last executing test programs: 1m54.530198176s ago: executing program 1 (id=203): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xd0}, 0x80) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m53.330222673s ago: executing program 1 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0x7f}, {0x6}]}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r6 = dup(r5) write$binfmt_elf32(r6, &(0x7f00000000c0)=ANY=[], 0x258) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000005900)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x20004c00) 1m52.043694461s ago: executing program 1 (id=207): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$audio(0xffffff9c, 0x0, 0x48100, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$dsp(r2, &(0x7f0000000680)=""/4096, 0x1000) sendmsg$kcm(r1, 0x0, 0xc010) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x1, 0x1, 0x246, 0x7, 0x5, 0xfffffffffffffff8, 0x1, 0x9, 0xf6b}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x129080, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r3, r4, r5) syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x0, 0x800) 1m49.986850837s ago: executing program 1 (id=211): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@dioread_nolock}]}, 0x3, 0x4d4, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4a042, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1m45.695215383s ago: executing program 1 (id=218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x14, r1, 0x682acf9d6d501cc9, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x7f25]}, 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x3, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000600)={0x1, 0x0, 0x0, 0xfdfdffff}) io_setup(0x878, &(0x7f0000000180)=0x0) io_submit(r5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xfffffffa, 0x486, 0x2, 0xa, 0x0, 0x8828, 0x9, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x7be, 0x8, 0x2, 0x3, 0xcbe3}}, &(0x7f0000000180)=0xb0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = syz_open_dev$mtd(&(0x7f0000000000), 0x48a99fbe, 0x500) pread64(r9, 0x0, 0xffffffffffffff8a, 0x6) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xc374}]}) 1m37.284211231s ago: executing program 1 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) migrate_pages(0x0, 0x7ffb, 0x0, 0x0) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f0000000040)) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) 1m35.50891354s ago: executing program 32 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) migrate_pages(0x0, 0x7ffb, 0x0, 0x0) r3 = getpid() r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, 0x0, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, 0x0, &(0x7f0000000040)) r5 = syz_pidfd_open(r3, 0x0) setns(r5, 0x24020000) 11.20891791s ago: executing program 0 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x8040, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40081271, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = gettid() socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(r2, 0x29, 0x18, 0x0, 0x0) tkill(r5, 0xb) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) r7 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000009b80)={0x40000012}) read$FUSE(r6, &(0x7f0000000500)={0x2020}, 0x2020) epoll_pwait(r7, &(0x7f0000000040)=[{}], 0x1, 0x2, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.156915873s ago: executing program 3 (id=368): syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000100)='./cgroup.cpu/cpuset.cpus\x00', 0x1000000, &(0x7f0000000940)=ANY=[@ANYBLOB="2c3d7af76c035fdbc98cfbb5ad5ca28358174428760e98ded5f797053a876dae6d1bb8ce11e396fb96094712f0db9133e11d5fb71bd3abc878440535b862a8c044b16430acdbc7626235d31140de31199823405d29744958024abb74722f4cb0b94eb91badb001e5ed8ddd8ace69317ecd822a0f0f0ddf60583f1b734d56100942038e0f3187", @ANYRESOCT, @ANYRES16, @ANYBLOB="e4167817d643746fc8459e4f839688227e32fca80a8f299f5803344bf79956d4570399cc2275679f1726249b7d83760b85c47f71bce5de4b5a78eec318d0bb048fe0d33a9a50353b9dc0a73c76beceb9dbd6ffea803820d4dfe2584188d2133ffcaa08437f93817a0d8627c7e30c12d411cbef55d7f605e1b55650aa779fadc7ec1c06c2381ff9285eb56d7a23c8f5da918c9ee61f706a06df6ba17624"], 0x81, 0x24d, &(0x7f0000000580)="$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") 9.733645043s ago: executing program 3 (id=370): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x2c, r5, 0x1, 0x2070bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000) sigaltstack(0x0, &(0x7f0000000080)={0x0}) gettid() ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) sendmsg$nl_netfilter(r6, 0x0, 0x80) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 8.762223714s ago: executing program 3 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000805}, 0x24048040) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)}], 0x1, 0x0, 0x30}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0x14, &(0x7f0000000000)=@framed={{}, [@printk={@llu}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) r9 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r9, 0x5, 0x0) socket$inet6(0xa, 0x6, 0xfffffff5) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001a00)=ANY=[], 0x1, 0x1fd, &(0x7f0000000080)="$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") sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x228, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x200, 0x71}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x880) 7.464993713s ago: executing program 3 (id=374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_getparam(r0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket(0x1, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000019980)=""/102393, &(0x7f0000000400)=0x18ff9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000040), &(0x7f0000000180)=r5}, 0x20) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x69, 0xfc, 0x41, 0x10, 0xa2c, 0x8, 0x1d64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x7, 0x80, 0x0, "", [{{0x9, 0x4, 0x2c, 0xa, 0x1, 0x8b, 0x17, 0x65, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x9, 0x80}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x304}, "e5f0e10f2878a516", "522f019aca7a38070509000000fab1be", "c116b680", "35b677fcdb699f91"}, 0x28) 5.515787786s ago: executing program 0 (id=377): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x300}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20004000) mount$bind(0x0, 0x0, 0x0, 0x41801, 0x0) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x51) io_cancel(0x0, 0x0, &(0x7f0000000240)) ioctl$UI_DEV_CREATE(r1, 0x5501) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x1d75ace51f32de09, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)) flock(0xffffffffffffffff, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r5, 0x1) flock(r5, 0x1) 5.515194777s ago: executing program 4 (id=378): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 5.401484299s ago: executing program 4 (id=379): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1e8, &(0x7f00000002c0)="$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") 4.562187078s ago: executing program 4 (id=380): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x5, 0x0, &(0x7f00000016c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000003c0)={0x0, 0x700}, 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@uuid_on}, {@redirect_dir_on}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = open(0x0, 0x84242, 0x1df2a23c5997fad6) sendfile(r7, r7, &(0x7f0000000080), 0x7f03) fallocate(r2, 0x0, 0x1, 0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4.47308491s ago: executing program 0 (id=382): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001080)='ns/uts\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x320, 0x2e8, 0x2e8, 0x320, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@socket3={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001114010026bd7000fddbdf25080003000400000008004a0002000000080021"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000000240)=ANY=[], 0x1, 0xd99, &(0x7f0000006900)="$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") truncate(0x0, 0x8000000232b) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f00000010c0)) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="62d47de934d75af55c9b2e00490b04"], 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000001e00000000008510000002000000850000001a00722f940095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r7 = socket$inet_dccp(0x2, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) tee(r9, r8, 0x8, 0x0) listen(r6, 0x5) syz_read_part_table(0x1061, &(0x7f0000000000)="$eJzsz71Nw1AUBeAj+/kHARIbsAYNPT1iEgYwjRkmbfbIBtkj3YtsR8oGSYrv0yve0dU90g331eTpM20yvW55TJMlJylJDnU61fqW1Frr/2+OXZ7XwZKTvGd++frYVv/WN5Tx2v5d2m641C326eeyffskP7sbXgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+scAAD//+NRFRA=") connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000001c0)="b55cbc74f7bc42", 0x7}], 0x1}}], 0x1, 0x10) write$9p(r0, &(0x7f0000000180), 0x0) 4.378180092s ago: executing program 2 (id=383): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x105, 0x4800003a, r1, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) ftruncate(r5, 0x3) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) 3.235912868s ago: executing program 2 (id=384): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000003c0)=@abs={0x1}, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0xd007) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) epoll_create(0x7) write(0xffffffffffffffff, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) clock_gettime(0x6, 0x0) 3.224901758s ago: executing program 3 (id=385): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = dup(0xffffffffffffffff) write$binfmt_elf32(r3, &(0x7f0000000bc0)=ANY=[], 0x58) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f00000020c0)=""/4052, &(0x7f0000000000)=0xfd4) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) openat$null(0xffffffffffffff9c, &(0x7f0000002840), 0x101101, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000050000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000b7080000000000007b8af8ff00000000b7080000d50000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='romfs\x00', 0x200000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r8, 0x8010661b, &(0x7f0000000000)) 3.071361501s ago: executing program 4 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) mmap(&(0x7f000077e000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r6) ioctl$sock_qrtr_TIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r9 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r9, 0x8954, &(0x7f0000002140)={{0x2, 0x4e24, @multicast2}, {0x6, @broadcast}, 0x2, {0x2, 0x4e20, @multicast1}, 'pimreg\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r8, &(0x7f0000001040)={0x27, r10, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) connect(r7, &(0x7f00000001c0)=@nfc={0x27, r10, 0x1}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) 1.670927003s ago: executing program 4 (id=387): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 1.670127423s ago: executing program 3 (id=388): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1f, &(0x7f00000001c0)={[{@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") 1.580453294s ago: executing program 4 (id=389): syz_usb_connect(0x5, 0x36, &(0x7f0000001f40)={{0x12, 0x1, 0x200, 0xb3, 0x50, 0x43, 0x10, 0xccd, 0x10b6, 0x9292, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0xf4, 0x40, 0x4, "", [{{0x9, 0x4, 0x13, 0x8, 0x2, 0x6f, 0x7, 0x35, 0x5, [], [{{0x9, 0x5, 0x3, 0xc, 0x8, 0x54, 0x8, 0x7f}}, {{0x9, 0x5, 0x8f, 0x2, 0x3ff, 0x7, 0x1, 0xa}}]}}]}}]}}, 0x0) 1.531185526s ago: executing program 2 (id=390): mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='ufs\x00', 0x210818, 0x0) 1.434264048s ago: executing program 2 (id=391): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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") 1.34258008s ago: executing program 2 (id=392): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x6, 0x9, 0x10000, 0x2, 0x6, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0xfffffffc) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0xef2b, 0x200, 0x3, 0x2e8}, 0x0, 0x4, &(0x7f0000001540)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8a}, 0x0, 0x0, '\x00', {0x3, 0x832, 0x0, &(0x7f0000000540)=@buf_1k="3e4a7b28418499de3ec20c8191c8a6c05c01213ad12285b6373a3966517f243152c9f462863486b7075675643fda24851f042cd8d78d5e05c7788e6b5d9cdfeafba55f5a8043e4890c10804f8daef725e63173482d017039f5d680f1d0f90c30e3ef3ce1732d27b82f8f8777f40c83bcbe70a1d7888d6cf9c937a0cae0e02e37d91beac25be18618b4129f79af8e06c53c7817ec057221a20d5b062c8d3c05fa69ad71f2aedfc934b1d58bcb3fa2b1d35b96e0e6418c0d24d95058bb69a78a2bdcc8a69e19ea6a7f3f8d3234459f6a7b6707291a9b3bfcc3666a0a57386419d33c8a1ff1e25ab7307b096427a89569215a7824793e2302cec83c1a454f10108c9be574c3e6e9861f096df81da3e7f1d5aa0917b360742dc7346f1a0ccd10600056a7030979b0be170a0dc7d542291538122878ba7d731dd471d41d2374b8cc2d4bf4ff70568e09fcdf582f6279938658db47967645c8d3d7b83fa050e7f4ef8424a63e829785d8c58f4ad498be830d21f81d24aca913bd7b53fbc13aca610bee0b25b26f606d860c8b30e4770d11a31e0063d7b5dafb574637e47fd44d799c98e9b53e9a2b73a578af0886d12f2c693f0df0b296513251538495180cf94734c9fea3dc9eb4e8d89d9a1c0c70f5229589d3f873802d60b182bae98e46bc72f363ecd71bd7a8d8b26fb6e8235a84611f0521ad73dd1dc386d548382592deed3b2f8790a4444e3dfab4728cfe9decb0c4c687f0d7785af505fd8d003ee3da017255a10dee38816b35e0b769258241c341ae93ef6bf4ec2aafdb132627c521db2a1e929e1b66b4ea9f5ac00454483a86ce300e30ef3f4f9d8c1ee705e597daa74fc5a2576fd8fadea7129ac5c131198db54b8645e10fa41c3b1000c9b02517e2b45feaec7fabe030cac5d1c95f0114efe62bf238fe8afdbe734e85199c4114ecfb9ec45fbd57f9be846457b7330d83459e82ca5dfe6c9b9bad9b4f2ff957ca3b5d4c2f49d225c379eb81e30c0d0c197d03f33aa07b652c20e2a2d53ae6ec51245a6fa4bdbace62b379659559633dd4c33730db03c42049ca7bbfcabc15b197895c88b2939f21bde6f837abd404643490c197c66876e6d05b62d404cb47674577dca18e2d8ef063c575448abf358483457cda5ccb2789747e2e9b4ac1c05de75b967e38b3e14d4fa35b2ae5784dd05b8afd8496b6175989b7b86797db4aa3594b12691683f3d529d5bc968cdf23897ecc7cf9cfb90ad04d28a6dc81b5d18e41798e0bf2894f5abf6333451dc89ff34f2c1ac68862a6fc1ffd053c99eeecd4bae11c321ff1a9541906bb52a7b47c15d59b44d7e65bd60220cd963da3f7081b0172cac32908df95f174613de524c8b7dad85d556954f67b3881f43e7ca546d76d246b0f19ed0fdbd2b22d6dd3b9b2f3fef5435ad27b7395c9b9f9b04a142eb0b7705c21"}}, &(0x7f00000015c0)) io_uring_enter(0xffffffffffffffff, 0x40c1, 0xf2d5, 0x82, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, 0x0}, 0x108) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 246.100644ms ago: executing program 0 (id=393): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x200d}}}, 0x7) 232.081704ms ago: executing program 2 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_getparam(r0, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket(0x1, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000019980)=""/102393, &(0x7f0000000400)=0x18ff9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000040), &(0x7f0000000180)=r5}, 0x20) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x69, 0xfc, 0x41, 0x10, 0xa2c, 0x8, 0x1d64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x10, 0x7, 0x80, 0x0, "", [{{0x9, 0x4, 0x2c, 0xa, 0x1, 0x8b, 0x17, 0x65, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x9, 0x80}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x304}, "e5f0e10f2878a516", "522f019aca7a38070509000000fab1be", "c116b680", "35b677fcdb699f91"}, 0x28) 146.458997ms ago: executing program 0 (id=395): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x4000, &(0x7f0000000180)={[{@umask}, {@umask}, {@undelete}, {@dmode={'dmode', 0x3d, 0x5}}, {@shortad}, {@uid_forget}, {@undelete}, {@unhide}, {@gid_ignore}, {@nostrict}, {@shortad}, {}, {@gid_forget}, {@mode={'mode', 0x3d, 0xd1f}}, {@adinicb}, {@nostrict}]}, 0x2, 0xc34, &(0x7f0000001bc0)="$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") 0s ago: executing program 0 (id=396): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/39, 0x27}], 0x1, 0x9, 0xbf1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 73.268661][ T5760] cgroup: Unknown subsys name 'net' [ 73.407453][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.786542][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.121267][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.129684][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.137590][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.151897][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.161457][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.179662][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.187124][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.195612][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.203344][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.262975][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.272604][ T5773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.286409][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.295015][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.300024][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.302758][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.310200][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.323754][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.332220][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.340349][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.348413][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.356229][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.365704][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.373637][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.381521][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.525534][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 76.651432][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.660004][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.667419][ T5771] bridge_slave_0: entered allmulticast mode [ 76.674460][ T5771] bridge_slave_0: entered promiscuous mode [ 76.687142][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.694751][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.702023][ T5771] bridge_slave_1: entered allmulticast mode [ 76.708780][ T5771] bridge_slave_1: entered promiscuous mode [ 76.763965][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.775895][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.811027][ T5771] team0: Port device team_slave_0 added [ 76.820274][ T5771] team0: Port device team_slave_1 added [ 76.867713][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.874915][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.901597][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.928323][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.935460][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.962703][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.034939][ T5771] hsr_slave_0: entered promiscuous mode [ 77.041298][ T5771] hsr_slave_1: entered promiscuous mode [ 77.125073][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 77.179112][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 77.252415][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.369045][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.378818][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.386078][ T5779] bridge_slave_0: entered allmulticast mode [ 77.395139][ T5779] bridge_slave_0: entered promiscuous mode [ 77.402933][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.410261][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.417646][ T5779] bridge_slave_1: entered allmulticast mode [ 77.424833][ T5779] bridge_slave_1: entered promiscuous mode [ 77.464618][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.471954][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.479161][ T5781] bridge_slave_0: entered allmulticast mode [ 77.487335][ T5781] bridge_slave_0: entered promiscuous mode [ 77.495680][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.502937][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.510385][ T5781] bridge_slave_1: entered allmulticast mode [ 77.517114][ T5781] bridge_slave_1: entered promiscuous mode [ 77.574116][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.581631][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.588866][ T5775] bridge_slave_0: entered allmulticast mode [ 77.595940][ T5775] bridge_slave_0: entered promiscuous mode [ 77.604983][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.632993][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.645253][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.652825][ T5775] bridge_slave_1: entered allmulticast mode [ 77.659793][ T5775] bridge_slave_1: entered promiscuous mode [ 77.668446][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.690988][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.703241][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.765490][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.776611][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.790927][ T5779] team0: Port device team_slave_0 added [ 77.806239][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.815720][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.828920][ T5779] team0: Port device team_slave_1 added [ 77.837666][ T5781] team0: Port device team_slave_0 added [ 77.847959][ T5781] team0: Port device team_slave_1 added [ 77.865206][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.911815][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.921490][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.928471][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.954670][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.977859][ T5775] team0: Port device team_slave_0 added [ 77.987398][ T5775] team0: Port device team_slave_1 added [ 77.997645][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.004743][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.030845][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.048737][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.055797][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.081920][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.094656][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.101694][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.127862][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.176817][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.184013][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.212599][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.224946][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.232170][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.258370][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.280264][ T5776] Bluetooth: hci0: command tx timeout [ 78.308855][ T5781] hsr_slave_0: entered promiscuous mode [ 78.315521][ T5781] hsr_slave_1: entered promiscuous mode [ 78.322374][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.330870][ T5781] Cannot create hsr debugfs directory [ 78.347409][ T5779] hsr_slave_0: entered promiscuous mode [ 78.353698][ T5779] hsr_slave_1: entered promiscuous mode [ 78.360018][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.367594][ T5779] Cannot create hsr debugfs directory [ 78.411138][ T5775] hsr_slave_0: entered promiscuous mode [ 78.417563][ T5775] hsr_slave_1: entered promiscuous mode [ 78.424134][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.431983][ T5775] Cannot create hsr debugfs directory [ 78.439710][ T5776] Bluetooth: hci2: command tx timeout [ 78.445401][ T5776] Bluetooth: hci1: command tx timeout [ 78.451459][ T51] Bluetooth: hci3: command tx timeout [ 78.788139][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.802825][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.814280][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.827952][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.870928][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.926520][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.957613][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.965964][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.976244][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.016240][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.027768][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.035127][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.065476][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.072660][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.114289][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.126653][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.138148][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.169225][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.183619][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.263062][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.297311][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.304504][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.334770][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.341980][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.432268][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.472503][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.512981][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.520179][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.549056][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.556412][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.621883][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.669035][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.715123][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.722351][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.757764][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.782588][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.806272][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.813481][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.885303][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.976094][ T5771] veth0_vlan: entered promiscuous mode [ 80.043759][ T5771] veth1_vlan: entered promiscuous mode [ 80.081000][ T5781] veth0_vlan: entered promiscuous mode [ 80.123446][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.132558][ T5781] veth1_vlan: entered promiscuous mode [ 80.168688][ T5771] veth0_macvtap: entered promiscuous mode [ 80.210028][ T5771] veth1_macvtap: entered promiscuous mode [ 80.254625][ T5781] veth0_macvtap: entered promiscuous mode [ 80.266971][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.290850][ T5781] veth1_macvtap: entered promiscuous mode [ 80.315908][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.328564][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.338522][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.351735][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.361361][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.361566][ T5776] Bluetooth: hci0: command tx timeout [ 80.378270][ T5775] veth0_vlan: entered promiscuous mode [ 80.422142][ T5775] veth1_vlan: entered promiscuous mode [ 80.433283][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.446008][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.457670][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.493284][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.503939][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.516043][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.523650][ T5776] Bluetooth: hci1: command tx timeout [ 80.523697][ T5776] Bluetooth: hci3: command tx timeout [ 80.523723][ T5776] Bluetooth: hci2: command tx timeout [ 80.560435][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.574656][ T5775] veth0_macvtap: entered promiscuous mode [ 80.596956][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.606966][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.615848][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.624846][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.638555][ T5775] veth1_macvtap: entered promiscuous mode [ 80.680432][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.693503][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.727564][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.738752][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.749166][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.760801][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.772636][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.787425][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.791677][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.805899][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.807505][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.826159][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.837215][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.850812][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.891973][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.914460][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.924323][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.933121][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.958093][ T5779] veth0_vlan: entered promiscuous mode [ 80.991165][ T5779] veth1_vlan: entered promiscuous mode [ 82.559441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 82.600002][ T5084] Bluetooth: hci0: command tx timeout [ 82.605498][ T5084] Bluetooth: hci2: command tx timeout [ 82.607038][ T5776] Bluetooth: hci3: command tx timeout [ 82.610969][ T5084] Bluetooth: hci1: command tx timeout [ 82.652387][ T5779] veth0_macvtap: entered promiscuous mode [ 82.703706][ T5779] veth1_macvtap: entered promiscuous mode [ 82.753898][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.800117][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.848812][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.858658][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.876480][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.884206][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.899267][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.914350][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.925169][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.938576][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.953361][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.979638][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.987545][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.996492][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.012736][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.023209][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.035145][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.045252][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.055981][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.069254][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.105461][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.122392][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.134474][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.144774][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.213403][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.242732][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.390745][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.392240][ T5842] syzkaller0: entered promiscuous mode [ 83.398602][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.451140][ T5842] syzkaller0: entered allmulticast mode [ 83.536275][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.647933][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.897787][ T5842] 0: reclassify loop, rule prio 0, protocol 800 [ 84.680478][ T5084] Bluetooth: hci1: command tx timeout [ 84.690208][ T5084] Bluetooth: hci3: command tx timeout [ 84.695652][ T5084] Bluetooth: hci2: command tx timeout [ 84.701887][ T51] Bluetooth: hci0: command tx timeout [ 86.506053][ T5863] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9'. [ 87.680240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.920629][ T9] cfg80211: failed to load regulatory.db [ 87.931000][ T5863] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 89.134137][ T5877] syz.0.14[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.168233][ T5875] warning: `syz.3.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.462658][ T5881] loop0: detected capacity change from 0 to 256 [ 90.522196][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.530824][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.544939][ T5764] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 90.596705][ T5084] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 91.508537][ T5898] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.253448][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.237212][ T5906] loop0: detected capacity change from 0 to 40427 [ 94.304344][ T5906] F2FS-fs (loop0): Image doesn't support compression [ 94.350499][ T5906] F2FS-fs (loop0): Unrecognized mount option "whint_mode=fs-bî°‚" or missing value [ 95.041047][ T5939] xt_hashlimit: size too large, truncated to 1048576 [ 95.153605][ T5943] loop3: detected capacity change from 0 to 2048 [ 95.263105][ T5943] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.546774][ T5956] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 96.155043][ T5960] syzkaller0: entered promiscuous mode [ 96.173655][ T5960] syzkaller0: entered allmulticast mode [ 96.291410][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.641095][ T5970] syzkaller0: entered promiscuous mode [ 96.646726][ T5970] syzkaller0: entered allmulticast mode [ 97.927764][ T5985] random: crng reseeded on system resumption [ 100.064134][ T6004] Illegal XDP return value 4294967283 on prog (id 5) dev N/A, expect packet loss! [ 100.813601][ T6010] syzkaller0: entered promiscuous mode [ 100.819132][ T6010] syzkaller0: entered allmulticast mode [ 103.039344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.497703][ T6033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 103.633038][ T6036] netlink: 'syz.3.60': attribute type 13 has an invalid length. [ 103.974647][ T6040] netlink: 84 bytes leftover after parsing attributes in process `syz.3.60'. [ 105.331315][ T6065] loop1: detected capacity change from 0 to 512 [ 105.392838][ T6065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.479746][ T6065] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.67: iget: bad i_size value: 38620345925642 [ 105.524724][ T6065] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.67: couldn't read orphan inode 15 (err -117) [ 105.584645][ T6065] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.768907][ T28] audit: type=1800 audit(1784784442.995:2): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.67" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 105.836641][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.843965][ T6096] fuse: Bad value for 'fd' [ 107.928497][ T6106] loop3: detected capacity change from 0 to 4096 [ 108.144368][ T6089] loop1: detected capacity change from 0 to 32768 [ 108.172627][ T6106] EXT4-fs (loop3): Test dummy encryption mode enabled [ 108.218351][ T6089] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.219567][ T6106] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 108.239811][ T6106] System zones: 0-5 [ 108.264400][ T6106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.505758][ T6089] XFS (loop1): Ending clean mount [ 108.544371][ T6089] XFS (loop1): Quotacheck needed: Please wait. [ 108.661397][ T6106] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 108.668030][ T6089] XFS (loop1): Quotacheck: Done. [ 108.864514][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.340190][ T6148] loop3: detected capacity change from 0 to 512 [ 109.375367][ T6148] EXT4-fs: Ignoring removed bh option [ 109.384274][ T6148] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.435226][ T6148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 109.478840][ T6148] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.87: Unimplemented hash flags: 0x0001 [ 109.496868][ T6148] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.87: Corrupt directory, running e2fsck is recommended [ 109.513307][ T6148] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.87: Unimplemented hash flags: 0x0001 [ 109.526031][ T6148] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.87: Corrupt directory, running e2fsck is recommended [ 109.543934][ T6148] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.87: Unimplemented hash flags: 0x0001 [ 109.558349][ T6148] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.87: Corrupt directory, running e2fsck is recommended [ 109.582861][ T5771] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.628815][ T6148] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.87: Unimplemented hash flags: 0x0001 [ 109.641523][ T6148] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.87: Corrupt directory, running e2fsck is recommended [ 109.672231][ T6154] EXT4-fs warning (device loop3): dx_probe:869: inode #2: comm syz.3.87: Unimplemented hash flags: 0x0001 [ 109.691596][ T6154] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.87: Corrupt directory, running e2fsck is recommended [ 109.766459][ T6148] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.87: path /19/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 109.980974][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.872851][ T6182] netlink: 'syz.1.98': attribute type 4 has an invalid length. [ 111.007098][ T6184] overlayfs: failed to clone upperpath [ 111.586403][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.103'. [ 111.606264][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.103'. [ 111.615573][ T6203] Zero length message leads to an empty skb [ 112.654152][ T6230] netlink: 'syz.0.112': attribute type 11 has an invalid length. [ 112.957954][ T6230] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 112.973069][ T6230] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 113.866231][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 114.712014][ T6250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.119'. [ 118.508947][ T6294] 0: reclassify loop, rule prio 0, protocol 700 [ 120.318307][ T6213] Set syz1 is full, maxelem 65536 reached [ 120.602823][ T6319] libceph: secret too big 32 [ 122.619795][ T6356] syzkaller0: entered promiscuous mode [ 122.649197][ T6356] syzkaller0: entered allmulticast mode [ 122.747395][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.847216][ T6361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.940609][ T6371] loop1: detected capacity change from 0 to 1024 [ 122.954972][ T6371] ======================================================= [ 122.954972][ T6371] WARNING: The mand mount option has been deprecated and [ 122.954972][ T6371] and is ignored by this kernel. Remove the mand [ 122.954972][ T6371] option from the mount to silence this warning. [ 122.954972][ T6371] ======================================================= [ 122.991666][ T6364] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 123.072278][ T6367] macvtap1: entered allmulticast mode [ 123.081918][ T6371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 123.086274][ T6368] macvtap2: entered allmulticast mode [ 123.113099][ T6370] bond1: (slave bridge1): making interface the new active one [ 123.123742][ T6370] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 123.134285][ T6371] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.493813][ T6371] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.150: lblock 0 mapped to illegal pblock 0 (length 1) [ 124.506305][ T28] audit: type=1800 audit(1784784717.767:3): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.150" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 125.312269][ T6375] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 126.699457][ T6393] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 126.706168][ T6393] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.714349][ T6393] vhci_hcd vhci_hcd.0: Device attached [ 126.720504][ T6395] vhci_hcd: connection closed [ 126.729326][ T2934] vhci_hcd: stop threads [ 126.760258][ T2934] vhci_hcd: release socket [ 126.764780][ T2934] vhci_hcd: disconnect device [ 126.786187][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.432500][ T6401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.160'. [ 127.475924][ T6401] netlink: 32 bytes leftover after parsing attributes in process `syz.1.160'. [ 127.851773][ T6410] fuse: Bad value for 'fd' [ 131.199294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 133.086485][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.093533][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.441512][ T6456] loop1: detected capacity change from 0 to 128 [ 135.443929][ T5808] IPVS: starting estimator thread 0... [ 135.892701][ T6456] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.338547][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 136.431221][ T6457] IPVS: using max 18 ests per chain, 43200 per kthread [ 136.461099][ T6456] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.546503][ T6456] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 138.626675][ T6474] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 138.827225][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.891720][ T6496] netlink: 84 bytes leftover after parsing attributes in process `syz.1.185'. [ 141.818080][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 141.826014][ T5084] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 143.833448][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 149.630549][ T6553] overlayfs: failed to clone lowerpath [ 150.125071][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 153.821622][ T6580] sctp: failed to load transform for md5: -2 [ 155.398020][ T6609] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.208'. [ 155.874218][ T6614] loop1: detected capacity change from 0 to 512 [ 155.894691][ T6614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.041256][ T6614] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.211: invalid indirect mapped block 256 (level 2) [ 156.134960][ T6614] EXT4-fs (loop1): 2 truncates cleaned up [ 156.326012][ T6614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.850846][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.212'. [ 156.940512][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.212'. [ 157.939266][ C0] sched: RT throttling activated [ 159.359320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 160.039652][ T6637] syzkaller0: entered promiscuous mode [ 160.074447][ T6637] syzkaller0: entered allmulticast mode [ 160.101342][ T6639] tipc: Started in network mode [ 160.129528][ T6639] tipc: Node identity cae4731ea4ed, cluster identity 4711 [ 160.165432][ T6639] tipc: Enabled bearer , priority 0 [ 160.196509][ T6637] tipc: Resetting bearer [ 160.365665][ T6632] tipc: Resetting bearer [ 160.421014][ T6632] tipc: Disabling bearer [ 160.842896][ T6616] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 161.014202][ T1096] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 161.120296][ T1096] EXT4-fs (loop1): This should not happen!! Data will be lost [ 161.120296][ T1096] [ 161.132076][ T1096] EXT4-fs (loop1): Total free blocks count 0 [ 161.138194][ T1096] EXT4-fs (loop1): Free/Dirty block details [ 161.144473][ T1096] EXT4-fs (loop1): free_blocks=0 [ 161.149564][ T1096] EXT4-fs (loop1): dirty_blocks=2690 [ 161.154948][ T1096] EXT4-fs (loop1): Block reservation details [ 161.171440][ T1096] EXT4-fs (loop1): i_reserved_data_blocks=2690 [ 161.189021][ T1096] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2048 with error 28 [ 162.272088][ T6651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 162.284843][ T6651] vlan2: entered allmulticast mode [ 162.290073][ T6651] dummy0: entered allmulticast mode [ 162.295666][ T6651] bridge0: port 3(vlan2) entered blocking state [ 162.302312][ T6651] bridge0: port 3(vlan2) entered disabled state [ 162.309595][ T6651] vlan2: entered promiscuous mode [ 162.314668][ T6651] dummy0: entered promiscuous mode [ 163.377862][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 163.427181][ T6661] bridge1: port 1(veth3) entered blocking state [ 163.434819][ T6661] bridge1: port 1(veth3) entered disabled state [ 164.569496][ T6661] veth3: entered allmulticast mode [ 164.597431][ T6661] veth3: entered promiscuous mode [ 164.734849][ T6679] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.754427][ T6658] bridge1: port 2(veth0_to_bond) entered blocking state [ 164.783933][ T6658] bridge1: port 2(veth0_to_bond) entered disabled state [ 164.797264][ T6658] veth0_to_bond: entered allmulticast mode [ 164.805581][ T6658] veth0_to_bond: entered promiscuous mode [ 164.883145][ T6678] bridge1: port 3(veth5) entered blocking state [ 164.895097][ T6678] bridge1: port 3(veth5) entered disabled state [ 164.902201][ T6678] veth5: entered allmulticast mode [ 164.909107][ T6678] veth5: entered promiscuous mode [ 166.243932][ T6681] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 166.498072][ T6691] syz.2.230 uses obsolete (PF_INET,SOCK_PACKET) [ 167.146380][ T60] EXT4-fs: 7 callbacks suppressed [ 167.146398][ T60] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2060 with max blocks 632 with error 28 [ 167.280421][ T60] EXT4-fs (loop1): This should not happen!! Data will be lost [ 167.280421][ T60] [ 167.327092][ T60] EXT4-fs (loop1): Total free blocks count 0 [ 167.354331][ T60] EXT4-fs (loop1): Free/Dirty block details [ 167.379670][ T60] EXT4-fs (loop1): free_blocks=0 [ 167.384781][ T60] EXT4-fs (loop1): dirty_blocks=636 [ 167.472652][ T6700] afs: Bad value for 'source' [ 167.491108][ T60] EXT4-fs (loop1): Block reservation details [ 167.537266][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.571638][ T60] EXT4-fs (loop1): i_reserved_data_blocks=636 [ 168.260095][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.295946][ T6635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.609979][ T6707] loop3: detected capacity change from 0 to 1024 [ 168.913088][ T6707] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 168.924233][ T6707] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 168.951528][ T6707] JBD2: no valid journal superblock found [ 169.164001][ T6707] EXT4-fs (loop3): Could not load journal inode [ 169.426922][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.197028][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.681050][ T6723] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 172.159273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 173.364111][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.374718][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.384413][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.393691][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.431452][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.449585][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.571733][ T5776] Bluetooth: hci0: command tx timeout [ 175.745684][ T6759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.981031][ T6748] chnl_net:caif_netlink_parms(): no params data found [ 178.074528][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 178.074580][ T5776] Bluetooth: hci0: command tx timeout [ 178.632850][ T6748] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.665516][ T6748] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.700904][ T6748] bridge_slave_0: entered allmulticast mode [ 178.708305][ T6748] bridge_slave_0: entered promiscuous mode [ 178.775079][ T6748] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.799129][ T6748] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.811940][ T6748] bridge_slave_1: entered allmulticast mode [ 178.820401][ T6748] bridge_slave_1: entered promiscuous mode [ 178.895127][ T6786] syz.3.246 (6786) used greatest stack depth: 17896 bytes left [ 178.962430][ T12] hsr_slave_0: left promiscuous mode [ 178.972229][ T12] hsr_slave_1: left promiscuous mode [ 179.004330][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.024178][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.046030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.069430][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.080711][ T12] bridge_slave_1: left allmulticast mode [ 179.086408][ T12] bridge_slave_1: left promiscuous mode [ 179.111283][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.143147][ T12] bridge_slave_0: left allmulticast mode [ 179.148944][ T12] bridge_slave_0: left promiscuous mode [ 179.170103][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.218318][ T12] veth1_macvtap: left promiscuous mode [ 179.230955][ T12] veth0_macvtap: left promiscuous mode [ 179.236672][ T12] veth1_vlan: left promiscuous mode [ 179.257041][ T12] veth0_vlan: left promiscuous mode [ 180.043614][ T12] team0 (unregistering): Port device team_slave_1 removed [ 180.091776][ T12] team0 (unregistering): Port device team_slave_0 removed [ 180.137090][ T51] Bluetooth: hci0: command tx timeout [ 180.149730][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.203374][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.020424][ T6810] overlayfs: failed to clone lowerpath [ 182.210074][ T51] Bluetooth: hci0: command tx timeout [ 182.461065][ T12] bond0 (unregistering): Released all slaves [ 182.592975][ T6748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.615070][ T6748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.695706][ T6748] team0: Port device team_slave_0 added [ 182.708076][ T6748] team0: Port device team_slave_1 added [ 182.738928][ T6802] netlink: 'syz.2.247': attribute type 1 has an invalid length. [ 182.747041][ T6802] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 183.542494][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.717937][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.766838][ T6748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.266458][ T6748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.275807][ T6748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.304144][ T6748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.532383][ T6748] hsr_slave_0: entered promiscuous mode [ 184.570684][ T6748] hsr_slave_1: entered promiscuous mode [ 185.276798][ T6840] netlink: 72 bytes leftover after parsing attributes in process `syz.2.254'. [ 185.777300][ T6861] overlay: Unknown parameter '/' [ 185.803751][ T6861] overlayfs: failed to clone lowerpath [ 187.789896][ T6886] overlayfs: missing 'lowerdir' [ 190.564579][ T6748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.624003][ T6748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.662774][ T6748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.691288][ T6748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.705415][ T6906] loop3: detected capacity change from 0 to 2048 [ 190.725189][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 190.743918][ T6906] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 193.084982][ T6748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.182313][ T6748] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.293015][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.300251][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.357543][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.364789][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.063382][ T6748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.530738][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.537555][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.590788][ T6943] netlink: 'syz.2.269': attribute type 49 has an invalid length. [ 194.846051][ T6943] veth0_to_bond: entered promiscuous mode [ 194.852086][ T6943] veth0_to_bond: entered allmulticast mode [ 195.578218][ T6748] veth0_vlan: entered promiscuous mode [ 195.725180][ T6748] veth1_vlan: entered promiscuous mode [ 196.493493][ T6963] syz.0.278 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 197.224274][ T6748] veth0_macvtap: entered promiscuous mode [ 197.282719][ T6748] veth1_macvtap: entered promiscuous mode [ 197.348837][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.368761][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.390449][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.404978][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.636370][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.736258][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.784475][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.818447][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.849006][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.869783][ T6748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.886543][ T6982] xt_HMARK: spi-set and port-set can't be combined [ 198.903461][ T6748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.944730][ T6748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.976458][ T6748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.003930][ T6748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.019832][ T6748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.137639][ T6748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.304018][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.490134][ T6993] x_tables: ip_tables: osf match: only valid for protocol 6 [ 201.643791][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.830175][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.906011][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.044234][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 202.050406][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 203.567373][ T5776] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 205.992929][ T7040] loop4: detected capacity change from 0 to 1024 [ 206.067541][ T7040] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 206.078699][ T7040] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 206.100722][ T7040] JBD2: no valid journal superblock found [ 206.229569][ T7040] EXT4-fs (loop4): Could not load journal inode [ 207.049401][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 207.999275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 209.700379][ T7053] loop4: detected capacity change from 0 to 8192 [ 209.738125][ T7053] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 209.892215][ T7053] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 209.909664][ T7053] REISERFS (device loop4): using ordered data mode [ 209.916255][ T7053] reiserfs: using flush barriers [ 210.029452][ T7053] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 210.085387][ T7053] REISERFS (device loop4): checking transaction log (loop4) [ 210.121026][ T7072] overlayfs: failed to clone upperpath [ 210.307876][ T7053] REISERFS (device loop4): Using r5 hash to sort names [ 210.701844][ T7053] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 210.761557][ T7053] reiserfs filesystem being mounted at /3/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 213.200145][ T7091] netlink: 'syz.3.291': attribute type 16 has an invalid length. [ 213.208023][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'. [ 213.816994][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 214.511230][ T7096] loop4: detected capacity change from 0 to 2048 [ 214.698627][ T7096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.196124][ T172] libceph: connect (1)[c::]:6789 error -101 [ 217.210467][ T7112] ceph: No mds server is up or the cluster is laggy [ 217.343124][ T172] libceph: mon0 (1)[c::]:6789 connect error [ 218.033824][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 219.154797][ T7140] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.306'. [ 219.173328][ T7140] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.306'. [ 221.283073][ T7133] ALSA: mixer_oss: invalid OSS volume 'u' [ 221.529489][ T7166] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 221.536523][ T7166] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 221.544558][ T7166] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 221.551380][ T7166] comedi comedi0: 8255: I/O port conflict (0x4,4) [ 221.558134][ T7166] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff7,4) [ 221.566353][ T7166] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffff8,4) [ 221.574346][ T7166] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 221.590631][ T7166] comedi comedi0: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 221.600468][ T7166] comedi comedi0: 8255: I/O port conflict (0xc3,4) [ 221.607630][ T7166] comedi comedi0: 8255: I/O port conflict (0x1000007,4) [ 221.615012][ T7166] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 221.622121][ T7166] comedi comedi0: 8255: I/O port conflict (0x10003,4) [ 221.629302][ T7166] comedi comedi0: 8255: I/O port conflict (0x801000,4) [ 221.636508][ T7166] comedi comedi0: 8255: I/O port conflict (0x7fffffff,4) [ 221.646072][ T7166] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 221.653100][ T7166] comedi comedi0: 8255: I/O port conflict (0x1001010,4) [ 221.660614][ T7166] comedi comedi0: 8255: I/O port conflict (0x1ff,4) [ 221.667555][ T7166] comedi comedi0: 8255: I/O port conflict (0x8,4) [ 221.674349][ T7166] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 221.681179][ T7166] comedi comedi0: 8255: I/O port conflict (0x8001,4) [ 221.688226][ T7166] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 221.695014][ T7166] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 221.702145][ T7166] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 221.709053][ T7166] comedi comedi0: 8255: I/O port conflict (0x3,4) [ 221.715932][ T7166] comedi comedi0: 8255: I/O port conflict (0xfffd,4) [ 221.959337][ T5811] IPVS: starting estimator thread 0... [ 222.139641][ T7169] IPVS: using max 20 ests per chain, 48000 per kthread [ 222.177625][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 222.376240][ T7175] bridge2: port 1(veth3) entered blocking state [ 222.398354][ T7175] bridge2: port 1(veth3) entered disabled state [ 222.409133][ T7175] veth3: entered allmulticast mode [ 222.421393][ T7175] veth3: entered promiscuous mode [ 222.687341][ T7182] Bluetooth: MGMT ver 1.22 [ 222.984968][ T7172] bridge2: port 2(veth5) entered blocking state [ 223.039589][ T7172] bridge2: port 2(veth5) entered disabled state [ 223.195285][ T7172] veth5: entered allmulticast mode [ 223.202693][ T7172] veth5: entered promiscuous mode [ 223.457999][ T7186] input: syz1 as /devices/virtual/input/input5 [ 224.570156][ T27] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 225.819992][ T27] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 225.828643][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.486159][ T27] usb 5-1: config 0 has no interface number 0 [ 226.494040][ T27] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 226.506293][ T27] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 226.764735][ T27] usb 5-1: string descriptor 0 read error: -71 [ 226.819866][ T27] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 226.877135][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.149957][ T27] usb 5-1: config 0 descriptor?? [ 227.324860][ T27] usb 5-1: can't set config #0, error -71 [ 227.566028][ T27] usb 5-1: USB disconnect, device number 2 [ 228.396802][ T7250] syz_tun: entered allmulticast mode [ 228.982371][ T7251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 230.209125][ T7266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.326'. [ 231.345805][ T7276] input: syz1 as /devices/virtual/input/input7 [ 233.629428][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 233.638744][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 234.947338][ T7296] netlink: 'syz.0.332': attribute type 21 has an invalid length. [ 234.956420][ T7296] netlink: 132 bytes leftover after parsing attributes in process `syz.0.332'. [ 235.703685][ T7318] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 235.840266][ T7315] loop3: detected capacity change from 0 to 2048 [ 236.487804][ T7315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.626001][ T7332] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 237.647097][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 237.775212][ T7333] overlayfs: failed to clone upperpath [ 237.963876][ T7343] netem: change failed [ 239.639470][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 239.647394][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 239.956725][ T7346] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 239.966004][ T7346] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 239.988834][ T7346] overlayfs: failed to resolve './bus': -2 [ 239.998797][ T7346] netlink: 'syz.0.341': attribute type 49 has an invalid length. [ 240.337465][ T7351] loop3: detected capacity change from 0 to 1024 [ 241.279336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 242.193013][ T7371] bridge_slave_0: left allmulticast mode [ 242.222473][ T7371] bridge_slave_0: left promiscuous mode [ 242.250281][ T23] IPVS: starting estimator thread 0... [ 242.257928][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.334601][ T7371] bridge_slave_1: left allmulticast mode [ 242.354937][ T7375] IPVS: using max 22 ests per chain, 52800 per kthread [ 242.370509][ T7371] bridge_slave_1: left promiscuous mode [ 242.447224][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.598024][ T7379] tmpfs: Bad value for 'mpol' [ 243.187486][ T7371] bond0: (slave bond_slave_0): Releasing backup interface [ 243.273430][ T7371] bond0: (slave bond_slave_1): Releasing backup interface [ 243.373114][ T7371] team0: Port device team_slave_0 removed [ 243.402389][ T7371] team0: Port device team_slave_1 removed [ 243.419639][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.427731][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.678064][ T7386] 9pnet_fd: Insufficient options for proto=fd [ 245.072581][ T7399] netlink: 'syz.4.351': attribute type 16 has an invalid length. [ 245.080550][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.351'. [ 246.883131][ T7413] loop4: detected capacity change from 0 to 32768 [ 246.978643][ T7413] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 247.161848][ T7423] input: syz1 as /devices/virtual/input/input8 [ 248.022302][ T7413] XFS (loop4): Ending clean mount [ 248.035056][ T7413] XFS (loop4): Quotacheck needed: Please wait. [ 248.181665][ T7413] XFS (loop4): Quotacheck: Done. [ 248.884482][ T6748] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 249.321868][ T7445] loop4: detected capacity change from 0 to 64 [ 250.839667][ T7454] capability: warning: `syz.4.358' uses 32-bit capabilities (legacy support in use) [ 251.469682][ T7461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.359'. [ 252.678693][ T7475] loop3: detected capacity change from 0 to 128 [ 252.739869][ T7477] netlink: 'syz.0.363': attribute type 16 has an invalid length. [ 252.747736][ T7477] netlink: 24 bytes leftover after parsing attributes in process `syz.0.363'. [ 252.770928][ T7475] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 252.813993][ T7475] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.192102][ T7486] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 253.805621][ T5781] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.997924][ T7517] PKCS7: Unknown OID: [4] 1.31.15331.16263.1812736 [ 255.004916][ T7517] PKCS7: Only support pkcs7_signedData type [ 255.520863][ T7519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.757216][ T7524] loop3: detected capacity change from 0 to 16 [ 255.831774][ T7524] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 142700) [ 255.934591][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.968531][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.389230][ T7539] loop3: detected capacity change from 0 to 16 [ 257.400423][ T7539] erofs: Unknown parameter 'Ð-®æyåÖxtc;K‡Á' [ 258.090978][ T6892] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 258.309571][ T5811] IPVS: starting estimator thread 0... [ 258.429766][ T7547] tmpfs: Bad value for 'mpol' [ 258.809620][ T7542] IPVS: using max 18 ests per chain, 43200 per kthread [ 260.487215][ T7571] loop4: detected capacity change from 0 to 1 [ 260.502631][ T7571] syz.4.379: attempt to access beyond end of device [ 260.502631][ T7571] loop4: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 260.523587][ T7571] SQUASHFS error: Failed to read block 0x0: -5 [ 260.530640][ T7571] unable to read squashfs_super_block [ 260.549456][ T2197] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 261.292453][ T7579] serio: Serial port ptm0 [ 261.329590][ T2197] usb 4-1: Using ep0 maxpacket: 16 [ 261.342227][ T2197] usb 4-1: unable to get BOS descriptor or descriptor too short [ 261.384342][ T2197] usb 4-1: config 16 has an invalid interface number: 44 but max is 0 [ 261.402149][ T2197] usb 4-1: config 16 has no interface number 0 [ 261.421184][ T2197] usb 4-1: config 16 interface 44 altsetting 10 bulk endpoint 0x1 has invalid maxpacket 32 [ 261.456178][ T2197] usb 4-1: config 16 interface 44 has no altsetting 0 [ 261.484844][ T7586] overlayfs: workdir and upperdir must be separate subtrees [ 261.571801][ T2197] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=1d.64 [ 261.652878][ T2197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.858781][ T2197] usb 4-1: Product: syz [ 261.877988][ T2197] usb 4-1: Manufacturer: syz [ 261.906628][ T2197] usb 4-1: SerialNumber: syz [ 261.995327][ T7591] netlink: 'syz.2.383': attribute type 21 has an invalid length. [ 262.003643][ T7591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.383'. [ 262.540862][ T2197] usb 4-1: can't set config #16, error -71 [ 262.573566][ T2197] usb 4-1: USB disconnect, device number 2 [ 263.567127][ T7597] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 263.577944][ T7597] VFS: Can't find a romfs filesystem on dev nullb0. [ 263.577944][ T7597] [ 264.489532][ T2197] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 264.692486][ T2197] usb 5-1: Using ep0 maxpacket: 16 [ 264.723461][ T2197] usb 5-1: config 0 has an invalid interface number: 19 but max is 0 [ 264.770970][ T2197] usb 5-1: config 0 has no interface number 0 [ 264.777769][ T2197] usb 5-1: config 0 interface 19 altsetting 8 bulk endpoint 0x8F has invalid maxpacket 1023 [ 264.796303][ T2197] usb 5-1: config 0 interface 19 has no altsetting 0 [ 264.806870][ T2197] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10b6, bcdDevice=92.92 [ 264.821243][ T2197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.858552][ T2197] usb 5-1: Product: syz [ 264.964231][ T2197] usb 5-1: Manufacturer: syz [ 265.033838][ T2197] usb 5-1: SerialNumber: syz [ 265.210682][ T2197] usb 5-1: config 0 descriptor?? [ 265.429618][ T7610] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.546872][ T7627] loop3: detected capacity change from 0 to 512 [ 265.599684][ T7627] EXT4-fs (loop3): orphan cleanup on readonly fs [ 265.690939][ T2197] usb 5-1: USB disconnect, device number 3 [ 265.728152][ T7627] [ 265.730549][ T7627] ====================================================== [ 265.737592][ T7627] WARNING: possible circular locking dependency detected [ 265.744637][ T7627] syzkaller #0 Not tainted [ 265.749077][ T7627] ------------------------------------------------------ [ 265.756110][ T7627] syz.3.388/7627 is trying to acquire lock: [ 265.762019][ T7627] ffff888076ca4c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 265.772175][ T7627] [ 265.772175][ T7627] but task is already holding lock: [ 265.779564][ T7627] ffff88805df728c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 265.789441][ T7627] [ 265.789441][ T7627] which lock already depends on the new lock. [ 265.789441][ T7627] [ 265.799871][ T7627] [ 265.799871][ T7627] the existing dependency chain (in reverse order) is: [ 265.808902][ T7627] [ 265.808902][ T7627] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 265.816605][ T7627] down_write+0x97/0x200 [ 265.821406][ T7627] ext4_destroy_inline_data+0x28/0xe0 [ 265.827335][ T7627] ext4_do_writepages+0x4f2/0x3990 [ 265.833095][ T7627] ext4_writepages+0x1dd/0x350 [ 265.838427][ T7627] do_writepages+0x351/0x590 [ 265.843581][ T7627] __writeback_single_inode+0x14e/0xee0 [ 265.849689][ T7627] writeback_sb_inodes+0x813/0x1020 [ 265.855448][ T7627] __writeback_inodes_wb+0x114/0x240 [ 265.861292][ T7627] wb_writeback+0x472/0xbe0 [ 265.866391][ T7627] wb_workfn+0xb8e/0xe60 [ 265.871191][ T7627] process_scheduled_works+0xa60/0x1600 [ 265.877301][ T7627] worker_thread+0xa5e/0xfe0 [ 265.882447][ T7627] kthread+0x2fa/0x390 [ 265.887066][ T7627] ret_from_fork+0x48/0x80 [ 265.892038][ T7627] ret_from_fork_asm+0x11/0x20 [ 265.897362][ T7627] [ 265.897362][ T7627] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 265.905824][ T7627] __lock_acquire+0x37ef/0x7d80 [ 265.911237][ T7627] lock_acquire+0x19e/0x420 [ 265.916297][ T7627] percpu_down_read+0x44/0x1a0 [ 265.921623][ T7627] ext4_writepages+0x1a4/0x350 [ 265.926950][ T7627] do_writepages+0x351/0x590 [ 265.932104][ T7627] __writeback_single_inode+0x14e/0xee0 [ 265.938215][ T7627] writeback_single_inode+0x21f/0x760 [ 265.944147][ T7627] write_inode_now+0x183/0x210 [ 265.949471][ T7627] iput+0x58f/0x900 [ 265.953842][ T7627] ext4_xattr_block_set+0x248b/0x2fe0 [ 265.959876][ T7627] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 265.966333][ T7627] __ext4_expand_extra_isize+0x306/0x400 [ 265.972534][ T7627] __ext4_mark_inode_dirty+0x458/0x6d0 [ 265.978553][ T7627] ext4_evict_inode+0x7dd/0xe70 [ 265.983953][ T7627] evict+0x4b7/0x8a0 [ 265.988380][ T7627] ext4_orphan_cleanup+0xc33/0x1470 [ 265.994133][ T7627] ext4_fill_super+0x5fb5/0x6870 [ 265.999644][ T7627] get_tree_bdev+0x3e5/0x520 [ 266.004792][ T7627] vfs_get_tree+0x8c/0x280 [ 266.009764][ T7627] do_new_mount+0x24a/0xa40 [ 266.014829][ T7627] __se_sys_mount+0x2e7/0x3d0 [ 266.020252][ T7627] do_syscall_64+0x55/0xb0 [ 266.025239][ T7627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.031723][ T7627] [ 266.031723][ T7627] other info that might help us debug this: [ 266.031723][ T7627] [ 266.041973][ T7627] Possible unsafe locking scenario: [ 266.041973][ T7627] [ 266.049443][ T7627] CPU0 CPU1 [ 266.054824][ T7627] ---- ---- [ 266.060260][ T7627] lock(&ei->xattr_sem); [ 266.064631][ T7627] lock(&sbi->s_writepages_rwsem); [ 266.072417][ T7627] lock(&ei->xattr_sem); [ 266.079303][ T7627] rlock(&sbi->s_writepages_rwsem); [ 266.084627][ T7627] [ 266.084627][ T7627] *** DEADLOCK *** [ 266.084627][ T7627] [ 266.092793][ T7627] 3 locks held by syz.3.388/7627: [ 266.097837][ T7627] #0: ffff888076ca20e0 (&type->s_umount_key#32){++++}-{3:3}, at: get_tree_bdev+0x345/0x520 [ 266.108086][ T7627] #1: ffff888076ca2608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b4/0xe70 [ 266.117545][ T7627] #2: ffff88805df728c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 266.127972][ T7627] [ 266.127972][ T7627] stack backtrace: [ 266.133899][ T7627] CPU: 0 PID: 7627 Comm: syz.3.388 Not tainted syzkaller #0 [ 266.141221][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 266.151323][ T7627] Call Trace: [ 266.154634][ T7627] [ 266.157598][ T7627] dump_stack_lvl+0x18c/0x250 [ 266.162317][ T7627] ? load_image+0x420/0x420 [ 266.166859][ T7627] ? show_regs_print_info+0x20/0x20 [ 266.172111][ T7627] ? print_circular_bug+0x12b/0x1a0 [ 266.177357][ T7627] check_noncircular+0x2fc/0x400 [ 266.182339][ T7627] ? look_up_lock_class+0x75/0x140 [ 266.187493][ T7627] ? print_deadlock_bug+0x5d0/0x5d0 [ 266.192730][ T7627] ? lockdep_lock+0xf5/0x230 [ 266.197444][ T7627] ? _find_first_zero_bit+0xd6/0x100 [ 266.202778][ T7627] __lock_acquire+0x37ef/0x7d80 [ 266.207684][ T7627] ? mark_lock+0x94/0x320 [ 266.212058][ T7627] ? verify_lock_unused+0x140/0x140 [ 266.217288][ T7627] ? __lock_acquire+0x1336/0x7d80 [ 266.222361][ T7627] lock_acquire+0x19e/0x420 [ 266.226909][ T7627] ? ext4_writepages+0x1a4/0x350 [ 266.231904][ T7627] ? __might_sleep+0xe0/0xe0 [ 266.236515][ T7627] ? read_lock_is_recursive+0x20/0x20 [ 266.241912][ T7627] ? mark_lock+0x94/0x320 [ 266.246280][ T7627] ? __lock_acquire+0x1336/0x7d80 [ 266.251355][ T7627] ? __lock_acquire+0x7d80/0x7d80 [ 266.256424][ T7627] percpu_down_read+0x44/0x1a0 [ 266.261239][ T7627] ? ext4_writepages+0x1a4/0x350 [ 266.266226][ T7627] ext4_writepages+0x1a4/0x350 [ 266.271041][ T7627] ? ext4_read_folio+0x2f0/0x2f0 [ 266.276029][ T7627] ? __rwlock_init+0x150/0x150 [ 266.280841][ T7627] ? do_raw_spin_unlock+0x121/0x230 [ 266.286171][ T7627] ? ext4_read_folio+0x2f0/0x2f0 [ 266.291154][ T7627] do_writepages+0x351/0x590 [ 266.295798][ T7627] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 266.301563][ T7627] ? writeback_single_inode+0x214/0x760 [ 266.307411][ T7627] ? __lock_acquire+0x7d80/0x7d80 [ 266.312471][ T7627] ? do_raw_spin_lock+0x11f/0x2b0 [ 266.317533][ T7627] __writeback_single_inode+0x14e/0xee0 [ 266.323164][ T7627] writeback_single_inode+0x21f/0x760 [ 266.328616][ T7627] ? write_inode_now+0x210/0x210 [ 266.333607][ T7627] write_inode_now+0x183/0x210 [ 266.338502][ T7627] ? bdi_split_work_to_wbs+0x900/0x900 [ 266.344018][ T7627] ? do_raw_spin_unlock+0x121/0x230 [ 266.349694][ T7627] ? do_raw_spin_unlock+0x121/0x230 [ 266.354940][ T7627] iput+0x58f/0x900 [ 266.358818][ T7627] ext4_xattr_block_set+0x248b/0x2fe0 [ 266.364224][ T7627] ? write_boundary_block+0xb0/0xb0 [ 266.369556][ T7627] ? xattr_find_entry+0x12b/0x2f0 [ 266.374629][ T7627] ? ext4_xattr_block_find+0x320/0x320 [ 266.380133][ T7627] ? ext4_xattr_block_find+0x2a1/0x320 [ 266.385633][ T7627] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 266.391582][ T7627] __ext4_expand_extra_isize+0x306/0x400 [ 266.397535][ T7627] __ext4_mark_inode_dirty+0x458/0x6d0 [ 266.403083][ T7627] ext4_evict_inode+0x7dd/0xe70 [ 266.407981][ T7627] ? evict+0x482/0x8a0 [ 266.412090][ T7627] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 266.418020][ T7627] ? do_raw_spin_unlock+0x121/0x230 [ 266.423264][ T7627] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 266.429191][ T7627] evict+0x4b7/0x8a0 [ 266.433121][ T7627] ? __lock_acquire+0x7d80/0x7d80 [ 266.438183][ T7627] ? proc_nr_inodes+0x230/0x230 [ 266.443068][ T7627] ? do_raw_spin_unlock+0x121/0x230 [ 266.448301][ T7627] ? _raw_spin_unlock+0x28/0x40 [ 266.453203][ T7627] ext4_orphan_cleanup+0xc33/0x1470 [ 266.458443][ T7627] ? ext4_orphan_del+0xc90/0xc90 [ 266.463418][ T7627] ? ext4_register_li_request+0x182/0x930 [ 266.469178][ T7627] ? errseq_check_and_advance+0x66/0x120 [ 266.474843][ T7627] ext4_fill_super+0x5fb5/0x6870 [ 266.479851][ T7627] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 266.486164][ T7627] ? __might_sleep+0xe0/0xe0 [ 266.490801][ T7627] ? read_lock_is_recursive+0x20/0x20 [ 266.496380][ T7627] ? snprintf+0xe9/0x140 [ 266.500670][ T7627] ? down_read_killable+0x340/0x340 [ 266.505907][ T7627] ? setup_bdev_super+0x56b/0x660 [ 266.510980][ T7627] get_tree_bdev+0x3e5/0x520 [ 266.515649][ T7627] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 266.522360][ T7627] ? setup_bdev_super+0x660/0x660 [ 266.527417][ T7627] ? apparmor_capable+0x137/0x1a0 [ 266.532499][ T7627] ? bpf_lsm_capable+0x9/0x10 [ 266.537217][ T7627] ? security_capable+0x89/0xb0 [ 266.542106][ T7627] vfs_get_tree+0x8c/0x280 [ 266.546563][ T7627] do_new_mount+0x24a/0xa40 [ 266.551105][ T7627] __se_sys_mount+0x2e7/0x3d0 [ 266.555818][ T7627] ? __x64_sys_mount+0xc0/0xc0 [ 266.560629][ T7627] ? lockdep_hardirqs_on+0x98/0x150 [ 266.566043][ T7627] ? __x64_sys_mount+0x20/0xc0 [ 266.570942][ T7627] do_syscall_64+0x55/0xb0 [ 266.575483][ T7627] ? clear_bhb_loop+0x40/0x90 [ 266.580187][ T7627] ? clear_bhb_loop+0x40/0x90 [ 266.584900][ T7627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.590851][ T7627] RIP: 0033:0x7f28b499f10a [ 266.595359][ T7627] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.614993][ T7627] RSP: 002b:00007f28b5905e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 266.623436][ T7627] RAX: ffffffffffffffda RBX: 00007f28b5905ee0 RCX: 00007f28b499f10a [ 266.631468][ T7627] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f28b5905ea0 [ 266.639469][ T7627] RBP: 0000200000000180 R08: 00007f28b5905ee0 R09: 000000000000001f [ 266.647986][ T7627] R10: 000000000000001f R11: 0000000000000246 R12: 0000200000000000 [ 266.655990][ T7627] R13: 00007f28b5905ea0 R14: 000000000000047a R15: 00002000000001c0 [ 266.663996][ T7627] [ 266.677062][ T7627] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.388: iget: bad extra_isize 90 (inode size 256) [ 266.712054][ T7627] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.388: error while reading EA inode 11 err=-117 [ 266.735186][ T7627] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 266.761421][ T7627] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.388: iget: bad extra_isize 90 (inode size 256) [ 266.777677][ T7627] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.388: error while reading EA inode 11 err=-117 [ 266.835673][ T7627] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.388: iget: bad extra_isize 90 (inode size 256) [ 266.853109][ T7627] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.388: error while reading EA inode 18 err=-117 [ 266.866393][ T7627] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.388: iget: bad extra_isize 90 (inode size 256) [ 266.889293][ T7627] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.388: error while reading EA inode 18 err=-117 [ 266.908691][ T7627] EXT4-fs (loop3): 1 orphan inode deleted [ 266.923585][ T7627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 267.294384][ T5781] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.639583][ T5776] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 269.648203][ T5776] Bluetooth: hci2: Injecting HCI hardware error event [ 269.655530][ T5776] Bluetooth: hci2: hardware error 0x00 [ 271.719661][ T5776] Bluetooth: hci2: Opcode 0x0c03 failed: -110