last executing test programs: 33m59.340377738s ago: executing program 32 (id=187): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0xbf, @empty, 0x4, 0x100}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$l2tp6(r4, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000000406010800000000000000000200000205000100070000008d19e0da1eab44795dee96d502b9dd1c0facca66750302e07ad5035f33ea1709268fc24f1c6db1613898b0be3c12717a4c67"], 0x1c}, 0x1, 0x0, 0x0, 0x20000810}, 0x80d0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003002000000000000000030007116b61979e0c000100636c75737465720008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_dev$loop(0x0, 0x3, 0x2000) ioctl$LOOP_SET_CAPACITY(r7, 0x4c07) sendmsg$IPSET_CMD_DESTROY(r6, 0x0, 0x44080) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x17fd147c801ae9af, 0xff14) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) 20m28.683345735s ago: executing program 33 (id=3360): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) syz_read_part_table(0x104d, &(0x7f0000000000)="$eJzsz72tAjEQBOC587tnnFESOTH1cLRDZSR0gHTI/ASQI4T0fdnYsytt+Ko2lKQ90yZZ1yRDkm2SktVUMyZT/62vo700v+87J/tkHE5L+e/5shzG5O/ev720zOVRLrvjZ68DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN9wDQAA///dYAjW") syz_genetlink_get_family_id$devlink(&(0x7f0000001180), r0) 18m16.852787543s ago: executing program 34 (id=3851): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r1, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x103e, &(0x7f0000001d00)=ANY=[], 0x0) 17m50.454067729s ago: executing program 35 (id=4009): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x43, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x0, 0x81) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1\x00', 0x101002, 0x1ce) lseek(r0, 0x10, 0x0) 15m5.129655599s ago: executing program 36 (id=5041): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000019c0)="ba42", 0x2, 0x4002, 0x0, 0x0) 14m26.33216483s ago: executing program 37 (id=5465): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x1008403, &(0x7f0000000000)={[{@nodiscard}, {@orlov}, {@nojournal_checksum}]}, 0x0, 0x554, &(0x7f0000000080)="$eJzs3c9vHFcdAPDvjL12fji1CxygEm2hRUkE2bVrtbU4lCIhOFUCyj0YZ21ZWXsj7zqNrYo64g9AQgiQOMGFCxJ/AAhV4sIRIVWCMwhQEYIUDiDRTjW7s44Tz9pustl17c9Hmsz7MTPf9zae8byZ8U4Ap9bLxfRelmWXI2K6KE+L6dN5Zifi6Yh4587rS/mURJa9+s8kkqKst62sYzLOd1fpbODrX4n4VrI/bmtr+/pio1HfKPK19tqNWmtr+8rq2uJKfaW+Pj8/98LCiwvPL8w+TPeWzxeJCxHx0pf+9oPv/uzLL/36c6/9+erfL3076bb5jfv78QGNH1TZ/TwrcWZvYRqx8YDBjqPeB5D/vJw54jq3ix8RAACGKz9f+0hxnn85pmPs4NNZAAAA4EMo+8JU/D/p3bvbZ+LebPNm3yUBAACAYyuNiKlI0mrx/OZUpGm1Gp1neD8W59JGs9X+7HJzc/1aXhcxE5V0ebVRny2ebZ2JSpLn5/L0r97NsiL/XKfubv18RDweEd+fPtvJV5eajWujvvgBAAAAp8T5+8b//5nujv8BAACAE2amvHhy2O0AAAAAHp0+438AAADgBDH+BwAAgBPtq6+8kk9Z7/3X125ubV5v3rxyrd66Xl3bXKouNTduVFeazZXOd/atHbix3VcHrm/eqrXrrXattbV9da25ud6+unrkV0MDAAAAA/b4U2/+MYmInc+f7Uy5iT31/yveEzCyBgKPzO4lu0iK+cT+hf70WHf+1yE1ChiKsb2Zs6NrBzB846NuADAylVE3ABi55JD6vg/v/K6Yf2qw7QEAAAbv4if63/9PD1xz5+Bq4NizE8PpNTbqBgAj07n/X/LIXyknC3CiVJwBwKn30Pf/D+VviAAAYNSmOlOSVovLe1ORptVqxIXOawEqyfJqoz4bEY9FxB+mK5N5fq6zZhLJYYMGAAAAAAAAAAAAAAAAAAAAAAAAAKAjy5LIAAAAgBMtIn07+U3Sef/Xxelnp+6/PjCR/Hc6JruvCH3tx6/+8NZiu70xl5f/azqKV4e2f1SUP3f49YbJR3MZAwAAANijN07vjeMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJDeufP6Um8aZtx/fDEiZsrij8eZzvxMVCLi3L+TGN+zXhIRYwOIv3M7Ij5eFj/Jm7Ubsiz+2UcafyKPHzPFp1AW//wA4sNp9mZ+/Hm5bP9L4+nOvHz/G4+4J/+g+h//Yvf4N9Zn/79wxBhPvPWLWt/4tyOeGC8//vXiJ33iP3PE+N/8xvZ2v7rsJxEXS3//JPfEqrXXbtRaW9tXVtcWV+or9fX5+bkXFl5ceH5htra8eq6e/9uoz5bG+N4nf/neQf0/1yf+zCH9f/aI/X/3rVt3PtpNVsriX3qmJP5vf1oske6Lnxa/+z5TpPP6i730Tje915M///2T/fs/WaQ++P//pSP2//LXvvOXIy4KAAxBa2v7+mKjUd8oErETcW/Jhz2Rj9IffjtpHJPuSDxQYizKqt7Yv/BT0Xc7SXJwrCzLsnyfeoimJv2j3030BhF5SVLarwdPJLsloz0uAQAAg3f37L+stvL28FsEAAAAAAAAAAAAAAAAAAAAp88wvoDt/pg7u6lkEF+hDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEO8HAAD//x1r4DY=") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000004c0)={"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"}) shutdown(0xffffffffffffffff, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0x65, 0x7, '\x00', 0x3}) 13m52.103842997s ago: executing program 3 (id=5708): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000440)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) sendmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)='\x00W', 0x2}], 0x1}}], 0x1, 0x24005805) 13m47.194744068s ago: executing program 3 (id=5715): syz_read_part_table(0x5be, &(0x7f00000001c0)="$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") r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)) 13m46.513407584s ago: executing program 3 (id=5721): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@errors_remount}, {@nodiscard}, {@resuid}, {@noblock_validity}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) open(&(0x7f0000000200)='./bus\x00', 0x14507f, 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1001000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x7, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47e778082004cb59d654cb9b1b165263bdbcef549ba197fce47df1162af3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x5]}) close(0x3) open(&(0x7f0000000080)='./file1\x00', 0x141042, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0xe9, 0xfffffffb, 0x7d0, 0x0, 0x14011d8f}) 13m44.943098769s ago: executing program 3 (id=5733): socket$kcm(0x10, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@gettaction={0x18, 0x32, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4048000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x804) 13m44.231077145s ago: executing program 3 (id=5738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0xfffffffffffffffd, 0x60d, 0x0, 0xd, 0x87b, 0x200000000000002, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3], 0x70000, 0x8341}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m43.359691636s ago: executing program 38 (id=5738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc53}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000280)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000240)=0x4) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x100000f, 0x9, 0xfffffffffffffffd, 0x60d, 0x0, 0xd, 0x87b, 0x200000000000002, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3], 0x70000, 0x8341}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m17.211643582s ago: executing program 39 (id=6355): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 8m35.738290916s ago: executing program 40 (id=6642): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 8m31.559062441s ago: executing program 41 (id=6656): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) socket(0x400000000010, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@data_journal}, {@noload}, {@oldalloc}]}, 0x3, 0x440, &(0x7f0000000280)="$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") socket$netlink(0x10, 0x3, 0xa) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000140)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000000)) 8m30.320094789s ago: executing program 42 (id=6660): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00'}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x38}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x15) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) 8m30.28084081s ago: executing program 43 (id=6661): socket$key(0xf, 0x3, 0x2) landlock_restrict_self(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 7m46.306650058s ago: executing program 4 (id=6708): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 7m41.322979521s ago: executing program 3 (id=6672): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = fsopen(&(0x7f00000000c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) writev(r2, &(0x7f0000000200)=[{}], 0x1) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f00000001c0)={0x0, &(0x7f0000000100)="f8889ccf95f0615b5308ee306440e16b0a04cd2a3eb0ee436e79fbb8167a60923b0226f11f3e71fca077663c5de392ba1f5fd1c960e1b26ebbaf6688af3911580cb31f19f949986a6eb06fa10312e9b9db4350d009f42f4e8890c48b73", 0x5d}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7m41.286131212s ago: executing program 4 (id=6712): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aa"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x20a, @time={0x6000000, 0x2}, 0xd, {0x1, 0x74}, 0x8, 0x2, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000240)="e1", 0x1, 0x200080c1, &(0x7f0000000400)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1f}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)='9', 0xfffffffffffffd46, 0x4820, 0x0, 0xffffffffffffff3e) 7m40.764683424s ago: executing program 4 (id=6713): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001280)=""/96, 0x60}], 0x1}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)=""/240, 0xf0}, 0x4}], 0x4, 0x141, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000540)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff4b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 7m38.098986864s ago: executing program 4 (id=6715): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 7m36.029361861s ago: executing program 4 (id=6716): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() sendto$unix(r1, &(0x7f0000000300), 0x0, 0x84, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000a40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) 7m34.540258115s ago: executing program 4 (id=6718): socket(0x40000000015, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x3}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0xfff3, 0xfff2}, {0x5, 0xfff3}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 7m24.947683672s ago: executing program 44 (id=6672): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r0 = fsopen(&(0x7f00000000c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x9371}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) writev(r2, &(0x7f0000000200)=[{}], 0x1) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f00000001c0)={0x0, &(0x7f0000000100)="f8889ccf95f0615b5308ee306440e16b0a04cd2a3eb0ee436e79fbb8167a60923b0226f11f3e71fca077663c5de392ba1f5fd1c960e1b26ebbaf6688af3911580cb31f19f949986a6eb06fa10312e9b9db4350d009f42f4e8890c48b73", 0x5d}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 7m17.99405035s ago: executing program 45 (id=6718): socket(0x40000000015, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x0, 0x0, 0x3}}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x400c000}, 0xee) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0xfff3, 0xfff2}, {0x5, 0xfff3}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 6m33.92750182s ago: executing program 8 (id=6768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x5}, @hci_rp_le_read_accept_list_size={{0x80}, {0x0, 0x19}}}}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x9) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00000010c0), 0x8001, 0xc02) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000001140)={&(0x7f0000001100), 0x0, 0x3}) 6m32.775791417s ago: executing program 8 (id=6769): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)}], 0x1) timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mq_notify(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 6m31.171119743s ago: executing program 8 (id=6773): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) accept(r5, 0x0, 0x0) 6m29.022479112s ago: executing program 8 (id=6775): epoll_create1(0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000280)={0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x16, 0x8, 0x40, 0x42, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @local, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @random="2eb9cf9af7f1", @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @multicast, @empty}}}}, 0x0) 6m26.984118188s ago: executing program 8 (id=6778): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x10, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000800)) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x0) 6m25.712274297s ago: executing program 8 (id=6780): socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x4, 0xf3}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c5}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 6m9.548773264s ago: executing program 46 (id=6780): socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x80) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x3, 0x7, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x3}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x4, 0xf3}}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c5}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 2m28.221296306s ago: executing program 5 (id=7090): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone3(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_uring_setup(0x1028, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) close(0x4) socket(0x40000000015, 0x5, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0x3, 0x8000}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) 2m13.988857009s ago: executing program 5 (id=7105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) clock_gettime(0x3, &(0x7f00000000c0)) clock_settime(0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x18, 0x3d, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 2m12.557195352s ago: executing program 5 (id=7107): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 2m11.718591791s ago: executing program 5 (id=7109): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x8000) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fanotify_init(0x1a, 0x1) syz_io_uring_setup(0x7db6, &(0x7f0000000380)={0x0, 0xe4a6, 0x2, 0x2, 0x1af}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x29, 0x2, 0x0) read(r7, &(0x7f00000004c0)=""/59, 0x3b) 2m8.954222094s ago: executing program 5 (id=7113): syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x19) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) keyctl$reject(0x13, 0x0, 0xd59, 0x1, 0x0) keyctl$revoke(0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b) keyctl$revoke(0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r6, 0xfd) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000004, &(0x7f00000001c0)=[{0x10, 0x3, 0xffffffffffffffff}, {0x5, 0x1000}], 0x2, 0xbff, 0x7, 0x0, 0x2c, 0x5f}) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xe) 2m7.486241207s ago: executing program 5 (id=7116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone3(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_uring_setup(0x1028, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) close(0x4) socket(0x40000000015, 0x5, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0x3, 0x8000}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) 1m50.769927696s ago: executing program 47 (id=7116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone3(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_uring_setup(0x1028, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) close(0x4) socket(0x40000000015, 0x5, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000002c0)={0x3, 0x8000}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) 1m14.431009941s ago: executing program 2 (id=7178): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) creat(0x0, 0x3a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80000) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r2, 0x4004510d, &(0x7f0000000000)) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) munmap(&(0x7f00002d2000/0x4000)=nil, 0x4000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f00000003c0)) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) unshare(0x8000280) 1m12.441561156s ago: executing program 2 (id=7182): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@nobarrier}, {@bh}, {@norecovery}, {@errors_remount}, {@commit}]}, 0x8, 0x63c, &(0x7f0000000940)="$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") 1m11.558018526s ago: executing program 2 (id=7185): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x146, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000180)='./file1\x00', 0x13) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f", 0x1f) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x8000) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r3, 0x0, 0x0) lstat(&(0x7f0000005740)='./bus\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x80000, &(0x7f0000005800)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}, {@blksize}, {@max_read={'max_read', 0x3d, 0x62e}}, {@allow_other}], [{@uid_eq={'uid', 0x3d, r6}}]}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) 1m10.398504263s ago: executing program 2 (id=7187): request_key(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) socket$kcm(0x10, 0x2, 0x4) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000380)='jffs2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, &(0x7f0000000180)='.\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 1m9.19020177s ago: executing program 2 (id=7188): syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x8041, &(0x7f0000000200), 0x1, 0x14e, &(0x7f0000000240)="$eJzsz7FLMnEcx/HPPXePyINPRDVYkAkNSWKeJ+YkYaEkZEeFBE2CXhQoRkLdaERbQ9B6gyU0iX9DRYvlQdjf4RY0Fj/10LX98xq+wtsvvy8XsBMpwA8AshgblfLJqVGtGkX/rp5N7635pmwMuAC4R/8PYvJRzCMxpi964qcIDxA/PC4ZK4VKSawl+z0ANxASXQUw2P0n2o5oEact9vf2RdOgDE+PWtTZU+ZESzjv3X2LvSXRUs57AD5NK9hqvm532pnQ8sO8jKtMcAGQXBjrPuNaS882PF4ZOePlHoC0blof4XboPdxqdu1OdkvP6nZU01ajakRVY139rZOJ1W6gbHrOxBnpYPyOC16fkuv3S0C6Na3ek/QfwHP9Sy9PxOvDr6qdy35AMq1C3vu3kZ+Z/AM5AAlERERERERERERERERERES/9RMAAP//WfNfww==") 1m8.465210076s ago: executing program 2 (id=7189): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) signalfd4(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000008200000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff17000000000000000000000000000000000000000000004de800000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000100)="f257a8ea", 0x4, 0x804, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}, 0x1, 0x0, 0x0, 0x40040080}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@getneightbl={0x14, 0x42, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x44890) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000040)=0x9) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x34, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0x9}, {0x8}}, [{0x8, 0xb, 0x3}, {0xfffffffffffffeed, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) sendmsg$nl_generic(r0, 0x0, 0x840) 52.150941877s ago: executing program 48 (id=7189): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) signalfd4(r4, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000008200000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff17000000000000000000000000000000000000000000004de800000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000100)="f257a8ea", 0x4, 0x804, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={0x0}, 0x1, 0x0, 0x0, 0x40040080}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@getneightbl={0x14, 0x42, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x44890) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r12, 0x4004ae99, &(0x7f0000000040)=0x9) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x34, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0x9}, {0x8}}, [{0x8, 0xb, 0x3}, {0xfffffffffffffeed, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) sendmsg$nl_generic(r0, 0x0, 0x840) 6.1560583s ago: executing program 6 (id=7355): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) alarm(0x8000000000000001) 5.409374897s ago: executing program 9 (id=7358): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x1df}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.172040403s ago: executing program 9 (id=7359): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000280)={0x13, 0x1, 0x4}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0xa980000000000000, 0x40000, 0xe7, 0x0, 0x12}) 4.810228491s ago: executing program 1 (id=7360): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) close(r1) 4.732363263s ago: executing program 9 (id=7361): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) fcntl$setstatus(r0, 0x4, 0x4000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) 4.563801926s ago: executing program 6 (id=7363): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f00000002c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x9, @string={0x9, 0x3, "3ac71a48b2e4a4"}}}, 0x0) 4.500771128s ago: executing program 1 (id=7364): setresuid(0xee01, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000002180)={0x0, 0x3938700}, 0x0) prlimit64(r0, 0xa, 0x0, 0x0) 4.263408513s ago: executing program 9 (id=7365): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone3(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_uring_setup(0x1028, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) close(0x4) socket(0x40000000015, 0x5, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd32", 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 3.97923402s ago: executing program 1 (id=7366): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0x9, 0x4) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0xfffff1c3}], 0x1, 0x40002140, 0x0) 3.564990149s ago: executing program 1 (id=7368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="02", 0x1}], 0x1}}], 0x1, 0x404c051) 3.016614432s ago: executing program 7 (id=7372): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0xe000, 0x8, 0x9, 0x7f, 0xb, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0xd000, 0xeeee7000, 0x8, 0x3, 0x3, 0x2f, 0x6, 0x5, 0x1, 0x2, 0x0, 0xe}, {0xf000, 0x7000, 0xe, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x4}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x9, 0x7}, {0xdddd1000, 0xdddd0000, 0xf, 0x9, 0x80, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0xd000, 0xd000, 0xe, 0x2, 0xaa, 0x2, 0x5, 0x5, 0x1, 0x10, 0x6, 0x3}, {0xf000, 0x10000, 0xb, 0x4, 0xcd, 0x5, 0x9, 0xf9, 0x6, 0xcd, 0xff, 0x2}, {0x1, 0xf000, 0xd, 0xe, 0x1, 0x40, 0xff, 0x0, 0x7f, 0x1, 0xf, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x3, 0x0, 0x6000, 0x1a1, 0x7, 0xe801, 0x8000900, 0x0, [0xb, 0x2, 0x3, 0x1c1]}) 2.773873777s ago: executing program 0 (id=7373): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_HASH={0x6, 0x2, 0xc3}]}}, @TCA_CHAIN={0x8, 0xb, 0x6ad}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 2.64869103s ago: executing program 7 (id=7374): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000640)=@vmx={0x109, 0x0, 0x2080, {0x54000, 0xa000, {}, 0x1, 0x4}, {"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", "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"}}) 2.377483186s ago: executing program 1 (id=7375): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd700003dcdf250100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400041d08000600", @ANYRES32=r1], 0x5c}, 0x1, 0x400000000000000}, 0x0) 2.257706689s ago: executing program 7 (id=7376): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0x4}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.257103459s ago: executing program 0 (id=7377): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) syz_io_uring_complete(r1, r2) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) 2.164728121s ago: executing program 1 (id=7378): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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") open(&(0x7f0000000180)='./file1\x00', 0x60142, 0x102) lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00') 1.938458176s ago: executing program 0 (id=7379): request_key(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) socket$kcm(0x10, 0x2, 0x4) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000380)='jffs2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, &(0x7f0000000180)='.\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 1.921105606s ago: executing program 7 (id=7380): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f90750090987f70906d038e7ff7fc6e5539b0d3d0e8b089b31326d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319522000ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe59}}, 0xfa) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40001) 1.609424424s ago: executing program 7 (id=7381): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f00000005c0)={0x2, &(0x7f0000000140)=[{}, {}]}) 1.594859493s ago: executing program 6 (id=7382): request_key(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) socket$kcm(0x10, 0x2, 0x4) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) fsopen(&(0x7f0000000380)='jffs2\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(0x0, &(0x7f0000000180)='.\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 1.037061416s ago: executing program 6 (id=7383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000ce9000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) 786.166562ms ago: executing program 0 (id=7384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000000)=""/81, 0x51}, {&(0x7f00000003c0)=""/207, 0xcf}], 0x2, 0x27, 0x8) 625.069306ms ago: executing program 9 (id=7385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000001900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)={0x1d4, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x74, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3df86501b3ee533a80d1ec7b583b08304464b0b821f04a7c"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="73726a65845a93ea970959d3c2c38529b0abc6a9d4a6aeaa6204dcef545b57f9"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "247801000000ef0e"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5c839f8883d709cd039c460876cec4fb"}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek="e5bcb1b95a49e440ccd792a01960906e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1d03d9791876cd46"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="17f524d003d26c42c3b82b64db7e0480"}, @NL80211_REKEY_DATA_REPLAY_CTR={0x1, 0x3, "a2184fa62abb52bc"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="8115e72bbea9fa61265e6e4ae7a07a3d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="95477dea7fd3f19faca1d0bf40385428"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek_ext="09843f35b408f42980b9ccb2b83f2de7fe8cc4c4d35b4818089c0df5b6be8eee"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "103af5d584213ef0"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f8cc93d804d11ffb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "386bcf952f0c0be4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1abc880d0a670007"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="855c363cb0b371bf05e80ada4a50a018"}]}, @NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck_ext="fe9cdace1883c9a4d01be6eddae89908d7d31e2d56868544"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="86ca813d930e3d325e685f41fef1a862"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6b3aee8a00299b6152e82893d783cadc"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="916187b59a4229aff7e9e7ae9eccbedf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b8ec467062e975e6"}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4c}, 0x4040) 565.403567ms ago: executing program 7 (id=7386): r0 = syz_usb_connect(0x0, 0x90, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cbe8d0205e040307c06e0102030109027e00010000000009044400000e0100000a240140000d0201020c240205010205090100010e0c240804010000a401883db20d240703020007e24dd0feeb710c24020603013f07ff00ea0e0924030501010501"], 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x10000, &(0x7f0000001100)=ANY=[], 0x1, 0x206, &(0x7f0000000480)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setuid(0x0) syz_usb_control_io$sierra_net(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x34, @string={0x34, 0x3, "8a84f216664913717d417fa943479e014f094f0f95d72e63dcd2af0b2bf27a2caa879b310a29c51bdae8afff77f1a1ad711f"}}}, 0x0) 458.39067ms ago: executing program 6 (id=7387): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x484, 0x0, 0x6}]}) 338.096522ms ago: executing program 0 (id=7388): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, 0xffffffffffffffff, 0x2000000}, 0xc) 236.229244ms ago: executing program 9 (id=7389): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140), 0x0) 49.596729ms ago: executing program 6 (id=7390): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0x1bf5f000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r5, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000810) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x490, 0xffffffff, 0xf0, 0xf0, 0x0, 0xfeffffff, 0xffffffff, 0x3c0, 0x3c0, 0x3c0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x120, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x101, 0x3, 0x1, [0x5, 0x5, 0x8000, 0x0, 0xc, 0x4, 0x4, 0x0, 0x9d3, 0xd77, 0x3, 0x8, 0x477, 0x5, 0xffff, 0x6], 0x5}}, @common=@srh={{0x30}, {0x0, 0xa5, 0x1, 0x9, 0xf, 0x1208, 0x2}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], 0x4e20, 0x4e20, 0x4e20, 0x4e20, 0x1, 0xbd16, 0x4ad, 0x1, 0x8000}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0xa, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0x13}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000500)={0xffff, 0x0, "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"}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffe, 0x8000, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000001000000100000001000000002000000"], 0x0, 0xffffffffffffff49}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x10) bind$inet6(r2, 0x0, 0x0) syz_emit_ethernet(0x84, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x4e, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x4e, 0x0, @gue={{0x2, 0x0, 0x2, 0xae, 0x100, @val=0x80}, "fea15f8a8f5d47249b1a2f8e90a7edfebf40b8b7f2a7b56ab8e4a310b6ee738bfe73b34b9b232ac444722ab9bc9df0767018cf081aaa7788db0f7615f311"}}}}}}}, 0x0) 0s ago: executing program 0 (id=7391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): : warning (device loop6): udf_load_vrs: No anchor found [ 1948.339801][T28946] UDF-fs: Scanning with blocksize 512 failed [ 1948.349722][T28946] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1948.360484][T28946] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1948.370005][T28946] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1948.380602][T28946] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1948.390224][T28946] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1948.399956][T28946] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1948.407723][T28946] UDF-fs: Scanning with blocksize 1024 failed [ 1948.416389][T28946] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1948.426698][T28946] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1948.436328][T28946] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1948.447194][T28946] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1948.457214][T28946] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1948.466950][T28946] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1948.474792][T28946] UDF-fs: Scanning with blocksize 2048 failed [ 1948.483488][T28946] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1948.493644][T28946] I/O error, dev loop6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1948.503345][T28946] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1948.514012][T28946] I/O error, dev loop6, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1948.523598][T28946] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1948.533283][T28946] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1948.541045][T28946] UDF-fs: Scanning with blocksize 4096 failed [ 1948.547286][T28946] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 1948.991890][ T27] audit: type=1326 audit(1783709446.536:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1949.026160][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1949.035088][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1949.067004][T25522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1949.158063][T25522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1949.218564][ T27] audit: type=1326 audit(1783709446.536:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1949.271608][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1950.539069][ T27] audit: type=1326 audit(1783709446.536:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1950.598372][T25527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1950.606492][T25527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1950.619041][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1950.627386][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1950.676671][ T27] audit: type=1326 audit(1783709446.546:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1950.718002][T17296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1950.755265][T17296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1950.878577][ T27] audit: type=1326 audit(1783709446.546:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1951.110210][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1951.118157][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.141913][ T27] audit: type=1326 audit(1783709446.546:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1951.193466][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1951.383821][T28975] loop7: detected capacity change from 0 to 128 [ 1951.418240][ T27] audit: type=1326 audit(1783709446.546:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1951.419039][T28969] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1952.441222][ T27] audit: type=1326 audit(1783709446.546:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1956.333629][ T27] audit: type=1326 audit(1783709446.546:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1956.386150][ T27] audit: type=1326 audit(1783709446.546:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1956.598613][ T27] audit: type=1326 audit(1783709446.546:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1959.979200][ T27] audit: type=1326 audit(1783709446.555:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1960.248315][ T27] audit: type=1326 audit(1783709446.555:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1960.606483][ T27] audit: type=1326 audit(1783709446.555:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1960.774236][T29040] loop2: detected capacity change from 0 to 2048 [ 1961.463433][T29040] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1962.082218][T26720] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1962.254322][T29043] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1962.315581][ T27] audit: type=1326 audit(1783709446.555:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1962.370065][T29043] device bond0 entered promiscuous mode [ 1962.380670][T29043] device bond_slave_0 entered promiscuous mode [ 1962.425108][T29043] device bond_slave_1 entered promiscuous mode [ 1962.481646][T26720] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1962.506987][T26720] usb 2-1: config 1 has no interface number 0 [ 1962.515808][ T27] audit: type=1326 audit(1783709446.583:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1962.565329][T26720] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1962.618670][T26720] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1962.661499][ T27] audit: type=1326 audit(1783709446.583:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1962.693492][T26720] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1962.744978][T26720] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1962.792121][ T27] audit: type=1326 audit(1783709446.611:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc2fb5e68e code=0x7ffc0000 [ 1962.832618][T29055] futex_wake_op: syz.7.6855 tries to shift op by 144; fix this program [ 1962.898399][T26720] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1963.140346][T26720] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1963.365488][T26720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.468334][ T27] audit: type=1326 audit(1783709446.611:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc2fb5e68e code=0x7ffc0000 [ 1963.732082][T26720] usb 2-1: Product: syz [ 1963.736786][T26720] usb 2-1: Manufacturer: syz [ 1963.742231][T26720] usb 2-1: SerialNumber: syz [ 1963.804920][T26720] usb 2-1: can't set config #1, error -71 [ 1963.826377][T26720] usb 2-1: USB disconnect, device number 38 [ 1963.874880][ T27] audit: type=1326 audit(1783709446.611:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1964.723937][ T4276] Bluetooth: hci1: ACL packet for unknown connection handle 1211 [ 1965.014530][ T27] audit: type=1326 audit(1783709446.621:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1965.442940][ T27] audit: type=1326 audit(1783709446.621:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1966.413890][ T27] audit: type=1326 audit(1783709446.621:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1966.564696][ T27] audit: type=1326 audit(1783709446.621:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28942 comm="syz.6.6836" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc2fb9de59 code=0x7ffc0000 [ 1967.745463][T29098] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6865'. [ 1967.754844][T29098] tipc: Started in network mode [ 1967.760221][T29098] tipc: Node identity 4246, cluster identity 4711 [ 1967.767955][T29098] tipc: Node number set to 16966 [ 1967.776730][T29098] device team0 entered promiscuous mode [ 1967.783082][T29098] device team_slave_0 entered promiscuous mode [ 1967.789760][T29098] device team_slave_1 entered promiscuous mode [ 1968.434856][T29105] fuse: Bad value for 'fd' [ 1969.234155][T29110] program syz.6.6851 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1969.250477][T29110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6851'. [ 1969.999379][T29111] IPVS: length: 105 != 24 [ 1971.815123][T29133] loop7: detected capacity change from 0 to 4096 [ 1972.339958][T29133] ntfs: volume version 3.1. [ 1972.623846][T29136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6872'. [ 1972.712405][T29129] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1972.719475][T29129] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1972.798222][T29129] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1972.808711][T29129] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1972.814772][T29129] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1972.905014][T29129] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1972.912559][T29129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1972.918566][T29129] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1973.012716][T29129] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1973.020446][T29129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1973.026438][T29129] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1973.069158][T29129] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1973.076468][T29129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1973.082515][T29129] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1973.089984][T29129] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1973.582583][T29151] futex_wake_op: syz.7.6875 tries to shift op by 144; fix this program [ 1973.605500][T29151] device gretap1 entered promiscuous mode [ 1975.001563][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 1975.079042][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 1975.164618][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 1975.196257][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 1975.282098][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 1976.094330][T29140] tipc: Started in network mode [ 1976.099360][T29140] tipc: Node identity ac14140f, cluster identity 4711 [ 1976.106589][T29140] tipc: New replicast peer: 172.30.0.3 [ 1976.112179][T29140] tipc: Enabled bearer , priority 10 [ 1976.203399][T29174] bridge0: port 3(erspan0) entered blocking state [ 1976.209985][T29174] bridge0: port 3(erspan0) entered disabled state [ 1976.217972][T29174] device erspan0 entered promiscuous mode [ 1976.224446][T29174] bridge0: port 3(erspan0) entered blocking state [ 1976.231020][T29174] bridge0: port 3(erspan0) entered forwarding state [ 1976.247964][T29174] device erspan0 left promiscuous mode [ 1976.253673][T29174] bridge0: port 3(erspan0) entered disabled state [ 1977.152577][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 1977.237515][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 1977.255227][ T4276] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1977.316646][T19030] tipc: Node number set to 2886997007 [ 1977.325235][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 1977.410065][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 1977.493702][ T4276] Bluetooth: hci0: command 0x0406 tx timeout [ 1980.905825][ T4508] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1983.811267][T29214] device ipvlan1 entered promiscuous mode [ 1983.963147][T29201] device ipvlan1 left promiscuous mode [ 1985.471415][T29234] loop7: detected capacity change from 0 to 512 [ 1985.480623][T29234] EXT4-fs: inline encryption not supported [ 1985.500184][T29234] EXT4-fs: Ignoring removed orlov option [ 1985.512319][T29234] EXT4-fs: Ignoring removed mblk_io_submit option [ 1985.590846][T29234] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.6893: corrupted in-inode xattr [ 1985.708062][T29234] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.6893: couldn't read orphan inode 15 (err -117) [ 1985.791118][T29234] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1987.681256][T29255] Bluetooth: MGMT ver 1.22 [ 1989.110629][T28485] EXT4-fs (loop7): unmounting filesystem. [ 1992.458229][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1992.465217][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1994.526335][T29287] loop7: detected capacity change from 0 to 4096 [ 1996.966711][T29305] loop1: detected capacity change from 0 to 64 [ 1997.114932][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1997.114949][ T27] audit: type=1800 audit(1783709492.344:192): pid=29305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6905" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 1999.609208][T29335] xt_policy: output policy not valid in PREROUTING and INPUT [ 2000.561373][T29348] ubi: mtd0 is already attached to ubi0 [ 2001.901925][T26720] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2004.638502][T26720] usb 2-1: device descriptor read/all, error -71 [ 2014.437609][T29421] loop7: detected capacity change from 0 to 4096 [ 2014.875678][T29439] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 2014.902022][T29439] CIFS mount error: No usable UNC path provided in device string! [ 2014.902022][T29439] [ 2014.912890][T29439] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2016.596976][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 2017.852453][T29460] loop1: detected capacity change from 0 to 2048 [ 2017.864964][T29460] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2017.875134][T29460] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2018.130370][T29465] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2018.182202][ T8221] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2021.560613][ T8221] usb 3-1: Using ep0 maxpacket: 16 [ 2021.752123][ T8221] usb 3-1: device descriptor read/all, error -71 [ 2022.015282][T29476] batman_adv: batadv0: Adding interface: dummy0 [ 2022.021733][T29476] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2022.055096][T29476] batman_adv: batadv0: Interface activated: dummy0 [ 2022.280843][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 2022.315418][T28507] EXT4-fs (loop1): unmounting filesystem. [ 2023.310313][T29478] batadv0: mtu less than device minimum [ 2023.395313][T29478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2023.407868][T29478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2023.420340][T29478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2023.433051][T29478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2023.445546][T29478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2023.457958][T29478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2023.470453][T29478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2023.482961][T29478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2023.495383][T29478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2024.588908][ T4276] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 2025.677191][T29503] fuse: Bad value for 'fd' [ 2026.384883][T29496] loop2: detected capacity change from 0 to 1024 [ 2026.407388][T29498] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2026.413520][T29498] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2026.423231][T29498] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2026.431615][T29498] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2026.437735][T29498] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2026.443689][T29498] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2026.455793][T29498] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 2027.291218][T29516] xt_policy: output policy not valid in PREROUTING and INPUT [ 2027.311377][T29514] hfsplus: xattr searching failed [ 2027.335831][T29514] hfsplus: xattr searching failed [ 2027.358426][T29514] hfsplus: unable to mark blocks free: error -4 [ 2027.365770][T29514] hfsplus: can't free extent [ 2027.665290][ T27] audit: type=1800 audit(1783709520.614:193): pid=29514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6944" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 2027.714036][T29517] loop6: detected capacity change from 0 to 2048 [ 2027.762642][T29518] xt_NFQUEUE: number of total queues is 0 [ 2027.813070][T29517] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2027.977728][T29525] device batadv_slave_1 entered promiscuous mode [ 2028.797349][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 2028.803603][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 2028.809772][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 2028.815933][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 2028.822074][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 2029.497231][T29512] device batadv_slave_1 left promiscuous mode [ 2030.502790][T28443] EXT4-fs (loop6): unmounting filesystem. [ 2031.100545][T15574] Bluetooth: hci0: command 0x0406 tx timeout [ 2031.195914][T29555] loop2: detected capacity change from 0 to 1024 [ 2031.944878][T29558] kvm: apic: phys broadcast and lowest prio [ 2032.082923][T29562] loop6: detected capacity change from 0 to 4096 [ 2032.923821][T29562] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 2033.328512][T29575] xt_hashlimit: max too large, truncated to 1048576 [ 2033.339016][T29575] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 2034.127201][T28443] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 2034.215333][T29580] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2034.221477][T29580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2034.227635][T29580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2034.233745][T29580] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2034.239908][T29580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2034.334876][T29588] loop7: detected capacity change from 0 to 512 [ 2034.478176][T29588] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 2035.981830][T29588] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 2035.993390][T29588] EXT4-fs (loop7): orphan cleanup on readonly fs [ 2036.000226][T29588] EXT4-fs error (device loop7): ext4_orphan_get:1431: comm syz.7.6960: bad orphan inode 3 [ 2036.015895][T29588] EXT4-fs (loop7): Remounting filesystem read-only [ 2036.022787][T29588] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 2036.053249][T29588] EXT4-fs warning (device loop7): dx_probe:893: inode #2: comm syz.7.6960: dx entry: limit 0 != root limit 125 [ 2036.065383][T29588] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.6960: Corrupt directory, running e2fsck is recommended [ 2036.309666][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 2036.406257][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 2036.412405][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 2036.418660][T15574] Bluetooth: hci3: command 0x0c1a tx timeout [ 2036.424736][T15574] Bluetooth: hci2: command 0x0c1a tx timeout [ 2036.446078][T28485] EXT4-fs (loop7): unmounting filesystem. [ 2038.910555][T29615] loop7: detected capacity change from 0 to 2048 [ 2039.086095][T29615] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 2040.213795][T28485] EXT4-fs (loop7): unmounting filesystem. [ 2040.275208][ C1] vkms_vblank_simulate: vblank timer overrun [ 2040.429621][T29638] loop2: detected capacity change from 0 to 64 [ 2040.756736][ T27] audit: type=1800 audit(1783709532.929:194): pid=29638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6967" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 2041.495485][T29648] loop1: detected capacity change from 0 to 512 [ 2041.534070][T29648] EXT4-fs: inline encryption not supported [ 2041.808480][T29648] EXT4-fs: Ignoring removed orlov option [ 2041.837016][T29648] EXT4-fs: Ignoring removed mblk_io_submit option [ 2042.253683][T29654] xt_policy: output policy not valid in PREROUTING and INPUT [ 2042.316594][T29648] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.6968: corrupted in-inode xattr [ 2042.369283][T29648] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.6968: couldn't read orphan inode 15 (err -117) [ 2042.400009][T29648] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2043.326472][T29672] Invalid ELF header magic: != ELF [ 2043.741590][T28507] EXT4-fs (loop1): unmounting filesystem. [ 2043.758233][T29674] sg_write: data in/out 479232/136 bytes for SCSI command 0xc-- guessing data in; [ 2043.758233][T29674] program syz.7.6972 not setting count and/or reply_len properly [ 2044.366931][ T8221] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2044.586501][ T8221] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2044.615824][T29690] loop6: detected capacity change from 0 to 512 [ 2044.625658][T29690] EXT4-fs: inline encryption not supported [ 2044.631724][T29690] EXT4-fs: Ignoring removed orlov option [ 2044.637723][T29690] EXT4-fs: Ignoring removed mblk_io_submit option [ 2044.657279][ T8221] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2044.686652][T29690] EXT4-fs error (device loop6): ext4_iget_extra_inode:4763: inode #15: comm syz.6.6988: corrupted in-inode xattr [ 2044.931146][ T8221] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2044.976710][T29690] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.6988: couldn't read orphan inode 15 (err -117) [ 2045.741192][ T8221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.783018][T29690] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2045.874428][ T8221] usb 3-1: config 0 descriptor?? [ 2047.460556][ T4321] usb 3-1: USB disconnect, device number 31 [ 2047.547031][T29714] loop7: detected capacity change from 0 to 128 [ 2047.573069][T29714] EXT4-fs (loop7): Test dummy encryption mode enabled [ 2047.624074][T29714] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 2047.661699][T29714] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2049.720676][T29724] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6983'. [ 2050.575221][T28485] EXT4-fs (loop7): unmounting filesystem. [ 2050.701886][T28443] EXT4-fs (loop6): unmounting filesystem. [ 2051.302439][T26720] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 2051.596565][T26720] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2051.692117][T26720] usb 8-1: config 1 has no interface number 0 [ 2051.813833][T26720] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2051.983469][T26720] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2052.173439][T26720] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2052.325979][T26720] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2052.501577][T26720] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2052.676868][T26720] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2053.709148][T26720] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2053.852261][T26720] usb 8-1: Product: syz [ 2053.916134][T26720] usb 8-1: Manufacturer: syz [ 2053.989424][T26720] usb 8-1: SerialNumber: syz [ 2054.379705][T26719] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 2054.436443][T26720] usb 8-1: can't set config #1, error -71 [ 2054.519268][T26720] usb 8-1: USB disconnect, device number 6 [ 2054.593641][T26719] usb 7-1: Using ep0 maxpacket: 8 [ 2054.610532][T26719] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 2054.669817][T26719] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2056.646933][T26719] usb 7-1: config 0 has no interface number 0 [ 2056.776297][T26719] usb 7-1: string descriptor 0 read error: -71 [ 2056.788568][T26719] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2056.881618][T26719] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2057.631547][T26719] usb 7-1: config 0 descriptor?? [ 2057.638805][T26719] usb 7-1: can't set config #0, error -71 [ 2057.649515][T26719] usb 7-1: USB disconnect, device number 22 [ 2058.266335][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2058.279732][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2059.733735][T26720] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2064.931310][T29592] Bluetooth: hci3: unexpected event for opcode 0x200f [ 2064.969803][T20417] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 2065.211131][T20417] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2065.288852][T20417] usb 7-1: config 1 has no interface number 0 [ 2065.589404][T20417] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2066.266188][T20417] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 2066.278561][T20417] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 2066.294622][T20417] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 2066.305959][T20417] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2066.331790][T20417] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2066.452138][T20417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.553129][T20417] usb 7-1: Product: syz [ 2066.562656][T20417] usb 7-1: Manufacturer: syz [ 2066.567430][T20417] usb 7-1: SerialNumber: syz [ 2066.614778][T29830] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2067.133162][T29824] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2067.272251][T29830] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2067.717140][T29847] Cannot find set identified by id 0 to match [ 2067.927797][T29824] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2067.952642][T20417] cdc_ncm 7-1:1.1: bind() failure [ 2069.524452][T29849] device batadv_slave_1 entered promiscuous mode [ 2069.818179][T20417] usb 7-1: USB disconnect, device number 23 [ 2069.959111][T29861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7011'. [ 2070.066088][T29861] tipc: Started in network mode [ 2070.076846][T29861] tipc: Node identity 4246, cluster identity 4711 [ 2070.696427][T29867] loop6: detected capacity change from 0 to 131072 [ 2070.736363][T29861] tipc: Node number set to 16966 [ 2070.774527][T29869] device team0 entered promiscuous mode [ 2070.796391][T29869] device team_slave_0 entered promiscuous mode [ 2070.804601][T29867] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2070.882452][T29876] futex_wake_op: syz.5.7013 tries to shift op by 144; fix this program [ 2071.167804][T29867] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2071.568271][T29869] device team_slave_1 entered promiscuous mode [ 2072.322512][T29846] device batadv_slave_1 left promiscuous mode [ 2072.385790][ T27] audit: type=1800 audit(1783709562.688:195): pid=29881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7014" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 2073.195024][T29889] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2073.305042][T29893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7017'. [ 2074.727852][ C0] vkms_vblank_simulate: vblank timer overrun [ 2075.638892][T29911] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7021'. [ 2079.097425][T29941] netlink: 'syz.1.7026': attribute type 1 has an invalid length. [ 2081.177391][T29942] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2081.214486][T29942] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2081.397423][T29942] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2082.329648][T29942] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2083.246274][T29942] bond1: (slave geneve2): making interface the new active one [ 2083.311004][T29942] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 2083.581081][T29947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7026'. [ 2084.385712][T29941] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 2084.574023][T29941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2084.771772][T29941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2084.987699][T29941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2085.051358][T29941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2085.063501][T29941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2085.075481][T29941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2085.112251][T29941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2085.687989][T29941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2085.990853][T29941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2086.038967][T29941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.131594][T29941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.176092][T29941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.265975][T29941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.286075][T29941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.298098][T29941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.332017][T29941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2086.360512][T29941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2086.393399][T29941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2091.806004][T30037] net_ratelimit: 10 callbacks suppressed [ 2091.806039][T30037] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 2092.163310][T30038] device bond0 entered promiscuous mode [ 2092.258238][T30038] device bond_slave_0 entered promiscuous mode [ 2092.402377][T30038] device bond_slave_1 entered promiscuous mode [ 2092.464087][T30041] loop2: detected capacity change from 0 to 1024 [ 2092.576759][T30041] ext2: Unknown parameter 'subj_type' [ 2092.602644][T30046] loop7: detected capacity change from 0 to 512 [ 2092.637874][T29456] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2092.662353][T30046] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 2092.904920][T30047] Bluetooth: MGMT ver 1.22 [ 2096.529216][T30081] futex_wake_op: syz.2.7054 tries to shift op by 144; fix this program [ 2098.921235][T20412] Process accounting resumed [ 2099.319429][T29592] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 2099.501386][T30105] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7058'. [ 2099.845149][T30105] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2099.854283][T30105] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2099.863118][T30105] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2099.871949][T30105] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2099.945119][T30108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7058'. [ 2099.990832][T30109] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7068'. [ 2100.003802][T30113] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 1024, id = 0 [ 2100.032275][T30109] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2100.044089][T30108] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7058'. [ 2100.322656][T26719] Process accounting resumed [ 2104.701380][T30156] loop6: detected capacity change from 0 to 4096 [ 2104.808387][T30156] ntfs: (device loop6): parse_ntfs_boot_sector(): MFTMirr LCN (511, 0x1ff) is beyond end of volume. Weird. [ 2104.820267][T30156] ntfs: (device loop6): ntfs_fill_super(): Unsupported NTFS filesystem. [ 2107.007587][T30175] netlink: 'syz.2.7079': attribute type 2 has an invalid length. [ 2107.015589][T30175] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7079'. [ 2108.358675][T29592] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 2108.370200][T30187] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7072'. [ 2108.391572][T30187] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2108.400452][T30187] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2108.409641][T30187] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2108.418517][T30187] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2108.449706][T30189] snd_dummy snd_dummy.0: control 6:65278:-4:syz0:-259 is already present [ 2108.497078][T30188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7072'. [ 2109.399354][T30192] netlink: 136 bytes leftover after parsing attributes in process `syz.7.7073'. [ 2109.503910][T30188] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7072'. [ 2109.962646][T30200] autofs4:pid:30200:autofs_fill_super: called with bogus options [ 2110.207872][T30200] loop1: detected capacity change from 0 to 32768 [ 2111.087279][T30200] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.7075 (30200) [ 2111.127771][T30200] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 2111.138517][T30200] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2111.147394][T30200] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2111.156932][T30200] BTRFS info (device loop1): use zstd compression, level 3 [ 2111.164180][T30200] BTRFS info (device loop1): force clearing of disk cache [ 2111.171539][T30200] BTRFS info (device loop1): enabling disk space caching [ 2111.178665][T30200] BTRFS info (device loop1): disk space caching is enabled [ 2111.672787][T30215] [U]  [ 2112.712070][T30200] BTRFS info (device loop1): enabling ssd optimizations [ 2112.720486][T30200] BTRFS info (device loop1): rebuilding free space tree [ 2113.029939][T30200] BTRFS info (device loop1): disabling free space tree [ 2113.037014][T30200] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2113.046957][T30200] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2114.469077][T28507] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 2116.583300][T17214] Bluetooth: hci4: command 0x0409 tx timeout [ 2123.170069][T30320] loop1: detected capacity change from 0 to 512 [ 2124.555579][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2124.561954][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2124.658284][T30323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7094'. [ 2124.702215][T30323] team0: Cannot enslave team device to itself [ 2124.731153][T30326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2124.742882][T30320] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2124.752083][T30326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2124.775519][T30320] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2126.115385][T30326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2126.125918][T30326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2127.570438][T28507] EXT4-fs (loop1): unmounting filesystem. [ 2128.118272][T30346] loop6: detected capacity change from 0 to 65536 [ 2128.242026][T30346] XFS (loop6): Mounting V5 Filesystem [ 2128.316735][T30346] XFS (loop6): Ending clean mount [ 2128.474489][T30346] XFS (loop6): Quotacheck needed: Please wait. [ 2131.136049][T30346] XFS (loop6): Quotacheck: Done. [ 2131.275994][T28443] XFS (loop6): Unmounting Filesystem [ 2131.382144][T30369] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 2131.390259][T30369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2131.446396][T30369] vhci_hcd vhci_hcd.0: Device attached [ 2131.744567][T30278] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2131.752644][T30276] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 2132.024590][T30278] usb 2-1: Using ep0 maxpacket: 16 [ 2132.033123][T30278] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 2132.114032][T30278] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 2132.170241][T30278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.242153][T30278] usb 2-1: Product: syz [ 2132.246420][T30278] usb 2-1: Manufacturer: syz [ 2132.280402][T30278] usb 2-1: SerialNumber: syz [ 2132.326210][T30278] usb 2-1: config 0 descriptor?? [ 2132.379419][T30278] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 2132.418764][T30278] usb 2-1: Detected FT232B [ 2132.643990][T30370] usbip_core: unknown command [ 2132.663779][T30370] vhci_hcd: unknown pdu 808747418 [ 2133.553870][T30276] usb 35-1: device descriptor read/64, error -71 [ 2133.841550][T30276] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 2133.957497][T30370] usbip_core: unknown command [ 2133.975119][T13949] vhci_hcd: stop threads [ 2133.979471][T13949] vhci_hcd: release socket [ 2134.024192][T30369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2134.033048][T30369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2134.097570][T13949] vhci_hcd: disconnect device [ 2134.507888][T30278] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2134.525558][T30278] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2134.695402][T30278] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2134.992235][T30278] usb 2-1: USB disconnect, device number 42 [ 2135.201677][T30278] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2135.465797][T30278] ftdi_sio 2-1:0.0: device disconnected [ 2139.782628][T30276] vhci_hcd: vhci_device speed not set [ 2139.902577][T30431] loop5: detected capacity change from 0 to 7 [ 2139.915027][T30431] Dev loop5: unable to read RDB block 7 [ 2139.921023][T30431] loop5: AHDI p1 p2 p3 [ 2139.926705][T30431] loop5: partition table partially beyond EOD, truncated [ 2139.941081][T30431] loop5: p1 start 1818582900 is beyond EOD, truncated [ 2139.954582][T30431] loop5: p3 start 335544320 is beyond EOD, truncated [ 2139.984373][T30433] loop2: detected capacity change from 0 to 256 [ 2140.003412][T30433] FAT-fs (loop2): "posix" option is obsolete, not supported now [ 2141.674079][T30443] netlink: 'syz.2.7115': attribute type 4 has an invalid length. [ 2143.539278][T30460] loop6: detected capacity change from 0 to 256 [ 2143.550522][T30460] exfat: Deprecated parameter 'utf8' [ 2143.557310][T30460] exFAT-fs (loop6): bogus number of FAT structure [ 2144.027889][T30460] exFAT-fs (loop6): failed to read boot sector [ 2144.047846][T30460] exFAT-fs (loop6): failed to recognize exfat type [ 2150.907258][T26720] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 2151.144307][T26720] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 2151.480362][T26720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.525757][T26720] usb 3-1: Product: syz [ 2151.585167][T26720] usb 3-1: Manufacturer: syz [ 2153.645519][T26720] usb 3-1: SerialNumber: syz [ 2154.477946][T26720] usb 3-1: can't set config #1, error -71 [ 2154.484913][T26720] usb 3-1: USB disconnect, device number 33 [ 2155.517304][T26720] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2155.736945][T26720] usb 3-1: Using ep0 maxpacket: 32 [ 2155.744365][T26720] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 2155.798087][T26720] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2156.613162][T26720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.623551][T26720] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 2156.760721][T26720] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2156.912411][T26720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2156.955222][T26720] usb 3-1: config 0 descriptor?? [ 2157.428349][T30521] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2159.105260][T17214] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 2160.023687][T30278] usb 3-1: USB disconnect, device number 34 [ 2160.108167][T30536] 9pnet_fd: Insufficient options for proto=fd [ 2162.303877][T30547] can0: slcan on ttyS3. [ 2162.373582][T30547] can0 (unregistered): slcan off ttyS3. [ 2162.579073][T29592] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2162.596764][T29592] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2162.607921][T29592] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2162.615968][T29592] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2162.623797][T29592] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2162.631182][T29592] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2164.834791][T17214] Bluetooth: hci5: command 0x0409 tx timeout [ 2167.031987][T29592] Bluetooth: hci5: command 0x041b tx timeout [ 2167.212011][T30590] PKCS7: Unknown OID: [4] 0.0 [ 2167.218412][T30590] PKCS7: Only support pkcs7_signedData type [ 2167.267539][T30590] xt_policy: output policy not valid in PREROUTING and INPUT [ 2168.199104][T30596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7143'. [ 2169.244010][T17214] Bluetooth: hci5: command 0x040f tx timeout [ 2169.934011][ T4780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2169.971374][ T4780] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.335356][T30599] loop6: detected capacity change from 0 to 1024 [ 2170.399745][T30599] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2170.408458][T30599] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2170.665364][T28443] EXT4-fs (loop6): unmounting filesystem. [ 2170.677610][T30552] chnl_net:caif_netlink_parms(): no params data found [ 2171.004072][T30616] overlayfs: overlapping lowerdir path [ 2171.143579][T30618] overlayfs: overlapping lowerdir path [ 2171.466826][T17214] Bluetooth: hci5: command 0x0419 tx timeout [ 2173.878665][ T4780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2174.405373][ T4780] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.706692][ T4780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2174.796960][ T4780] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2174.880863][T30552] bridge0: port 1(bridge_slave_0) entered blocking state [ 2174.903800][T30279] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 2174.929357][T30552] bridge0: port 1(bridge_slave_0) entered disabled state [ 2174.968456][T30552] device bridge_slave_0 entered promiscuous mode [ 2175.016094][T30279] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2175.028029][T30552] bridge0: port 2(bridge_slave_1) entered blocking state [ 2175.063049][T30552] bridge0: port 2(bridge_slave_1) entered disabled state [ 2175.107934][T30552] device bridge_slave_1 entered promiscuous mode [ 2175.240677][ T4780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2175.306368][ T4780] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2175.512943][T30552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2175.564365][T30552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2175.632251][T17214] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 2176.246371][T30552] team0: Port device team_slave_0 added [ 2176.616228][T30552] team0: Port device team_slave_1 added [ 2177.212771][T30552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2177.221022][T30552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2177.293238][T30552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2177.321404][T30663] loop7: detected capacity change from 0 to 512 [ 2177.401249][T30663] EXT4-fs error (device loop7): ext4_orphan_get:1405: inode #15: comm syz.7.7155: casefold flag without casefold feature [ 2177.448590][T30552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2177.475981][T30663] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.7155: couldn't read orphan inode 15 (err -117) [ 2177.493638][T30552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2177.520240][T30552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2177.570671][T30663] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 2177.762498][T17214] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 2177.795920][T30668] loop2: detected capacity change from 0 to 16 [ 2177.842415][T28485] EXT4-fs (loop7): unmounting filesystem. [ 2177.887997][T30552] device hsr_slave_0 entered promiscuous mode [ 2177.911628][T30668] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature ffffffc0, please upgrade kernel version [ 2177.962309][T30552] device hsr_slave_1 entered promiscuous mode [ 2178.015925][T28802] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2178.037621][ T4780] tipc: Left network mode [ 2180.699501][T17214] Bluetooth: hci0: command 0x0c20 tx timeout [ 2180.829837][T30683] binder: 30676:30683 ioctl c00c620f 2000000003c0 returned -22 [ 2182.281631][T17214] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2182.291708][T17214] Bluetooth: hci0: Injecting HCI hardware error event [ 2182.321352][T30684] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2182.328355][T30684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2182.335439][T30684] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2182.841202][T30684] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2182.847462][T30684] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2182.853449][T30684] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2182.859570][ T4276] Bluetooth: hci0: hardware error 0x00 [ 2182.925685][T30684] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 2183.436106][T17214] Bluetooth: hci2: command 0x0c1a tx timeout [ 2183.594107][T17214] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 2183.893653][T30683] block device autoloading is deprecated and will be removed. [ 2183.930939][T30712] loop1: detected capacity change from 0 to 164 [ 2184.632493][T17214] Bluetooth: hci4: command 0x0c1a tx timeout [ 2184.638641][T17214] Bluetooth: hci3: command 0x0c1a tx timeout [ 2184.960763][T30721] loop6: detected capacity change from 0 to 512 [ 2185.047957][T30721] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 2185.079511][T17214] Bluetooth: hci5: command 0x0c1a tx timeout [ 2185.082349][ T4276] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2185.104808][T30721] EXT4-fs (loop6): mount failed [ 2185.203739][T30727] loop1: detected capacity change from 0 to 4096 [ 2185.263414][T30727] EXT4-fs: inline encryption not supported [ 2185.319135][T30727] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 2185.529184][ T4276] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 2186.856479][T30724] loop7: detected capacity change from 0 to 32768 [ 2186.951775][T30724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.7168 (30724) [ 2187.243656][T30724] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2187.282271][ T4276] Bluetooth: hci5: command 0x0406 tx timeout [ 2187.310438][T30724] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 2187.439852][T30724] BTRFS error (device loop7): invalid value 0 for thread_pool [ 2187.586434][T30724] BTRFS error (device loop7): open_ctree failed: -22 [ 2187.780495][T29456] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by udevd (29456) [ 2187.802301][T30746] loop2: detected capacity change from 0 to 32768 [ 2187.829319][T30746] XFS (loop2): Invalid device [./file1], error=-15 [ 2188.240848][T30754] EXT4-fs: Conflicting test_dummy_encryption options [ 2189.424285][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2189.430746][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2190.177425][T30765] loop6: detected capacity change from 0 to 1024 [ 2190.185272][T30765] hfsplus: unable to parse mount options [ 2190.203434][T30754] device batadv_slave_0 entered promiscuous mode [ 2190.264027][ T4780] IPVS: stopping master sync thread 30113 ... [ 2190.307128][T30765] loop6: detected capacity change from 0 to 4096 [ 2190.314035][T30765] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 2190.336498][T30765] ntfs: (device loop6): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 2190.352580][T30765] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 2190.362142][T30765] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 2190.382318][T30765] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 2190.391085][T30765] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 2190.411672][T30765] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 2190.420722][T30765] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 2190.441017][T30765] ntfs: (device loop6): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 2190.450453][T30765] ntfs: (device loop6): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 2190.472466][T30765] ntfs: volume version 3.1. [ 2191.508807][T30773] loop2: detected capacity change from 0 to 8 [ 2191.585599][T30773] SQUASHFS error: Unable to read inode 0x0 [ 2191.637010][T30775] loop6: detected capacity change from 0 to 128 [ 2191.680041][T30753] device batadv_slave_0 left promiscuous mode [ 2191.686983][T30775] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 2191.720192][T30775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2192.215429][T30780] loop7: detected capacity change from 0 to 512 [ 2192.339048][T30786] binder: 30777:30786 ioctl c00c620f 2000000003c0 returned -22 [ 2193.147722][T30780] EXT4-fs: Ignoring removed i_version option [ 2193.200913][T30780] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 2193.261221][T30552] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2193.282273][T30552] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2193.337575][T30552] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2193.392051][T30780] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 2193.508833][T30780] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.7179: Failed to acquire dquot type 1 [ 2193.556873][T30780] EXT4-fs (loop7): 1 truncate cleaned up [ 2193.562988][ T4780] device hsr_slave_0 left promiscuous mode [ 2193.612666][T30780] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 2193.624203][ T4780] device hsr_slave_1 left promiscuous mode [ 2193.676853][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2193.711166][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2193.723173][T30780] EXT4-fs error (device loop7): ext4_acquire_dquot:6841: comm syz.7.7179: Failed to acquire dquot type 1 [ 2193.765858][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2193.821284][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2193.915746][ T4780] device bridge_slave_1 left promiscuous mode [ 2193.943993][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.957248][T30798] loop1: detected capacity change from 0 to 128 [ 2193.973593][T30797] loop2: detected capacity change from 0 to 1024 [ 2193.983749][T28485] EXT4-fs (loop7): unmounting filesystem. [ 2193.990546][T30797] EXT4-fs: Ignoring removed bh option [ 2194.048830][T30797] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 2194.058024][T30798] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 2194.068377][ T4780] device bridge_slave_0 left promiscuous mode [ 2194.075739][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 2194.120422][T30798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2194.140925][T30797] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.7182: blocks 1-2 from inode overlap system zone [ 2194.170898][T30798] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 2194.261575][T28507] EXT4-fs (loop1): unmounting filesystem. [ 2194.269897][T30797] EXT4-fs (loop2): failed to initialize system zone (-117) [ 2194.317287][T30803] loop7: detected capacity change from 0 to 128 [ 2194.359253][T30797] EXT4-fs (loop2): mount failed [ 2194.378310][T30803] affs: Unrecognized mount option "" or missing value [ 2194.434431][T30803] affs: Error parsing options [ 2194.440968][T30785] loop6: detected capacity change from 0 to 32768 [ 2194.491839][T30785] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.7180 (30785) [ 2194.506983][ T4780] device veth1_macvtap left promiscuous mode [ 2194.513245][ T4780] device veth0_macvtap left promiscuous mode [ 2194.568295][ T4780] device veth1_vlan left promiscuous mode [ 2194.609188][ T4780] device veth0_vlan left promiscuous mode [ 2194.623591][T30785] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 2194.634689][T30809] loop1: detected capacity change from 0 to 512 [ 2194.650054][T30785] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 2194.694487][T30809] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 2194.719174][T30785] BTRFS info (device loop6): using free space tree [ 2194.754233][T30809] System zones: 1-12 [ 2194.866488][T30809] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.7184: missing EA_INODE flag [ 2195.592581][T30809] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7184: error while reading EA inode 12 err=-117 [ 2195.912768][T30809] EXT4-fs (loop1): 1 orphan inode deleted [ 2195.999053][T30809] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2196.034028][T30785] BTRFS error (device loop6): open_ctree failed: -22 [ 2196.221351][T30832] loop7: detected capacity change from 0 to 4096 [ 2196.782618][T28917] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by udevd (28917) [ 2197.060884][T30832] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 2197.322924][T30845] loop2: detected capacity change from 0 to 16 [ 2197.550325][T28802] udevd[28802]: incorrect cramfs checksum on /dev/loop2 [ 2198.086922][T30852] EXT4-fs: Conflicting test_dummy_encryption options [ 2198.365614][T28507] EXT4-fs (loop1): unmounting filesystem. [ 2200.119927][T30863] loop7: detected capacity change from 0 to 32768 [ 2200.147125][T30863] XFS: noattr2 mount option is deprecated. [ 2200.177825][T30863] XFS: attr2 mount option is deprecated. [ 2200.208031][T30863] XFS (loop7): attr2 and noattr2 cannot both be specified. [ 2200.359019][T30871] loop1: detected capacity change from 0 to 32768 [ 2200.420787][T30871] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.7194 (30871) [ 2200.472776][T30871] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 2200.500228][T30871] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 2200.548799][T30871] BTRFS info (device loop1): enabling ssd optimizations [ 2200.567333][T30871] BTRFS info (device loop1): not using ssd optimizations [ 2200.607545][T30874] loop6: detected capacity change from 0 to 40427 [ 2200.619343][T30874] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 2200.622719][T30871] BTRFS info (device loop1): turning off barriers [ 2200.639820][T30874] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2200.677566][T30871] BTRFS info (device loop1): use no compression [ 2200.703186][T30874] F2FS-fs (loop6): invalid crc value [ 2200.720664][T30871] BTRFS info (device loop1): using free space tree [ 2200.779165][T30874] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 2201.046093][T30874] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 2201.062648][T30874] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2201.794434][T30874] fscrypt (loop6, inode 3): Error -61 getting encryption context [ 2201.928860][T28507] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 2201.954653][T30904] loop7: detected capacity change from 0 to 256 [ 2201.976550][T30904] exFAT-fs (loop7): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 2201.991233][T30904] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 2202.296011][T30906] loop7: detected capacity change from 0 to 512 [ 2202.325984][T30906] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 2202.353096][T30906] System zones: 1-12 [ 2202.379260][T30906] EXT4-fs error (device loop7): ext4_xattr_inode_iget:401: inode #12: comm syz.7.7201: missing EA_INODE flag [ 2202.399069][T30906] EXT4-fs error (device loop7): ext4_xattr_inode_iget:406: comm syz.7.7201: error while reading EA inode 12 err=-117 [ 2202.435053][T30906] EXT4-fs (loop7): 1 orphan inode deleted [ 2202.440918][T30906] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 2203.416136][T30921] loop1: detected capacity change from 0 to 1024 [ 2203.434067][T30921] hfsplus: unable to parse mount options [ 2203.876989][T30923] loop1: detected capacity change from 0 to 16 [ 2203.887663][T30923] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 2203.922430][T30923] cramfs: root is not a directory [ 2204.555291][T28485] EXT4-fs (loop7): unmounting filesystem. [ 2204.588774][T29456] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2204.670466][T30925] loop6: detected capacity change from 0 to 4096 [ 2204.678703][T30925] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 2205.040985][T30929] loop1: detected capacity change from 0 to 8 [ 2205.067833][T30929] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 2205.093359][T29456] udevd[29456]: incorrect cramfs checksum on /dev/loop1 [ 2205.207696][T29456] udevd[29456]: incorrect cramfs checksum on /dev/loop1 [ 2205.306407][T29456] udevd[29456]: incorrect cramfs checksum on /dev/loop1 [ 2205.321637][T30933] loop7: detected capacity change from 0 to 8 [ 2205.812421][T30933] cramfs: bad data blocksize 3959421443 [ 2205.962403][T30933] cramfs: bad data blocksize 4294965915 [ 2206.051209][T30937] loop1: detected capacity change from 0 to 164 [ 2206.058959][T30933] cramfs: bad data blocksize 802397048 [ 2206.105654][T30933] cramfs: bad data blocksize 4294742353 [ 2206.150775][T30937] Symlink component flag not implemented [ 2206.153039][T30933] cramfs: bad data blocksize 3367320904 [ 2206.168860][T30937] Symlink component flag not implemented (7) [ 2206.194823][T30933] cramfs: bad data blocksize 859179931 [ 2206.203015][T30933] cramfs: bad data blocksize 3436389781 [ 2206.240608][T30933] cramfs: bad data blocksize 4294365136 [ 2206.246262][T30933] cramfs: bad data blocksize 4294967040 [ 2206.253205][T30939] loop6: detected capacity change from 0 to 64 [ 2206.271175][T30933] cramfs: bad data blocksize 3959421443 [ 2206.298896][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 2206.298912][ T27] audit: type=1800 audit(1783709944.092:197): pid=30933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7205" name="file2" dev="loop7" ino=268 res=0 errno=0 [ 2206.481927][T30941] loop1: detected capacity change from 0 to 256 [ 2206.812523][T30948] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 2206.898590][T30948] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 2206.961649][T30948] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 2206.970784][T30948] UDF-fs: Scanning with blocksize 512 failed [ 2207.031175][T30948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2208.029614][ T4780] device team_slave_1 left promiscuous mode [ 2208.121231][ T4780] team0 (unregistering): Port device team_slave_1 removed [ 2208.375153][T30943] set_capacity_and_notify: 1 callbacks suppressed [ 2208.375172][T30943] loop7: detected capacity change from 0 to 32768 [ 2208.473943][ T4780] device team_slave_0 left promiscuous mode [ 2208.482335][ T4780] team0 (unregistering): Port device team_slave_0 removed [ 2208.543547][T30943] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.7209 (30943) [ 2208.566256][T30943] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 2208.577847][T30943] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 2208.587385][T30943] BTRFS info (device loop7): turning off barriers [ 2208.594056][T30943] BTRFS info (device loop7): enabling auto defrag [ 2208.600625][T30943] BTRFS info (device loop7): force zlib compression, level 3 [ 2208.608614][T30943] BTRFS info (device loop7): enabling ssd optimizations [ 2208.615673][T30943] BTRFS info (device loop7): using spread ssd allocation scheme [ 2208.640090][T30943] BTRFS info (device loop7): using free space tree [ 2208.966711][ T4780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2208.976169][ T4780] device bond_slave_1 left promiscuous mode [ 2209.099497][T30943] BTRFS info (device loop7: state M): not using ssd optimizations [ 2209.108121][T30943] BTRFS info (device loop7: state M): not using spread ssd allocation scheme [ 2209.118769][ T4780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2209.128008][T30943] BTRFS info (device loop7: state M): enabling ssd optimizations [ 2209.137479][T30943] BTRFS info (device loop7: state M): using spread ssd allocation scheme [ 2209.148452][ T4780] device bond_slave_0 left promiscuous mode [ 2209.269517][T28485] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 2209.421849][T30974] loop6: detected capacity change from 0 to 2048 [ 2209.460996][T30974] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=18881, location=18881 [ 2209.543724][T30974] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2209.560817][T30977] loop1: detected capacity change from 0 to 8 [ 2209.837182][T30977] SQUASHFS error: Failed to read block 0x2fc: -5 [ 2209.857952][T30977] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 2209.865748][T30977] SQUASHFS error: Unable to read directory block [247:26] [ 2210.154804][T30979] loop1: detected capacity change from 0 to 128 [ 2210.172097][T30979] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 2210.206393][T30979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2210.274255][T30981] loop7: detected capacity change from 0 to 1024 [ 2210.308377][T30981] hfsplus: unable to parse mount options [ 2210.406772][T30983] loop6: detected capacity change from 0 to 256 [ 2210.414236][T30983] exfat: Deprecated parameter 'utf8' [ 2210.512758][T30983] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 2210.795917][T30987] loop7: detected capacity change from 0 to 16 [ 2210.806273][T30987] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 2210.832536][T30987] cramfs: root is not a directory [ 2211.558416][T29456] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2211.650950][T30989] loop6: detected capacity change from 0 to 1024 [ 2211.673038][T30989] hfsplus: invalid length 32517 has been corrected to 255 [ 2212.209155][T30985] loop1: detected capacity change from 0 to 32768 [ 2212.289179][T30995] loop7: detected capacity change from 0 to 256 [ 2212.340750][T30985] blkno = 8ed2c, nblocks = 1 [ 2212.346976][T30985] ERROR: (device loop1): dbFree: block to be freed is outside the map [ 2212.346976][T30985] [ 2212.371235][T30995] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 2212.426457][T30985] ERROR: (device loop1): remounting filesystem as read-only [ 2212.469015][T30985] ialloc: diAlloc returned -17! [ 2212.897035][T31001] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 2212.917853][T31001] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 2212.936835][T31001] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 2212.951807][T31001] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 2212.999879][T31001] System zones: 0-2, 18-18, 34-35 [ 2213.085074][T31001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2213.200314][T28507] EXT4-fs (loop1): unmounting filesystem. [ 2213.318357][T30997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.7224 (30997) [ 2213.473118][T30997] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2213.487734][T30997] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 2213.501138][T30997] BTRFS info (device loop6): using free space tree [ 2213.821412][T31013] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 2213.852913][T30997] BTRFS info (device loop6): enabling ssd optimizations [ 2214.115907][T28443] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2214.318574][T31031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7230'. [ 2214.445270][T31033] set_capacity_and_notify: 4 callbacks suppressed [ 2214.445289][T31033] loop7: detected capacity change from 0 to 512 [ 2214.534563][T31033] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 2214.609992][T31035] loop1: detected capacity change from 0 to 256 [ 2214.690943][ T27] audit: type=1800 audit(1783709951.944:198): pid=31035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7234" name="file1" dev="loop1" ino=1048836 res=0 errno=0 [ 2214.956407][ T4276] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2215.016069][ T4276] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2215.027044][ T4276] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2215.060376][ T4276] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2215.070972][ T4276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2215.079324][ T4276] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2215.171253][ T4780] bond0 (unregistering): Released all slaves [ 2215.224645][T31039] loop6: detected capacity change from 0 to 512 [ 2215.404132][T31039] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2215.429855][T31039] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2215.478780][T30552] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2215.481648][T31039] Quota error (device loop6): do_check_range: Getting block 32772 out of range 0-5 [ 2215.513795][T31047] usb usb8: usbfs: process 31047 (syz.7.7237) did not claim interface 0 before use [ 2215.527195][T30852] device batadv_slave_0 entered promiscuous mode [ 2215.534039][T30858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7189'. [ 2215.557696][T30858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2215.565724][T30858] batadv0: mtu less than device minimum [ 2215.602264][T30858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2215.614790][T30858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2215.627324][T30858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2215.639771][T30858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2215.652313][T30858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2215.664929][T30858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2215.677651][T30858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2215.690985][T30858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2215.703595][T30858] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2215.762684][T28443] EXT4-fs (loop6): unmounting filesystem. [ 2215.907113][T31051] loop6: detected capacity change from 0 to 256 [ 2215.971695][T30858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2216.324276][T31049] loop7: detected capacity change from 0 to 32768 [ 2216.395697][T31049] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.7238 (31049) [ 2217.139203][T31049] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2217.259426][T31049] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 2217.288833][T17214] Bluetooth: hci1: command 0x0409 tx timeout [ 2217.325590][T31049] BTRFS info (device loop7): enabling auto defrag [ 2217.386615][T31049] BTRFS info (device loop7): force clearing of disk cache [ 2217.455619][T31067] loop1: detected capacity change from 0 to 4096 [ 2217.473707][T30552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2217.486177][T31049] BTRFS info (device loop7): max_inline at 485 [ 2217.513117][T31049] BTRFS info (device loop7): disabling free space tree [ 2217.721625][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2217.751865][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2217.769906][T31067] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 2217.780321][T31077] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2217.816376][T31067] NILFS (loop1): mounting fs with errors [ 2217.851493][T30552] 8021q: adding VLAN 0 to HW filter on device team0 [ 2217.872501][T31067] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 2217.872558][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2217.906279][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2218.003457][T25527] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.011220][T25527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2218.036094][T31049] BTRFS info (device loop7): enabling ssd optimizations [ 2218.072714][T31067] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 2218.085221][T31049] BTRFS info (device loop7): rebuilding free space tree [ 2218.121592][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2218.157580][T31067] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 2218.195361][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2218.227054][T31049] BTRFS info (device loop7): disabling free space tree [ 2218.254332][ T27] audit: type=1800 audit(1783709955.285:199): pid=31067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7242" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 2218.274345][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2218.296998][T31049] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2218.317985][T25527] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.325204][T25527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2218.357409][T31049] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2218.419891][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2218.505015][T31036] chnl_net:caif_netlink_parms(): no params data found [ 2218.565043][T14950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2218.628569][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2218.680113][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2218.738199][T31098] loop6: detected capacity change from 0 to 2048 [ 2218.759132][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2218.822168][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2218.841582][T31098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2218.889921][T28485] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 2218.904480][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2219.511265][T17214] Bluetooth: hci1: command 0x041b tx timeout [ 2219.705289][T31113] loop6: detected capacity change from 0 to 64 [ 2219.745639][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2219.775119][T31113] syz.6.7248: attempt to access beyond end of device [ 2219.775119][T31113] loop6: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 2219.791578][ T4489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2219.816246][T31113] Buffer I/O error on dev loop6, logical block 512, async page read [ 2219.844417][T31113] syz.6.7248: attempt to access beyond end of device [ 2219.844417][T31113] loop6: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 2219.954357][T31113] Buffer I/O error on dev loop6, logical block 56576, async page read [ 2220.076203][T31121] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7249'. [ 2220.108239][T31036] bridge0: port 1(bridge_slave_0) entered blocking state [ 2220.149333][T31036] bridge0: port 1(bridge_slave_0) entered disabled state [ 2220.196822][T31036] device bridge_slave_0 entered promiscuous mode [ 2220.271290][T31036] bridge0: port 2(bridge_slave_1) entered blocking state [ 2220.278707][T31036] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.355523][T31036] device bridge_slave_1 entered promiscuous mode [ 2220.459366][T31036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2220.581932][T31036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2220.891757][ T4780] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2221.194643][T17214] Bluetooth: hci4: unexpected subevent 0x03 length: 24 > 9 [ 2221.252312][T17214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2221.274503][T17214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2221.287169][T17214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2221.295017][T17214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2221.308197][T17214] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2221.315817][T17214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2221.456715][T31125] loop6: detected capacity change from 0 to 32768 [ 2221.493513][T31144] loop7: detected capacity change from 0 to 256 [ 2221.667831][ T4780] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2221.734032][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 2221.838529][T31036] team0: Port device team_slave_0 added [ 2221.981720][T31036] team0: Port device team_slave_1 added [ 2222.083024][ T4780] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.159113][T31036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2222.220595][T31036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2222.317806][T31161] loop6: detected capacity change from 0 to 2048 [ 2222.356740][T31036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2222.435354][T31161] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 2222.450365][ T27] audit: type=1800 audit(1783709959.215:200): pid=31161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7262" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 2222.537499][ T4780] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2222.655892][T31036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2222.662936][T31036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2222.829649][T31036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2222.871174][T14950] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 2222.960203][T14950] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 2223.006302][T14950] EXT4-fs (loop6): This should not happen!! Data will be lost [ 2223.006302][T14950] [ 2223.046388][T14950] EXT4-fs (loop6): Total free blocks count 0 [ 2223.078747][T31036] device hsr_slave_0 entered promiscuous mode [ 2223.085169][T14950] EXT4-fs (loop6): Free/Dirty block details [ 2223.085195][T14950] EXT4-fs (loop6): free_blocks=4096 [ 2223.085213][T14950] EXT4-fs (loop6): dirty_blocks=512 [ 2223.085242][T14950] EXT4-fs (loop6): Block reservation details [ 2223.085256][T14950] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 2223.164726][T28443] EXT4-fs (loop6): unmounting filesystem. [ 2223.274076][T31036] device hsr_slave_1 entered promiscuous mode [ 2223.281733][T31036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2223.311218][T31036] Cannot create hsr debugfs directory [ 2223.412205][T31163] loop1: detected capacity change from 0 to 32768 [ 2223.472168][T31163] JBD2: Ignoring recovery information on journal [ 2223.529319][ T4276] Bluetooth: hci3: command 0x0409 tx timeout [ 2223.661121][T31176] loop7: detected capacity change from 0 to 32768 [ 2223.690962][T31176] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop7 scanned by syz.7.7265 (31176) [ 2223.750663][T31163] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2223.758296][T31176] BTRFS info (device loop7): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 2223.809617][T31176] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 2223.882239][T31176] BTRFS info (device loop7): enabling ssd optimizations [ 2223.921791][T31176] BTRFS info (device loop7): not using ssd optimizations [ 2223.946693][T31163] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 2223.965738][T31176] BTRFS info (device loop7): turning off barriers [ 2223.969315][ T4276] Bluetooth: hci1: command 0x0419 tx timeout [ 2224.031319][T31176] BTRFS info (device loop7): using free space tree [ 2224.074778][T31163] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2224.123068][ T4780] tipc: Disabling bearer [ 2224.133526][ T4780] tipc: Left network mode [ 2224.168351][T31163] OCFS2: Returning error to the calling process. [ 2224.201707][T31163] (syz.1.7263,31163,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 2224.223234][T31163] (syz.1.7263,31163,1):ocfs2_search_chain:1893 ERROR: status = -5 [ 2224.251114][T31139] chnl_net:caif_netlink_parms(): no params data found [ 2224.253214][T31163] (syz.1.7263,31163,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 2224.304116][T31163] (syz.1.7263,31163,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 2224.352792][T31163] (syz.1.7263,31163,1):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 2224.361034][T31163] (syz.1.7263,31163,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 2224.370723][T31163] (syz.1.7263,31163,1):ocfs2_mknod_locked:639 ERROR: status = -5 [ 2224.384243][T31163] (syz.1.7263,31163,1):ocfs2_mknod:385 ERROR: status = -5 [ 2224.391640][T31163] (syz.1.7263,31163,1):ocfs2_mknod:502 ERROR: status = -5 [ 2224.451880][T31180] loop6: detected capacity change from 0 to 32768 [ 2224.470519][T31163] (syz.1.7263,31163,1):ocfs2_mkdir:659 ERROR: status = -5 [ 2224.505962][T31180] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.7266 (31180) [ 2224.649981][T31180] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2224.660908][T28485] BTRFS info (device loop7): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 2224.672490][T31180] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 2224.681802][T31180] BTRFS info (device loop6): force zlib compression, level 3 [ 2224.730626][T28507] ocfs2: Unmounting device (7,1) on (node local) [ 2224.739674][T31180] BTRFS info (device loop6): turning on flush-on-commit [ 2224.803940][T31180] BTRFS info (device loop6): max_inline at 0 [ 2224.826246][T31180] BTRFS info (device loop6): using free space tree [ 2225.230223][T31180] BTRFS info (device loop6): enabling ssd optimizations [ 2225.754475][ T4276] Bluetooth: hci3: command 0x041b tx timeout [ 2225.835762][T31241] loop7: detected capacity change from 0 to 4096 [ 2225.873048][T31241] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 2225.931432][T31241] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 2225.966915][T31241] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 2226.029661][T31241] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 2226.125816][T31241] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 2226.151864][T31241] ntfs: volume version 3.1. [ 2226.191366][T31241] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 2226.214318][T31139] bridge0: port 1(bridge_slave_0) entered blocking state [ 2226.221505][T31139] bridge0: port 1(bridge_slave_0) entered disabled state [ 2226.243507][T31241] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 2226.272531][T31139] device bridge_slave_0 entered promiscuous mode [ 2226.314550][T31241] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 2226.363422][T31241] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 2226.539322][T28443] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2226.561209][T31139] bridge0: port 2(bridge_slave_1) entered blocking state [ 2226.575498][T31139] bridge0: port 2(bridge_slave_1) entered disabled state [ 2226.625318][T31139] device bridge_slave_1 entered promiscuous mode [ 2227.544956][T31139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2227.639020][T31139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2227.719687][ T8505] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2227.942493][ T8505] usb 2-1: Using ep0 maxpacket: 8 [ 2227.950159][ T8505] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 2227.969959][ T8505] usb 2-1: config 179 has no interface number 0 [ 2227.977605][ T4276] Bluetooth: hci3: command 0x040f tx timeout [ 2228.006835][ T8505] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 2228.027883][ T8505] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 2228.049263][ T8505] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2228.072103][ T8505] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 2228.103650][T31139] team0: Port device team_slave_0 added [ 2228.125081][ T8505] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2228.162282][ T8505] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 2228.193624][ T8505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2228.239419][T31259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2228.315834][T31139] team0: Port device team_slave_1 added [ 2228.392118][T31277] loop7: detected capacity change from 0 to 1024 [ 2228.487598][T31277] hfsplus: bad catalog entry type [ 2228.603779][ T8505] usb 2-1: USB disconnect, device number 43 [ 2228.603849][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2228.603900][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2228.706697][T25530] hfsplus: b-tree write err: -5, ino 25 [ 2228.735877][T25530] hfsplus: b-tree write err: -5, ino 4 [ 2228.757151][T25530] hfsplus: b-tree write err: -5, ino 2 [ 2228.909805][T31268] loop6: detected capacity change from 0 to 40427 [ 2228.930900][T31268] F2FS-fs (loop6): Small segment_count (9 < 1 * 24) [ 2228.938939][T31139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2228.946473][T31268] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 2228.955547][T31139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2228.992414][T31268] F2FS-fs (loop6): invalid crc value [ 2229.030520][T31139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2229.044299][T31268] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2229.072237][T31036] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2229.213441][T31268] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 2229.223451][T31268] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2229.436997][T28443] syz-executor: attempt to access beyond end of device [ 2229.436997][T28443] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2229.510299][T31139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2229.542023][T31139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2229.573595][T31288] loop1: detected capacity change from 0 to 256 [ 2229.614420][T31288] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2229.652885][T31139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2229.741865][T31036] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2229.834885][ T4780] device hsr_slave_0 left promiscuous mode [ 2229.851648][T31282] loop7: detected capacity change from 0 to 32768 [ 2229.883906][ T4780] device hsr_slave_1 left promiscuous mode [ 2229.890694][T31282] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.7280 (31282) [ 2229.909766][ T4780] batman_adv: batadv0: Interface deactivated: dummy0 [ 2229.916691][ T4780] batman_adv: batadv0: Removing interface: dummy0 [ 2229.944327][T31282] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2229.960799][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2229.969292][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2229.981104][T31282] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 2230.006697][ T4780] device bridge_slave_1 left promiscuous mode [ 2230.010013][T31282] BTRFS info (device loop7): force zlib compression, level 3 [ 2230.020833][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 2230.047545][T31282] BTRFS info (device loop7): turning on flush-on-commit [ 2230.054637][T31282] BTRFS info (device loop7): max_inline at 0 [ 2230.079636][T31282] BTRFS info (device loop7): using free space tree [ 2230.228608][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 2230.252908][T31297] comedi comedi0: pcl812: I/O port conflict (0x140,16) [ 2230.263580][ T4780] device bridge_slave_0 left promiscuous mode [ 2230.269909][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 2230.571430][ T4780] device veth1_macvtap left promiscuous mode [ 2230.721011][ T4780] device veth0_macvtap left promiscuous mode [ 2230.826848][T31282] BTRFS info (device loop7): enabling ssd optimizations [ 2230.903387][ T4780] device veth1_vlan left promiscuous mode [ 2230.909492][ T4780] device veth0_vlan left promiscuous mode [ 2230.995404][T31316] loop6: detected capacity change from 0 to 256 [ 2231.017510][T31316] exfat: Deprecated parameter 'utf8' [ 2231.022952][T31316] exfat: Deprecated parameter 'utf8' [ 2231.028440][T31316] exfat: Deprecated parameter 'utf8' [ 2231.046113][T31316] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 2231.207988][T28485] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2231.672923][T31323] loop6: detected capacity change from 0 to 512 [ 2231.684056][T31323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2231.771167][T31323] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2231.785120][T31323] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2231.967090][T28443] EXT4-fs (loop6): unmounting filesystem. [ 2232.475166][T31331] loop6: detected capacity change from 0 to 32768 [ 2232.516993][T31331] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.7289 (31331) [ 2232.578329][T31331] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2232.609124][T31331] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 2232.632845][T31331] BTRFS info (device loop6): using free space tree [ 2232.905619][T31331] BTRFS info (device loop6): enabling ssd optimizations [ 2233.016783][T28443] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2233.906618][ T4780] team0 (unregistering): Port device team_slave_1 removed [ 2234.182488][ T4780] team0 (unregistering): Port device team_slave_0 removed [ 2234.649901][ T4780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2234.673660][ T4780] device bond_slave_1 left promiscuous mode [ 2234.807623][ T4780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2234.817298][ T4780] device bond_slave_0 left promiscuous mode [ 2235.230390][T31327] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 2235.486944][T31327] usb 7-1: Using ep0 maxpacket: 16 [ 2235.494270][T31327] usb 7-1: config index 0 descriptor too short (expected 65532, got 18) [ 2235.511698][T31327] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 2235.522124][T31327] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2235.545838][T31327] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2235.573146][T31327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2235.581332][T31327] usb 7-1: Product: syz [ 2235.585749][T31327] usb 7-1: Manufacturer: syz [ 2235.590513][T31327] usb 7-1: SerialNumber: syz [ 2235.598306][T31327] r8152-cfgselector 7-1: config 0 descriptor?? [ 2235.826930][ T4780] bond0 (unregistering): Released all slaves [ 2236.021484][T31036] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2236.032572][T31036] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2236.057663][T31327] r8152-cfgselector 7-1: Unknown version 0x0000 [ 2236.085312][T31327] r8152-cfgselector 7-1: USB disconnect, device number 24 [ 2236.274252][T31139] device hsr_slave_0 entered promiscuous mode [ 2236.290036][T31139] device hsr_slave_1 entered promiscuous mode [ 2236.300574][T31139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2236.309918][T31139] Cannot create hsr debugfs directory [ 2236.578551][T31036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2236.705233][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2236.724837][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2236.753697][T31036] 8021q: adding VLAN 0 to HW filter on device team0 [ 2236.887980][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2236.923751][T31375] loop6: detected capacity change from 0 to 64 [ 2236.931451][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2236.998806][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 2237.006037][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2237.101828][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2237.133287][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2237.166767][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2237.197137][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 2237.204796][ T4405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2237.256132][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2237.288853][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2237.516890][T31367] loop7: detected capacity change from 0 to 32768 [ 2237.570636][T31367] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop7 scanned by syz.7.7295 (31367) [ 2237.605283][T31367] BTRFS info (device loop7): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 2237.635264][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2237.665020][T31371] loop1: detected capacity change from 0 to 32768 [ 2237.683429][T31367] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm [ 2237.709485][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2237.723344][T31371] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.7296 (31371) [ 2237.739700][T31367] BTRFS info (device loop7): using free space tree [ 2237.748323][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2237.771655][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2237.802776][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2237.803063][T31371] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2237.832830][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2237.870391][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2237.878595][T31371] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 2237.898353][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2237.928647][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2237.947218][T31371] BTRFS info (device loop1): using free space tree [ 2237.955558][T31367] BTRFS info (device loop7): enabling ssd optimizations [ 2237.989731][T31036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2238.348404][T28485] BTRFS info (device loop7): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 2238.369890][T31371] BTRFS info (device loop1): enabling ssd optimizations [ 2239.605307][T28507] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 2239.749928][T31433] loop7: detected capacity change from 0 to 32768 [ 2239.886693][T31433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.7300 (31433) [ 2240.234373][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2240.254942][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2240.360807][T31036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2240.732084][T31433] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2240.830677][T31433] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 2240.839493][T31433] BTRFS info (device loop7): using free space tree [ 2240.964072][T30270] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 2241.195030][T30270] usb 7-1: Using ep0 maxpacket: 32 [ 2241.239511][T30270] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 2241.304359][T30270] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 33320, setting to 1024 [ 2241.337588][T30270] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2241.361803][T30270] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2241.372651][T30270] usb 7-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 2241.382362][T30270] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2241.382460][T31433] BTRFS info (device loop7): enabling ssd optimizations [ 2241.403072][T30270] usb 7-1: config 0 descriptor?? [ 2241.650138][T28485] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2241.872195][T30270] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28BD:0935.001C/input/input30 [ 2242.066033][T30270] uclogic 0003:28BD:0935.001C: input,hidraw1: USB HID v1.00 Mouse [HID 28bd:0935] on usb-dummy_hcd.6-1/input0 [ 2242.094447][T30270] usb 7-1: USB disconnect, device number 25 [ 2242.127703][T31489] loop1: detected capacity change from 0 to 32768 [ 2242.143144][T31489] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7303 (31489) [ 2242.158402][T31489] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2242.169053][T31489] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 2242.187901][T31489] BTRFS info (device loop1): setting nodatasum [ 2242.213605][T31489] BTRFS info (device loop1): using free space tree [ 2242.470849][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2242.493273][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2242.597737][T31489] BTRFS info (device loop1): enabling ssd optimizations [ 2242.841413][T31139] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2242.988766][T31523] fido_id[31523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 2243.115345][T31139] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2243.156067][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2243.176008][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2243.199715][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2243.219423][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2243.242706][T31036] device veth0_vlan entered promiscuous mode [ 2243.257365][T31139] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2243.288917][T31139] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2243.321475][T28507] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2243.374800][T25527] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 2243.474435][T31036] device veth1_vlan entered promiscuous mode [ 2244.124176][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2244.218152][T29456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop1 scanned by udevd (29456) [ 2244.330057][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2244.347095][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2244.390998][T31036] device veth0_macvtap entered promiscuous mode [ 2244.510991][T31036] device veth1_macvtap entered promiscuous mode [ 2244.574141][ T4780] device hsr_slave_0 left promiscuous mode [ 2244.619216][ T4780] device hsr_slave_1 left promiscuous mode [ 2244.635184][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2244.654103][T31548] loop6: detected capacity change from 0 to 64 [ 2244.664968][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2244.688092][ T4780] device bridge_slave_1 left promiscuous mode [ 2244.696846][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 2244.740267][ T4780] device bridge_slave_0 left promiscuous mode [ 2244.768508][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 2245.220719][T31545] loop1: detected capacity change from 0 to 32768 [ 2245.240345][T31545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.7306 (31545) [ 2245.293723][T31545] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2245.313257][T31545] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2245.324429][T31545] BTRFS info (device loop1): setting nodatasum [ 2245.331491][T31545] BTRFS info (device loop1): force zlib compression, level 3 [ 2245.339547][T31545] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 2245.348969][T31545] BTRFS info (device loop1): use lzo compression, level 0 [ 2245.356961][T31545] BTRFS info (device loop1): turning on flush-on-commit [ 2245.364378][T31545] BTRFS info (device loop1): enabling auto defrag [ 2245.371156][T31545] BTRFS info (device loop1): max_inline at 4096 [ 2245.378743][T31545] BTRFS info (device loop1): using free space tree [ 2245.608103][T31545] BTRFS info (device loop1): enabling ssd optimizations [ 2245.741775][T28507] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2245.921518][T31582] comedi comedi0: pcl812: I/O port conflict (0x140,16) [ 2246.030262][T31584] loop7: detected capacity change from 0 to 1024 [ 2246.214982][ T4780] team0 (unregistering): Port device team_slave_1 removed [ 2246.345617][T31586] loop1: detected capacity change from 0 to 4096 [ 2246.413787][T31587] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2246.721142][ T4780] team0 (unregistering): Port device team_slave_0 removed [ 2246.855198][ T4780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2246.979045][T31598] loop7: detected capacity change from 0 to 1024 [ 2247.016098][T31598] EXT4-fs: inline encryption not supported [ 2247.034724][ T4780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2247.100698][T31598] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 2247.141692][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 2247.141709][ T27] audit: type=1800 audit(1783709982.311:201): pid=31598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7315" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 2247.357424][T28485] EXT4-fs (loop7): unmounting filesystem. [ 2247.752900][ T4780] bond0 (unregistering): Released all slaves [ 2248.498383][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2248.506871][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2248.530864][T31036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.547137][T31036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.561600][T31036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2248.575660][T31036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.595032][T31036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2248.627156][T31139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2248.673922][T31139] 8021q: adding VLAN 0 to HW filter on device team0 [ 2248.682273][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2248.722439][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2248.757170][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2248.805559][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2248.830017][T31611] loop7: detected capacity change from 0 to 256 [ 2248.843536][T31036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2248.873795][T31036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.921637][T31036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2248.977699][T31036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2249.010442][T31036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2249.065167][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2249.082981][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2249.155106][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2249.185019][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2249.256974][T25530] bridge0: port 1(bridge_slave_0) entered blocking state [ 2249.264260][T25530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2249.321694][T31036] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.348106][T31036] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.374348][T31036] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.417651][T31036] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2249.468152][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2249.478016][T31625] loop1: detected capacity change from 0 to 2048 [ 2249.500727][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2249.545135][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2249.565072][T25530] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.572322][T25530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2249.609200][T31625] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2249.624515][T31625] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2249.684850][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2249.721832][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2249.857953][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2249.891005][T28507] EXT4-fs (loop1): unmounting filesystem. [ 2249.926018][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2249.945874][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2249.962334][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2249.993695][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2250.029892][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2250.042803][T31614] loop6: detected capacity change from 0 to 32768 [ 2250.130960][T31614] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.7318 (31614) [ 2250.149947][T31139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2250.200945][T31139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2250.223369][T31614] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 2250.260356][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2250.288179][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2250.298908][T31614] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 2250.339229][T25530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2250.364166][T31614] BTRFS info (device loop6): using free space tree [ 2250.490711][T31652] netlink: 'syz.7.7324': attribute type 29 has an invalid length. [ 2250.502029][T31652] netlink: 'syz.7.7324': attribute type 29 has an invalid length. [ 2250.517077][T31642] netlink: 'syz.7.7324': attribute type 29 has an invalid length. [ 2250.544110][T14950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.574013][T14950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2250.705070][T17548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2250.730849][T17548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2250.779684][T31614] BTRFS info (device loop6): enabling ssd optimizations [ 2250.826026][T17548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2250.887829][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2252.318853][T28443] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 2252.364909][T14950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2252.379442][T14950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2252.473530][T31139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2252.566498][T14950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2252.595949][T14950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2252.664514][T14950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2252.674552][T14950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2252.697807][T31139] device veth0_vlan entered promiscuous mode [ 2252.716959][T14950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2252.738164][T14950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2252.764762][T31139] device veth1_vlan entered promiscuous mode [ 2253.099029][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2253.109153][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2253.147774][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2253.183755][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2253.218603][T31139] device veth0_macvtap entered promiscuous mode [ 2253.392862][T31139] device veth1_macvtap entered promiscuous mode [ 2253.415463][T31139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.431734][T31139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.451143][T31139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.462803][T31139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.492843][T31139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2253.504043][T31695] loop9: detected capacity change from 0 to 32768 [ 2253.534651][T31139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.573465][T31139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2253.587784][T31695] XFS (loop9): Mounting V5 Filesystem [ 2253.619672][T17539] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2253.642954][T17539] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2253.694713][T17539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2253.722596][T31714] loop6: detected capacity change from 0 to 512 [ 2253.734481][T17539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2253.747312][T31139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.780040][T31714] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 2253.826895][T31139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.871160][T31714] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2253.891162][T31139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.902038][T31139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.914165][T31139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2253.925543][T31139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2253.939874][T31139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2253.959606][T17539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2253.993250][T17539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2254.013868][T31695] XFS (loop9): Ending clean mount [ 2254.035296][T31695] XFS (loop9): Quotacheck needed: Please wait. [ 2254.047936][T31139] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.091334][T31139] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.142345][T31139] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.180378][T31139] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.268788][T31695] XFS (loop9): Quotacheck: Done. [ 2254.419338][T28443] EXT4-fs (loop6): unmounting filesystem. [ 2254.533972][T31036] XFS (loop9): Unmounting Filesystem [ 2254.539478][T17539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2254.569534][T17539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2254.691375][T17539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2254.746923][T25530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2254.779394][T25530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2254.828712][T25527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2254.887238][T18771] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 2254.980346][T31738] loop0: detected capacity change from 0 to 256 [ 2255.023335][T31738] FAT-fs (loop0): "posix" option is obsolete, not supported now [ 2255.079241][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2255.085686][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2255.163181][T18771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2255.196910][T18771] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2255.220409][T18771] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2255.271687][T18771] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2255.304245][T18771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2255.512208][T18771] usb 2-1: config 0 descriptor?? [ 2255.730522][T31742] netlink: 'syz.0.7130': attribute type 4 has an invalid length. [ 2256.353971][T18771] hid-generic 0003:0457:07DA.001D: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 2256.656168][T30917] usb 2-1: USB disconnect, device number 44 [ 2256.698405][T31732] loop6: detected capacity change from 0 to 40427 [ 2256.758061][T31732] F2FS-fs (loop6): invalid crc value [ 2256.810992][T31732] F2FS-fs (loop6): Found nat_bits in checkpoint [ 2257.671148][T31747] fido_id[31747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2257.852920][T31732] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 2258.453871][T31765] loop7: detected capacity change from 0 to 32768 [ 2258.561748][ T27] audit: type=1800 audit(1783709993.007:202): pid=31765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.7339" name="file1" dev="loop7" ino=4 res=0 errno=0 [ 2258.880726][T31798] netlink: 'syz.6.7347': attribute type 29 has an invalid length. [ 2258.889018][T31798] netlink: 'syz.6.7347': attribute type 29 has an invalid length. [ 2258.912372][T31798] netlink: 'syz.6.7347': attribute type 29 has an invalid length. [ 2258.957575][T31798] netlink: 'syz.6.7347': attribute type 29 has an invalid length. [ 2258.985802][T31800] netlink: 'syz.6.7347': attribute type 29 has an invalid length. [ 2259.167809][T31803] syz.9.7349[31803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2259.167993][T31803] syz.9.7349[31803] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2259.547206][T31775] loop0: detected capacity change from 0 to 32768 [ 2259.694957][T31775] XFS (loop0): Mounting V5 Filesystem [ 2259.816315][T31775] XFS (loop0): Ending clean mount [ 2260.002161][T31795] loop1: detected capacity change from 0 to 32768 [ 2260.050881][T31139] XFS (loop0): Unmounting Filesystem [ 2260.135914][T31795] JBD2: Ignoring recovery information on journal [ 2260.273946][T31795] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 2260.493767][T28507] ocfs2: Unmounting device (7,1) on (node local) [ 2261.688694][T31859] loop9: detected capacity change from 0 to 1024 [ 2261.783552][T31859] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 2261.982507][T31036] EXT4-fs (loop9): unmounting filesystem. [ 2262.094975][T30282] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 2262.300312][T30282] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.344782][T30282] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2262.415430][T30282] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.537618][T30282] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 2262.985414][T31892] loop0: detected capacity change from 0 to 256 [ 2263.357604][T31896] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7371'. [ 2263.714453][T30282] gspca_stv0680: usb_control_msg error 2, request = 0x6, error = -32 [ 2263.732297][T31907] netlink: 'syz.0.7373': attribute type 2 has an invalid length. [ 2263.751476][T30282] stv0680 7-1:4.0: Could not get descriptor 0200 [ 2263.928145][T30282] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 2263.967716][T30282] stv0680 7-1:4.0: last error: 9, command = 0x3 [ 2264.006858][T30282] usb 7-1: USB disconnect, device number 26 [ 2264.131000][T31914] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7376'. [ 2265.441204][T31934] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input31 [ 2265.823479][T31949] netlink: 324 bytes leftover after parsing attributes in process `syz.9.7385'. [ 2265.866044][T31949] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7385'. [ 2266.044470][T31918] loop1: detected capacity change from 0 to 32768 [ 2266.135855][T31918] JBD2: Ignoring recovery information on journal [ 2266.366887][T31918] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2266.465227][T31918] [ 2266.467664][T31918] ====================================================== [ 2266.474970][T31918] WARNING: possible circular locking dependency detected [ 2266.482040][T31918] syzkaller #0 Not tainted [ 2266.486489][T31918] ------------------------------------------------------ [ 2266.493547][T31918] syz.1.7378/31918 is trying to acquire lock: [ 2266.499662][T31918] ffff8880517d89c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_xattr_set+0xbe4/0x1390 [ 2266.512057][T31918] [ 2266.512057][T31918] but task is already holding lock: [ 2266.520612][T31918] ffff8880517d9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x491/0x1390 [ 2266.530791][T31918] [ 2266.530791][T31918] which lock already depends on the new lock. [ 2266.530791][T31918] [ 2266.541256][T31918] [ 2266.541256][T31918] the existing dependency chain (in reverse order) is: [ 2266.550295][T31918] [ 2266.550295][T31918] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 2266.558167][T31918] down_read+0x42/0x2d0 [ 2266.562876][T31918] ocfs2_init_acl+0x307/0x770 [ 2266.568107][T31918] ocfs2_mknod+0x18e0/0x2580 [ 2266.573329][T31918] ocfs2_create+0x1b6/0x4b0 [ 2266.578377][T31918] path_openat+0x11b9/0x2f10 [ 2266.583624][T31918] do_filp_open+0x1ee/0x420 [ 2266.588675][T31918] do_sys_openat2+0x14b/0x4f0 [ 2266.594026][T31918] __x64_sys_openat+0x135/0x160 [ 2266.599522][T31918] do_syscall_64+0x4c/0xa0 [ 2266.604519][T31918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2266.610966][T31918] [ 2266.610966][T31918] -> #1 (jbd2_handle){++++}-{0:0}: [ 2266.618317][T31918] jbd2_journal_lock_updates+0xa8/0x390 [ 2266.624472][T31918] __ocfs2_flush_truncate_log+0x2cf/0x1220 [ 2266.630875][T31918] ocfs2_flush_truncate_log+0x4b/0x60 [ 2266.636801][T31918] ocfs2_sync_fs+0x119/0x330 [ 2266.641943][T31918] sync_filesystem+0x1be/0x220 [ 2266.647431][T31918] ocfs2_remount+0x115/0xb40 [ 2266.652588][T31918] reconfigure_super+0x224/0x8d0 [ 2266.658275][T31918] vfs_fsconfig_locked+0x18d/0x400 [ 2266.663963][T31918] __se_sys_fsconfig+0x69e/0x7e0 [ 2266.669451][T31918] do_syscall_64+0x4c/0xa0 [ 2266.674433][T31918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2266.680976][T31918] [ 2266.680976][T31918] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 2266.691519][T31918] __lock_acquire+0x2d18/0x7c40 [ 2266.696926][T31918] lock_acquire+0x1bb/0x4a0 [ 2266.701984][T31918] down_write+0x36/0x60 [ 2266.706683][T31918] ocfs2_xattr_set+0xbe4/0x1390 [ 2266.712121][T31918] __vfs_setxattr+0x3d8/0x410 [ 2266.717524][T31918] __vfs_setxattr_noperm+0x126/0x5e0 [ 2266.723385][T31918] vfs_setxattr+0x167/0x2e0 [ 2266.728464][T31918] setxattr+0x2a3/0x330 [ 2266.733187][T31918] path_setxattr+0x147/0x290 [ 2266.738351][T31918] __x64_sys_lsetxattr+0xb4/0xd0 [ 2266.743850][T31918] do_syscall_64+0x4c/0xa0 [ 2266.748815][T31918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2266.755352][T31918] [ 2266.755352][T31918] other info that might help us debug this: [ 2266.755352][T31918] [ 2266.765600][T31918] Chain exists of: [ 2266.765600][T31918] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 2266.765600][T31918] [ 2266.781629][T31918] Possible unsafe locking scenario: [ 2266.781629][T31918] [ 2266.789109][T31918] CPU0 CPU1 [ 2266.794487][T31918] ---- ---- [ 2266.799870][T31918] lock(&oi->ip_xattr_sem); [ 2266.804499][T31918] lock(jbd2_handle); [ 2266.811121][T31918] lock(&oi->ip_xattr_sem); [ 2266.818285][T31918] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 2266.825601][T31918] [ 2266.825601][T31918] *** DEADLOCK *** [ 2266.825601][T31918] [ 2266.833850][T31918] 3 locks held by syz.1.7378/31918: [ 2266.839068][T31918] #0: ffff8880542b8460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 2266.848404][T31918] #1: ffff8880517d9808 (&sb->s_type->i_mutex_key#44){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 2266.859003][T31918] #2: ffff8880517d9538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x491/0x1390 [ 2266.868976][T31918] [ 2266.868976][T31918] stack backtrace: [ 2266.874970][T31918] CPU: 1 PID: 31918 Comm: syz.1.7378 Not tainted syzkaller #0 [ 2266.882726][T31918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2266.892813][T31918] Call Trace: [ 2266.896116][T31918] [ 2266.899215][T31918] dump_stack_lvl+0x188/0x24e [ 2266.903937][T31918] ? load_image+0x410/0x410 [ 2266.908556][T31918] ? show_regs_print_info+0x12/0x12 [ 2266.913794][T31918] ? print_circular_bug+0x12b/0x1a0 [ 2266.919033][T31918] check_noncircular+0x296/0x330 [ 2266.924006][T31918] ? look_up_lock_class+0x75/0x140 [ 2266.929298][T31918] ? add_chain_block+0x9b0/0x9b0 [ 2266.934272][T31918] ? lockdep_lock+0xf1/0x1f0 [ 2266.939072][T31918] ? lockdep_unlock+0x142/0x2e0 [ 2266.943959][T31918] ? _find_first_zero_bit+0xd2/0x100 [ 2266.949397][T31918] __lock_acquire+0x2d18/0x7c40 [ 2266.954318][T31918] ? rt_mutex_slowlock_block+0x520/0x630 [ 2266.959980][T31918] ? ocfs2_downconvert_lock+0x500/0x500 [ 2266.965625][T31918] ? verify_lock_unused+0x140/0x140 [ 2266.970891][T31918] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 2266.976734][T31918] ? do_raw_spin_lock+0x128/0x2f0 [ 2266.981787][T31918] lock_acquire+0x1bb/0x4a0 [ 2266.986326][T31918] ? ocfs2_xattr_set+0xbe4/0x1390 [ 2266.991385][T31918] ? _raw_spin_unlock+0x24/0x40 [ 2266.996266][T31918] ? ocfs2_xattr_block_find+0x157/0x4e0 [ 2267.001858][T31918] ? __might_sleep+0xd0/0xd0 [ 2267.006471][T31918] ? read_lock_is_recursive+0x10/0x10 [ 2267.011885][T31918] ? rwsem_write_trylock+0x135/0x1c0 [ 2267.017205][T31918] ? ocfs2_xattr_ibody_find+0x780/0x780 [ 2267.022797][T31918] ? ocfs2_xattr_ibody_find+0xc6/0x780 [ 2267.028290][T31918] down_write+0x36/0x60 [ 2267.032492][T31918] ? ocfs2_xattr_set+0xbe4/0x1390 [ 2267.037551][T31918] ocfs2_xattr_set+0xbe4/0x1390 [ 2267.042483][T31918] ? __ocfs2_xattr_set_handle+0xf20/0xf20 [ 2267.048801][T31918] ? aa_get_newest_label+0xf9/0x5b0 [ 2267.054124][T31918] ? posix_xattr_acl+0x8f/0xb0 [ 2267.059201][T31918] ? evm_protect_xattr+0x332/0x9d0 [ 2267.064343][T31918] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 2267.069916][T31918] __vfs_setxattr+0x3d8/0x410 [ 2267.074647][T31918] __vfs_setxattr_noperm+0x126/0x5e0 [ 2267.079972][T31918] vfs_setxattr+0x167/0x2e0 [ 2267.084502][T31918] ? xattr_permission+0x510/0x510 [ 2267.089558][T31918] ? strncpy_from_user+0x1dc/0x340 [ 2267.094757][T31918] setxattr+0x2a3/0x330 [ 2267.098944][T31918] ? path_setxattr+0x290/0x290 [ 2267.104038][T31918] ? __mnt_want_write+0x21f/0x2a0 [ 2267.109165][T31918] path_setxattr+0x147/0x290 [ 2267.113814][T31918] ? simple_xattr_list_add+0xf0/0xf0 [ 2267.119151][T31918] ? lock_chain_count+0x20/0x20 [ 2267.124138][T31918] __x64_sys_lsetxattr+0xb4/0xd0 [ 2267.129118][T31918] do_syscall_64+0x4c/0xa0 [ 2267.133829][T31918] ? clear_bhb_loop+0x60/0xb0 [ 2267.138539][T31918] ? clear_bhb_loop+0x60/0xb0 [ 2267.143247][T31918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2267.149186][T31918] RIP: 0033:0x7f2d8659de59 [ 2267.153631][T31918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2267.173338][T31918] RSP: 002b:00007f2d87555028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 2267.181943][T31918] RAX: ffffffffffffffda RBX: 00007f2d86825fa0 RCX: 00007f2d8659de59 [ 2267.189945][T31918] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000280 [ 2267.197938][T31918] RBP: 00007f2d86633e6f R08: 0000000000000000 R09: 0000000000000000 [ 2267.205945][T31918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2267.213939][T31918] R13: 00007f2d86826038 R14: 00007f2d86825fa0 R15: 00007ffce030f698 [ 2267.222138][T31918] [ 2267.498257][T28507] ocfs2: Unmounting device (7,1) on (node local)