last executing test programs: 26.604806412s ago: executing program 1 (id=192): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 19.273966302s ago: executing program 1 (id=205): mkdirat(0xffffffffffffff9c, 0x0, 0x19) io_uring_setup(0x63c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000080)={r7}) ioprio_get$uid(0x3, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008880) 18.292479413s ago: executing program 0 (id=207): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000400)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@errors_remount}, {@sysvgroups}]}, 0x3, 0x79b, &(0x7f0000001200)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000140)={0xd, 0x4, 0x6, 0x7}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000080)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) 18.144574156s ago: executing program 2 (id=208): syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file1\x00', 0x222401, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) mmap$panthor(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x110, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000001880)={0x400, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) 17.586975278s ago: executing program 1 (id=209): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) kcmp(r0, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.694220298s ago: executing program 3 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") socket$igmp6(0xa, 0x3, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 16.382148594s ago: executing program 2 (id=211): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x800010, &(0x7f0000000340)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x37f, &(0x7f0000001640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000440)={{0x0, @multicast2, 0x4e23, 0x3, 'wrr\x00', 0x1c, 0x9, 0x2d}, {@loopback, 0x4e20, 0x1, 0xd, 0x0, 0x8}}, 0x44) setxattr$trusted_overlay_origin(0x0, &(0x7f00000001c0), &(0x7f00000004c0), 0x2, 0x898794521a98045f) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) pwrite64(r0, 0x0, 0x0, 0xe7c) 15.866272896s ago: executing program 0 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$eJzsmDFO40AUhv8ZZxPtaoutVogGJCIRkHBsBxANRQp6JAiIjoiYKOAkKHFBIlFQcQUaCk7ABSgoOAIHCFQ0oaM2sj1JhggIBSAh/q9487/x83jmWfotGYSQH8vd7WOn4188GAD+Io2Umr83BjVSq/9/XSulTlbGLm+OZs8Kp/nh9QSAIHj/8xMArvIGfJUHwfO702pch+zrAiRmlN6EgKn0NiQ2lHYhsKX0nqbrYb1p7lY819ype6VQWGGww+CEITe8v+6xQEnbn9CuN1vt/aLnuY1PFKP6181LLGv7099XrzeW1j8bErbSOQisKb2EVK83cUu0848nBusbX3x+CgqK7yYG/hScC0xr/pTQ/CPrVw+yzVZ7rlItlt2yW3Oc3KI1b1kLTjYyoji+4X+/I3/6o63/65XapEjisOj7DTuO/dyJ40uOm4z8TyIzFedCzelE34N/YjIcMobKCSGEEEIIIYQQQggh5MOZgIj+go7AWY2qnwIAAP//ntd3Nw==") socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @private=0xa010102}, {0x1}, 0xc, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') 14.777212519s ago: executing program 2 (id=213): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 12.230440475s ago: executing program 0 (id=214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000cc0)={0x2, 0x0, [{0x5, 0x4, 0x0, 0x0, @msi={0x5, 0x9, 0xffffffff, 0x1}}, {0x0, 0x2, 0x1, 0x0, @irqchip={0x516, 0x206}}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.229754744s ago: executing program 3 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @private=0xa010102}, {0x1}, 0xc, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 12.062178228s ago: executing program 1 (id=216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 11.271641075s ago: executing program 3 (id=217): mkdirat(0xffffffffffffff9c, 0x0, 0x19) io_uring_setup(0x63c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000080)={r7}) ioprio_get$uid(0x3, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008880) 11.06975821s ago: executing program 0 (id=218): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@orlov}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb000000000000000002000d00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000440005000000000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000005000000fd090000850000004100", @ANYBLOB, @ANYRES32], 0x50) r5 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000580)={[{@bsdgroups}, {@usrquota}, {@acl}, {@grpquota}, {@test_dummy_encryption}, {@init_itable_val={'init_itable', 0x3d, 0x3ff}}, {}, {@oldalloc}, {@test_dummy_encryption}], [{@euid_eq}, {@fowner_eq}]}, 0xfe, 0x7b9, &(0x7f0000000f80)="$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") getpriority(0x0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x0, 0x1, 0x1}}) 10.974314872s ago: executing program 2 (id=219): syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file1\x00', 0x222401, 0x0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8) mmap$panthor(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000008, 0x110, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000001880)={0x400, 0x0, 0x0, 0x0, {0xfffffffe}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, 0x0) 6.89570545s ago: executing program 3 (id=220): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) pivot_root(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x9, @none, 0x0, 0x1}, 0xe) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000400)={[{@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@errors_remount}, {@sysvgroups}]}, 0x3, 0x79b, &(0x7f0000001200)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000140)={0xd, 0x4, 0x6, 0x7}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x2) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000080)) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) 6.566828958s ago: executing program 0 (id=221): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x800010, &(0x7f0000000340)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x37f, &(0x7f0000001640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000440)={{0x0, @multicast2, 0x4e23, 0x3, 'wrr\x00', 0x1c, 0x9, 0x2d}, {@loopback, 0x4e20, 0x1, 0xd, 0x0, 0x8}}, 0x44) setxattr$trusted_overlay_origin(0x0, &(0x7f00000001c0), &(0x7f00000004c0), 0x2, 0x898794521a98045f) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x20, r6, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x13}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) pwrite64(r0, 0x0, 0x0, 0xe7c) 4.546187591s ago: executing program 3 (id=222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r3 = socket(0xa, 0x3, 0x87) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") 4.385122825s ago: executing program 2 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @private=0xa010102}, {0x1}, 0xc, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') 4.217278608s ago: executing program 1 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") socket$igmp6(0xa, 0x3, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 582.929047ms ago: executing program 0 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x101) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') read$eventfd(r4, &(0x7f0000000100), 0x8) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00898fa629d0d7c08e8145e19228a550d44aa0ca182c2b72c1e6e7c70ccc7fed45a250472b4fcee025f1ecbbbd15e993af320fb24412139623cd6e828317413152fa483de4d2e1e44495db085e255243cc4448fdbad1947145b8b5303070fc1a56253bf5d5a068f699307a0b40c44652f65acf747b925dc88e54db7f9f77b3cda87a6a6219f7adb2b24b5a65daccb6c976bf3a578f48ec695fc57ff7b3b9c62ff20aada72b3d63c8af096209c6b4ab70016cb5911b06c1ce058f4725b4254eb5bcbe2313d6c03db545917e381fcd204ba7f05100a00248fc54e2a4891df0eaff80fc73a971dce8525cdf15"], 0x1, 0x17e, &(0x7f0000000240)="$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") socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @private=0xa010102}, {0x1}, 0xc, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x44}}}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 202.042316ms ago: executing program 2 (id=226): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000001b80)={[{@nombcache}, {@dioread_nolock}, {@nodelalloc}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@dioread_lock}]}, 0x1, 0x47a, &(0x7f00000006c0)="$eJzs28uPFMUfAPBv9z6AH4/lh/gAUVeJyUbjLrugcvCi0cQYjCZ6wOM6O5ANA2vY1QgSWYzxZGJI9Ew8Gv0LvBkTo55MuHryZEiIcgE8remebpgdZni4M8yy8/kkPVPVXT1VNdWP6qqZAPrWaPaSRGyKiN8jYqQeXZ5gtP525dKpytVLpypJLC299VeSp7t86VSlTFrut7GIjKUR6adJkcly8ydOHpmu1arHi/jEwtH3JuZPnHzmg6PTh6uHq8em9u/ft3fy+eemnu1IPbN6Xd758dyuHa++c/b1ysGz7/7yXVbeTcX2xnp0ymhW8b+Xcs3bnux0Zj22uSGcDPawINyRgYjImmsoP/9HYiCuN95IvPJJTwsHdFV2b1rXfvPiErCGJdHrEgC9Ud7os+ffcrlLXY9V4eKL9QegrN5XiqW+ZTDSIs1Q0/NtJ41GxMHFf85lS3RpHAIAoNHnla8ODEfER1e/fS3re4xERDke9ED++kf+uqWYQ9kaEf+PiG0RcV9EbI+I+4u0D0bEQyssz439n/TCCj/yprL+3wvF3Nby/l/Z+4utA0Vsc17/oeTQbK26J9bl38lYDK3L4pM3yeOHl89/0W5bY/8vW7L8y75gUY4Lg00DdDPTC9N5p7QDLp6J2DnYqv7JtZmAJCJ2RMTOO/voLWVg9qlvdrVL1Lr+l8/dVg4dmGda+jqr3mJW/8Voqn8paZyfnL1hfnJifdSqeybqR0Urv/722Zvt8r91+3fXxWr9vaH9m5NsTRrna+c7m/9/PP7T4eTtfJ55uFj34fTCwvHJiOHkQB5ftn7q+r5lvEyfHf9ju1uf/9uKfbL6PxwR2UH8SEQ8GhGPFWV/PCKeiIjdN6njzy/duv6R9qj9z0TMtLz+XTv+m9r/zgMDR376vl3+t9f++/LQWLEmv/7dQqviZJeL5gKu5LsDAACAe0Wa/wY+ScevhdN0fLz+G/7t8b+0Nje/8PShufePzcT5LfXxz7Qc6RopxkNrs7XqZLJYfGJ9fHSqGCsux0v3FuPGXw5syOPjlbnaTI/rDv1uY5vzP/PnQK9LB3TZhpZrp4bvekGAHmieR0+XR0+/ES4GsFb5vzb0r/L8b/O83/g/GGCNcf+H/tXq/D/dFDcXAGuT+z/0L+c/9Kn0xxXs7KkA7nXu/9CXVvK//i4G1q+OYvQmsFobJQ9ElIF0VZRHoEuBXl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuPfAAAA//+Pc+dq") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x5, 0x2000, 0xffffffffffffffff}, {0xffffffff, 0x6, 0x9, 0x6}], ['\x00']}) 6.95444ms ago: executing program 3 (id=227): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) 0s ago: executing program 1 (id=228): mkdirat(0xffffffffffffff9c, 0x0, 0x19) io_uring_setup(0x63c8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000080)={r7}) ioprio_get$uid(0x3, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008880) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 73.476489][ T5759] cgroup: Unknown subsys name 'net' [ 73.611906][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.054014][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.498571][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.505563][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.515823][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.523854][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.531593][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.532129][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.540463][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.548407][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.562057][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.565729][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.571364][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.584253][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.592472][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.600951][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.603178][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.610652][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.622094][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.623170][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.636496][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.645032][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.646544][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.652871][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.660491][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.675379][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.066512][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 77.204999][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.213279][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.220789][ T5772] bridge_slave_0: entered allmulticast mode [ 77.227626][ T5772] bridge_slave_0: entered promiscuous mode [ 77.239020][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 77.250095][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.257768][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.265065][ T5772] bridge_slave_1: entered allmulticast mode [ 77.272012][ T5772] bridge_slave_1: entered promiscuous mode [ 77.290990][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.317300][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 77.330628][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.388020][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.443561][ T5772] team0: Port device team_slave_0 added [ 77.464387][ T5772] team0: Port device team_slave_1 added [ 77.531527][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.538712][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.564870][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.587498][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.594757][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.602054][ T5774] bridge_slave_0: entered allmulticast mode [ 77.609693][ T5774] bridge_slave_0: entered promiscuous mode [ 77.617345][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.624426][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.631961][ T5773] bridge_slave_0: entered allmulticast mode [ 77.638723][ T5773] bridge_slave_0: entered promiscuous mode [ 77.663797][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.671168][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.697284][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.710806][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.718207][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.725592][ T5774] bridge_slave_1: entered allmulticast mode [ 77.732261][ T5774] bridge_slave_1: entered promiscuous mode [ 77.745784][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.752906][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.760329][ T5773] bridge_slave_1: entered allmulticast mode [ 77.767639][ T5773] bridge_slave_1: entered promiscuous mode [ 77.788983][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.797964][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.805177][ T5771] bridge_slave_0: entered allmulticast mode [ 77.812009][ T5771] bridge_slave_0: entered promiscuous mode [ 77.821740][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.829057][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.836826][ T5771] bridge_slave_1: entered allmulticast mode [ 77.843519][ T5771] bridge_slave_1: entered promiscuous mode [ 77.876086][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.897531][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.909503][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.927539][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.961208][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.972179][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.004055][ T5772] hsr_slave_0: entered promiscuous mode [ 78.010453][ T5772] hsr_slave_1: entered promiscuous mode [ 78.047572][ T5773] team0: Port device team_slave_0 added [ 78.057674][ T5771] team0: Port device team_slave_0 added [ 78.074813][ T5774] team0: Port device team_slave_0 added [ 78.082949][ T5771] team0: Port device team_slave_1 added [ 78.090935][ T5773] team0: Port device team_slave_1 added [ 78.124262][ T5774] team0: Port device team_slave_1 added [ 78.149668][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.156962][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.183267][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.218316][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.225352][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.251314][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.272872][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.279961][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.306122][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.327057][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.334043][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.362740][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.374441][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.381634][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.407723][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.424916][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.432282][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.458387][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.603332][ T5774] hsr_slave_0: entered promiscuous mode [ 78.611356][ T5774] hsr_slave_1: entered promiscuous mode [ 78.617637][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.625605][ T5774] Cannot create hsr debugfs directory [ 78.636255][ T5773] hsr_slave_0: entered promiscuous mode [ 78.643156][ T5773] hsr_slave_1: entered promiscuous mode [ 78.649902][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.657856][ T5773] Cannot create hsr debugfs directory [ 78.666341][ T5778] Bluetooth: hci0: command tx timeout [ 78.678394][ T5771] hsr_slave_0: entered promiscuous mode [ 78.684798][ T5771] hsr_slave_1: entered promiscuous mode [ 78.691221][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.698861][ T5771] Cannot create hsr debugfs directory [ 78.745318][ T51] Bluetooth: hci1: command tx timeout [ 78.745575][ T5780] Bluetooth: hci3: command tx timeout [ 78.751039][ T5778] Bluetooth: hci2: command tx timeout [ 78.949367][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.990241][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.001402][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.037895][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.137778][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.156054][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.168411][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.190247][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.256657][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.271776][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.281802][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.293406][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.370122][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.411359][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.420749][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.432241][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.458038][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.482811][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.514596][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.521891][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.549311][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.556500][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.619713][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.679086][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.702964][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.710192][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.721741][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.749083][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.756235][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.782228][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.804869][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.826348][ T4622] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.833527][ T4622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.866916][ T4622] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.874098][ T4622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.889997][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.981437][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.988671][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.094297][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.101530][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.163777][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.313203][ T5772] veth0_vlan: entered promiscuous mode [ 80.348523][ T5772] veth1_vlan: entered promiscuous mode [ 80.424314][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.483009][ T5772] veth0_macvtap: entered promiscuous mode [ 80.510439][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.543474][ T5772] veth1_macvtap: entered promiscuous mode [ 80.573314][ T5771] veth0_vlan: entered promiscuous mode [ 80.611402][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.636765][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.654973][ T5773] veth0_vlan: entered promiscuous mode [ 80.680885][ T5771] veth1_vlan: entered promiscuous mode [ 80.699636][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.716981][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.727435][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.737028][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.746366][ T5778] Bluetooth: hci0: command tx timeout [ 80.752886][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.769437][ T5773] veth1_vlan: entered promiscuous mode [ 80.826306][ T5780] Bluetooth: hci2: command tx timeout [ 80.827397][ T51] Bluetooth: hci1: command tx timeout [ 80.831840][ T5778] Bluetooth: hci3: command tx timeout [ 80.934357][ T5771] veth0_macvtap: entered promiscuous mode [ 80.952865][ T5771] veth1_macvtap: entered promiscuous mode [ 80.972248][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.983204][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.017183][ T5773] veth0_macvtap: entered promiscuous mode [ 81.024062][ T5774] veth0_vlan: entered promiscuous mode [ 81.046289][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.058473][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.073620][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.084182][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.084682][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.095245][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.113683][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.122583][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.131997][ T5774] veth1_vlan: entered promiscuous mode [ 81.149130][ T5773] veth1_macvtap: entered promiscuous mode [ 81.176474][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.189953][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.199668][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.211247][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.250173][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.261264][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.272493][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.284664][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.311432][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.330978][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.342180][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.363924][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.382689][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.401627][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.442824][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.452679][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.463592][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.473847][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.649803][ T5774] veth0_macvtap: entered promiscuous mode [ 82.215763][ T5774] veth1_macvtap: entered promiscuous mode [ 82.234928][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.282754][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.376452][ T5844] syz.3.5[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.442626][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.465362][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.485768][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.509579][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.537303][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.565655][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.581875][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.605793][ T4622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.640276][ T4622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.651553][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.663704][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.675254][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.685998][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.696294][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.707778][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.723798][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.790456][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.802474][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.817756][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.827507][ T5778] Bluetooth: hci0: command tx timeout [ 82.834678][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.865601][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.873477][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.907496][ T5778] Bluetooth: hci1: command tx timeout [ 82.907516][ T51] Bluetooth: hci3: command tx timeout [ 82.913443][ T5778] Bluetooth: hci2: command tx timeout [ 83.030016][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.038097][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.160105][ T5844] loop3: detected capacity change from 0 to 40427 [ 83.172498][ T5847] loop1: detected capacity change from 0 to 128 [ 83.193920][ T5844] F2FS-fs (loop3): invalid crc value [ 83.213285][ T5844] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.237305][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.261690][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.366721][ T5847] syz.1.2: attempt to access beyond end of device [ 83.366721][ T5847] loop1: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 83.396206][ T4622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.404519][ T4622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.435817][ T5844] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 83.487339][ T5852] loop2: detected capacity change from 0 to 4096 [ 83.524372][ T5852] EXT4-fs: inline encryption not supported [ 83.632206][ T5852] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.671690][ T5852] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=84ec118, mo2=0003] [ 83.702441][ T5854] syz.1.2: attempt to access beyond end of device [ 83.702441][ T5854] loop1: rw=2049, sector=138, nr_sectors = 32 limit=128 [ 83.756739][ T5852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.821427][ T5854] syz.1.2: attempt to access beyond end of device [ 83.821427][ T5854] loop1: rw=2049, sector=186, nr_sectors = 64 limit=128 [ 84.674354][ T5861] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.692397][ T5846] syz.1.2: attempt to access beyond end of device [ 84.692397][ T5846] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 84.723130][ T5772] syz-executor: attempt to access beyond end of device [ 84.723130][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 84.784101][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 84.808877][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 84.840291][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 84.915490][ T5778] Bluetooth: hci0: command tx timeout [ 84.985482][ T5778] Bluetooth: hci3: command tx timeout [ 84.991052][ T5778] Bluetooth: hci2: command tx timeout [ 85.050161][ T5778] Bluetooth: hci1: command tx timeout [ 85.636772][ T5871] loop0: detected capacity change from 0 to 512 [ 85.644202][ T5871] EXT4-fs: Ignoring removed orlov option [ 85.726650][ T5868] 9pnet_fd: Insufficient options for proto=fd [ 85.772229][ T5871] EXT4-fs (loop0): 1 truncate cleaned up [ 85.813205][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.830002][ T5871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.954186][ T5871] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8'. [ 91.367219][ T171] cfg80211: failed to load regulatory.db [ 91.430655][ T5774] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 91.477241][ T5774] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 91.776992][ T5887] loop2: detected capacity change from 0 to 2048 [ 91.916859][ T5887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.056288][ T5887] EXT4-fs error (device loop2): ext4_find_extent:945: inode #2: comm syz.2.9: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 92.252549][ T5887] EXT4-fs (loop2): Remounting filesystem read-only [ 92.585111][ C0] sched: RT throttling activated [ 93.410651][ T5774] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 93.430222][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.439531][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.462739][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.520584][ T5898] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.645592][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 93.676454][ T23] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 93.705042][ T23] usb 2-1: config 0 has no interface number 0 [ 93.728561][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 93.745603][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.763840][ T23] usb 2-1: Product: syz [ 93.771142][ T23] usb 2-1: Manufacturer: syz [ 93.785204][ T23] usb 2-1: SerialNumber: syz [ 93.818333][ T23] usb 2-1: config 0 descriptor?? [ 93.847972][ T23] smsc95xx v2.0.0 [ 94.264687][ T5910] loop0: detected capacity change from 0 to 256 [ 94.274008][ T5910] ======================================================= [ 94.274008][ T5910] WARNING: The mand mount option has been deprecated and [ 94.274008][ T5910] and is ignored by this kernel. Remove the mand [ 94.274008][ T5910] option from the mount to silence this warning. [ 94.274008][ T5910] ======================================================= [ 94.342988][ T23] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 94.343998][ T5900] loop2: detected capacity change from 0 to 40427 [ 94.362163][ T23] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 94.366605][ T5900] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 94.403934][ T5910] exfat: Deprecated parameter 'utf8' [ 94.411464][ T5910] exfat: Deprecated parameter 'namecase' [ 94.421902][ T5910] exfat: Deprecated parameter 'utf8' [ 94.432677][ T5900] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 94.451910][ T5900] F2FS-fs (loop2): invalid crc value [ 94.512627][ T5910] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 94.689373][ T5900] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 94.699793][ T5900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.805268][ T787] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.827577][ T5918] loop0: detected capacity change from 0 to 128 [ 94.832951][ T5900] syz.2.14: attempt to access beyond end of device [ 94.832951][ T5900] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 94.853486][ T5918] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.872942][ T5918] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.015571][ T787] usb 4-1: Using ep0 maxpacket: 16 [ 95.029103][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 95.040990][ T787] usb 4-1: config 0 has no interfaces? [ 95.046633][ T787] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 95.056039][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.074229][ T787] usb 4-1: config 0 descriptor?? [ 95.075507][ T5773] syz-executor: attempt to access beyond end of device [ 95.075507][ T5773] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 95.104994][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 95.112792][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 95.221982][ T23] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 95.240220][ T23] smsc95xx: probe of 2-1:0.67 failed with error -32 [ 95.245452][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.255029][ T23] usb 2-1: USB disconnect, device number 2 [ 95.322665][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.340999][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.366620][ T787] usb 4-1: USB disconnect, device number 2 [ 95.445684][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 95.454432][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.467108][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.477377][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.489796][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 95.499308][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.508416][ T9] usb 1-1: Product: syz [ 95.512843][ T9] usb 1-1: Manufacturer: syz [ 95.517844][ T9] usb 1-1: SerialNumber: syz [ 96.070338][ T28] audit: type=1800 audit(1784659310.008:2): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 96.465794][ T9] usb 1-1: USB disconnect, device number 2 [ 96.548952][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.733542][ T5927] overlayfs: missing 'workdir' [ 96.738951][ T5928] loop3: detected capacity change from 0 to 512 [ 96.739972][ T5928] EXT4-fs: Ignoring removed orlov option [ 96.787422][ T5928] EXT4-fs (loop3): 1 truncate cleaned up [ 96.824698][ T5928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.957041][ T5928] netlink: 68 bytes leftover after parsing attributes in process `syz.3.21'. [ 97.654748][ T5929] loop1: detected capacity change from 0 to 40427 [ 97.705287][ T5929] F2FS-fs (loop1): invalid crc value [ 97.732992][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.779469][ T5929] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.992733][ T5929] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 99.104406][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.360158][ T5771] syz-executor: attempt to access beyond end of device [ 99.360158][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 99.368869][ T5945] loop3: detected capacity change from 0 to 512 [ 99.382203][ T5945] EXT4-fs: Ignoring removed oldalloc option [ 99.391009][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 99.399937][ T5945] EXT4-fs (loop3): Test dummy encryption mode enabled [ 99.407277][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 99.487531][ T5945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.682911][ T5932] loop2: detected capacity change from 0 to 40427 [ 99.719642][ T5932] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 99.742647][ T5932] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.765986][ T5932] F2FS-fs (loop2): Image doesn't support compression [ 99.779555][ T5932] F2FS-fs (loop2): Image doesn't support compression [ 99.799215][ T5932] F2FS-fs (loop2): invalid crc value [ 100.014085][ T5932] F2FS-fs (loop2): Start checkpoint disabled! [ 100.077115][ T5932] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 100.095729][ T5945] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 100.105352][ T5932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 101.445529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.809991][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.071357][ T5970] overlayfs: missing 'workdir' [ 102.222806][ T5972] loop1: detected capacity change from 0 to 4096 [ 102.263404][ T5972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.462989][ T5979] loop3: detected capacity change from 0 to 16 [ 102.488852][ T5979] erofs: (device loop3): mounted with root inode @ nid 36. [ 102.905611][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.218623][ T28] audit: type=1800 audit(1784659317.168:3): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.33" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 103.376767][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.521620][ T5990] netlink: 'syz.0.30': attribute type 13 has an invalid length. [ 103.775311][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.977809][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.192556][ T5998] loop1: detected capacity change from 0 to 2048 [ 104.409619][ T5998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.450051][ T5998] EXT4-fs error (device loop1): ext4_find_extent:945: inode #2: comm syz.1.38: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 104.480904][ T5998] EXT4-fs (loop1): Remounting filesystem read-only [ 104.701030][ T5986] loop3: detected capacity change from 0 to 40427 [ 104.764509][ T5986] F2FS-fs (loop3): invalid crc value [ 106.597289][ T5986] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4) [ 106.619223][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.625955][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.713654][ T8] usb 3-1: string descriptor 0 read error: -71 [ 106.756377][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 106.844288][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 106.895960][ T6008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.40'. [ 106.908176][ T8] usb 3-1: can't set config #1, error -71 [ 106.961132][ T8] usb 3-1: USB disconnect, device number 2 [ 107.125659][ T6014] loop3: detected capacity change from 0 to 2048 [ 107.300697][ T6014] loop3: p1 p2 p3 [ 107.300697][ T6014] p1: [ 107.309714][ T6014] loop3: p1 size 16779263 extends beyond EOD, truncated [ 107.321830][ T6014] loop3: p2 size 458752 extends beyond EOD, truncated [ 107.336303][ T6014] loop3: p3 start 3036741376 is beyond EOD, truncated [ 107.656470][ T5139] loop3: p1 p2 p3 [ 107.656470][ T5139] p1: [ 107.734733][ T5139] loop3: p1 size 16779263 extends beyond EOD, truncated [ 107.876683][ T5139] loop3: p2 size 458752 extends beyond EOD, truncated [ 107.902993][ T5139] loop3: p3 start 3036741376 is beyond EOD, truncated [ 108.188625][ T6025] loop1: detected capacity change from 0 to 16 [ 108.208186][ T6025] erofs: (device loop1): mounted with root inode @ nid 36. [ 108.245948][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.400215][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.439304][ T5766] udevd[5766]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 108.492391][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.531578][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 108.571918][ T5766] udevd[5766]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 108.593557][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.618909][ T8] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 108.659955][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.700155][ T8] usb 3-1: Product: syz [ 108.734893][ T8] usb 3-1: Manufacturer: syz [ 108.760655][ T8] usb 3-1: SerialNumber: syz [ 108.865357][ T5764] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.260600][ T8] usb 3-1: USB disconnect, device number 3 [ 109.333853][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.542232][ T6052] loop1: detected capacity change from 0 to 512 [ 110.582025][ T6052] EXT4-fs: inline encryption not supported [ 110.633110][ T6052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 110.671079][ T6052] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 110.689750][ T6052] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 110.729193][ T6052] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 110.765376][ T6052] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 110.785519][ T6052] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.804787][ T6052] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.52: bg 0: block 34: padding at end of block bitmap is not set [ 110.831080][ T6052] Quota error (device loop1): write_blk: dquota write failed [ 110.843770][ T6052] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 110.854413][ T6052] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.52: Failed to acquire dquot type 1 [ 110.891304][ T6052] EXT4-fs (loop1): 1 truncate cleaned up [ 110.908009][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.018669][ T6052] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.52: deleted inode referenced: 12 [ 111.040419][ T6052] syz.1.52 (6052) used greatest stack depth: 20912 bytes left [ 111.079271][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.406785][ T6061] loop1: detected capacity change from 0 to 2048 [ 111.554954][ T6061] loop1: p1 p2 p3 [ 111.554954][ T6061] p1: [ 111.563283][ T6061] loop1: p1 size 16779263 extends beyond EOD, truncated [ 111.578046][ T6061] loop1: p2 size 458752 extends beyond EOD, truncated [ 111.607725][ T6061] loop1: p3 start 3036741376 is beyond EOD, truncated [ 112.180490][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 112.206019][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 113.050509][ T6070] loop0: detected capacity change from 0 to 16 [ 113.344817][ T6070] erofs: (device loop0): mounted with root inode @ nid 36. [ 114.156550][ T5814] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.068676][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.119339][ T5814] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.149937][ T5814] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 115.180715][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.256337][ T5814] usb 2-1: config 0 descriptor?? [ 115.400895][ T6096] loop2: detected capacity change from 0 to 2048 [ 115.428519][ T6096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.811778][ T5814] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 115.914250][ T5814] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 116.253977][ T6110] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 116.270825][ T6110] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 116.283614][ T6110] EXT4-fs (loop2): This should not happen!! Data will be lost [ 116.283614][ T6110] [ 116.294438][ T6110] EXT4-fs (loop2): Total free blocks count 0 [ 116.300831][ T6110] EXT4-fs (loop2): Free/Dirty block details [ 116.307002][ T6110] EXT4-fs (loop2): free_blocks=2415919504 [ 116.312935][ T6110] EXT4-fs (loop2): dirty_blocks=48 [ 116.318202][ T6110] EXT4-fs (loop2): Block reservation details [ 116.324306][ T6110] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 116.367728][ T5814] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 116.399255][ T6105] loop0: detected capacity change from 0 to 2048 [ 116.510319][ T5814] usb 2-1: USB disconnect, device number 3 [ 116.529645][ T5814] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 116.625657][ T6105] loop0: p1 p2 p3 [ 116.625657][ T6105] p1: [ 116.647138][ T6105] loop0: p1 size 16779263 extends beyond EOD, truncated [ 116.672383][ T6112] fido_id[6112]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 116.676618][ T6105] loop0: p2 size 458752 extends beyond EOD, truncated [ 116.743274][ T6105] loop0: p3 start 3036741376 is beyond EOD, truncated [ 116.798114][ T6116] loop3: detected capacity change from 0 to 16 [ 116.981903][ T6116] erofs: (device loop3): mounted with root inode @ nid 36. [ 117.712324][ T6118] loop3: detected capacity change from 0 to 256 [ 118.367441][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.675058][ T6140] loop9: detected capacity change from 0 to 7 [ 119.896935][ T6140] Dev loop9: unable to read RDB block 7 [ 119.902681][ T6140] loop9: unable to read partition table [ 119.916297][ T6140] loop9: partition table beyond EOD, truncated [ 119.938579][ T6140] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 120.505016][ T6150] loop1: detected capacity change from 0 to 16 [ 120.682588][ T6150] erofs: (device loop1): mounted with root inode @ nid 36. [ 121.255201][ T5813] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.374930][ T6157] loop1: detected capacity change from 0 to 128 [ 121.382906][ T6159] loop2: detected capacity change from 0 to 512 [ 121.393363][ T6159] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.409918][ T6157] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 121.434623][ T6159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.451297][ T6157] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.455332][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 121.460825][ T6159] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.538492][ T5813] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 121.579478][ T5813] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.586667][ T6163] loop3: detected capacity change from 0 to 512 [ 121.597117][ T6163] EXT4-fs: Ignoring removed orlov option [ 121.651806][ T5813] usb 1-1: config 0 has no interface number 0 [ 121.662072][ T6163] EXT4-fs (loop3): 1 truncate cleaned up [ 121.694897][ T5813] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 121.737747][ T6163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.780626][ T5813] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 121.801499][ T6163] netlink: 68 bytes leftover after parsing attributes in process `syz.3.80'. [ 121.804204][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.855214][ T5813] usb 1-1: Product: syz [ 121.859565][ T5813] usb 1-1: Manufacturer: syz [ 121.864183][ T5813] usb 1-1: SerialNumber: syz [ 121.898090][ T5813] usb 1-1: config 0 descriptor?? [ 121.912623][ T5813] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 121.942686][ T5813] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 122.999557][ T6166] loop1: detected capacity change from 0 to 16 [ 123.015804][ T6166] erofs: (device loop1): mounted with root inode @ nid 36. [ 124.269131][ T5772] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 124.320453][ T5772] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 124.355580][ T5772] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 124.410557][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.425234][ T5813] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 124.433134][ T5813] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 124.453992][ T5766] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 124.456815][ T5813] usb 1-1: USB disconnect, device number 3 [ 124.586735][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.697125][ T6178] binder: 6177:6178 unknown command 0 [ 124.702575][ T6178] binder: 6177:6178 ioctl c0306201 200000000080 returned -22 [ 125.408203][ T6185] loop1: detected capacity change from 0 to 16 [ 125.606288][ T6185] erofs: (device loop1): mounted with root inode @ nid 36. [ 126.076503][ T6193] loop2: detected capacity change from 0 to 16 [ 126.134885][ T6193] erofs: (device loop2): mounted with root inode @ nid 36. [ 127.290732][ T6201] loop1: detected capacity change from 0 to 2048 [ 127.511949][ T6201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.548623][ T6201] EXT4-fs error (device loop1): ext4_ext_precache:637: inode #2: comm syz.1.89: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 127.588137][ T6201] EXT4-fs (loop1): Remounting filesystem read-only [ 129.015701][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.860098][ T6219] loop3: detected capacity change from 0 to 2048 [ 130.078590][ T6219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.119803][ T6219] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.94: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 130.156001][ T6219] EXT4-fs (loop3): Remounting filesystem read-only [ 131.579390][ T6225] loop1: detected capacity change from 0 to 16 [ 131.654197][ T6225] erofs: (device loop1): mounted with root inode @ nid 36. [ 131.883844][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.369025][ T6231] loop1: detected capacity change from 0 to 16 [ 133.130289][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.155166][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.204326][ T6231] erofs: (device loop1): mounted with root inode @ nid 36. [ 133.750716][ T6241] loop3: detected capacity change from 0 to 16 [ 133.766455][ T6241] erofs: (device loop3): mounted with root inode @ nid 36. [ 134.481560][ T6239] x_tables: duplicate underflow at hook 1 [ 134.485277][ T5764] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.509256][ T6239] loop1: detected capacity change from 0 to 1024 [ 134.523708][ T6239] EXT4-fs: inline encryption not supported [ 134.683839][ T6247] loop2: detected capacity change from 0 to 16 [ 134.994499][ T6247] erofs: (device loop2): mounted with root inode @ nid 36. [ 135.010161][ T6239] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.129853][ T6239] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.100: lblock 1 mapped to illegal pblock 1 (length 1) [ 135.152617][ T6239] EXT4-fs (loop1): Remounting filesystem read-only [ 135.159486][ T6239] Quota error (device loop1): write_blk: dquota write failed [ 135.167108][ T6239] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 135.179537][ T6239] EXT4-fs (loop1): 1 orphan inode deleted [ 135.191232][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.921242][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.728223][ T6266] loop1: detected capacity change from 0 to 2048 [ 138.851442][ T6265] loop0: detected capacity change from 0 to 16 [ 138.909120][ T6265] erofs: (device loop0): mounted with root inode @ nid 36. [ 139.003181][ T6266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.043419][ T6266] EXT4-fs error (device loop1): ext4_find_extent:945: inode #2: comm syz.1.104: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 139.114241][ T6266] EXT4-fs (loop1): Remounting filesystem read-only [ 139.512099][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.752390][ T6278] loop0: detected capacity change from 0 to 16 [ 139.913453][ T6278] erofs: (device loop0): mounted with root inode @ nid 36. [ 142.003395][ T6287] loop0: detected capacity change from 0 to 16 [ 142.059828][ T6289] loop3: detected capacity change from 0 to 16 [ 142.156621][ T6290] x_tables: duplicate underflow at hook 1 [ 142.173931][ T6290] loop1: detected capacity change from 0 to 1024 [ 142.181824][ T6290] EXT4-fs: inline encryption not supported [ 142.773731][ T6290] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.839371][ T6290] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.112: lblock 1 mapped to illegal pblock 1 (length 1) [ 142.863769][ T6290] EXT4-fs (loop1): Remounting filesystem read-only [ 142.871055][ T6290] Quota error (device loop1): write_blk: dquota write failed [ 142.878750][ T6290] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 142.888901][ T6290] EXT4-fs (loop1): 1 orphan inode deleted [ 142.895990][ T6290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.544221][ T6287] erofs: (device loop0): mounted with root inode @ nid 36. [ 145.558566][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.594408][ T6289] erofs: (device loop3): mounted with root inode @ nid 36. [ 146.043921][ T6309] loop3: detected capacity change from 0 to 16 [ 146.112380][ T6309] erofs: (device loop3): mounted with root inode @ nid 36. [ 146.245947][ T6310] loop0: detected capacity change from 0 to 512 [ 146.844637][ T6310] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.116: inode has both inline data and extents flags [ 146.859535][ T6310] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.116: couldn't read orphan inode 15 (err -117) [ 146.875942][ T6310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.998236][ T6300] loop2: detected capacity change from 0 to 2048 [ 147.179589][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.211362][ T6300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.278659][ T6317] loop3: detected capacity change from 0 to 512 [ 147.386463][ T6317] EXT4-fs: inline encryption not supported [ 147.428924][ T6317] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 147.485423][ T6317] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.120: corrupted in-inode xattr: e_value size too large [ 147.519472][ T6317] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.120: couldn't read orphan inode 15 (err -117) [ 147.622238][ T6317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.774115][ T6320] autofs4:pid:6320:autofs_fill_super: called with bogus options [ 147.890004][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.042391][ T6326] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 148.058383][ T6326] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 148.070769][ T6326] EXT4-fs (loop2): This should not happen!! Data will be lost [ 148.070769][ T6326] [ 148.080602][ T6326] EXT4-fs (loop2): Total free blocks count 0 [ 148.086653][ T6326] EXT4-fs (loop2): Free/Dirty block details [ 148.092758][ T6326] EXT4-fs (loop2): free_blocks=2415919504 [ 148.098769][ T6326] EXT4-fs (loop2): dirty_blocks=48 [ 148.104016][ T6326] EXT4-fs (loop2): Block reservation details [ 148.110366][ T6326] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 148.562623][ T6332] Zero length message leads to an empty skb [ 149.200676][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.786791][ T6343] loop0: detected capacity change from 0 to 2048 [ 150.637427][ T6343] loop0: p1 p2 p3 [ 150.637427][ T6343] p1: [ 150.644908][ T6343] loop0: p1 size 16779263 extends beyond EOD, truncated [ 150.655839][ T6343] loop0: p2 size 458752 extends beyond EOD, truncated [ 150.675613][ T6343] loop0: p3 start 3036741376 is beyond EOD, truncated [ 150.825904][ T6347] x_tables: duplicate underflow at hook 1 [ 150.843351][ T6347] loop2: detected capacity change from 0 to 1024 [ 150.850944][ T6347] EXT4-fs: inline encryption not supported [ 150.867703][ T6347] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.928203][ T6347] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #3: block 1: comm syz.2.128: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.945347][ T6347] EXT4-fs (loop2): Remounting filesystem read-only [ 150.951917][ T6347] Quota error (device loop2): write_blk: dquota write failed [ 150.959542][ T6347] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 150.969750][ T6347] EXT4-fs (loop2): 1 orphan inode deleted [ 150.976852][ T6347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.998113][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 153.021848][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 155.240614][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.551142][ T6363] loop2: detected capacity change from 0 to 16 [ 155.570084][ T6363] erofs: (device loop2): mounted with root inode @ nid 36. [ 156.214879][ T6364] loop1: detected capacity change from 0 to 512 [ 156.222333][ T6364] EXT4-fs: Ignoring removed orlov option [ 156.344839][ T6366] loop3: detected capacity change from 0 to 2048 [ 156.392840][ T6364] EXT4-fs (loop1): 1 truncate cleaned up [ 156.406392][ T6364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.450822][ T6366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.508109][ T6364] netlink: 68 bytes leftover after parsing attributes in process `syz.1.133'. [ 157.122355][ T6370] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 157.386709][ T6375] autofs4:pid:6375:autofs_fill_super: called with bogus options [ 158.751115][ T5771] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 158.942683][ T6381] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 158.963587][ T5771] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 158.983575][ T6369] loop2: detected capacity change from 0 to 40427 [ 158.988531][ T5771] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 159.025143][ T6381] EXT4-fs (loop3): This should not happen!! Data will be lost [ 159.025143][ T6381] [ 159.046006][ T6381] EXT4-fs (loop3): Total free blocks count 0 [ 159.052050][ T6381] EXT4-fs (loop3): Free/Dirty block details [ 159.065256][ T6381] EXT4-fs (loop3): free_blocks=2415919504 [ 159.081410][ T6381] EXT4-fs (loop3): dirty_blocks=48 [ 159.091609][ T6381] EXT4-fs (loop3): Block reservation details [ 159.110984][ T6381] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 159.114151][ T6369] F2FS-fs (loop2): invalid crc value [ 159.169150][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.191127][ T6369] F2FS-fs (loop2): Found nat_bits in checkpoint [ 159.332510][ T6369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 159.378007][ T6391] loop0: detected capacity change from 0 to 16 [ 159.393172][ T6391] erofs: (device loop0): mounted with root inode @ nid 36. [ 159.429434][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.382498][ T6402] x_tables: duplicate underflow at hook 1 [ 161.399970][ T6402] loop2: detected capacity change from 0 to 1024 [ 161.407543][ T6402] EXT4-fs: inline encryption not supported [ 161.485309][ T6402] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 161.531307][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.541061][ T6402] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #3: block 1: comm syz.2.139: lblock 1 mapped to illegal pblock 1 (length 1) [ 161.566493][ T6402] EXT4-fs (loop2): Remounting filesystem read-only [ 161.573106][ T6402] Quota error (device loop2): write_blk: dquota write failed [ 161.580830][ T6402] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 161.591027][ T6402] EXT4-fs (loop2): 1 orphan inode deleted [ 161.598143][ T6402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.789028][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.483635][ T6414] loop2: detected capacity change from 0 to 2048 [ 163.652214][ T6414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.690063][ T6414] EXT4-fs error (device loop2): ext4_find_extent:945: inode #2: comm syz.2.143: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 163.788828][ T6414] EXT4-fs (loop2): Remounting filesystem read-only [ 164.508780][ T6412] autofs4:pid:6412:autofs_fill_super: called with bogus options [ 165.176730][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.816328][ T6426] loop1: detected capacity change from 0 to 16 [ 166.001278][ T6426] erofs: (device loop1): mounted with root inode @ nid 36. [ 166.482833][ T6430] loop2: detected capacity change from 0 to 512 [ 166.518135][ T6430] EXT4-fs: Ignoring removed orlov option [ 166.553909][ T6430] EXT4-fs (loop2): 1 truncate cleaned up [ 166.593541][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.640417][ T6430] netlink: 68 bytes leftover after parsing attributes in process `syz.2.147'. [ 167.174222][ T5835] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.596130][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 167.617387][ T5835] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 167.638843][ T5835] usb 2-1: config 0 has no interface number 0 [ 167.651324][ T5835] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 167.670918][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.691783][ T5835] usb 2-1: Product: syz [ 167.710082][ T5835] usb 2-1: Manufacturer: syz [ 167.725437][ T5835] usb 2-1: SerialNumber: syz [ 167.772057][ T5835] usb 2-1: config 0 descriptor?? [ 167.794148][ T5835] smsc95xx v2.0.0 [ 167.819898][ T6429] loop0: detected capacity change from 0 to 40427 [ 167.849150][ T6429] F2FS-fs (loop0): invalid crc value [ 167.874412][ T6429] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.064516][ T6429] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 168.640909][ T5774] syz-executor: attempt to access beyond end of device [ 168.640909][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.683002][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.693959][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 169.082250][ T5835] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 169.114899][ T5835] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 169.135656][ T5835] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 169.165735][ T5835] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 169.197857][ T5835] usb 2-1: USB disconnect, device number 4 [ 169.442734][ T6457] autofs4:pid:6457:autofs_fill_super: called with bogus options [ 169.889336][ T6463] loop0: detected capacity change from 0 to 2048 [ 172.173757][ T6463] loop0: p1 p2 p3 [ 172.173757][ T6463] p1: [ 172.181500][ T6463] loop0: p1 size 16779263 extends beyond EOD, truncated [ 172.190355][ T6463] loop0: p2 size 458752 extends beyond EOD, truncated [ 172.198709][ T6463] loop0: p3 start 3036741376 is beyond EOD, truncated [ 172.219939][ T5139] loop0: p1 p2 p3 [ 172.219939][ T5139] p1: [ 172.234915][ T5139] loop0: p1 size 16779263 extends beyond EOD, truncated [ 172.244585][ T5139] loop0: p2 size 458752 extends beyond EOD, truncated [ 172.340515][ T5139] loop0: p3 start 3036741376 is beyond EOD, truncated [ 173.389599][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 173.403493][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 173.549080][ T5764] udevd[5764]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 173.696293][ T5765] udevd[5765]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 174.287771][ T6482] loop3: detected capacity change from 0 to 512 [ 174.316373][ T6482] EXT4-fs: Ignoring removed orlov option [ 174.381857][ T6482] EXT4-fs (loop3): 1 truncate cleaned up [ 174.396395][ T6482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.476117][ T6482] netlink: 68 bytes leftover after parsing attributes in process `syz.3.160'. [ 174.711822][ T6474] loop0: detected capacity change from 0 to 40427 [ 175.100216][ T6474] F2FS-fs (loop0): invalid crc value [ 175.243351][ T6474] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.330298][ T6479] loop2: detected capacity change from 0 to 40427 [ 175.429244][ T6479] F2FS-fs (loop2): invalid crc value [ 175.575814][ T6479] F2FS-fs (loop2): Found nat_bits in checkpoint [ 175.645983][ T6474] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 176.485594][ T6479] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 176.683280][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.971943][ T5774] syz-executor: attempt to access beyond end of device [ 176.971943][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 177.007812][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.041672][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.070899][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 177.192853][ T5773] syz-executor: attempt to access beyond end of device [ 177.192853][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.441362][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 179.128631][ T6513] loop1: detected capacity change from 0 to 4096 [ 179.145880][ T6513] EXT4-fs: inline encryption not supported [ 179.306202][ T6513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 179.408371][ T6513] EXT4-fs (loop1): Test dummy encryption mode enabled [ 179.641997][ T6513] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 179.754599][ T6513] System zones: 0-5 [ 179.857082][ T6521] loop0: detected capacity change from 0 to 512 [ 179.901574][ T6513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.950620][ T6521] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 180.204833][ T6526] loop3: detected capacity change from 0 to 2048 [ 180.376917][ T6513] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 180.411059][ T6513] overlayfs: upper fs does not support tmpfile. [ 180.448175][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 180.497347][ T6513] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4 [ 180.556619][ T6526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.868505][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.213246][ T6546] loop1: detected capacity change from 0 to 16 [ 181.294691][ T6546] erofs: (device loop1): mounted with root inode @ nid 36. [ 181.885189][ T6523] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 182.072178][ T6548] loop1: detected capacity change from 0 to 512 [ 182.101422][ T6548] EXT4-fs: Ignoring removed orlov option [ 182.165910][ T6548] EXT4-fs (loop1): 1 truncate cleaned up [ 182.172882][ T6548] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.231160][ T6548] netlink: 68 bytes leftover after parsing attributes in process `syz.1.170'. [ 182.253237][ T6553] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 182.428574][ T6553] EXT4-fs (loop3): This should not happen!! Data will be lost [ 182.428574][ T6553] [ 182.452479][ T6553] EXT4-fs (loop3): Total free blocks count 0 [ 182.459027][ T6553] EXT4-fs (loop3): Free/Dirty block details [ 182.472016][ T6555] autofs4:pid:6555:autofs_fill_super: called with bogus options [ 182.479974][ T6553] EXT4-fs (loop3): free_blocks=2415919504 [ 182.494419][ T6553] EXT4-fs (loop3): dirty_blocks=48 [ 182.998950][ T6553] EXT4-fs (loop3): Block reservation details [ 183.095469][ T6553] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 184.300449][ T6560] loop2: detected capacity change from 0 to 2048 [ 184.436460][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.670646][ T6560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.729872][ T6560] EXT4-fs error (device loop2): ext4_find_extent:945: inode #2: comm syz.2.171: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 184.759925][ T6560] EXT4-fs (loop2): Remounting filesystem read-only [ 185.518030][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.209429][ T6566] loop1: detected capacity change from 0 to 16 [ 186.263317][ T6566] erofs: (device loop1): mounted with root inode @ nid 36. [ 186.374269][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.880134][ T6574] loop0: detected capacity change from 0 to 16 [ 187.041073][ T6574] erofs: (device loop0): mounted with root inode @ nid 36. [ 187.618519][ T6576] loop1: detected capacity change from 0 to 512 [ 187.656422][ T6576] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 190.043663][ T6586] loop0: detected capacity change from 0 to 16 [ 190.235344][ T6586] erofs: (device loop0): mounted with root inode @ nid 36. [ 190.540270][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 191.021620][ T6597] loop0: detected capacity change from 0 to 512 [ 191.046555][ T6597] EXT4-fs: Ignoring removed orlov option [ 191.115682][ T6597] EXT4-fs (loop0): 1 truncate cleaned up [ 191.144039][ T6597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.349534][ T6597] netlink: 68 bytes leftover after parsing attributes in process `syz.0.181'. [ 193.512507][ T6611] loop2: detected capacity change from 0 to 2048 [ 193.699548][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.736394][ T6611] EXT4-fs error (device loop2): ext4_find_extent:945: inode #2: comm syz.2.184: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 193.765515][ T6611] EXT4-fs (loop2): Remounting filesystem read-only [ 194.008850][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.514056][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.520593][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.159927][ T6620] loop1: detected capacity change from 0 to 16 [ 195.195280][ T6620] erofs: (device loop1): mounted with root inode @ nid 36. [ 195.353916][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.138262][ T6628] loop3: detected capacity change from 0 to 16 [ 196.160658][ T6628] erofs: (device loop3): mounted with root inode @ nid 36. [ 196.786172][ T5766] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.803095][ T6630] loop1: detected capacity change from 0 to 512 [ 196.836487][ T6630] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.461591][ T6659] loop0: detected capacity change from 0 to 16 [ 199.511168][ T6659] erofs: (device loop0): mounted with root inode @ nid 36. [ 199.937639][ T6647] autofs4:pid:6647:autofs_fill_super: called with bogus options [ 200.215332][ T5765] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 200.709734][ T6663] loop3: detected capacity change from 0 to 2048 [ 200.903172][ T6663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.939935][ T6663] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.197: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 200.964450][ T6663] EXT4-fs (loop3): Remounting filesystem read-only [ 202.379211][ T6671] loop0: detected capacity change from 0 to 16 [ 202.427805][ T6671] erofs: (device loop0): mounted with root inode @ nid 36. [ 202.436877][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 202.436933][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 202.442904][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 202.442932][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 202.513226][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.914302][ T6675] loop2: detected capacity change from 0 to 512 [ 202.956163][ T6675] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.834945][ T6680] loop3: detected capacity change from 0 to 128 [ 204.125742][ T6679] overlay: Bad value for 'redirect_dir' [ 204.497282][ T6687] loop0: detected capacity change from 0 to 16 [ 204.613270][ T6687] erofs: (device loop0): mounted with root inode @ nid 36. [ 206.418759][ T6703] loop3: detected capacity change from 0 to 512 [ 206.428321][ T6703] EXT4-fs (loop3): Test dummy encryption mode enabled [ 206.904127][ T6710] loop0: detected capacity change from 0 to 2048 [ 207.042461][ T6703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.207294][ T6710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.245015][ T6710] EXT4-fs error (device loop0): ext4_find_extent:945: inode #2: comm syz.0.207: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 207.291485][ T6710] EXT4-fs (loop0): Remounting filesystem read-only [ 207.575748][ T6703] EXT4-fs warning (device loop3): __ext4_ioctl:1260: Setting inode version is not supported with metadata_csum enabled. [ 207.651235][ T6714] autofs4:pid:6714:autofs_fill_super: called with bogus options [ 208.254760][ T6719] loop2: detected capacity change from 0 to 512 [ 208.276677][ T6719] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.965494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 209.176127][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.191914][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.499847][ T6732] loop3: detected capacity change from 0 to 16 [ 211.550915][ T6733] loop0: detected capacity change from 0 to 16 [ 212.104828][ T6732] erofs: (device loop3): mounted with root inode @ nid 36. [ 212.116429][ T6733] erofs: (device loop0): mounted with root inode @ nid 36. [ 212.535575][ T6740] loop3: detected capacity change from 0 to 16 [ 212.592451][ T6740] erofs: (device loop3): mounted with root inode @ nid 36. [ 213.573980][ T6744] loop0: detected capacity change from 0 to 512 [ 213.592040][ T6744] EXT4-fs: Ignoring removed orlov option [ 213.772399][ T6744] EXT4-fs (loop0): 1 truncate cleaned up [ 213.815804][ T6744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.910699][ T6744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.218'. [ 217.636824][ T6747] autofs4:pid:6747:autofs_fill_super: called with bogus options [ 217.983264][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.212009][ T6758] loop3: detected capacity change from 0 to 2048 [ 218.412013][ T6758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.448605][ T6758] EXT4-fs error (device loop3): ext4_find_extent:945: inode #2: comm syz.3.220: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 218.475251][ T6758] EXT4-fs (loop3): Remounting filesystem read-only [ 219.456258][ T6765] loop0: detected capacity change from 0 to 512 [ 219.463908][ T6765] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.907223][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.649840][ T6778] loop2: detected capacity change from 0 to 16 [ 223.715568][ T6779] loop3: detected capacity change from 0 to 16 [ 223.776217][ T6780] loop1: detected capacity change from 0 to 16 [ 224.060228][ T6778] erofs: (device loop2): mounted with root inode @ nid 36. [ 224.093863][ T6779] erofs: (device loop3): mounted with root inode @ nid 36. [ 224.113878][ T6780] erofs: (device loop1): mounted with root inode @ nid 36. [ 224.392567][ T6785] loop2: detected capacity change from 0 to 512 [ 224.497265][ T6785] [ 224.499659][ T6785] ====================================================== [ 224.506692][ T6785] WARNING: possible circular locking dependency detected [ 224.513755][ T6785] syzkaller #0 Not tainted [ 224.518182][ T6785] ------------------------------------------------------ [ 224.525198][ T6785] syz.2.226/6785 is trying to acquire lock: [ 224.531091][ T6785] ffff888059158c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 224.541133][ T6785] [ 224.541133][ T6785] but task is already holding lock: [ 224.548489][ T6785] ffff88805dd614c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 224.558340][ T6785] [ 224.558340][ T6785] which lock already depends on the new lock. [ 224.558340][ T6785] [ 224.568737][ T6785] [ 224.568737][ T6785] the existing dependency chain (in reverse order) is: [ 224.577745][ T6785] [ 224.577745][ T6785] -> #1 (&ei->xattr_sem){++++}-{3:3}: [ 224.585299][ T6785] down_write+0x97/0x200 [ 224.590062][ T6785] ext4_destroy_inline_data+0x28/0xe0 [ 224.595953][ T6785] ext4_do_writepages+0x4f2/0x3990 [ 224.601614][ T6785] ext4_writepages+0x1dd/0x350 [ 224.606903][ T6785] do_writepages+0x351/0x590 [ 224.612012][ T6785] filemap_fdatawrite_wbc+0x122/0x180 [ 224.617919][ T6785] file_write_and_wait_range+0x197/0x280 [ 224.624063][ T6785] generic_buffers_fsync_noflush+0x6f/0x160 [ 224.630476][ T6785] ext4_sync_file+0x460/0xd50 [ 224.635671][ T6785] ext4_buffered_write_iter+0x2c0/0x350 [ 224.641737][ T6785] ext4_file_write_iter+0x1e7/0x1980 [ 224.647535][ T6785] vfs_write+0x474/0x9a0 [ 224.652295][ T6785] __x64_sys_pwrite64+0x198/0x220 [ 224.657862][ T6785] do_syscall_64+0x55/0xb0 [ 224.662796][ T6785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.669207][ T6785] [ 224.669207][ T6785] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 224.677659][ T6785] __lock_acquire+0x37ef/0x7d80 [ 224.683114][ T6785] lock_acquire+0x19e/0x420 [ 224.688129][ T6785] percpu_down_read+0x44/0x1a0 [ 224.693410][ T6785] ext4_writepages+0x1a4/0x350 [ 224.698692][ T6785] do_writepages+0x351/0x590 [ 224.703841][ T6785] __writeback_single_inode+0x14e/0xee0 [ 224.709934][ T6785] writeback_single_inode+0x21f/0x760 [ 224.715826][ T6785] write_inode_now+0x183/0x210 [ 224.721106][ T6785] iput+0x58f/0x900 [ 224.725427][ T6785] ext4_xattr_block_set+0x2228/0x2fe0 [ 224.731316][ T6785] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 224.737730][ T6785] __ext4_expand_extra_isize+0x306/0x400 [ 224.743883][ T6785] __ext4_mark_inode_dirty+0x458/0x6d0 [ 224.749857][ T6785] ext4_evict_inode+0x7dd/0xe70 [ 224.755226][ T6785] evict+0x4b7/0x8a0 [ 224.759644][ T6785] ext4_orphan_cleanup+0xc33/0x1470 [ 224.765351][ T6785] ext4_fill_super+0x5fb5/0x6870 [ 224.770802][ T6785] get_tree_bdev+0x3e5/0x520 [ 224.775902][ T6785] vfs_get_tree+0x8c/0x280 [ 224.780847][ T6785] do_new_mount+0x24a/0xa40 [ 224.785861][ T6785] __se_sys_mount+0x2e7/0x3d0 [ 224.791070][ T6785] do_syscall_64+0x55/0xb0 [ 224.796004][ T6785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.802450][ T6785] [ 224.802450][ T6785] other info that might help us debug this: [ 224.802450][ T6785] [ 224.812665][ T6785] Possible unsafe locking scenario: [ 224.812665][ T6785] [ 224.820101][ T6785] CPU0 CPU1 [ 224.825453][ T6785] ---- ---- [ 224.830804][ T6785] lock(&ei->xattr_sem); [ 224.835128][ T6785] lock(&sbi->s_writepages_rwsem); [ 224.842840][ T6785] lock(&ei->xattr_sem); [ 224.849683][ T6785] rlock(&sbi->s_writepages_rwsem); [ 224.854966][ T6785] [ 224.854966][ T6785] *** DEADLOCK *** [ 224.854966][ T6785] [ 224.863114][ T6785] 3 locks held by syz.2.226/6785: [ 224.868216][ T6785] #0: ffff88805915a0e0 (&type->s_umount_key#31){++++}-{3:3}, at: get_tree_bdev+0x345/0x520 [ 224.878315][ T6785] #1: ffff88805915a608 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b4/0xe70 [ 224.887716][ T6785] #2: ffff88805dd614c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3d3/0x6d0 [ 224.897978][ T6785] [ 224.897978][ T6785] stack backtrace: [ 224.903871][ T6785] CPU: 0 PID: 6785 Comm: syz.2.226 Not tainted syzkaller #0 [ 224.911173][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 224.921233][ T6785] Call Trace: [ 224.924512][ T6785] [ 224.927434][ T6785] dump_stack_lvl+0x18c/0x250 [ 224.932114][ T6785] ? load_image+0x420/0x420 [ 224.936614][ T6785] ? show_regs_print_info+0x20/0x20 [ 224.941815][ T6785] ? print_circular_bug+0x12b/0x1a0 [ 224.947011][ T6785] check_noncircular+0x2fc/0x400 [ 224.951944][ T6785] ? look_up_lock_class+0x75/0x140 [ 224.957054][ T6785] ? print_deadlock_bug+0x5d0/0x5d0 [ 224.962250][ T6785] ? lockdep_lock+0xf5/0x230 [ 224.966836][ T6785] ? mark_lock+0x94/0x320 [ 224.971160][ T6785] ? _find_first_zero_bit+0xd6/0x100 [ 224.976451][ T6785] __lock_acquire+0x37ef/0x7d80 [ 224.981301][ T6785] ? deref_stack_reg+0x1ab/0x230 [ 224.986237][ T6785] ? mark_lock+0x94/0x320 [ 224.990586][ T6785] ? verify_lock_unused+0x140/0x140 [ 224.995779][ T6785] ? __lock_acquire+0x1336/0x7d80 [ 225.000797][ T6785] ? kernel_text_address+0xa0/0xd0 [ 225.005910][ T6785] ? arch_stack_walk+0x160/0x190 [ 225.010845][ T6785] lock_acquire+0x19e/0x420 [ 225.015341][ T6785] ? ext4_writepages+0x1a4/0x350 [ 225.020282][ T6785] ? __might_sleep+0xe0/0xe0 [ 225.024864][ T6785] ? read_lock_is_recursive+0x20/0x20 [ 225.030228][ T6785] ? mark_lock+0x94/0x320 [ 225.034552][ T6785] ? __lock_acquire+0x1336/0x7d80 [ 225.039571][ T6785] ? look_up_lock_class+0x75/0x140 [ 225.044687][ T6785] percpu_down_read+0x44/0x1a0 [ 225.049459][ T6785] ? ext4_writepages+0x1a4/0x350 [ 225.054395][ T6785] ext4_writepages+0x1a4/0x350 [ 225.059164][ T6785] ? ext4_read_folio+0x2f0/0x2f0 [ 225.064123][ T6785] ? __rwlock_init+0x150/0x150 [ 225.068886][ T6785] ? do_raw_spin_unlock+0x121/0x230 [ 225.074079][ T6785] ? ext4_read_folio+0x2f0/0x2f0 [ 225.079014][ T6785] do_writepages+0x351/0x590 [ 225.083631][ T6785] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 225.089355][ T6785] ? writeback_single_inode+0x214/0x760 [ 225.094901][ T6785] ? __lock_acquire+0x7d80/0x7d80 [ 225.099917][ T6785] ? do_raw_spin_lock+0x11f/0x2b0 [ 225.104943][ T6785] __writeback_single_inode+0x14e/0xee0 [ 225.110492][ T6785] writeback_single_inode+0x21f/0x760 [ 225.115862][ T6785] ? write_inode_now+0x210/0x210 [ 225.120801][ T6785] write_inode_now+0x183/0x210 [ 225.125564][ T6785] ? bdi_split_work_to_wbs+0x900/0x900 [ 225.131033][ T6785] ? do_raw_spin_unlock+0x121/0x230 [ 225.136228][ T6785] iput+0x58f/0x900 [ 225.140031][ T6785] ext4_xattr_block_set+0x2228/0x2fe0 [ 225.145415][ T6785] ? ext4_xattr_block_find+0x320/0x320 [ 225.150875][ T6785] ? xattr_find_entry+0x2a6/0x2f0 [ 225.155902][ T6785] ? ext4_xattr_block_find+0xce/0x320 [ 225.161299][ T6785] ext4_expand_extra_isize_ea+0x128f/0x1e70 [ 225.167203][ T6785] __ext4_expand_extra_isize+0x306/0x400 [ 225.172839][ T6785] __ext4_mark_inode_dirty+0x458/0x6d0 [ 225.178296][ T6785] ext4_evict_inode+0x7dd/0xe70 [ 225.183147][ T6785] ? evict+0x482/0x8a0 [ 225.187217][ T6785] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 225.193108][ T6785] ? do_raw_spin_unlock+0x121/0x230 [ 225.198309][ T6785] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 225.204198][ T6785] evict+0x4b7/0x8a0 [ 225.208089][ T6785] ? __lock_acquire+0x7d80/0x7d80 [ 225.213111][ T6785] ? proc_nr_inodes+0x230/0x230 [ 225.217958][ T6785] ? do_raw_spin_unlock+0x121/0x230 [ 225.223154][ T6785] ? _raw_spin_unlock+0x28/0x40 [ 225.228006][ T6785] ext4_orphan_cleanup+0xc33/0x1470 [ 225.233200][ T6785] ? ext4_orphan_del+0xc90/0xc90 [ 225.238132][ T6785] ? ext4_register_li_request+0x182/0x930 [ 225.243845][ T6785] ? errseq_check_and_advance+0x66/0x120 [ 225.249490][ T6785] ext4_fill_super+0x5fb5/0x6870 [ 225.254433][ T6785] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 225.260683][ T6785] ? __might_sleep+0xe0/0xe0 [ 225.265281][ T6785] ? read_lock_is_recursive+0x20/0x20 [ 225.270675][ T6785] ? snprintf+0xe9/0x140 [ 225.274925][ T6785] ? down_read_killable+0x340/0x340 [ 225.280136][ T6785] ? setup_bdev_super+0x56b/0x660 [ 225.285157][ T6785] get_tree_bdev+0x3e5/0x520 [ 225.289740][ T6785] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 225.296239][ T6785] ? setup_bdev_super+0x660/0x660 [ 225.301258][ T6785] ? apparmor_capable+0x137/0x1a0 [ 225.306320][ T6785] ? bpf_lsm_capable+0x9/0x10 [ 225.311001][ T6785] ? security_capable+0x89/0xb0 [ 225.315849][ T6785] vfs_get_tree+0x8c/0x280 [ 225.321216][ T6785] do_new_mount+0x24a/0xa40 [ 225.325739][ T6785] __se_sys_mount+0x2e7/0x3d0 [ 225.330427][ T6785] ? __x64_sys_mount+0xc0/0xc0 [ 225.335181][ T6785] ? lockdep_hardirqs_on+0x98/0x150 [ 225.340372][ T6785] ? __x64_sys_mount+0x20/0xc0 [ 225.345129][ T6785] do_syscall_64+0x55/0xb0 [ 225.349555][ T6785] ? clear_bhb_loop+0x40/0x90 [ 225.354252][ T6785] ? clear_bhb_loop+0x40/0x90 [ 225.358928][ T6785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.364834][ T6785] RIP: 0033:0x7f1300b9f10a [ 225.369247][ T6785] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.388946][ T6785] RSP: 002b:00007f13019f0e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.397385][ T6785] RAX: ffffffffffffffda RBX: 00007f13019f0ee0 RCX: 00007f1300b9f10a [ 225.405375][ T6785] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f13019f0ea0 [ 225.413360][ T6785] RBP: 0000200000000180 R08: 00007f13019f0ee0 R09: 0000000000000000 [ 225.421339][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 225.429307][ T6785] R13: 00007f13019f0ea0 R14: 000000000000047a R15: 0000200000001b80 [ 225.437379][ T6785] [ 225.621873][ T6785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.226: iget: bad extra_isize 58 (inode size 256) [ 225.884926][ T6797] loop0: detected capacity change from 0 to 16 [ 225.905541][ T6797] erofs: (device loop0): mounted with root inode @ nid 36. [ 226.097464][ T6785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.226: error while reading EA inode 11 err=-117 [ 226.148510][ T6785] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 226.241711][ T6785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.226: iget: bad extra_isize 58 (inode size 256) [ 226.279554][ T6785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.226: error while reading EA inode 11 err=-117 [ 226.309270][ T6785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.226: iget: bad extra_isize 58 (inode size 256) [ 226.412146][ T6785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.226: error while reading EA inode 18 err=-117 [ 226.444936][ T6785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.226: iget: bad extra_isize 58 (inode size 256) [ 226.473842][ T6785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.226: error while reading EA inode 18 err=-117 [ 226.492156][ T6785] EXT4-fs (loop2): 1 orphan inode deleted [ 226.499770][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.748741][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.