [ 639.826670][T12692] FAT-fs (loop7): Directory bread(block 65) failed [ 639.833349][T12692] FAT-fs (loop7): Directory bread(block 66) failed [ 639.839903][T12692] FAT-fs (loop7): Directory bread(block 67) failed [ 639.847551][T12692] FAT-fs (loop7): Directory bread(block 68) failed [ 639.854480][T12692] FAT-fs (loop7): Directory bread(block 69) failed [ 639.861239][T12692] FAT-fs (loop7): Directory bread(block 70) failed [ 639.868001][T12692] FAT-fs (loop7): Directory bread(block 71) failed [ 639.874773][T12692] FAT-fs (loop7): Directory bread(block 72) failed [ 639.881331][T12692] FAT-fs (loop7): Directory bread(block 73) failed [ 639.985934][T12556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.088944][T12508] hsr_slave_0: entered promiscuous mode [ 640.098444][T12508] hsr_slave_1: entered promiscuous mode [ 640.125481][T12508] debugfs: 'hsr0' already exists in 'hsr' [ 640.127422][ T9914] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 640.149792][T12508] Cannot create hsr debugfs directory [ 640.152931][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.173447][T12556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.263490][T12695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.272173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.350471][ T9914] usb 7-1: Using ep0 maxpacket: 8 [ 640.444813][ T9914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.737845][ T9914] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.784403][ T9914] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 640.822792][ T9914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.874114][ T9914] usb 7-1: config 0 descriptor?? [ 641.223238][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.289422][ T5856] Bluetooth: hci1: command tx timeout [ 641.348230][ T9914] hid-multitouch 0003:0EEF:72C4.0009: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.6-1/input0 [ 641.505689][ T9] usb 7-1: USB disconnect, device number 8 [ 642.069587][T12556] team0: Port device team_slave_0 added [ 642.109811][ T6365] tipc: Disabling bearer [ 642.124016][ T6365] tipc: Left network mode [ 642.130642][T12556] team0: Port device team_slave_1 added [ 642.150922][T12723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1560'. [ 642.244651][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.344166][T12727] loop7: detected capacity change from 0 to 164 [ 642.409656][T12727] Unable to read rock-ridge attributes [ 642.485644][T12556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.487900][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.506984][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.578404][T12556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.588827][ T9477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.724941][T12556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.732305][T12556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.789952][T12556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.854250][T12746] loop4: detected capacity change from 0 to 256 [ 642.926770][T12746] FAT-fs (loop4): Directory bread(block 64) failed [ 642.933563][T12746] FAT-fs (loop4): Directory bread(block 65) failed [ 642.940217][T12746] FAT-fs (loop4): Directory bread(block 66) failed [ 642.947739][T12746] FAT-fs (loop4): Directory bread(block 67) failed [ 642.954448][T12746] FAT-fs (loop4): Directory bread(block 68) failed [ 642.961013][T12746] FAT-fs (loop4): Directory bread(block 69) failed [ 642.967996][T12746] FAT-fs (loop4): Directory bread(block 70) failed [ 642.974805][T12746] FAT-fs (loop4): Directory bread(block 71) failed [ 642.982174][T12746] FAT-fs (loop4): Directory bread(block 72) failed [ 642.990085][T12746] FAT-fs (loop4): Directory bread(block 73) failed [ 643.263998][T12753] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 643.283675][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.491413][T12556] hsr_slave_0: entered promiscuous mode [ 643.607772][T12556] hsr_slave_1: entered promiscuous mode [ 643.793927][T12556] debugfs: 'hsr0' already exists in 'hsr' [ 643.809889][T12556] Cannot create hsr debugfs directory [ 643.863060][ T6365] hsr_slave_0: left promiscuous mode [ 643.869515][ T6365] hsr_slave_1: left promiscuous mode [ 643.906913][ T6365] veth1_macvtap: left promiscuous mode [ 643.915369][ T6365] veth0_macvtap: left promiscuous mode [ 644.262515][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1570'. [ 644.333688][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.628879][ T6365] team0 (unregistering): Port device team_slave_1 removed [ 644.683756][ T6365] team0 (unregistering): Port device team_slave_0 removed [ 645.052788][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.369897][ T9914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.527991][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.626295][T12793] loop4: detected capacity change from 0 to 512 [ 645.937698][T12793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.950498][T12793] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 646.487476][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.613212][ T43] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 646.793495][ T43] usb 8-1: Using ep0 maxpacket: 32 [ 646.821196][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.866474][ T43] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.910812][ T43] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 646.947605][T12508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.966049][ T43] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 647.013772][ T43] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.058289][T12508] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.093624][ T43] usb 8-1: config 0 descriptor?? [ 647.130539][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.137877][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.209080][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1579'. [ 647.235314][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.242666][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.471557][T12556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.551102][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.565618][ T9477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.574643][T12556] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.589885][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.597170][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.619190][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.000A/input/input9 [ 647.675991][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.683267][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.776819][ T43] input: HID 0458:5011 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0458:5011.000A/input/input10 [ 647.885833][ T43] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.7-1/input0 [ 647.974016][ T43] usb 8-1: USB disconnect, device number 9 [ 648.237856][T12508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.467151][T12556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.540551][T12842] random: crng reseeded on system resumption [ 648.563515][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.583368][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.052557][T12862] overlayfs: failed to resolve './file0': -2 [ 649.229642][T12508] veth0_vlan: entered promiscuous mode [ 649.267424][T12508] veth1_vlan: entered promiscuous mode [ 649.389732][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1588'. [ 649.409101][T12508] veth0_macvtap: entered promiscuous mode [ 649.455334][T12508] veth1_macvtap: entered promiscuous mode [ 649.549285][T12556] veth0_vlan: entered promiscuous mode [ 649.646416][T12874] loop7: detected capacity change from 0 to 512 [ 649.776804][T12874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.790123][T12874] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 650.403537][T12878] loop6: detected capacity change from 0 to 512 [ 650.428458][T12878] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 650.469753][T12878] EXT4-fs (loop6): 1 truncate cleaned up [ 650.484533][T12878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.508624][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.528771][T12508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.564236][T12508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.656375][T12556] veth1_vlan: entered promiscuous mode [ 650.876872][T12556] veth0_macvtap: entered promiscuous mode [ 650.947191][T12556] veth1_macvtap: entered promiscuous mode [ 650.970550][ T7048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.077936][T12556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.407253][T12556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.418078][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.427071][ T6365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.071373][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.080071][ T9914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.102802][ T6365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.113955][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.360864][ T7286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.640968][T12892] loop7: detected capacity change from 0 to 256 [ 652.678338][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.750711][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.819938][ T6437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.829690][T12892] FAT-fs (loop7): Directory bread(block 64) failed [ 652.836498][T12892] FAT-fs (loop7): Directory bread(block 65) failed [ 652.843522][T12892] FAT-fs (loop7): Directory bread(block 66) failed [ 652.851086][T12892] FAT-fs (loop7): Directory bread(block 67) failed [ 652.857840][T12892] FAT-fs (loop7): Directory bread(block 68) failed [ 652.864591][T12892] FAT-fs (loop7): Directory bread(block 69) failed [ 652.871242][T12892] FAT-fs (loop7): Directory bread(block 70) failed [ 652.878006][T12892] FAT-fs (loop7): Directory bread(block 71) failed [ 652.885090][T12892] FAT-fs (loop7): Directory bread(block 72) failed [ 652.891654][T12892] FAT-fs (loop7): Directory bread(block 73) failed [ 652.891741][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1598'. [ 652.913475][ T6437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.123897][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.419007][T12918] loop9: detected capacity change from 0 to 512 [ 654.206536][T12918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.222071][T12918] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 654.642966][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.922305][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.425704][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.444868][T12508] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.463831][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1610'. [ 655.680461][T12946] loop7: detected capacity change from 0 to 256 [ 655.685430][ T9914] hid_parser_main: 22 callbacks suppressed [ 655.685459][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 655.709659][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 655.719657][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 655.744164][T12946] FAT-fs (loop7): Directory bread(block 64) failed [ 655.745118][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 655.750782][T12946] FAT-fs (loop7): Directory bread(block 65) failed [ 655.766291][T12946] FAT-fs (loop7): Directory bread(block 66) failed [ 655.772885][T12946] FAT-fs (loop7): Directory bread(block 67) failed [ 655.779465][T12946] FAT-fs (loop7): Directory bread(block 68) failed [ 655.787022][T12946] FAT-fs (loop7): Directory bread(block 69) failed [ 655.793673][T12946] FAT-fs (loop7): Directory bread(block 70) failed [ 655.800192][T12946] FAT-fs (loop7): Directory bread(block 71) failed [ 655.806859][T12946] FAT-fs (loop7): Directory bread(block 72) failed [ 655.813412][T12946] FAT-fs (loop7): Directory bread(block 73) failed [ 655.993539][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.008013][T12921] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 656.044788][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 656.076104][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 656.087171][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 656.096890][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 656.106677][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 656.116211][ T9914] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 656.221842][ T9914] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 657.100566][ T9914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.494021][T12975] overlayfs: failed to resolve './file1': -2 [ 657.549448][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1624'. [ 657.643301][T12979] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1625'. [ 657.768093][T12982] loop1: detected capacity change from 0 to 1024 [ 657.790469][T12982] EXT4-fs: Ignoring removed orlov option [ 657.817114][T12989] loop6: detected capacity change from 0 to 512 [ 657.845652][T12988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.868423][T12989] EXT4-fs: Ignoring removed orlov option [ 657.880724][T12982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.946468][T12989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 657.977458][T12989] EXT4-fs (loop6): orphan cleanup on readonly fs [ 658.095457][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.109749][T12989] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1629: bg 0: block 248: padding at end of block bitmap is not set [ 658.224822][T12989] Quota error (device loop6): write_blk: dquota write failed [ 658.239709][ T9914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.261038][T12989] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 658.271432][T12989] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1629: Failed to acquire dquot type 1 [ 658.301635][T12989] EXT4-fs (loop6): 1 truncate cleaned up [ 658.957141][T12989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 659.025547][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.121044][ T7048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.291119][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.320594][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.331129][ T5937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.352789][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.420889][T13016] tipc: Started in network mode [ 659.442277][T13019] random: crng reseeded on system resumption [ 659.631087][T13016] tipc: Node identity 4a565e2157d7, cluster identity 4711 [ 659.763328][T13016] tipc: Enabled bearer , priority 0 [ 660.179315][T13022] tipc: Resetting bearer [ 660.249495][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1639'. [ 660.273418][T13015] tipc: Disabling bearer [ 660.410532][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.544337][T13033] loop1: detected capacity change from 0 to 1024 [ 660.573822][T13033] EXT4-fs: Ignoring removed orlov option [ 660.713294][T13033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.753292][ T5936] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 661.453006][ T9914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.462722][ T5936] usb 10-1: Using ep0 maxpacket: 16 [ 661.478599][ T5936] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.496762][ T5936] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.519597][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.537196][ T5936] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 661.600433][ T5936] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 661.640841][T13047] loop1: detected capacity change from 0 to 512 [ 661.656619][ T5936] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 661.679808][ T5936] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 661.692231][ T5936] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 661.705793][ T5936] usb 10-1: SerialNumber: syz [ 661.713613][T13047] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 661.735559][T13047] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 661.744463][T13047] System zones: 0-2, 18-18, 34-34 [ 661.745292][ T5936] hub 10-1:1.0: bad descriptor, ignoring hub [ 661.750141][T13047] EXT4-fs (loop1): orphan cleanup on readonly fs [ 661.774577][ T5936] hub 10-1:1.0: probe with driver hub failed with error -5 [ 661.785384][T13047] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1646: bg 0: block 248: padding at end of block bitmap is not set [ 661.833344][ T5936] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -22 [ 661.850268][T13047] Quota error (device loop1): write_blk: dquota write failed [ 661.866642][T13047] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 661.877155][T13047] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1646: Failed to acquire dquot type 1 [ 661.903236][T13047] EXT4-fs (loop1): 1 truncate cleaned up [ 661.926089][T13047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 661.951598][ T30] audit: type=1800 audit(2000000307.210:675): pid=13047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1646" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 662.025387][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.085531][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.169736][T13061] random: crng reseeded on system resumption [ 662.190562][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.242903][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.265483][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.484922][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.677611][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1653'. [ 663.038552][T13071] loop1: detected capacity change from 0 to 128 [ 663.188807][T13075] loop6: detected capacity change from 0 to 256 [ 663.267272][T13075] FAT-fs (loop6): Directory bread(block 64) failed [ 663.274236][T13075] FAT-fs (loop6): Directory bread(block 65) failed [ 663.280153][T13071] syz.1.1652: attempt to access beyond end of device [ 663.280153][T13071] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 663.280854][T13075] FAT-fs (loop6): Directory bread(block 66) failed [ 663.302108][T13075] FAT-fs (loop6): Directory bread(block 67) failed [ 663.309027][T13075] FAT-fs (loop6): Directory bread(block 68) failed [ 663.315651][T13075] FAT-fs (loop6): Directory bread(block 69) failed [ 663.322746][T13075] FAT-fs (loop6): Directory bread(block 70) failed [ 663.329323][T13075] FAT-fs (loop6): Directory bread(block 71) failed [ 663.336059][T13075] FAT-fs (loop6): Directory bread(block 72) failed [ 663.343100][T13075] FAT-fs (loop6): Directory bread(block 73) failed [ 663.884559][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.990575][T13071] syz.1.1652: attempt to access beyond end of device [ 663.990575][T13071] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 664.034630][T13071] syz.1.1652: attempt to access beyond end of device [ 664.034630][T13071] loop1: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 664.155474][T13071] syz.1.1652: attempt to access beyond end of device [ 664.155474][T13071] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 664.216524][T13082] loop9: detected capacity change from 0 to 1024 [ 664.261344][T13082] EXT4-fs: Ignoring removed orlov option [ 664.307565][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.317759][ T5922] usb 10-1: USB disconnect, device number 2 [ 664.362496][T13082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.636234][ T49] kworker/u8:3: attempt to access beyond end of device [ 664.636234][ T49] loop1: rw=1, sector=233, nr_sectors = 1 limit=128 [ 664.816729][T12508] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.884054][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.893290][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.911495][T13095] loop6: detected capacity change from 0 to 512 [ 664.929117][T13095] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 664.963160][T13095] EXT4-fs (loop6): 1 truncate cleaned up [ 664.979370][T13095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.196401][T13103] loop9: detected capacity change from 0 to 512 [ 665.326241][T13103] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 665.838326][T13103] EXT4-fs (loop9): 1 truncate cleaned up [ 665.920514][T13103] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.071816][ T7048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.205202][T13118] random: crng reseeded on system resumption [ 666.269264][T13119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.276847][T13119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.350352][T13119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.358667][T13119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.633703][T13117] loop7: detected capacity change from 0 to 164 [ 666.989639][T13117] Unable to read rock-ridge attributes [ 667.039923][T13123] loop4: detected capacity change from 0 to 256 [ 667.053887][ T5936] net_ratelimit: 3 callbacks suppressed [ 667.053908][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.119169][T13123] FAT-fs (loop4): Directory bread(block 64) failed [ 667.126312][T13123] FAT-fs (loop4): Directory bread(block 65) failed [ 667.133202][T13123] FAT-fs (loop4): Directory bread(block 66) failed [ 667.139767][T13123] FAT-fs (loop4): Directory bread(block 67) failed [ 667.147456][T13123] FAT-fs (loop4): Directory bread(block 68) failed [ 667.154458][T13123] FAT-fs (loop4): Directory bread(block 69) failed [ 667.161404][T13123] FAT-fs (loop4): Directory bread(block 70) failed [ 667.168126][T13123] FAT-fs (loop4): Directory bread(block 71) failed [ 667.174932][T13123] FAT-fs (loop4): Directory bread(block 72) failed [ 667.181469][T13123] FAT-fs (loop4): Directory bread(block 73) failed [ 667.448012][ T3497] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.466394][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.478623][ T5922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.491259][T12508] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.544219][T13132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.552666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.083940][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.172902][T13145] loop1: detected capacity change from 0 to 512 [ 668.296265][T13145] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 668.343936][T13145] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 668.373048][T13145] System zones: 0-2, 18-18, 34-34 [ 668.427867][T13145] EXT4-fs (loop1): orphan cleanup on readonly fs [ 669.015180][T13145] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1678: bg 0: block 248: padding at end of block bitmap is not set [ 669.074665][T13145] Quota error (device loop1): write_blk: dquota write failed [ 669.124467][ T5936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.153250][T13145] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 669.188372][T13145] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1678: Failed to acquire dquot type 1 [ 669.217803][T13145] EXT4-fs (loop1): 1 truncate cleaned up [ 669.241764][T13145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 669.261435][T13159] loop9: detected capacity change from 0 to 164 [ 669.331709][T13159] Unable to read rock-ridge attributes [ 669.351777][T13161] loop7: detected capacity change from 0 to 512 [ 669.395581][T13161] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 669.454911][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.509500][T13161] EXT4-fs (loop7): 1 truncate cleaned up [ 669.555108][T13161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.088114][ T7286] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.164712][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.488923][ T7329] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.837004][T13202] loop6: detected capacity change from 0 to 512 [ 671.927194][T13202] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 671.953101][T13202] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 672.010469][T13202] System zones: 0-2, 18-18, 34-34 [ 672.033307][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1688'. [ 672.071597][T13209] loop7: detected capacity change from 0 to 1764 [ 672.083067][T13202] EXT4-fs (loop6): orphan cleanup on readonly fs [ 672.118019][T13202] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1697: bg 0: block 248: padding at end of block bitmap is not set [ 672.141162][T13210] loop9: detected capacity change from 0 to 16 [ 672.205219][T13202] Quota error (device loop6): write_blk: dquota write failed [ 672.236114][T13207] vlan2: entered allmulticast mode [ 672.255892][T13202] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 672.303333][T13210] erofs (device loop9): mounted with root inode @ nid 36. [ 672.332366][T13202] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1697: Failed to acquire dquot type 1 [ 672.414452][T13202] EXT4-fs (loop6): 1 truncate cleaned up [ 672.489728][T13202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 672.519273][ T9] net_ratelimit: 3 callbacks suppressed [ 672.519294][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.760423][ T7048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.252961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.282856][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.624033][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.670877][T13261] loop1: detected capacity change from 0 to 1024 [ 675.706906][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.727948][T13261] EXT4-fs: Ignoring removed orlov option [ 675.884827][ T13] bond0 (unregistering): Released all slaves [ 676.028369][T12511] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 676.042957][T13261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.090387][T12511] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 676.179445][T12511] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 676.238022][T12511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 676.253367][T12511] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 676.323118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.818137][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.830456][ T13] tipc: Disabling bearer [ 676.848465][ T13] tipc: Left network mode [ 677.872425][T13266] chnl_net:caif_netlink_parms(): no params data found [ 678.012790][ T13] hsr_slave_0: left promiscuous mode [ 678.039539][ T13] hsr_slave_1: left promiscuous mode [ 678.070571][ T13] veth1_macvtap: left promiscuous mode [ 678.076351][ T13] veth0_macvtap: left promiscuous mode [ 678.082199][ T13] veth1_vlan: left promiscuous mode [ 678.091407][ T13] veth0_vlan: left promiscuous mode [ 678.218930][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1725'. [ 678.290167][T13305] loop6: detected capacity change from 0 to 16 [ 678.325496][T13305] erofs (device loop6): mounted with root inode @ nid 36. [ 678.754639][ T5856] Bluetooth: hci4: command tx timeout [ 680.814905][ T5856] Bluetooth: hci4: command tx timeout [ 682.687228][T13351] random: crng reseeded on system resumption [ 682.756949][ T13] team0 (unregistering): Port device team_slave_1 removed [ 682.893176][ T5856] Bluetooth: hci4: command tx timeout [ 683.090852][ T13] team0 (unregistering): Port device team_slave_0 removed [ 684.962838][ T5856] Bluetooth: hci4: command tx timeout [ 685.769532][T13266] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.788665][T13266] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.820109][T13266] bridge_slave_0: entered allmulticast mode [ 685.835094][T13266] bridge_slave_0: entered promiscuous mode [ 685.854755][T13266] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.872560][T13266] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.917366][T13266] bridge_slave_1: entered allmulticast mode [ 685.952168][T13266] bridge_slave_1: entered promiscuous mode [ 686.241986][T13266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.261953][T13397] loop4: detected capacity change from 0 to 2048 [ 686.298128][T13266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.570174][T13266] team0: Port device team_slave_0 added [ 687.601469][T13397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.633874][T13266] team0: Port device team_slave_1 added [ 687.647628][ T30] audit: type=1800 audit(2000000332.910:676): pid=13409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1763" name="/" dev="9p" ino=2 res=0 errno=0 [ 687.672847][T13397] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.874284][T13266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.905296][T13266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.988824][T13266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.023673][T13266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.031170][ T9477] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.061132][T13266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.126396][T13266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.249342][T13266] hsr_slave_0: entered promiscuous mode [ 688.257543][T13266] hsr_slave_1: entered promiscuous mode [ 688.596923][T13266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.637639][T13266] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.657765][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.665020][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.695396][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.702676][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.295203][T13266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.365488][ T43] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 689.645678][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 689.874775][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 690.114749][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.133459][ T43] usb 2-1: Product: syz [ 690.137689][ T43] usb 2-1: Manufacturer: syz [ 690.142322][ T43] usb 2-1: SerialNumber: syz [ 690.230356][T13451] loop6: detected capacity change from 0 to 2048 [ 690.270159][T13451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.287791][T13451] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.412019][T13266] veth0_vlan: entered promiscuous mode [ 690.435487][T13266] veth1_vlan: entered promiscuous mode [ 690.467305][T13266] veth0_macvtap: entered promiscuous mode [ 690.482017][T13266] veth1_macvtap: entered promiscuous mode [ 690.515310][T13266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.527478][T13266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.631540][ T7048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.133254][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.140175][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.381186][ T43] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 691.499617][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.530856][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.631336][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.654091][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.530532][T13478] loop6: detected capacity change from 0 to 256 [ 692.543241][ T43] usb 2-1: USB disconnect, device number 2 [ 692.558311][ T43] usblp0: removed [ 692.613607][T13478] exfat: Deprecated parameter 'utf8' [ 692.619030][T13478] exfat: Deprecated parameter 'utf8' [ 692.671819][T13484] loop1: detected capacity change from 0 to 1764 [ 692.734748][T13487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.742433][T13487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.813754][T13487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.821355][T13487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.992216][T13486] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1783'. [ 693.552717][T13478] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d) [ 693.595724][T13493] loop9: detected capacity change from 0 to 2048 [ 693.738143][T13493] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.773125][T13493] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 694.735994][T12508] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.242840][ T5922] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 696.021176][ T5922] usb 2-1: config 1 interface 0 has no altsetting 0 [ 696.040553][ T5922] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 696.062284][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.080788][ T5922] usb 2-1: Product: syz [ 696.090173][ T5922] usb 2-1: Manufacturer: syz [ 696.100573][ T5922] usb 2-1: SerialNumber: syz [ 697.497345][ T5922] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 697.763118][T13532] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1797'. [ 697.922147][ T5922] hid_parser_main: 11 callbacks suppressed [ 697.922173][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 697.937458][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 697.946394][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 697.954690][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 697.977885][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 697.992204][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 698.027118][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 698.036486][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 698.045307][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 698.067864][ T5922] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0 [ 698.301641][ T5922] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 699.063602][ T5922] usb 2-1: USB disconnect, device number 3 [ 699.091199][ T5922] usblp0: removed [ 700.256645][T13570] overlayfs: missing 'lowerdir' [ 700.440125][T13577] random: crng reseeded on system resumption [ 701.468392][T13584] loop3: detected capacity change from 0 to 2048 [ 701.529001][T13584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.560701][T13584] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 701.719928][T13584] overlayfs: failed to resolve './bus': -2 [ 702.625252][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.455509][ T7329] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 703.737061][ T7329] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 703.757042][ T7329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.831249][T13620] random: crng reseeded on system resumption [ 704.000567][ T7329] usb 4-1: config 0 descriptor?? [ 706.119034][ T7329] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 706.138324][ T7329] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 706.150163][ T7329] asix 4-1:0.0: probe with driver asix failed with error -71 [ 706.185524][ T7329] usb 4-1: USB disconnect, device number 2 [ 707.250665][T13676] random: crng reseeded on system resumption [ 710.128907][T13716] tipc: Enabled bearer , priority 0 [ 710.139298][T13716] tipc: Resetting bearer [ 710.247727][T13715] tipc: Disabling bearer [ 710.606702][ T30] audit: type=1800 audit(2000000355.870:677): pid=13726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1859" name="/" dev="9p" ino=2 res=0 errno=0 [ 710.633197][T13737] overlayfs: missing 'lowerdir' [ 710.764570][T13743] loop3: detected capacity change from 0 to 2048 [ 710.800500][T13743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 710.818791][T13743] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 710.994771][T13755] loop6: detected capacity change from 0 to 128 [ 711.001938][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.000820][T13770] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 712.043939][T13770] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 712.645043][T13794] loop1: detected capacity change from 0 to 2048 [ 712.684979][T13800] loop6: detected capacity change from 0 to 512 [ 712.697375][T13794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.704266][T13800] EXT4-fs: Ignoring removed orlov option [ 712.709800][T13794] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.779563][T13800] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 712.884175][T13800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 712.904425][T12556] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.927895][T13800] EXT4-fs error (device loop6): ext4_iget_extra_inode:5107: inode #15: comm syz.6.1887: corrupted in-inode xattr: e_value size too large [ 712.945491][T13800] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1887: couldn't read orphan inode 15 (err -117) [ 712.947523][T13813] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 712.979672][T13813] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 712.999479][T13800] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.100262][ T7048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.121536][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 714.180312][T13833] loop6: detected capacity change from 0 to 512 [ 714.199427][T13827] vlan2: entered allmulticast mode [ 714.256592][T13827] loop1: detected capacity change from 0 to 16 [ 714.264995][T13827] erofs (device loop1): mounted with root inode @ nid 36. [ 714.330648][T13833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.622361][ T7048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.877157][T13842] kvm: kvm [13840]: vcpu0, guest rIP: 0x90e Unhandled WRMSR(0x11e) = 0xbe702511 [ 715.300609][T13855] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1903'. [ 715.594917][T13859] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 715.649913][T13859] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 715.745368][ T7329] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 715.982685][ T7329] usb 7-1: Using ep0 maxpacket: 8 [ 716.062975][ T7329] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 716.071327][ T7329] usb 7-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 716.100559][ T7329] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 716.125797][ T7329] usb 7-1: config 0 has no interface number 0 [ 716.152962][ T7329] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 716.178592][ T7329] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 716.214661][ T7329] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 45300, setting to 1024 [ 716.452691][ T7329] usb 7-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 716.464628][ T7329] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 716.485151][ T7329] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 716.502677][ T7329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.519797][ T7329] usb 7-1: Product: syz [ 716.538143][ T7329] usb 7-1: Manufacturer: syz [ 716.597512][ T7329] usb 7-1: SerialNumber: syz [ 717.113566][ T7329] usb 7-1: config 0 descriptor?? [ 717.141483][T13856] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 717.189878][ T7329] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 717.641141][T13883] loop4: detected capacity change from 0 to 164 [ 717.669395][T13883] Unable to read rock-ridge attributes [ 717.683920][T13885] overlayfs: missing 'workdir' [ 717.968319][T13887] overlayfs: overlapping lowerdir path [ 718.095265][T13888] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 718.923229][ T7329] usb 7-1: USB disconnect, device number 9 [ 719.498291][T13925] overlayfs: missing 'workdir' [ 720.976321][T13948] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 721.225238][T13962] overlayfs: missing 'workdir' [ 721.247712][T13964] loop4: detected capacity change from 0 to 128 [ 721.299777][T13964] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 721.332324][T13964] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 721.412856][ T5936] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 721.422486][ T9477] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 721.643496][ T5936] usb 2-1: config 1 interface 0 has no altsetting 0 [ 721.672138][ T5936] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 721.709898][T13974] random: crng reseeded on system resumption [ 721.736182][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.765492][T13975] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1946'. [ 721.852424][ T5936] usb 2-1: Product: syz [ 721.900715][ T5936] usb 2-1: Manufacturer: syz [ 721.967539][ T5936] usb 2-1: SerialNumber: syz [ 722.470727][T13979] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 723.809562][ T5936] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 724.068959][T13992] loop3: detected capacity change from 0 to 512 [ 724.218302][T13992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.268219][T13992] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.391958][T14002] loop6: detected capacity change from 0 to 4096 [ 724.429996][T14002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.763406][ T7048] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.807136][T14010] loop4: detected capacity change from 0 to 164 [ 724.819017][T14010] Unable to read rock-ridge attributes [ 725.160992][ T9914] usb 2-1: USB disconnect, device number 4 [ 725.217554][ T9914] usblp0: removed [ 725.294948][T14018] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 725.450953][T13266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.543433][T14022] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1956'. [ 726.988279][T14045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1967'. [ 727.204424][T14055] loop9: detected capacity change from 0 to 256 [ 727.260294][T14055] FAT-fs (loop9): Directory bread(block 64) failed [ 727.267085][T14055] FAT-fs (loop9): Directory bread(block 65) failed [ 727.273827][T14055] FAT-fs (loop9): Directory bread(block 66) failed [ 727.280404][T14055] FAT-fs (loop9): Directory bread(block 67) failed [ 727.287123][T14055] FAT-fs (loop9): Directory bread(block 68) failed [ 727.294115][T14055] FAT-fs (loop9): Directory bread(block 69) failed [ 727.300747][T14055] FAT-fs (loop9): Directory bread(block 70) failed [ 727.307362][T14055] FAT-fs (loop9): Directory bread(block 71) failed [ 727.314001][T14055] FAT-fs (loop9): Directory bread(block 72) failed [ 727.320538][T14055] FAT-fs (loop9): Directory bread(block 73) failed [ 728.669733][T14067] random: crng reseeded on system resumption [ 728.733406][T14071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1975'. [ 730.703287][T14090] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1980'. [ 730.717337][T14088] loop1: detected capacity change from 0 to 1764 [ 731.059985][T14106] loop3: detected capacity change from 0 to 256 [ 731.089511][T14106] FAT-fs (loop3): Directory bread(block 64) failed [ 731.101582][T14106] FAT-fs (loop3): Directory bread(block 65) failed [ 731.109004][T14106] FAT-fs (loop3): Directory bread(block 66) failed [ 731.115622][T14106] FAT-fs (loop3): Directory bread(block 67) failed [ 731.122249][T14106] FAT-fs (loop3): Directory bread(block 68) failed [ 731.128966][T14106] FAT-fs (loop3): Directory bread(block 69) failed [ 731.135774][T14106] FAT-fs (loop3): Directory bread(block 70) failed [ 731.142333][T14106] FAT-fs (loop3): Directory bread(block 71) failed [ 731.150098][T14106] FAT-fs (loop3): Directory bread(block 72) failed [ 731.157012][T14106] FAT-fs (loop3): Directory bread(block 73) failed [ 731.169600][T14099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1986'. [ 731.182240][T14099] loop4: detected capacity change from 0 to 16 [ 731.190852][T14099] erofs (device loop4): mounted with root inode @ nid 36. [ 731.467504][ T49] bridge_slave_1: left allmulticast mode [ 732.150508][ T49] bridge_slave_1: left promiscuous mode [ 732.160850][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.210650][T14117] random: crng reseeded on system resumption [ 732.220390][ T49] bridge_slave_0: left promiscuous mode [ 732.260986][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.306886][T14118] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1992'. [ 733.223466][T14123] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1995'. [ 733.371012][T14125] loop6: detected capacity change from 0 to 1764 [ 733.616352][T12511] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 733.633480][T12511] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 733.645183][T12511] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 733.662057][T12511] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 733.674534][T12511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 733.814025][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.825241][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.836511][ T49] bond0 (unregistering): Released all slaves [ 733.965983][ T49] tipc: Left network mode [ 735.231991][T14131] chnl_net:caif_netlink_parms(): no params data found [ 735.332975][T14146] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 735.392939][ T49] hsr_slave_0: left promiscuous mode [ 735.412494][ T49] hsr_slave_1: left promiscuous mode [ 735.486536][ T49] veth1_macvtap: left promiscuous mode [ 735.492305][ T49] veth0_macvtap: left promiscuous mode [ 735.527492][ T49] veth1_vlan: left promiscuous mode [ 735.533349][ T49] veth0_vlan: left promiscuous mode [ 735.580204][T14154] loop9: detected capacity change from 0 to 1764 [ 735.765195][T12511] Bluetooth: hci1: command tx timeout [ 735.888921][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 735.925457][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 735.959142][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 735.971995][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 735.982218][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 736.043307][T14164] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2010'. [ 737.047386][ T49] team0 (unregistering): Port device team_slave_1 removed [ 737.107612][ T49] team0 (unregistering): Port device team_slave_0 removed [ 737.853033][ T5856] Bluetooth: hci1: command tx timeout [ 738.041789][T14131] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.062180][T14131] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.073789][T14131] bridge_slave_0: entered allmulticast mode [ 738.081660][T14131] bridge_slave_0: entered promiscuous mode [ 738.084182][ T5856] Bluetooth: hci3: command tx timeout [ 738.115028][T14131] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.123967][T14131] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.131268][T14131] bridge_slave_1: entered allmulticast mode [ 738.140775][T14131] bridge_slave_1: entered promiscuous mode [ 738.259854][T14181] loop4: detected capacity change from 0 to 1764 [ 738.267580][T14131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.286139][T14131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.358117][T14183] process 'syz.3.2016' launched './file0' with NULL argv: empty string added [ 738.390292][T14131] team0: Port device team_slave_0 added [ 738.474716][T14131] team0: Port device team_slave_1 added [ 738.583636][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.645529][T12511] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 738.659227][T12511] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 738.668945][T12511] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 738.678122][T12511] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 738.696317][T12511] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 738.810161][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.901474][T14131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.918826][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.972692][T14131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.994069][T14131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.001074][T14131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.070058][T14131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.126604][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.162038][T14159] chnl_net:caif_netlink_parms(): no params data found [ 739.259248][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.299535][T14200] loop3: detected capacity change from 0 to 2048 [ 739.356131][T14200] loop3: p1 < > p4 < > [ 739.360391][T14200] loop3: partition table partially beyond EOD, truncated [ 739.371328][T14200] loop3: p4 start 2304 is beyond EOD, truncated [ 739.451275][T14131] hsr_slave_0: entered promiscuous mode [ 739.474535][T14131] hsr_slave_1: entered promiscuous mode [ 739.484130][T14131] debugfs: 'hsr0' already exists in 'hsr' [ 739.489913][T14131] Cannot create hsr debugfs directory [ 739.697025][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 739.707396][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 739.716586][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 739.740932][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 739.749360][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 739.841703][T14211] loop3: detected capacity change from 0 to 1764 [ 739.855217][T14159] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.862469][T14159] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.870715][T14159] bridge_slave_0: entered allmulticast mode [ 739.878834][T14159] bridge_slave_0: entered promiscuous mode [ 739.890992][T14159] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.898396][T14159] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.906164][T14159] bridge_slave_1: entered allmulticast mode [ 739.914988][T14159] bridge_slave_1: entered promiscuous mode [ 739.932174][T12511] Bluetooth: hci1: command tx timeout [ 740.019943][T14159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.092092][T14159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.163133][T12511] Bluetooth: hci3: command tx timeout [ 740.191833][ T49] bridge_slave_1: left allmulticast mode [ 740.198359][ T49] bridge_slave_1: left promiscuous mode [ 740.204703][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.223834][ T49] bridge_slave_0: left promiscuous mode [ 740.229732][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.730992][T12511] Bluetooth: hci0: command tx timeout [ 740.847413][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 740.855663][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 740.860185][ T5856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 740.878322][ T5856] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 740.878871][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 740.893838][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 740.901869][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 740.910274][ T49] bond0 (unregistering): Released all slaves [ 741.297935][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.309288][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.326755][ T49] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 741.339334][ T49] bond0 (unregistering): Released all slaves [ 741.479976][T14159] team0: Port device team_slave_0 added [ 741.497776][T14159] team0: Port device team_slave_1 added [ 741.550917][ T49] tipc: Disabling bearer [ 741.557012][ T49] tipc: Left network mode [ 741.596655][T14187] chnl_net:caif_netlink_parms(): no params data found [ 741.710947][T14159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.718074][T14159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.745664][T14159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.759440][T14159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.767073][T14159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.793459][T14159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.843096][T12511] Bluetooth: hci2: command tx timeout [ 742.002856][T12511] Bluetooth: hci1: command tx timeout [ 742.067781][T14159] hsr_slave_0: entered promiscuous mode [ 742.075263][T14159] hsr_slave_1: entered promiscuous mode [ 742.081600][T14159] debugfs: 'hsr0' already exists in 'hsr' [ 742.088181][T14159] Cannot create hsr debugfs directory [ 742.108149][T14187] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.116222][T14187] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.123625][T14187] bridge_slave_0: entered allmulticast mode [ 742.131018][T14187] bridge_slave_0: entered promiscuous mode [ 742.201834][T14187] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.210044][T14187] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.221736][T14187] bridge_slave_1: entered allmulticast mode [ 742.230463][T14187] bridge_slave_1: entered promiscuous mode [ 742.243130][T12511] Bluetooth: hci3: command tx timeout [ 742.366167][T14187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.379255][T14187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.414303][ T49] hsr_slave_0: left promiscuous mode [ 742.421319][ T49] hsr_slave_1: left promiscuous mode [ 742.432668][ T49] hsr_slave_0: left promiscuous mode [ 742.438752][ T49] hsr_slave_1: left promiscuous mode [ 742.468725][ T49] veth1_macvtap: left promiscuous mode [ 742.475533][ T49] veth0_macvtap: left promiscuous mode [ 742.481164][ T49] veth1_vlan: left promiscuous mode [ 742.486583][ T49] veth0_vlan: left promiscuous mode [ 742.495125][ T49] veth1_macvtap: left promiscuous mode [ 742.500683][ T49] veth0_macvtap: left promiscuous mode [ 742.506723][ T49] veth1_vlan: left promiscuous mode [ 742.512047][ T49] veth0_vlan: left promiscuous mode [ 742.807431][T12511] Bluetooth: hci0: command tx timeout [ 742.976988][T12511] Bluetooth: hci4: command tx timeout [ 743.184559][ T49] team0 (unregistering): Port device team_slave_1 removed [ 743.245149][ T49] team0 (unregistering): Port device team_slave_0 removed [ 743.932675][T12511] Bluetooth: hci2: command tx timeout [ 744.266612][ T49] team0 (unregistering): Port device team_slave_1 removed [ 744.317403][ T49] team0 (unregistering): Port device team_slave_0 removed [ 744.339686][T12511] Bluetooth: hci3: command tx timeout [ 744.884502][T12511] Bluetooth: hci0: command tx timeout [ 744.955990][T14187] team0: Port device team_slave_0 added [ 745.020756][T14187] team0: Port device team_slave_1 added [ 745.043139][T12511] Bluetooth: hci4: command tx timeout [ 745.070687][T14207] chnl_net:caif_netlink_parms(): no params data found [ 745.126340][T14187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.134200][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.161621][T14187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.208505][T14187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.215597][T14187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 745.242017][T14187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.517591][T14187] hsr_slave_0: entered promiscuous mode [ 745.524753][T14187] hsr_slave_1: entered promiscuous mode [ 745.530881][T14187] debugfs: 'hsr0' already exists in 'hsr' [ 745.536882][T14187] Cannot create hsr debugfs directory [ 745.548020][T14207] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.555383][T14207] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.562778][T14207] bridge_slave_0: entered allmulticast mode [ 745.571144][T14207] bridge_slave_0: entered promiscuous mode [ 745.587425][T14207] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.594926][T14207] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.602255][T14207] bridge_slave_1: entered allmulticast mode [ 745.610198][T14207] bridge_slave_1: entered promiscuous mode [ 745.617574][T14213] chnl_net:caif_netlink_parms(): no params data found [ 745.699630][T14207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.783827][T14207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.875951][T14131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.936893][T14207] team0: Port device team_slave_0 added [ 745.964103][T14213] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.971945][T14213] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.980855][T14213] bridge_slave_0: entered allmulticast mode [ 745.988738][T14213] bridge_slave_0: entered promiscuous mode [ 746.000003][T14213] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.008105][T12511] Bluetooth: hci2: command tx timeout [ 746.008480][T14213] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.021543][T14213] bridge_slave_1: entered allmulticast mode [ 746.031208][T14213] bridge_slave_1: entered promiscuous mode [ 746.044428][T14207] team0: Port device team_slave_1 added [ 746.178027][T14213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.194534][T14213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.205423][T14207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.212421][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.239402][T14207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.266383][ T49] bridge_slave_1: left allmulticast mode [ 746.272099][ T49] bridge_slave_1: left promiscuous mode [ 746.278190][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.288125][ T49] bridge_slave_0: left allmulticast mode [ 746.295098][ T49] bridge_slave_0: left promiscuous mode [ 746.302339][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.830042][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.841903][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.852961][ T49] bond0 (unregistering): Released all slaves [ 746.971648][T12511] Bluetooth: hci0: command tx timeout [ 747.122878][T12511] Bluetooth: hci4: command tx timeout [ 747.240216][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.251864][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.262318][ T49] bond0 (unregistering): Released all slaves [ 747.344384][T14207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.351398][T14207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.379789][T14207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.454885][T14213] team0: Port device team_slave_0 added [ 747.467666][ T49] tipc: Left network mode [ 747.470277][T14131] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.506608][T14213] team0: Port device team_slave_1 added [ 747.590692][T14213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.599231][T14213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.625511][T14213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.641190][T14213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.649748][T14213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.676135][T14213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.758428][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.765663][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.819250][T14207] hsr_slave_0: entered promiscuous mode [ 747.827124][T14207] hsr_slave_1: entered promiscuous mode [ 747.835801][T14207] debugfs: 'hsr0' already exists in 'hsr' [ 747.842378][T14207] Cannot create hsr debugfs directory [ 747.916127][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.923370][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.982521][T14213] hsr_slave_0: entered promiscuous mode [ 747.989406][T14213] hsr_slave_1: entered promiscuous mode [ 747.996586][T14213] debugfs: 'hsr0' already exists in 'hsr' [ 748.002332][T14213] Cannot create hsr debugfs directory [ 748.084287][T12511] Bluetooth: hci2: command tx timeout [ 748.224472][T14159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.293686][ T49] hsr_slave_0: left promiscuous mode [ 748.299657][ T49] hsr_slave_1: left promiscuous mode [ 748.308455][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.316290][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.325838][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.333410][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.346515][ T49] hsr_slave_0: left promiscuous mode [ 748.352405][ T49] hsr_slave_1: left promiscuous mode [ 748.386075][ T49] veth1_macvtap: left promiscuous mode [ 748.392061][ T49] veth0_macvtap: left promiscuous mode [ 748.398607][ T49] veth1_vlan: left promiscuous mode [ 748.404099][ T49] veth0_vlan: left promiscuous mode [ 748.410828][ T49] veth1_macvtap: left promiscuous mode [ 748.418144][ T49] veth0_macvtap: left promiscuous mode [ 748.424290][ T49] veth1_vlan: left promiscuous mode [ 748.429601][ T49] veth0_vlan: left promiscuous mode [ 749.084688][ T49] team0 (unregistering): Port device team_slave_1 removed [ 749.141187][ T49] team0 (unregistering): Port device team_slave_0 removed [ 749.216023][T12511] Bluetooth: hci4: command tx timeout [ 750.158383][ T49] team0 (unregistering): Port device team_slave_1 removed [ 750.216551][ T49] team0 (unregistering): Port device team_slave_0 removed [ 750.897703][T14159] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.999431][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.006643][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.091611][T14187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.119960][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.127213][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.279125][T14187] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.316633][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.323853][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.417586][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.424841][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.503218][T14159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 751.563714][T14131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.602392][T14213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.682377][T14207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.726740][T14213] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.817829][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.825046][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.859714][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.866973][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.880810][T14207] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.947368][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.954590][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.073577][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.080813][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.156391][T14159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.228363][T14187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.464767][T14131] veth0_vlan: entered promiscuous mode [ 752.499954][T14131] veth1_vlan: entered promiscuous mode [ 752.577974][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.585137][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.676300][T14131] veth0_macvtap: entered promiscuous mode [ 752.715810][T14131] veth1_macvtap: entered promiscuous mode [ 752.798195][T14131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.847806][T14213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.877338][T14131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.056846][T14207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.244631][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.252522][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.331931][T14159] veth0_vlan: entered promiscuous mode [ 753.351414][T14187] veth0_vlan: entered promiscuous mode [ 753.361639][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.385293][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.407894][T14159] veth1_vlan: entered promiscuous mode [ 753.434083][T14187] veth1_vlan: entered promiscuous mode [ 753.655158][T14187] veth0_macvtap: entered promiscuous mode [ 753.669482][T14159] veth0_macvtap: entered promiscuous mode [ 753.686681][T14187] veth1_macvtap: entered promiscuous mode [ 753.726084][T14159] veth1_macvtap: entered promiscuous mode [ 753.787675][T14187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.810726][T14187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.840959][T14159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.858388][T14213] veth0_vlan: entered promiscuous mode [ 753.879598][T14213] veth1_vlan: entered promiscuous mode [ 753.901616][T14159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.927054][T14207] veth0_vlan: entered promiscuous mode [ 753.985199][T14207] veth1_vlan: entered promiscuous mode [ 754.106009][T14213] veth0_macvtap: entered promiscuous mode [ 754.177646][T14207] veth0_macvtap: entered promiscuous mode [ 754.190894][T14207] veth1_macvtap: entered promiscuous mode [ 754.223981][T14207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.248082][T14207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.316963][T14213] veth1_macvtap: entered promiscuous mode [ 754.403982][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.411863][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.096666][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.109235][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.229182][T14213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.250714][T14213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.255329][T14325] loop5: detected capacity change from 0 to 1764 [ 755.280941][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.289576][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.354287][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.362190][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.556617][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.569789][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.609856][T14331] loop0: detected capacity change from 0 to 512 [ 755.787647][ T6436] bridge_slave_1: left allmulticast mode [ 755.804686][ T6436] bridge_slave_1: left promiscuous mode [ 755.846041][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.921273][ T6436] bridge_slave_0: left allmulticast mode [ 755.957869][ T6436] bridge_slave_0: left promiscuous mode [ 755.991178][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.512253][T14331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.527664][T14331] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 757.257708][T14159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.621000][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 757.643264][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 757.652414][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 757.676304][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 757.795197][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.847353][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 758.188872][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.204322][ T6436] bond0 (unregistering): Released all slaves [ 758.402226][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.417339][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.616768][T14362] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2021'. [ 758.854138][T14369] loop8: detected capacity change from 0 to 512 [ 759.030945][T14369] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.044009][T14369] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 760.236801][T12511] Bluetooth: hci1: command tx timeout [ 760.916970][T14187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.989231][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.020534][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.473186][T14382] loop8: detected capacity change from 0 to 512 [ 761.499851][T14382] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 761.551084][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.592265][T14382] EXT4-fs (loop8): 1 truncate cleaned up [ 761.598887][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.618251][T14382] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.075870][ T9578] hid_parser_main: 6 callbacks suppressed [ 762.075897][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x4 [ 762.121000][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x2 [ 762.161595][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 762.199955][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 762.239514][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 762.298964][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 762.327549][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 762.336339][T12511] Bluetooth: hci1: command tx timeout [ 762.369257][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 762.397077][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 762.459589][T14187] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.496101][ T9578] hid-generic 0000:3000000:0000.000D: unknown main item tag 0x0 [ 762.531434][ T9578] hid-generic 0000:3000000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 762.700945][T14346] chnl_net:caif_netlink_parms(): no params data found [ 764.779183][T14414] loop2: detected capacity change from 0 to 512 [ 764.882705][T12511] Bluetooth: hci1: command tx timeout [ 767.892776][T12511] Bluetooth: hci1: command tx timeout [ 769.100408][T14414] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 769.187669][T14418] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2056'. [ 769.772581][ C1] sched: DL replenish lagged too much [ 770.459647][ T6436] hsr_slave_0: left promiscuous mode [ 770.516513][ T6436] hsr_slave_1: left promiscuous mode [ 770.542763][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.550229][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.614909][T14425] loop2: detected capacity change from 0 to 1024 [ 770.631826][ T6436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.644184][ T6436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.659857][T14425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 770.700882][T14425] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.738352][ T6436] veth1_macvtap: left promiscuous mode [ 770.765896][ T6436] veth0_macvtap: left promiscuous mode [ 770.802338][ T6436] veth1_vlan: left promiscuous mode [ 770.832883][ T6436] veth0_vlan: left promiscuous mode [ 770.894393][T14437] loop0: detected capacity change from 0 to 512 [ 770.939234][T14437] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 771.065059][T14437] EXT4-fs (loop0): 1 truncate cleaned up [ 771.127890][T14437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.585196][T14207] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.840904][T14159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.919825][ T6436] team0 (unregistering): Port device team_slave_1 removed [ 779.071960][ T6436] team0 (unregistering): Port device team_slave_0 removed [ 780.742410][T14346] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.752747][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.761362][T14346] bridge_slave_0: entered allmulticast mode [ 780.775672][T14346] bridge_slave_0: entered promiscuous mode [ 780.902847][T14472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2067'. [ 780.926552][T14346] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.977596][T14346] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.016227][T14346] bridge_slave_1: entered allmulticast mode [ 781.039228][T14346] bridge_slave_1: entered promiscuous mode [ 781.216592][T14482] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2068'. [ 781.290900][T14486] loop2: detected capacity change from 0 to 512 [ 781.316058][T14486] vfat: Unknown parameter '0x0000000000000000' [ 781.357529][T14346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.454838][T14346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.569102][T14489] 9pnet_fd: Insufficient options for proto=fd [ 781.786789][T14346] team0: Port device team_slave_0 added [ 781.841860][T14346] team0: Port device team_slave_1 added [ 781.887460][T14491] loop2: detected capacity change from 0 to 512 [ 781.939842][T14491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 782.001378][T14491] EXT4-fs (loop2): 1 truncate cleaned up [ 782.062448][T14491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.205891][T14346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.258333][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.332438][T14346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.376638][T14346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.395722][T14346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.433948][T14346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.627458][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 786.653253][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 786.664717][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 786.673428][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 786.681278][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 788.722985][ T5856] Bluetooth: hci5: command tx timeout [ 789.681837][T14207] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.889363][T14346] hsr_slave_0: entered promiscuous mode [ 789.940560][T14346] hsr_slave_1: entered promiscuous mode [ 790.259611][T14513] af_packet: tpacket_rcv: packet too big, clamped from 3954 to 3710. macoff=82 [ 790.711330][T14520] loop2: detected capacity change from 0 to 128 [ 790.741146][T14520] EXT4-fs (loop2): Test dummy encryption mode enabled [ 790.792914][T14520] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 790.810933][ T5856] Bluetooth: hci5: command tx timeout [ 790.831965][T14520] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 790.873411][ T9578] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 791.090305][ T9578] usb 1-1: config 1 interface 0 has no altsetting 0 [ 791.105729][ T9578] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 791.150140][ T9578] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.200418][ T9578] usb 1-1: Product: syz [ 791.220489][ T9578] usb 1-1: Manufacturer: syz [ 791.247878][ T9578] usb 1-1: SerialNumber: syz [ 792.031870][T14503] chnl_net:caif_netlink_parms(): no params data found [ 792.886048][ T5856] Bluetooth: hci5: command tx timeout [ 793.351369][T14346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.729092][T14503] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.759999][T14503] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.792860][T14503] bridge_slave_0: entered allmulticast mode [ 793.824787][T14503] bridge_slave_0: entered promiscuous mode [ 793.871712][T14503] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.900596][T14503] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.931708][T14503] bridge_slave_1: entered allmulticast mode [ 793.961754][T14503] bridge_slave_1: entered promiscuous mode [ 794.012454][T14346] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.293896][T14503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.320326][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.327626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.371234][ T9578] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 794.409124][ T9578] usb 1-1: USB disconnect, device number 3 [ 794.440889][ T9578] usblp0: removed [ 794.539056][T14540] loop0: detected capacity change from 0 to 164 [ 794.560281][T14540] Unable to read rock-ridge attributes [ 794.876654][T14503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.935832][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.943280][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.965219][ T5856] Bluetooth: hci5: command tx timeout [ 795.161385][T14503] team0: Port device team_slave_0 added [ 795.189735][T14503] team0: Port device team_slave_1 added [ 795.426180][T14503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.438689][T14503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.476984][T14503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.511792][T14503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.521996][T14503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.557850][T14503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.730270][T14503] hsr_slave_0: entered promiscuous mode [ 795.737463][T14503] hsr_slave_1: entered promiscuous mode [ 795.749942][T14503] debugfs: 'hsr0' already exists in 'hsr' [ 795.757179][T14503] Cannot create hsr debugfs directory [ 796.508888][T14346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.817163][T14503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.890796][T14503] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.967803][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.975119][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.011809][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.019076][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.680438][T14346] veth0_vlan: entered promiscuous mode [ 797.751962][T14565] loop0: detected capacity change from 0 to 512 [ 797.761554][T14346] veth1_vlan: entered promiscuous mode [ 797.799668][T14565] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 797.874957][T14565] EXT4-fs (loop0): 1 truncate cleaned up [ 797.899480][T14565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.930370][T14346] veth0_macvtap: entered promiscuous mode [ 798.001026][T14346] veth1_macvtap: entered promiscuous mode [ 798.115310][T14346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.151707][T14503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.191733][T14346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.418913][T14207] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 798.672296][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.742715][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.781919][T14159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.846313][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.887686][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.107761][ T5913] kernel write not supported for file /53/clear_refs (pid: 5913 comm: kworker/0:5) [ 799.481764][T14584] loop0: detected capacity change from 0 to 512 [ 799.512864][T14584] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 799.579174][T14584] EXT4-fs (loop0): 1 truncate cleaned up [ 799.619488][T14584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 799.692483][T14503] veth0_vlan: entered promiscuous mode [ 799.758437][T14503] veth1_vlan: entered promiscuous mode [ 799.834371][T14159] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.952807][T14503] veth0_macvtap: entered promiscuous mode [ 799.981838][T14503] veth1_macvtap: entered promiscuous mode [ 800.078721][T14503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.149817][T14503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.530676][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.569279][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.669077][ T1011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.690520][ T1011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.735356][T14600] loop0: detected capacity change from 0 to 512 [ 801.816678][T14600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.869460][T14600] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 801.979075][T14600] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 802.017882][T14600] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 802.047702][T14600] EXT4-fs (loop0): This should not happen!! Data will be lost [ 802.047702][T14600] [ 802.102137][T14600] EXT4-fs (loop0): Total free blocks count 0 [ 802.121749][T14600] EXT4-fs (loop0): Free/Dirty block details [ 802.141833][T14600] EXT4-fs (loop0): free_blocks=65280 [ 802.155375][T14600] EXT4-fs (loop0): dirty_blocks=33 [ 802.181245][T14600] EXT4-fs (loop0): Block reservation details [ 802.194945][T14600] EXT4-fs (loop0): i_reserved_data_blocks=33 [ 802.767933][ T1109] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 806.184784][T14625] loop6: detected capacity change from 0 to 512 [ 806.196477][T14625] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 806.222428][T14625] EXT4-fs (loop6): 1 truncate cleaned up [ 806.235026][T14625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.019244][T14503] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.291850][T14636] GUP no longer grows the stack in syz.8.2098 (14636): 200000009000-200000014000 (200000008000) [ 810.312954][T14636] CPU: 0 UID: 0 PID: 14636 Comm: syz.8.2098 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 810.312985][T14636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 810.313008][T14636] Call Trace: [ 810.313017][T14636] [ 810.313037][T14636] dump_stack_lvl+0x189/0x250 [ 810.313080][T14636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 810.313106][T14636] ? __pfx__printk+0x10/0x10 [ 810.313133][T14636] ? find_vma+0xe7/0x160 [ 810.313174][T14636] __get_user_pages+0x24d0/0x2ce0 [ 810.313196][T14636] ? __lock_acquire+0xab9/0xd20 [ 810.313257][T14636] ? __gup_longterm_locked+0xc68/0x1660 [ 810.313290][T14636] __gup_longterm_locked+0xde9/0x1660 [ 810.313336][T14636] ? gup_fast_fallback+0x195f/0x2010 [ 810.313365][T14636] gup_fast_fallback+0x1e6a/0x2010 [ 810.313426][T14636] ? __pfx_gup_fast_fallback+0x10/0x10 [ 810.313461][T14636] ? is_valid_gup_args+0x11f/0x200 [ 810.313488][T14636] ? get_user_pages_fast+0x4d/0xb0 [ 810.313515][T14636] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 810.313554][T14636] iov_iter_get_pages2+0x5e/0xa0 [ 810.313579][T14636] fuse_copy_fill+0x541/0xb10 [ 810.313611][T14636] ? __pfx_fuse_copy_fill+0x10/0x10 [ 810.313650][T14636] fuse_copy_one+0x90/0x120 [ 810.313688][T14636] fuse_dev_do_read+0xc26/0x1240 [ 810.313732][T14636] ? __pfx_fuse_dev_do_read+0x10/0x10 [ 810.313755][T14636] ? __pfx_aa_file_perm+0x10/0x10 [ 810.313784][T14636] ? __pfx_futex_wake_mark+0x10/0x10 [ 810.313831][T14636] fuse_dev_read+0x159/0x1f0 [ 810.313866][T14636] ? __pfx_fuse_dev_read+0x10/0x10 [ 810.313908][T14636] ? bpf_lsm_file_permission+0x9/0x20 [ 810.313930][T14636] ? security_file_permission+0x75/0x290 [ 810.313964][T14636] vfs_read+0x4cd/0x980 [ 810.314002][T14636] ? __pfx_vfs_read+0x10/0x10 [ 810.314047][T14636] ? __fget_files+0x2a/0x420 [ 810.314089][T14636] ksys_read+0x145/0x250 [ 810.314120][T14636] ? __pfx_ksys_read+0x10/0x10 [ 810.314143][T14636] ? rcu_is_watching+0x15/0xb0 [ 810.314170][T14636] ? do_syscall_64+0xbe/0x3b0 [ 810.314203][T14636] do_syscall_64+0xfa/0x3b0 [ 810.314228][T14636] ? lockdep_hardirqs_on+0x9c/0x150 [ 810.314252][T14636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.314273][T14636] ? clear_bhb_loop+0x60/0xb0 [ 810.314299][T14636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.314326][T14636] RIP: 0033:0x7fb051d8e929 [ 810.314349][T14636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.314367][T14636] RSP: 002b:00007fb052c1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 810.314389][T14636] RAX: ffffffffffffffda RBX: 00007fb051fb5fa0 RCX: 00007fb051d8e929 [ 810.314405][T14636] RDX: 0000000000002020 RSI: 0000200000008e80 RDI: 0000000000000003 [ 810.314419][T14636] RBP: 00007fb051e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 810.314431][T14636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.314443][T14636] R13: 0000000000000000 R14: 00007fb051fb5fa0 R15: 00007ffde3b9dd78 [ 810.314477][T14636] [ 814.014371][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.020758][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.627916][T14652] loop6: detected capacity change from 0 to 2048 [ 816.730400][T14652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.818993][T14652] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 817.394830][T14503] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.915373][T12511] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 817.927091][T12511] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 817.959777][T12511] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 817.977074][T12511] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 817.992118][T12511] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.525308][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 818.547264][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 818.556937][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 818.600060][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 818.608183][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 819.352973][T14675] loop6: detected capacity change from 0 to 2048 [ 819.384601][T14675] EXT4-fs: inline encryption not supported [ 819.418687][T14675] EXT4-fs: Ignoring removed mblk_io_submit option [ 819.448524][T14675] ext4: Unknown parameter 'audit' [ 819.934790][T14663] chnl_net:caif_netlink_parms(): no params data found [ 820.083247][ T5856] Bluetooth: hci4: command tx timeout [ 820.652665][ T5856] Bluetooth: hci6: command tx timeout [ 820.687533][T14667] chnl_net:caif_netlink_parms(): no params data found [ 820.876288][T14690] loop8: detected capacity change from 0 to 128 [ 820.970150][T12511] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 820.998781][T12511] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 821.007762][T12511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 821.017806][T12511] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 821.029264][T12511] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 821.079595][T14690] EXT4-fs (loop8): Test dummy encryption mode enabled [ 821.139354][T14690] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 821.185866][T14690] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 821.379169][T14663] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.408349][T14663] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.432823][T14663] bridge_slave_0: entered allmulticast mode [ 821.452749][T14663] bridge_slave_0: entered promiscuous mode [ 821.477379][T14663] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.501660][T14663] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.532469][T14663] bridge_slave_1: entered allmulticast mode [ 821.559312][T14663] bridge_slave_1: entered promiscuous mode [ 821.966249][T14663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.022180][T14663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.163037][T12511] Bluetooth: hci4: command tx timeout [ 822.342458][T14663] team0: Port device team_slave_0 added [ 822.499351][T14663] team0: Port device team_slave_1 added [ 822.506545][T14667] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.521719][T14667] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.530308][T14667] bridge_slave_0: entered allmulticast mode [ 822.554251][T14667] bridge_slave_0: entered promiscuous mode [ 822.569766][T14667] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.578009][T14667] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.595672][T14667] bridge_slave_1: entered allmulticast mode [ 822.608163][T14667] bridge_slave_1: entered promiscuous mode [ 822.722874][T12511] Bluetooth: hci6: command tx timeout [ 822.886472][T14663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.903172][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.939866][T14663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.958293][T14667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.026577][T14663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.038310][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.078772][T14663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.122376][T14667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 823.133142][T12511] Bluetooth: hci7: command tx timeout [ 823.445215][T14667] team0: Port device team_slave_0 added [ 823.467577][T14663] hsr_slave_0: entered promiscuous mode [ 823.481214][T14663] hsr_slave_1: entered promiscuous mode [ 823.489197][T14663] debugfs: 'hsr0' already exists in 'hsr' [ 823.501870][T14663] Cannot create hsr debugfs directory [ 823.566826][T14667] team0: Port device team_slave_1 added [ 823.821877][T14667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.843009][T14667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.918660][T14667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.033921][T14667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.040926][T14667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.074446][T14667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.159908][T14691] chnl_net:caif_netlink_parms(): no params data found [ 824.262777][T12511] Bluetooth: hci4: command tx timeout [ 824.802673][T12511] Bluetooth: hci6: command tx timeout [ 825.203342][T12511] Bluetooth: hci7: command tx timeout [ 826.322899][T12511] Bluetooth: hci4: command tx timeout [ 826.882746][T12511] Bluetooth: hci6: command tx timeout [ 827.283042][T12511] Bluetooth: hci7: command tx timeout [ 829.369205][T12511] Bluetooth: hci7: command tx timeout [ 829.889892][T14667] hsr_slave_0: entered promiscuous mode [ 829.898554][T14667] hsr_slave_1: entered promiscuous mode [ 829.911218][T14667] debugfs: 'hsr0' already exists in 'hsr' [ 829.919006][T14667] Cannot create hsr debugfs directory [ 830.391051][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.403631][T14691] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.411055][T14691] bridge_slave_0: entered allmulticast mode [ 830.432143][T14691] bridge_slave_0: entered promiscuous mode [ 830.472831][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.496568][T14691] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.509116][T14691] bridge_slave_1: entered allmulticast mode [ 830.520145][T14691] bridge_slave_1: entered promiscuous mode [ 830.706933][T14691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.775202][T14691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.061676][T14691] team0: Port device team_slave_0 added [ 831.108218][T14691] team0: Port device team_slave_1 added [ 831.273317][T14691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.280326][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.335300][T14691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.392438][T14691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.406794][T14691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.450193][T14691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.698320][T14691] hsr_slave_0: entered promiscuous mode [ 831.717058][T14691] hsr_slave_1: entered promiscuous mode [ 831.727795][T14691] debugfs: 'hsr0' already exists in 'hsr' [ 831.737888][T14691] Cannot create hsr debugfs directory [ 832.060994][T14663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.451027][T14663] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.496817][T14667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.561156][T14667] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.615561][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.622820][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.694628][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.701845][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.744949][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.752152][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.869123][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.876357][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.400754][T14691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.515131][T14691] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.608998][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.616261][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.761787][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.769051][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.219183][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.330462][T14667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.076236][T14691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.445585][ T6436] bridge_slave_1: left allmulticast mode [ 836.451296][ T6436] bridge_slave_1: left promiscuous mode [ 836.512825][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.610394][ T6436] bridge_slave_0: left allmulticast mode [ 836.673466][ T6436] bridge_slave_0: left promiscuous mode [ 836.679325][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.114836][ T5856] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 837.126762][ T5856] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 837.140289][ T5856] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 837.150526][ T5856] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 837.166010][ T5856] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 837.688995][T12511] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 837.701188][T12511] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 837.710864][T12511] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 837.721543][T12511] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 837.731543][T12511] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 839.203696][ T5856] Bluetooth: hci8: command tx timeout [ 839.764431][ T5856] Bluetooth: hci9: command tx timeout [ 841.282819][ T5856] Bluetooth: hci8: command tx timeout [ 841.853356][ T5856] Bluetooth: hci9: command tx timeout [ 842.052296][T14696] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 843.261904][ T6436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.292208][ T6436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.310618][ T6436] bond0 (unregistering): Released all slaves [ 843.372960][ T5856] Bluetooth: hci8: command tx timeout [ 843.391786][T14663] veth0_vlan: entered promiscuous mode [ 843.604238][T14663] veth1_vlan: entered promiscuous mode [ 843.642148][T14667] veth0_vlan: entered promiscuous mode [ 843.739035][T14667] veth1_vlan: entered promiscuous mode [ 843.876195][T14691] veth0_vlan: entered promiscuous mode [ 843.929037][ T5856] Bluetooth: hci9: command tx timeout [ 843.968514][T14691] veth1_vlan: entered promiscuous mode [ 844.020288][T14667] veth0_macvtap: entered promiscuous mode [ 844.082219][T14667] veth1_macvtap: entered promiscuous mode [ 844.120606][T14663] veth0_macvtap: entered promiscuous mode [ 844.211815][T14663] veth1_macvtap: entered promiscuous mode [ 844.329706][T14691] veth0_macvtap: entered promiscuous mode [ 844.471463][T14667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.482441][T14663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.506905][T14691] veth1_macvtap: entered promiscuous mode [ 844.617699][T14667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.637019][T14663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.442914][ T5856] Bluetooth: hci8: command tx timeout [ 846.011851][ T5856] Bluetooth: hci9: command tx timeout [ 862.169025][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 865.339008][T14691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.461869][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.468337][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.390594][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 877.401026][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 877.410336][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 877.428010][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 877.445909][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 877.628604][T14796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 877.639155][T14796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 877.648078][T14796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 877.656701][T14796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 877.685311][T14796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 879.189534][T12511] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 879.199910][T12511] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 879.211959][T12511] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 879.228160][T12511] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 879.236225][T12511] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 896.696363][T14800] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 896.706302][T14800] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 896.715794][T14800] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 896.725735][T14800] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 896.735709][T14800] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 899.243737][T14812] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 899.266081][T14812] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 899.275205][T14812] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 899.289623][T14812] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 899.297770][T14812] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 931.051893][T12511] Bluetooth: hci3: command tx timeout [ 931.062361][T14812] Bluetooth: hci11: command tx timeout [ 931.558091][T14765] chnl_net:caif_netlink_parms(): no params data found [ 933.043215][T14812] Bluetooth: hci2: command tx timeout [ 933.123029][T14812] Bluetooth: hci11: command tx timeout [ 933.129270][T14812] Bluetooth: hci3: command tx timeout [ 933.135073][T12511] Bluetooth: hci0: command tx timeout [ 933.141637][T12511] Bluetooth: hci10: command tx timeout [ 935.126851][T14812] Bluetooth: hci2: command tx timeout [ 935.203110][T12511] Bluetooth: hci10: command tx timeout [ 935.208679][T12511] Bluetooth: hci0: command tx timeout [ 935.216112][T14829] Bluetooth: hci11: command tx timeout [ 935.226062][T14812] Bluetooth: hci3: command tx timeout [ 936.895891][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.902272][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.202700][T14812] Bluetooth: hci2: command tx timeout [ 937.292916][T14812] Bluetooth: hci3: command tx timeout [ 937.298406][T14812] Bluetooth: hci0: command tx timeout [ 937.304272][T12511] Bluetooth: hci10: command tx timeout [ 937.309826][T12511] Bluetooth: hci11: command tx timeout [ 938.251674][T14796] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 938.262133][T14796] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 938.271336][T14796] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 938.280122][T14796] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 938.290233][T14796] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 938.319094][T14796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.332779][T14796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.343179][T14796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.351478][T14796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.362681][T14796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 939.269389][T14829] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 939.282805][T14829] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 939.292421][T14829] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 939.299880][ T5856] Bluetooth: hci2: command tx timeout [ 939.306869][T14829] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 939.322845][T14829] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 939.362688][T14812] Bluetooth: hci0: command tx timeout [ 939.368196][T14812] Bluetooth: hci10: command tx timeout [ 941.689116][T14829] Bluetooth: hci13: command tx timeout [ 943.763123][ T5856] Bluetooth: hci12: command tx timeout [ 943.770794][T12511] Bluetooth: hci1: command tx timeout [ 943.777846][T14829] Bluetooth: hci13: command tx timeout [ 944.101062][T14829] Bluetooth: hci6: command 0x0406 tx timeout [ 944.113780][T12511] Bluetooth: hci4: command 0x0406 tx timeout [ 945.843237][T14796] Bluetooth: hci13: command tx timeout [ 945.848820][T14796] Bluetooth: hci1: command tx timeout [ 945.854465][T14812] Bluetooth: hci12: command tx timeout [ 947.923601][T14812] Bluetooth: hci12: command tx timeout [ 947.940285][T14829] Bluetooth: hci13: command tx timeout [ 947.946170][T14796] Bluetooth: hci1: command tx timeout [ 950.003124][T14812] Bluetooth: hci12: command tx timeout [ 950.008770][T14796] Bluetooth: hci1: command tx timeout [ 958.222915][T14812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 958.235966][T14812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 958.245682][T14812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 958.274338][T14829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 958.298868][T14829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 958.309014][T14796] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 958.341833][T14796] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 958.351187][T14796] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 958.359527][T14796] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 958.373893][T14796] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 960.402972][T14812] Bluetooth: hci7: command tx timeout [ 960.411514][T14796] Bluetooth: hci8: command tx timeout [ 962.491199][T14796] Bluetooth: hci8: command tx timeout [ 962.496969][T14812] Bluetooth: hci7: command tx timeout [ 964.563165][T14796] Bluetooth: hci8: command tx timeout [ 964.568666][T14812] Bluetooth: hci7: command tx timeout [ 966.642826][T14812] Bluetooth: hci7: command tx timeout [ 966.648316][T14812] Bluetooth: hci8: command tx timeout [ 998.343180][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.349640][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.905187][T14796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 998.915977][T14796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 998.926255][T14796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 998.934879][T14796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 998.943119][T14796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 999.099657][T14796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 999.111179][T14796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 999.120242][T14796] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 999.130409][T14796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 999.138724][T14796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 999.626056][T14796] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 999.646901][T14796] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 999.660032][T14796] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 999.671990][T14796] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 999.684302][T14796] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1001.043313][T14796] Bluetooth: hci5: command tx timeout [ 1001.202880][T14796] Bluetooth: hci6: command tx timeout [ 1001.763472][T14796] Bluetooth: hci9: command tx timeout [ 1003.122977][T14796] Bluetooth: hci5: command tx timeout [ 1003.282746][T14796] Bluetooth: hci6: command tx timeout [ 1003.844154][T14796] Bluetooth: hci9: command tx timeout [ 1005.202960][T14796] Bluetooth: hci5: command tx timeout [ 1005.363162][T14796] Bluetooth: hci6: command tx timeout [ 1005.932543][T14796] Bluetooth: hci9: command tx timeout [ 1007.283190][T14796] Bluetooth: hci5: command tx timeout [ 1007.442910][T14812] Bluetooth: hci6: command tx timeout [ 1008.002705][T14812] Bluetooth: hci9: command tx timeout [ 1018.553930][T14796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1018.566721][T14796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1018.579242][T14796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1018.589854][T14796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1018.604831][T14796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1018.638586][T14812] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1018.649043][T14812] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1018.659056][T14812] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1018.667554][T14812] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1018.676702][T14812] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1020.643278][T14796] Bluetooth: hci4: command tx timeout [ 1020.723057][T14796] Bluetooth: hci14: command tx timeout [ 1022.723003][T14796] Bluetooth: hci4: command tx timeout [ 1022.811653][T14796] Bluetooth: hci14: command tx timeout [ 1024.803263][T14796] Bluetooth: hci4: command tx timeout [ 1024.885107][T14796] Bluetooth: hci14: command tx timeout [ 1026.883277][T14796] Bluetooth: hci4: command tx timeout [ 1026.962895][T14796] Bluetooth: hci14: command tx timeout [ 1027.763189][ T31] INFO: task kworker/u8:13:6436 blocked for more than 143 seconds. [ 1027.771163][ T31] Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 [ 1027.788840][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1027.798804][ T31] task:kworker/u8:13 state:D stack:21720 pid:6436 tgid:6436 ppid:2 task_flags:0x4208060 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1027.819873][ T31] Workqueue: netns cleanup_net [ 1027.825934][ T31] Call Trace: [ 1027.829253][ T31] [ 1027.832386][ T31] __schedule+0x16fd/0x4cf0 [ 1027.843372][ T31] ? __lock_acquire+0xab9/0xd20 [ 1027.854132][ T31] ? schedule+0x165/0x360 [ 1027.858547][ T31] ? __pfx___schedule+0x10/0x10 [ 1027.893800][ T31] ? schedule+0x91/0x360 [ 1027.898134][ T31] schedule+0x165/0x360 [ 1027.916282][ T31] schedule_preempt_disabled+0x13/0x30 [ 1027.921823][ T31] __mutex_lock+0x724/0xe80 [ 1028.030814][ T31] ? __mutex_lock+0x51b/0xe80 [ 1028.092305][ T31] ? wiphy_unregister+0x244/0xae0 [ 1028.117293][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1028.139232][ T31] ? __up_read+0x280/0x680 [ 1028.152871][ T31] ? __pfx___up_read+0x10/0x10 [ 1028.157742][ T31] wiphy_unregister+0x244/0xae0 [ 1028.181354][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1028.202585][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 1028.208052][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 1028.224233][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1028.229530][ T31] ? kfree+0x18e/0x440 [ 1028.240593][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 1028.248091][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 1028.261198][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 1028.267680][ T31] hwsim_exit_net+0x584/0x640 [ 1028.281845][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 1028.288650][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 1028.301820][ T31] ops_undo_list+0x49a/0x990 [ 1028.306831][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1028.322184][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1028.331474][ T31] cleanup_net+0x4c5/0x800 [ 1028.347159][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1028.352186][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1028.365167][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1028.370976][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1028.381128][ T31] process_scheduled_works+0xae1/0x17b0 [ 1028.392746][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1028.398851][ T31] worker_thread+0x8a0/0xda0 [ 1028.420152][ T31] kthread+0x70e/0x8a0 [ 1028.430210][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1028.440827][ T31] ? __pfx_kthread+0x10/0x10 [ 1028.450770][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1028.460679][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1028.468667][ T31] ? __pfx_kthread+0x10/0x10 [ 1028.478406][ T31] ret_from_fork+0x3f9/0x770 [ 1028.486637][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1028.491917][ T31] ? __switch_to_asm+0x39/0x70 [ 1028.502628][ T31] ? __switch_to_asm+0x33/0x70 [ 1028.507571][ T31] ? __pfx_kthread+0x10/0x10 [ 1028.512218][ T31] ret_from_fork_asm+0x1a/0x30 [ 1028.527247][ T31] [ 1028.530602][ T31] INFO: task kworker/u8:15:6544 blocked for more than 144 seconds. [ 1028.541398][ T31] Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 [ 1028.574962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1028.622325][ T31] task:kworker/u8:15 state:D stack:22184 pid:6544 tgid:6544 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1028.641478][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 1028.648036][ T31] Call Trace: [ 1028.651361][ T31] [ 1028.663583][ T31] __schedule+0x16fd/0x4cf0 [ 1028.670990][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 1028.682833][ T31] ? __lock_acquire+0xab9/0xd20 [ 1028.687782][ T31] ? schedule+0x165/0x360 [ 1028.700563][ T31] ? __pfx___schedule+0x10/0x10 [ 1028.706224][ T31] ? schedule+0x91/0x360 [ 1028.710544][ T31] schedule+0x165/0x360 [ 1028.725130][ T31] schedule_preempt_disabled+0x13/0x30 [ 1028.730769][ T31] __mutex_lock+0x724/0xe80 [ 1028.742154][ T31] ? __mutex_lock+0x51b/0xe80 [ 1028.747239][ T31] ? addrconf_dad_work+0x112/0x14b0 [ 1028.759022][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1028.773725][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1028.778836][ T31] ? look_up_lock_class+0x74/0x170 [ 1028.791029][ T31] addrconf_dad_work+0x112/0x14b0 [ 1028.796502][ T31] ? __lock_acquire+0xab9/0xd20 [ 1028.801415][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1028.812555][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1028.818351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1028.835134][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1028.840930][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1028.854278][ T31] process_scheduled_works+0xae1/0x17b0 [ 1028.860811][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1028.876250][ T31] worker_thread+0x8a0/0xda0 [ 1028.880916][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1028.896183][ T31] ? __kthread_parkme+0x7b/0x200 [ 1028.901208][ T31] kthread+0x70e/0x8a0 [ 1028.909652][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1028.918522][ T31] ? __pfx_kthread+0x10/0x10 [ 1028.927687][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1028.939299][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1028.951588][ T31] ? __pfx_kthread+0x10/0x10 [ 1028.965924][ T31] ret_from_fork+0x3f9/0x770 [ 1028.970598][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1028.980843][ T31] ? __switch_to_asm+0x39/0x70 [ 1029.004181][ T31] ? __switch_to_asm+0x33/0x70 [ 1029.009032][ T31] ? __pfx_kthread+0x10/0x10 [ 1029.030813][ T31] ret_from_fork_asm+0x1a/0x30 [ 1029.036853][ T31] [ 1029.040254][ T31] INFO: task syz-executor:14793 blocked for more than 144 seconds. [ 1029.089096][ T31] Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 [ 1029.102035][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1029.115568][ T31] task:syz-executor state:D stack:26920 pid:14793 tgid:14793 ppid:1 task_flags:0x400140 flags:0x00004006 [ 1029.142743][ T31] Call Trace: [ 1029.147105][ T31] [ 1029.150448][ T31] __schedule+0x16fd/0x4cf0 [ 1029.162975][ T31] ? __lock_acquire+0xab9/0xd20 [ 1029.167989][ T31] ? schedule+0x165/0x360 [ 1029.183872][ T31] ? __pfx___schedule+0x10/0x10 [ 1029.189618][ T31] ? schedule+0x91/0x360 [ 1029.201532][ T31] schedule+0x165/0x360 [ 1029.208561][ T31] schedule_preempt_disabled+0x13/0x30 [ 1029.220784][ T31] __mutex_lock+0x724/0xe80 [ 1029.228719][ T31] ? __mutex_lock+0x51b/0xe80 [ 1029.242379][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1029.250286][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1029.262208][ T31] ? __nla_parse+0x40/0x60 [ 1029.267906][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 1029.280329][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1029.289987][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1029.302119][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1029.319119][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1029.325501][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1029.331039][ T31] netlink_rcv_skb+0x208/0x470 [ 1029.349356][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1029.358181][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1029.370491][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1029.378477][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1029.389762][ T31] netlink_unicast+0x75c/0x8e0 [ 1029.397671][ T31] netlink_sendmsg+0x805/0xb30 [ 1029.408519][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.417001][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1029.422385][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1029.432570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.452721][ T31] __sock_sendmsg+0x219/0x270 [ 1029.457478][ T31] __sys_sendto+0x3bd/0x520 [ 1029.462029][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1029.478992][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1029.485510][ T31] ? exc_page_fault+0x76/0xf0 [ 1029.490416][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1029.504782][ T31] __x64_sys_sendto+0xde/0x100 [ 1029.509645][ T31] do_syscall_64+0xfa/0x3b0 [ 1029.521407][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.528887][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.545108][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1029.549880][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.565846][ T31] RIP: 0033:0x7fb912b907bc [ 1029.570353][ T31] RSP: 002b:00007ffda82817e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1029.591758][ T31] RAX: ffffffffffffffda RBX: 00007fb9138e4620 RCX: 00007fb912b907bc [ 1029.602014][ T31] RDX: 0000000000000028 RSI: 00007fb9138e4670 RDI: 0000000000000003 [ 1029.621945][ T31] RBP: 0000000000000000 R08: 00007ffda8281834 R09: 000000000000000c [ 1029.630412][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1029.645047][ T31] R13: 0000000000000000 R14: 00007fb9138e4670 R15: 0000000000000000 [ 1029.659744][ T31] [ 1029.665593][ T31] INFO: task syz-executor:14795 blocked for more than 145 seconds. [ 1029.688940][ T31] Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 [ 1029.701968][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1029.712842][ T31] task:syz-executor state:D stack:26888 pid:14795 tgid:14795 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1029.732571][ T31] Call Trace: [ 1029.740147][ T31] [ 1029.762746][ T31] __schedule+0x16fd/0x4cf0 [ 1029.767353][ T31] ? __lock_acquire+0xab9/0xd20 [ 1029.772257][ T31] ? schedule+0x165/0x360 [ 1029.790111][ T31] ? __pfx___schedule+0x10/0x10 [ 1029.799937][ T31] ? schedule+0x91/0x360 [ 1029.808581][ T31] schedule+0x165/0x360 [ 1029.817070][ T31] schedule_preempt_disabled+0x13/0x30 [ 1029.826863][ T31] __mutex_lock+0x724/0xe80 [ 1029.831460][ T31] ? __mutex_lock+0x51b/0xe80 [ 1029.841101][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1029.857130][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1029.862268][ T31] ? __nla_parse+0x40/0x60 [ 1029.879484][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 1029.887811][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1029.900648][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1029.908681][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1029.920290][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1029.926979][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1029.939605][ T31] netlink_rcv_skb+0x208/0x470 [ 1029.946987][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1029.961310][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1029.967934][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1029.980737][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1029.990236][ T31] netlink_unicast+0x75c/0x8e0 [ 1030.002968][ T31] netlink_sendmsg+0x805/0xb30 [ 1030.007848][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.022344][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1030.028447][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1030.045558][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.051034][ T31] __sock_sendmsg+0x219/0x270 [ 1030.067338][ T31] __sys_sendto+0x3bd/0x520 [ 1030.075533][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1030.081455][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1030.098492][ T31] ? exc_page_fault+0x76/0xf0 [ 1030.111078][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1030.128076][ T31] __x64_sys_sendto+0xde/0x100 [ 1030.137043][ T31] do_syscall_64+0xfa/0x3b0 [ 1030.141776][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.151644][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.164240][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1030.169273][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.182339][ T31] RIP: 0033:0x7f9796b907bc [ 1030.187262][ T31] RSP: 002b:00007ffe1b6ad930 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1030.204323][ T31] RAX: ffffffffffffffda RBX: 00007f97978e4620 RCX: 00007f9796b907bc [ 1030.212376][ T31] RDX: 0000000000000028 RSI: 00007f97978e4670 RDI: 0000000000000003 [ 1030.231226][ T31] RBP: 0000000000000000 R08: 00007ffe1b6ad984 R09: 000000000000000c [ 1030.242382][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1030.259473][ T31] R13: 0000000000000000 R14: 00007f97978e4670 R15: 0000000000000000 [ 1030.285445][ T31] [ 1030.299552][ T31] INFO: task syz-executor:14799 blocked for more than 145 seconds. [ 1030.332108][ T31] Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 [ 1030.344053][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1030.361795][ T31] task:syz-executor state:D stack:26920 pid:14799 tgid:14799 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1030.381236][ T31] Call Trace: [ 1030.386020][ T31] [ 1030.389002][ T31] __schedule+0x16fd/0x4cf0 [ 1030.402867][ T31] ? __lock_acquire+0xab9/0xd20 [ 1030.407842][ T31] ? schedule+0x165/0x360 [ 1030.412401][ T31] ? __pfx___schedule+0x10/0x10 [ 1030.431998][ T31] ? schedule+0x91/0x360 [ 1030.444170][ T31] schedule+0x165/0x360 [ 1030.448445][ T31] schedule_preempt_disabled+0x13/0x30 [ 1030.464982][ T31] __mutex_lock+0x724/0xe80 [ 1030.469576][ T31] ? __mutex_lock+0x51b/0xe80 [ 1030.481173][ T31] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 1030.492148][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1030.502553][ T31] ? __nla_parse+0x40/0x60 [ 1030.519173][ T31] inet_rtm_newaddr+0x3b0/0x18b0 [ 1030.541764][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1030.550045][ T31] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 1030.571318][ T31] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1030.582238][ T31] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1030.602845][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1030.608422][ T31] netlink_rcv_skb+0x208/0x470 [ 1030.625561][ T31] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1030.631113][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1030.648779][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1030.660849][ T31] ? netlink_deliver_tap+0x2e/0x1b0 [ 1030.673987][ T31] netlink_unicast+0x75c/0x8e0 [ 1030.678856][ T31] netlink_sendmsg+0x805/0xb30 [ 1030.690551][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.696275][ T31] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1030.702051][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1030.715635][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.721035][ T31] __sock_sendmsg+0x219/0x270 [ 1030.730566][ T31] __sys_sendto+0x3bd/0x520 [ 1030.739466][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 1030.748156][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1030.761331][ T31] ? exc_page_fault+0x76/0xf0 [ 1030.774787][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1030.780172][ T31] __x64_sys_sendto+0xde/0x100 [ 1030.794405][ T31] do_syscall_64+0xfa/0x3b0 [ 1030.798998][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.811547][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.820896][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1030.829936][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.840449][ T31] RIP: 0033:0x7fdcd7f907bc [ 1030.849428][ T31] RSP: 002b:00007ffd6cb8a8c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1030.861438][ T31] RAX: ffffffffffffffda RBX: 00007fdcd8ce4620 RCX: 00007fdcd7f907bc [ 1030.882055][ T31] RDX: 0000000000000028 RSI: 00007fdcd8ce4670 RDI: 0000000000000003 [ 1030.891804][ T31] RBP: 0000000000000000 R08: 00007ffd6cb8a914 R09: 000000000000000c [ 1030.911148][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1030.920328][ T31] R13: 0000000000000000 R14: 00007fdcd8ce4670 R15: 0000000000000000 [ 1030.932500][ T31] [ 1030.938725][ T31] [ 1030.938725][ T31] Showing all locks held in the system: [ 1030.960809][ T31] 2 locks held by kworker/1:0/24: [ 1030.984504][ T31] 1 lock held by khungtaskd/31: [ 1031.013508][ T31] #0: ffffffff8e13e2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1031.040482][ T31] 3 locks held by kworker/1:1/43: [ 1031.057586][ T31] 3 locks held by kworker/u8:5/1011: [ 1031.070106][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1031.086277][ T31] #1: ffffc90003b27bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1031.104279][ T31] #2: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1031.123805][ T31] 2 locks held by getty/5611: [ 1031.128649][ T31] #0: ffff8880335450a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1031.148021][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1031.162036][ T31] 2 locks held by kworker/1:3/5922: [ 1031.172247][ T31] 4 locks held by kworker/u8:13/6436: [ 1031.188371][ T31] #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1031.200827][ T31] #1: ffffc9000436fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1031.226524][ T31] #2: ffffffff8f51d450 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1031.245549][ T31] #3: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x244/0xae0 [ 1031.259389][ T31] 3 locks held by kworker/u8:15/6544: [ 1031.268587][ T31] #0: ffff88814d0ab148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1031.287238][ T31] #1: ffffc90003ecfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1031.306044][ T31] #2: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 1031.320038][ T31] 2 locks held by kworker/1:6/7329: [ 1031.331644][ T31] 3 locks held by kworker/1:8/14480: [ 1031.348376][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1031.372136][ T31] #1: ffffc9000406fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1031.392570][ T31] #2: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1031.411131][ T31] 1 lock held by syz.1.2088/14587: [ 1031.416587][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1031.434776][ T31] 3 locks held by kworker/1:9/14606: [ 1031.440122][ T31] 2 locks held by kworker/1:10/14630: [ 1031.457477][ T31] 1 lock held by syz-executor/14663: [ 1031.466279][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1031.479719][ T31] 1 lock held by syz-executor/14667: [ 1031.491009][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1031.504531][ T31] 1 lock held by syz.6.2109/14675: [ 1031.509709][ T31] 1 lock held by syz.8.2111/14696: [ 1031.521009][ T31] 1 lock held by syz-executor/14691: [ 1031.538533][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1031.561396][ T31] 1 lock held by syz-executor/14765: [ 1031.570996][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1031.586910][ T31] 1 lock held by syz-executor/14768: [ 1031.598303][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1031.614281][ T31] 1 lock held by syz-executor/14793: [ 1031.620052][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.638266][ T31] 1 lock held by syz-executor/14795: [ 1031.644850][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.665968][ T31] 1 lock held by syz-executor/14799: [ 1031.671323][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.711011][ T31] 1 lock held by syz-executor/14805: [ 1031.721083][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.739213][ T31] 2 locks held by kworker/1:11/14809: [ 1031.749464][ T31] 1 lock held by syz-executor/14811: [ 1031.758888][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.777950][ T31] 1 lock held by syz-executor/14841: [ 1031.790968][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.806303][ T31] 1 lock held by syz-executor/14843: [ 1031.811641][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.826347][ T31] 1 lock held by syz-executor/14846: [ 1031.831688][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.845646][ T31] 1 lock held by syz-executor/14852: [ 1031.850976][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.866057][ T31] 1 lock held by syz-executor/14853: [ 1031.872023][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.891017][ T31] 1 lock held by syz-executor/14884: [ 1031.909518][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.920208][ T31] 1 lock held by syz-executor/14886: [ 1031.933534][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.950834][ T31] 1 lock held by syz-executor/14888: [ 1031.957448][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1031.974542][ T31] 1 lock held by syz-executor/14894: [ 1031.979889][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1032.000171][ T31] 1 lock held by syz-executor/14895: [ 1032.019612][ T31] #0: ffffffff8f52a248 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1032.037677][ T31] 1 lock held by dhcpcd/14908: [ 1032.044518][ T31] #0: ffff88801158ca08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1032.060689][ T31] 2 locks held by dhcpcd/14909: [ 1032.067733][ T31] #0: ffff888079fe3208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1032.083570][ T31] #1: ffffffff8e143e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1032.107853][ T31] 2 locks held by dhcpcd/14911: [ 1032.120151][ T31] #0: ffff888079526258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1032.134403][ T31] #1: ffffffff8e143e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1032.151300][ T31] 1 lock held by dhcpcd/14912: [ 1032.158860][ T31] #0: ffff88805b5da258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1032.193507][ T31] [ 1032.195922][ T31] ============================================= [ 1032.195922][ T31] [ 1032.232663][ T31] NMI backtrace for cpu 0 [ 1032.232686][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1032.232710][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1032.232723][ T31] Call Trace: [ 1032.232731][ T31] [ 1032.232740][ T31] dump_stack_lvl+0x189/0x250 [ 1032.232774][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1032.232803][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1032.232827][ T31] ? __pfx__printk+0x10/0x10 [ 1032.232870][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1032.232894][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1032.232911][ T31] ? _printk+0xcf/0x120 [ 1032.232944][ T31] ? __pfx__printk+0x10/0x10 [ 1032.232975][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1032.233009][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1032.233032][ T31] watchdog+0xfee/0x1030 [ 1032.233064][ T31] ? watchdog+0x1de/0x1030 [ 1032.233102][ T31] kthread+0x70e/0x8a0 [ 1032.233131][ T31] ? __pfx_watchdog+0x10/0x10 [ 1032.233158][ T31] ? __pfx_kthread+0x10/0x10 [ 1032.233184][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.233206][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1032.233228][ T31] ? __pfx_kthread+0x10/0x10 [ 1032.233253][ T31] ret_from_fork+0x3f9/0x770 [ 1032.233276][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.233304][ T31] ? __switch_to_asm+0x39/0x70 [ 1032.233328][ T31] ? __switch_to_asm+0x33/0x70 [ 1032.233351][ T31] ? __pfx_kthread+0x10/0x10 [ 1032.233377][ T31] ret_from_fork_asm+0x1a/0x30 [ 1032.233420][ T31] [ 1032.233428][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1032.394866][ C1] NMI backtrace for cpu 1 [ 1032.394885][ C1] CPU: 1 UID: 0 PID: 7329 Comm: kworker/1:6 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1032.394907][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1032.394919][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 1032.394946][ C1] RIP: 0010:memset_orig+0x75/0xb0 [ 1032.394973][ C1] Code: 89 47 30 48 89 47 38 48 8d 7f 40 75 d8 0f 1f 84 00 00 00 00 00 89 d1 83 e1 38 74 14 c1 e9 03 66 0f 1f 44 00 00 ff c9 48 89 07 <48> 8d 7f 08 75 f5 83 e2 07 74 0a ff ca 88 07 48 8d 7f 01 75 f6 4c [ 1032.394987][ C1] RSP: 0018:ffffc90000a07390 EFLAGS: 00000202 [ 1032.395002][ C1] RAX: 0000000000000000 RBX: ffffc90000a074a0 RCX: 0000000000000001 [ 1032.395013][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90000a074b8 [ 1032.395025][ C1] RBP: dffffc0000000000 R08: ffffc90000a074c7 R09: 0000000000000000 [ 1032.395037][ C1] R10: ffffc90000a074b8 R11: fffff52000140e99 R12: ffffc90000a07f20 [ 1032.395050][ C1] R13: ffffc90000a074b8 R14: ffffc90000a07468 R15: ffffc90000a074b0 [ 1032.395063][ C1] FS: 0000000000000000(0000) GS:ffff888125ce2000(0000) knlGS:0000000000000000 [ 1032.395077][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1032.395089][ C1] CR2: 00007fb051fb2000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1032.395105][ C1] Call Trace: [ 1032.395111][ C1] [ 1032.395117][ C1] unwind_next_frame+0xc98/0x2390 [ 1032.395142][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1032.395161][ C1] ? ip_route_output_flow+0x2a/0x150 [ 1032.395189][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1032.395211][ C1] arch_stack_walk+0x11c/0x150 [ 1032.395234][ C1] ? ip_route_me_harder+0x6d2/0x1030 [ 1032.395254][ C1] stack_trace_save+0x9c/0xe0 [ 1032.395274][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1032.395300][ C1] save_stack+0xf5/0x1f0 [ 1032.395323][ C1] ? __pfx_save_stack+0x10/0x10 [ 1032.395343][ C1] ? post_alloc_hook+0x240/0x2a0 [ 1032.395363][ C1] ? get_page_from_freelist+0x21e4/0x22c0 [ 1032.395389][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 1032.395414][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 1032.395435][ C1] ? allocate_slab+0x8a/0x370 [ 1032.395448][ C1] ? ___slab_alloc+0xbeb/0x1410 [ 1032.395471][ C1] ? kmem_cache_alloc_noprof+0x283/0x3c0 [ 1032.395490][ C1] ? dst_alloc+0x105/0x170 [ 1032.395504][ C1] ? ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 1032.395531][ C1] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 1032.395566][ C1] ? ip_route_output_flow+0x2a/0x150 [ 1032.395592][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 1032.395617][ C1] __set_page_owner+0x8d/0x4a0 [ 1032.395639][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 1032.395666][ C1] post_alloc_hook+0x240/0x2a0 [ 1032.395690][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 1032.395732][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1032.395759][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1032.395781][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 1032.395810][ C1] ? prepare_alloc_pages+0x213/0x610 [ 1032.395838][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 1032.395866][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1032.395894][ C1] ? __lock_acquire+0xab9/0xd20 [ 1032.395921][ C1] ? policy_nodemask+0x28b/0x720 [ 1032.395941][ C1] ? ___slab_alloc+0x236/0x1410 [ 1032.395966][ C1] alloc_pages_mpol+0x232/0x4a0 [ 1032.395991][ C1] allocate_slab+0x8a/0x370 [ 1032.396008][ C1] ___slab_alloc+0xbeb/0x1410 [ 1032.396033][ C1] ? dst_alloc+0x105/0x170 [ 1032.396052][ C1] kmem_cache_alloc_noprof+0x283/0x3c0 [ 1032.396072][ C1] ? dst_alloc+0x105/0x170 [ 1032.396089][ C1] dst_alloc+0x105/0x170 [ 1032.396105][ C1] ip_route_output_key_hash_rcu+0x14e1/0x23d0 [ 1032.396138][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 1032.396166][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 1032.396191][ C1] ? __lock_acquire+0xab9/0xd20 [ 1032.396216][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1032.396247][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 1032.396268][ C1] ip_route_output_flow+0x2a/0x150 [ 1032.396291][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 1032.396309][ C1] ip_route_me_harder+0x6d2/0x1030 [ 1032.396333][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1032.396367][ C1] synproxy_send_tcp+0x359/0x6c0 [ 1032.396394][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 1032.396425][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1032.396447][ C1] ? nft_xfrm_get_eval+0x3e8/0x500 [ 1032.396472][ C1] ? synproxy_pernet+0x45/0x270 [ 1032.396500][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 1032.396529][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1032.396561][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1032.396589][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1032.396619][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1032.396647][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1032.396674][ C1] nft_do_chain+0x40c/0x1920 [ 1032.396697][ C1] ? __lock_acquire+0xab9/0xd20 [ 1032.396730][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1032.396773][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1032.396801][ C1] nft_do_chain_inet+0x25d/0x340 [ 1032.396827][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1032.396852][ C1] ? ipt_do_table+0x2a3/0x1640 [ 1032.396874][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1032.396896][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1032.396921][ C1] nf_hook_slow+0xc2/0x220 [ 1032.396945][ C1] NF_HOOK+0x206/0x3a0 [ 1032.396966][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1032.396987][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1032.397006][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1032.397024][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1032.397047][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1032.397068][ C1] ? skb_dst+0x4f/0xd0 [ 1032.397088][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1032.397110][ C1] NF_HOOK+0x30c/0x3a0 [ 1032.397131][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1032.397150][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1032.397169][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1032.397187][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 1032.397208][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1032.397234][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1032.397254][ C1] __netif_receive_skb+0x143/0x380 [ 1032.397276][ C1] ? process_backlog+0x2d5/0x14f0 [ 1032.397299][ C1] process_backlog+0x60e/0x14f0 [ 1032.397319][ C1] ? __lock_acquire+0xab9/0xd20 [ 1032.397353][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1032.397380][ C1] __napi_poll+0xc4/0x480 [ 1032.397397][ C1] ? net_rx_action+0x46d/0xe30 [ 1032.397420][ C1] net_rx_action+0x707/0xe30 [ 1032.397440][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.397469][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1032.397511][ C1] handle_softirqs+0x286/0x870 [ 1032.397530][ C1] ? do_softirq+0xec/0x180 [ 1032.397549][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1032.397574][ C1] ? neigh_periodic_work+0xc28/0xe50 [ 1032.397596][ C1] do_softirq+0xec/0x180 [ 1032.397611][ C1] [ 1032.397617][ C1] [ 1032.397624][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1032.397638][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1032.397657][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1032.397680][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1032.397707][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1032.397723][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1032.397740][ C1] ? neigh_periodic_work+0xc28/0xe50 [ 1032.397762][ C1] ? neigh_periodic_work+0xc28/0xe50 [ 1032.397785][ C1] neigh_periodic_work+0xc28/0xe50 [ 1032.397810][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1032.397840][ C1] process_scheduled_works+0xae1/0x17b0 [ 1032.397884][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1032.397922][ C1] worker_thread+0x8a0/0xda0 [ 1032.397954][ C1] kthread+0x70e/0x8a0 [ 1032.397977][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1032.397993][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.398015][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1032.398033][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1032.398052][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.398074][ C1] ret_from_fork+0x3f9/0x770 [ 1032.398092][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1032.398113][ C1] ? __switch_to_asm+0x39/0x70 [ 1032.398135][ C1] ? __switch_to_asm+0x33/0x70 [ 1032.398157][ C1] ? __pfx_kthread+0x10/0x10 [ 1032.398178][ C1] ret_from_fork_asm+0x1a/0x30 [ 1032.398210][ C1] [ 1033.298725][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1033.305667][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1033.316992][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1033.327350][ T31] Call Trace: [ 1033.330662][ T31] [ 1033.333628][ T31] dump_stack_lvl+0x99/0x250 [ 1033.338263][ T31] ? __asan_memcpy+0x40/0x70 [ 1033.342902][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1033.348145][ T31] ? __pfx__printk+0x10/0x10 [ 1033.352786][ T31] vpanic+0x281/0x750 [ 1033.356808][ T31] ? __pfx_vpanic+0x10/0x10 [ 1033.361343][ T31] ? preempt_schedule+0xae/0xc0 [ 1033.366251][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1033.371768][ T31] panic+0xb9/0xc0 [ 1033.375660][ T31] ? __pfx_panic+0x10/0x10 [ 1033.380222][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1033.385653][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1033.391847][ T31] watchdog+0x102d/0x1030 [ 1033.396403][ T31] ? watchdog+0x1de/0x1030 [ 1033.401033][ T31] kthread+0x70e/0x8a0 [ 1033.405317][ T31] ? __pfx_watchdog+0x10/0x10 [ 1033.410114][ T31] ? __pfx_kthread+0x10/0x10 [ 1033.414764][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1033.420001][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1033.425241][ T31] ? __pfx_kthread+0x10/0x10 [ 1033.429880][ T31] ret_from_fork+0x3f9/0x770 [ 1033.434503][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1033.439752][ T31] ? __switch_to_asm+0x39/0x70 [ 1033.444549][ T31] ? __switch_to_asm+0x33/0x70 [ 1033.449349][ T31] ? __pfx_kthread+0x10/0x10 [ 1033.453972][ T31] ret_from_fork_asm+0x1a/0x30 [ 1033.458784][ T31] [ 1033.462098][ T31] Kernel Offset: disabled [ 1033.466430][ T31] Rebooting in 86400 seconds..