last executing test programs: 15.237905305s ago: executing program 2 (id=38): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000065403c675df4bc42825fe6312c226a4689b91af29f534243a4ad55ed1b2c494da4749fb04202d6e8797847eccea944baf5a3b62197bc4f1aefa6e1d10a5e9777289ca0534070b4e9b8aec266299ba5c873e16ea9eab1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x60060200) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) 10.212144172s ago: executing program 2 (id=60): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x12, 0xfa00, {0x2, &(0x7f0000000080), 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) 10.037192486s ago: executing program 2 (id=61): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 9.834280759s ago: executing program 2 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 9.546973155s ago: executing program 2 (id=65): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080), 0x80, 0x63c, &(0x7f0000001bc0)="$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") socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) 9.545988725s ago: executing program 0 (id=66): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)="aa60550259cfa66c40c65ef31f60824be491", 0x12}, {&(0x7f0000000300)="b104c58e9c82741def9ca0ea971287a62cdb66a3e00a2580aa0bd24f8cd9c5a46d6e651b2d5562b5a8bd", 0x2a}], 0x3}}], 0x2, 0x4008444) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x1}, 0x10) close(r4) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r8, r3, 0x11, 0x0, r8}, 0x14) write$proc_mixer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='PHONEIN\nTREBLE \'Master Playback Sn/tch\' 0100000'], 0xa8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r9 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r9, 0x1000) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) r11 = dup(r10) write$FUSE_NOTIFY_POLL(r11, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x9}}, 0x18) 7.947512956s ago: executing program 0 (id=68): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 7.691663651s ago: executing program 0 (id=70): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000065403c675df4bc42825fe6312c226a4689b91af29f534243a4ad55ed1b2c494da4749fb04202d6e8797847eccea944baf5a3b62197bc4f1aefa6e1d10a5e9777289ca0534070b4e9b8aec266299ba5c873e16ea9eab1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x60060200) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) 7.007578784s ago: executing program 1 (id=72): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(0x0, 0x40, 0xb4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x4, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 6.592536852s ago: executing program 3 (id=74): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x15) 6.404982386s ago: executing program 1 (id=75): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000f80800410072786500140033007663616e300000000000000000", @ANYRES64], 0x38}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000400)=0x1) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x140d, 0x413, 0x70bd3d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x509c41, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000040)={@loopback, @broadcast}, 0xc) flock(r2, 0x5) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)=ANY=[]) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) flock(r4, 0x2) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'macvlan1\x00', 0x200}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) dup3(r4, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nombcache}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x84}, 0x1, 0x0, 0x0, 0x4044014}, 0x20008000) 5.588943012s ago: executing program 0 (id=76): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) r1 = epoll_create1(0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8}, 0x1c, &(0x7f00000004c0)=[{0x0}, {&(0x7f00000002c0)="aa60550259cfa66c40c65ef31f60824be491", 0x12}, {&(0x7f0000000300)="b104c58e9c82741def9ca0ea971287a62cdb66a3e00a2580aa0bd24f8cd9c5a46d6e651b2d5562b5a8bd", 0x2a}], 0x3}}], 0x2, 0x4008444) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1, 0x1}, 0x10) close(r4) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r8, r3, 0x11, 0x0, r8}, 0x14) write$proc_mixer(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='PHONEIN\nTREBLE \'Master Playback Sn/tch\' 0100000'], 0xa8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r9 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r9, 0x1000) r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) r11 = dup(r10) write$FUSE_NOTIFY_POLL(r11, &(0x7f0000000000)={0x18, 0x1, 0x0, {0x9}}, 0x18) 5.529020503s ago: executing program 2 (id=77): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/135, &(0x7f00000002c0), &(0x7f0000000280), 0x4, r1}, 0x38) 5.477985304s ago: executing program 3 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x335, @tick=0xe, 0x42, {}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000300)={0x9, 0x11, 0x1, 'queue0\x00', 0x16}) tkill(r1, 0x7) 5.380870676s ago: executing program 1 (id=79): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 5.112325181s ago: executing program 3 (id=80): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f00000005c0)={0x1, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}]}) socket$unix(0x1, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 4.772418017s ago: executing program 1 (id=81): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000300)=@add_del={0x2, &(0x7f0000000240)='nicvf0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@nodelalloc}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4ea, &(0x7f00000009c0)="$eJzs3VFrW9cdAPD/la3MSZzZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYR9gMMY22NOe9jLoByiUfIRSCLTvpS0tpU3ah0LbqOhKShxHip1GllLr94MjnXt0r/7nXKGje+49XAXQt05HxJmIeFitVs9FxEijPNNIsVVPtfUe3L89W0tJVKvXPkoiknpZbbXxbe95tLHZUET8/jcRf0qejlve2FyaKRYLa43lfGV5NV/e2Dy/uDyzUFgorExNTV6avjx9cXqiI+0cjogrv3rvn3/736+vvPaTm29f/2D8z0mjPOJxOzqt3vRsui+aBiNibT+C9chg2kIAAL4Jmsf5P4yIczESA+nRHAAAAHCQVH8+HF8kEVUAAADgwMqkc2CTTK4xD2A4Mplcrj6H97txJFMslSs/ni+tr8zV58qORjYzv1gsTDTmCo9GNqktT6b5x8sXdixPRcTxiPjHyOF0OTdbKs71+uQHAAAA9ImjO8b/n47Ux//bfN6zygEAAACdM9rrCgAAAAD7zvgfAAAADj7jfwAAADjQfnv1ai1Vm/9/PXdjY32pdOP8XKG8lFten83NltZWcwul0kJ6z77l3d6vWCqt/jRW1m/lK4VyJV/e2Ly+XFpfqVxffOIvsAEAAIAuOv6Du28lEbH1s8NpqjnU60oBXTH4PCu/u3/1ALpvoNcVAHrmuX7/gQMl2+sKAD2X7PJ628k7r3e+LgAAwP4Y+17r6/8Du54b2Mp0qYrAPnH+D/qX6//Qv1z/h/6VjYEwkIf+ttstQIfajRX2fP2/Wn3uSgEAAB01nKYkk4tIzwMMRyaTy0UcS8cE2WR+sViYiIhvR8SbI9lv1ZYn0y2TXecMAwAAAAAAAAAAAAAAAAAAAAAAAAB11WoSVQAAAOBAi8i8n6R3848YGzk7vPP8wKHks5H0OSJu/ufav27NVCprk7Xyjx+VV/7dKL/QizMYAAAAwE7NcXpzHA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfTg/u3ZZupm3A9/GRGjreIPxlD6PBTZiDjySRKD27ZLImKgA/G37kTEiVbxk1q1YrRRi1bxD/c4/tEOxId+drfW//yi1fcvE6fT59bfv0tpD/Xi2vd/mUf930CL+LWyY3uMcfLeK/m28e9EnBxs3f804ydt+p8ze4z/xz9sbrZ7rfrfiLGWvz/JE7HyleXVfHlj8/zi8sxCYaGwMjU1eWn68vTF6Yn8/GKx0HhsGePv33/14bPaf6RN/NFd2n92j+3/8t6t+9+pZ7OPNk8exx8/0/rzP9Emfqbx+f+oka+9PtbMb9Xz2536/xunntX+uTbt3+3zH99j+8/97q/v7HFVAKALyhubSzPFYmGtrzMvtDdqh0UvRStezkxtv379zYf2tYZ/2V6SdObrUDsyfzn2/ItletotAQAA++DpMTAAAAAAAAAAAAAAAAAAAADQbd24nVh2R8yt9LETd88HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOicrwIAAP///B/QPg==") r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0xf6, 0x0, 0x1, 0x55, 0x6, @multicast}, 0x14) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1, 0x4}}, 0x10, 0x0}, 0x4000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x1c, 0x0, 0x308, 0x1000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) bind$packet(r7, &(0x7f0000000300)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @random="0256e946884b"}, 0x14) 4.66768121s ago: executing program 0 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 4.596569331s ago: executing program 3 (id=83): epoll_create1(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(0x0, 0x40, 0xb4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000e, 0x4, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 4.400407135s ago: executing program 0 (id=84): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000065403c675df4bc42825fe6312c226a4689b91af29f534243a4ad55ed1b2c494da4749fb04202d6e8797847eccea944baf5a3b62197bc4f1aefa6e1d10a5e9777289ca0534070b4e9b8aec266299ba5c873e16ea9eab1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x60060200) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7}, 0x18) 4.264985037s ago: executing program 3 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x2200080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) unshare(0x62040200) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000040)=0x7) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) kcmp(r0, r7, 0x3, r8, r4) 2.459580472s ago: executing program 1 (id=86): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080), 0x80, 0x63c, &(0x7f0000001bc0)="$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") socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) 563.162609ms ago: executing program 3 (id=87): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x15) 0s ago: executing program 1 (id=88): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00'}, 0x18) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a31000000f80800410072786500140033007663616e300000000000000000", @ANYRES64], 0x38}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000400)=0x1) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x140d, 0x413, 0x70bd3d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x509c41, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000040)={@loopback, @broadcast}, 0xc) flock(r3, 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x2}) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000380)=ANY=[]) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r5, 0x1) flock(r5, 0x2) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'macvlan1\x00', 0x200}) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) dup3(r5, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nombcache}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x84}, 0x1, 0x0, 0x0, 0x4044014}, 0x20008000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 82.049816][ T5779] cgroup: Unknown subsys name 'net' [ 82.220934][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.051208][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.864867][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.870683][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.876147][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.890655][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.898802][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.900036][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.907624][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.921266][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.922181][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.931860][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.937689][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.946249][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.957168][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.959286][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.965700][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.973894][ T5800] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.980203][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.988491][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.005255][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.017507][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.031117][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.031930][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.053783][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.062156][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.584261][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 86.723334][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.744932][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.835967][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 86.881992][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.890426][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.898382][ T5791] bridge_slave_0: entered allmulticast mode [ 86.906150][ T5791] bridge_slave_0: entered promiscuous mode [ 86.950158][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.957981][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.966267][ T5791] bridge_slave_1: entered allmulticast mode [ 86.974462][ T5791] bridge_slave_1: entered promiscuous mode [ 87.056631][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.087927][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.095379][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.102918][ T5789] bridge_slave_0: entered allmulticast mode [ 87.110471][ T5789] bridge_slave_0: entered promiscuous mode [ 87.120770][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.150252][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.157827][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.165164][ T5790] bridge_slave_0: entered allmulticast mode [ 87.173142][ T5790] bridge_slave_0: entered promiscuous mode [ 87.181455][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.189418][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.197025][ T5789] bridge_slave_1: entered allmulticast mode [ 87.204921][ T5789] bridge_slave_1: entered promiscuous mode [ 87.243575][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.252194][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.260272][ T5790] bridge_slave_1: entered allmulticast mode [ 87.268348][ T5790] bridge_slave_1: entered promiscuous mode [ 87.314168][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.335868][ T5791] team0: Port device team_slave_0 added [ 87.346541][ T5791] team0: Port device team_slave_1 added [ 87.426603][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.446099][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.501952][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.509200][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.517625][ T5794] bridge_slave_0: entered allmulticast mode [ 87.525683][ T5794] bridge_slave_0: entered promiscuous mode [ 87.537482][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.597419][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.606550][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.615812][ T5794] bridge_slave_1: entered allmulticast mode [ 87.626662][ T5794] bridge_slave_1: entered promiscuous mode [ 87.673876][ T5789] team0: Port device team_slave_0 added [ 87.681456][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.693898][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.732558][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.795885][ T5789] team0: Port device team_slave_1 added [ 87.803716][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.810738][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.843835][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.866979][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.906546][ T5790] team0: Port device team_slave_0 added [ 87.925133][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.954373][ T5790] team0: Port device team_slave_1 added [ 87.962000][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.969382][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.997402][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.010693][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.017760][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.044004][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.103099][ T5804] Bluetooth: hci0: command tx timeout [ 88.109579][ T5804] Bluetooth: hci1: command tx timeout [ 88.116467][ T51] Bluetooth: hci2: command tx timeout [ 88.117259][ T5801] Bluetooth: hci3: command tx timeout [ 88.159656][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.166771][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.193602][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.208292][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.216098][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.244574][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.264365][ T5791] hsr_slave_0: entered promiscuous mode [ 88.272320][ T5791] hsr_slave_1: entered promiscuous mode [ 88.284518][ T5794] team0: Port device team_slave_0 added [ 88.331039][ T5794] team0: Port device team_slave_1 added [ 88.394084][ T5789] hsr_slave_0: entered promiscuous mode [ 88.401067][ T5789] hsr_slave_1: entered promiscuous mode [ 88.408810][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.417187][ T5789] Cannot create hsr debugfs directory [ 88.488163][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.495644][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.522470][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.539772][ T5790] hsr_slave_0: entered promiscuous mode [ 88.547885][ T5790] hsr_slave_1: entered promiscuous mode [ 88.555574][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.563374][ T5790] Cannot create hsr debugfs directory [ 88.589166][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.597028][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.624688][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.807704][ T5794] hsr_slave_0: entered promiscuous mode [ 88.815602][ T5794] hsr_slave_1: entered promiscuous mode [ 88.829615][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.839525][ T5794] Cannot create hsr debugfs directory [ 89.145025][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.167232][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.179775][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.202937][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.279712][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.296287][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.314860][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.328629][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.427853][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.441378][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.473452][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.486609][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.583774][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.596987][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.619498][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.632544][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.715029][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.788670][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.805771][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.850270][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.857926][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.890513][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.910952][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.918824][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.954073][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.961348][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.982174][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.989773][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.093599][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.181896][ T5804] Bluetooth: hci1: command tx timeout [ 90.182529][ T5801] Bluetooth: hci2: command tx timeout [ 90.187509][ T5804] Bluetooth: hci3: command tx timeout [ 90.193647][ T5801] Bluetooth: hci0: command tx timeout [ 90.203214][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.238528][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.246372][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.277733][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.309073][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.317012][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.413641][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.478877][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.486343][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.575839][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.583534][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.666676][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.718665][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.891160][ T5791] veth0_vlan: entered promiscuous mode [ 90.939686][ T5791] veth1_vlan: entered promiscuous mode [ 90.959539][ T5789] veth0_vlan: entered promiscuous mode [ 91.016685][ T5789] veth1_vlan: entered promiscuous mode [ 91.070241][ T5791] veth0_macvtap: entered promiscuous mode [ 91.084824][ T5791] veth1_macvtap: entered promiscuous mode [ 91.148373][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.182212][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.193000][ T5789] veth0_macvtap: entered promiscuous mode [ 91.209475][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.224370][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.234062][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.243447][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.252666][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.266861][ T5789] veth1_macvtap: entered promiscuous mode [ 91.294655][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.324228][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.336043][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.349261][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.425261][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.436247][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.449931][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.499004][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.507983][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.517534][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.526631][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.564015][ T5790] veth0_vlan: entered promiscuous mode [ 91.570251][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.579400][ T5794] veth0_vlan: entered promiscuous mode [ 91.585224][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.619743][ T5790] veth1_vlan: entered promiscuous mode [ 91.674299][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.675660][ T5794] veth1_vlan: entered promiscuous mode [ 91.692717][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.816917][ T2935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.833799][ T2935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.852513][ T5794] veth0_macvtap: entered promiscuous mode [ 91.894380][ T5794] veth1_macvtap: entered promiscuous mode [ 91.976933][ T5790] veth0_macvtap: entered promiscuous mode [ 92.000561][ T5790] veth1_macvtap: entered promiscuous mode [ 92.020672][ T2903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.035183][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.046453][ T2903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.051063][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.064219][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.075464][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.089214][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.129246][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.144541][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.160607][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.173992][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.203562][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.267273][ T5804] Bluetooth: hci0: command tx timeout [ 92.280137][ T5804] Bluetooth: hci2: command tx timeout [ 92.286856][ T5804] Bluetooth: hci3: command tx timeout [ 92.292644][ T5804] Bluetooth: hci1: command tx timeout [ 92.325512][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.348084][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.361398][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.370968][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.397318][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.417091][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.452961][ T27] cfg80211: failed to load regulatory.db [ 92.464006][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.482069][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.496788][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.509120][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.529445][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.651073][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.720119][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.785502][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.796204][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.806197][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.816870][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.828643][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.877361][ T785] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 92.890558][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.924316][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.939138][ T785] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.946761][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.971726][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.230556][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.271748][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.346972][ T5888] syz.0.5[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.372684][ T5888] loop0: detected capacity change from 0 to 128 [ 93.380265][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.406359][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.483968][ T5888] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.548471][ T5888] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.595452][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.619201][ T5883] ALSA: mixer_oss: invalid index 100000 [ 93.624251][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.776709][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.808302][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.820869][ T5894] loop1: detected capacity change from 0 to 128 [ 93.921202][ T5894] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.005655][ T5894] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 94.351790][ T51] Bluetooth: hci1: command tx timeout [ 94.358206][ T51] Bluetooth: hci3: command tx timeout [ 94.367269][ T51] Bluetooth: hci2: command tx timeout [ 94.463445][ T5804] Bluetooth: hci0: command tx timeout [ 95.032352][ T5797] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.111960][ T5901] mmap: syz.3.6 (5901) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.136981][ T5902] syz.2.3[5902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.137176][ T5902] syz.2.3[5902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.274482][ T5797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.492221][ T5907] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.917488][ T5832] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.075344][ T5797] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 96.106446][ T5797] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 96.136057][ T5797] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.147418][ T5797] usb 1-1: config 1 has no interface number 1 [ 96.160123][ T5902] loop2: detected capacity change from 0 to 1024 [ 96.162100][ T5797] usb 1-1: too many endpoints for config 1 interface 4 altsetting 6: 226, using maximum allowed: 30 [ 96.178887][ T5902] EXT4-fs: Ignoring removed orlov option [ 96.184130][ T5902] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.217184][ T5797] usb 1-1: config 1 interface 4 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 96.266386][ T5797] usb 1-1: config 1 interface 4 has no altsetting 0 [ 96.282569][ T5902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.326576][ T5832] usb 2-1: unable to get BOS descriptor or descriptor too short [ 96.329116][ T5797] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.349072][ T5832] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 96.445228][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.499141][ T5832] usb 2-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 96.513586][ T5832] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 96.519179][ T5797] usb 1-1: Product: syz [ 96.524080][ T5832] usb 2-1: config 1 has no interface number 1 [ 96.536804][ T5832] usb 2-1: too many endpoints for config 1 interface 4 altsetting 6: 226, using maximum allowed: 30 [ 96.551793][ T5791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.552391][ T5832] usb 2-1: config 1 interface 4 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 96.566776][ T5797] usb 1-1: Manufacturer: syz [ 96.589730][ T5832] usb 2-1: config 1 interface 4 has no altsetting 0 [ 96.619964][ T5797] usb 1-1: SerialNumber: syz [ 96.620731][ T5832] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.644822][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.663498][ T5832] usb 2-1: Product: syz [ 96.668396][ T5832] usb 2-1: Manufacturer: syz [ 96.686625][ T5797] usb 1-1: can't set config #1, error -71 [ 96.692631][ T5832] usb 2-1: SerialNumber: syz [ 96.770288][ T5797] usb 1-1: USB disconnect, device number 2 [ 96.870140][ T5832] usb 2-1: 0:2 : does not exist [ 96.947903][ T5794] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.066430][ T5921] hub 8-0:1.0: USB hub found [ 97.074084][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.099721][ T5832] hub 2-1:1.4: Invalid hub with more than one config or interface [ 97.118647][ T5832] hub: probe of 2-1:1.4 failed with error -22 [ 97.125690][ T5921] hub 8-0:1.0: 1 port detected [ 97.202964][ T5832] usb 2-1: USB disconnect, device number 2 [ 97.300512][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.439372][ T5925] loop2: detected capacity change from 0 to 1024 [ 97.474301][ T5925] ======================================================= [ 97.474301][ T5925] WARNING: The mand mount option has been deprecated and [ 97.474301][ T5925] and is ignored by this kernel. Remove the mand [ 97.474301][ T5925] option from the mount to silence this warning. [ 97.474301][ T5925] ======================================================= [ 97.575132][ T5925] EXT4-fs: Ignoring removed orlov option [ 97.629828][ T5925] EXT4-fs: Ignoring removed nobh option [ 97.643157][ T5925] EXT4-fs: Ignoring removed bh option [ 97.710314][ T5925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.856543][ T5936] loop0: detected capacity change from 0 to 128 [ 97.886201][ T5938] loop1: detected capacity change from 0 to 1024 [ 97.971494][ T5938] EXT4-fs: Ignoring removed bh option [ 98.022358][ T5936] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.066731][ T5938] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.130205][ T5936] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.185239][ T5938] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 98.469658][ T5938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0100] [ 99.053577][ T5938] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.14: lblock 2 mapped to illegal pblock 2 (length 1) [ 99.109476][ T5938] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 99.140798][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.199318][ T5938] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 48: comm syz.1.14: lblock 0 mapped to illegal pblock 48 (length 1) [ 99.251133][ T5938] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 99.267522][ T5938] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.14: Failed to acquire dquot type 0 [ 99.280272][ T5938] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 99.319696][ T5938] EXT4-fs error (device loop1): ext4_evict_inode:252: inode #11: comm syz.1.14: mark_inode_dirty error [ 99.391750][ T5938] EXT4-fs warning (device loop1): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 99.446708][ T5938] EXT4-fs (loop1): 1 orphan inode deleted [ 99.498908][ T5938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.522227][ T12] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 100.130024][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 100.358546][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:1: Failed to release dquot type 0 [ 100.398759][ T5938] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.443332][ T5938] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz.1.14: Invalid inode table block 1 in block_group 0 [ 100.479536][ T5938] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 100.504947][ T5938] EXT4-fs error (device loop1): ext4_quota_off:7224: inode #3: comm syz.1.14: mark_inode_dirty error [ 100.521710][ T5797] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.754957][ T5797] usb 1-1: unable to get BOS descriptor or descriptor too short [ 100.786357][ T5797] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 100.818758][ T5797] usb 1-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 100.860693][ T5797] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 100.934234][ T5797] usb 1-1: config 1 has no interface number 1 [ 100.984055][ T5955] loop1: detected capacity change from 0 to 128 [ 100.997042][ T5791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.006132][ T5957] syz.2.19[5957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.006438][ T5957] syz.2.19[5957] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.006609][ T5797] usb 1-1: too many endpoints for config 1 interface 4 altsetting 6: 226, using maximum allowed: 30 [ 101.133842][ T5955] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.180171][ T5961] loop0: detected capacity change from 0 to 512 [ 101.190786][ T5961] EXT4-fs: Ignoring removed mblk_io_submit option [ 101.197969][ T5961] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.222144][ T5955] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 101.237942][ T5961] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.273062][ T5797] usb 1-1: config 1 interface 4 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 101.306024][ T5959] loop2: detected capacity change from 0 to 1024 [ 101.321749][ T5961] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.363329][ T5959] EXT4-fs: Ignoring removed orlov option [ 101.383649][ T5797] usb 1-1: config 1 interface 4 has no altsetting 0 [ 101.422001][ T5797] usb 1-1: string descriptor 0 read error: -71 [ 101.428494][ T5797] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.501705][ T5959] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 101.549115][ T5961] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.20: Allocating blocks 41-42 which overlap fs metadata [ 101.571702][ T5797] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.649024][ T5959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.662005][ T5797] usb 1-1: can't set config #1, error -71 [ 101.696565][ T5961] Quota error (device loop0): write_blk: dquota write failed [ 101.720631][ T5797] usb 1-1: USB disconnect, device number 3 [ 101.864831][ T5961] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 101.982298][ T5961] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4031: comm syz.0.20: Allocating blocks 41-42 which overlap fs metadata [ 102.055175][ T5961] Quota error (device loop0): write_blk: dquota write failed [ 102.070113][ T5961] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 102.088177][ T5961] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.20: Failed to acquire dquot type 1 [ 102.213214][ T5961] EXT4-fs error (device loop0): mb_free_blocks:1938: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 102.525444][ T5961] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #12: comm syz.0.20: corrupted inode contents [ 102.727485][ T5961] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #12: comm syz.0.20: mark_inode_dirty error [ 102.748201][ T5858] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.828662][ T5961] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #12: comm syz.0.20: corrupted inode contents [ 102.845155][ T5961] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.20: mark_inode_dirty error [ 102.869079][ T5961] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #12: comm syz.0.20: corrupted inode contents [ 102.891243][ T5969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18'. [ 102.909938][ T5961] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 102.933927][ T5961] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #12: comm syz.0.20: corrupted inode contents [ 102.949713][ T5961] EXT4-fs error (device loop0): ext4_truncate:4288: inode #12: comm syz.0.20: mark_inode_dirty error [ 102.983213][ T5961] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 103.006807][ T5858] usb 2-1: unable to get BOS descriptor or descriptor too short [ 103.026349][ T5858] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 103.048696][ T5961] EXT4-fs (loop0): 1 truncate cleaned up [ 103.070812][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.083725][ T5858] usb 2-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 103.104102][ T5961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.119143][ T5858] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 103.173363][ T5858] usb 2-1: config 1 has no interface number 1 [ 103.180735][ T5858] usb 2-1: too many endpoints for config 1 interface 4 altsetting 6: 226, using maximum allowed: 30 [ 103.233840][ T5961] Quota error (device loop0): write_blk: dquota write failed [ 103.250040][ T5858] usb 2-1: config 1 interface 4 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 226 [ 103.271926][ T5961] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 103.317854][ T5858] usb 2-1: config 1 interface 4 has no altsetting 0 [ 103.327766][ T5961] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.20: Failed to acquire dquot type 1 [ 103.331553][ T5858] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 103.349953][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.358958][ T5858] usb 2-1: Product: syz [ 103.363765][ T5858] usb 2-1: Manufacturer: syz [ 103.368853][ T5858] usb 2-1: SerialNumber: syz [ 103.376903][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.391051][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.418632][ T5971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.426609][ T5971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.817031][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.378877][ T5981] hub 8-0:1.0: USB hub found [ 104.399677][ T5981] hub 8-0:1.0: 1 port detected [ 104.698933][ T5858] usb 2-1: 0:2 : does not exist [ 104.799267][ T5794] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.815535][ T5858] hub 2-1:1.4: Invalid hub with more than one config or interface [ 104.847372][ T5858] hub: probe of 2-1:1.4 failed with error -22 [ 104.904043][ T5858] usb 2-1: USB disconnect, device number 3 [ 105.512005][ T5987] wg2: entered promiscuous mode [ 105.526202][ T5987] wg2: entered allmulticast mode [ 105.754133][ T5995] syz.1.29[5995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.754278][ T5995] syz.1.29[5995] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.773151][ T5995] (null): rxe_set_mtu: Set mtu to 256 [ 105.825246][ T5995] vcan0 speed is unknown, defaulting to 1000 [ 105.898390][ T5995] vcan0 speed is unknown, defaulting to 1000 [ 105.900294][ T5996] loop0: detected capacity change from 0 to 1024 [ 105.944603][ T5995] vcan0 speed is unknown, defaulting to 1000 [ 105.949662][ T5996] EXT4-fs: Ignoring removed bh option [ 106.006834][ T5996] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.036962][ T5996] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 106.099037][ T5996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0100] [ 106.140756][ T5998] loop1: detected capacity change from 0 to 1024 [ 106.172116][ T5996] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 2: comm syz.0.28: lblock 2 mapped to illegal pblock 2 (length 1) [ 106.249148][ T5996] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 106.285492][ T5996] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 48: comm syz.0.28: lblock 0 mapped to illegal pblock 48 (length 1) [ 106.303221][ T5998] EXT4-fs: Ignoring removed orlov option [ 106.357214][ T5996] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 106.374017][ T5998] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 106.394260][ T5996] EXT4-fs error (device loop0): ext4_acquire_dquot:6940: comm syz.0.28: Failed to acquire dquot type 0 [ 106.437524][ T5996] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 106.460313][ T5996] EXT4-fs error (device loop0): ext4_evict_inode:252: inode #11: comm syz.0.28: mark_inode_dirty error [ 106.513992][ T5996] EXT4-fs warning (device loop0): ext4_evict_inode:255: couldn't mark inode dirty (err -117) [ 106.548044][ T5998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.587356][ T5996] EXT4-fs (loop0): 1 orphan inode deleted [ 106.623349][ T5996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.657154][ T1318] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.726946][ T1318] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 106.751738][ T1318] EXT4-fs error (device loop0): ext4_release_dquot:6976: comm kworker/u4:6: Failed to release dquot type 0 [ 106.788745][ T5996] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.798913][ T965] vcan0 speed is unknown, defaulting to 1000 [ 106.811904][ T5995] infiniband syz1: set active [ 106.815554][ T5996] EXT4-fs error (device loop0): __ext4_get_inode_loc:4483: comm syz.0.28: Invalid inode table block 1 in block_group 0 [ 106.822238][ T5995] infiniband syz1: added vcan0 [ 106.871036][ T5996] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 106.907923][ T5996] EXT4-fs error (device loop0): ext4_quota_off:7224: inode #3: comm syz.0.28: mark_inode_dirty error [ 107.029196][ T5995] RDS/IB: syz1: added [ 107.038473][ T5995] smc: adding ib device syz1 with port count 1 [ 107.049255][ T5995] smc: ib device syz1 port 1 has pnetid [ 107.058112][ T965] vcan0 speed is unknown, defaulting to 1000 [ 107.084146][ T5995] vcan0 speed is unknown, defaulting to 1000 [ 107.115216][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 107.192927][ T28] audit: type=1326 audit(1759352903.474:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80e98eec9 code=0x7ffc0000 [ 107.261830][ T28] audit: type=1326 audit(1759352903.484:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80e98eec9 code=0x7ffc0000 [ 107.307026][ T28] audit: type=1326 audit(1759352903.534:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fd80e98eec9 code=0x7ffc0000 [ 107.372231][ T28] audit: type=1326 audit(1759352903.534:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80e98eec9 code=0x7ffc0000 [ 107.428544][ T28] audit: type=1326 audit(1759352903.534:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80e98eec9 code=0x7ffc0000 [ 107.466037][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.30'. [ 107.510954][ T28] audit: type=1326 audit(1759352903.534:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fd80e98eec9 code=0x7ffc0000 [ 107.573801][ T28] audit: type=1326 audit(1759352903.534:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.2.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80e98eec9 code=0x7ffc0000 [ 107.647647][ T5995] vcan0 speed is unknown, defaulting to 1000 [ 107.755599][ T6012] loop0: detected capacity change from 0 to 1024 [ 107.777286][ T6012] EXT4-fs: Ignoring removed oldalloc option [ 107.800775][ T6012] EXT4-fs: Ignoring removed bh option [ 107.828791][ T6012] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.873543][ T6012] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.084299][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.264183][ T5995] vcan0 speed is unknown, defaulting to 1000 [ 108.329176][ T6026] wg2: entered promiscuous mode [ 108.342136][ T6026] wg2: entered allmulticast mode [ 108.709565][ T5995] vcan0 speed is unknown, defaulting to 1000 [ 108.849020][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'. [ 109.077930][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 109.375512][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.626766][ T6048] hub 8-0:1.0: USB hub found [ 109.637788][ T6045] vcan0 speed is unknown, defaulting to 1000 [ 109.655655][ T6048] hub 8-0:1.0: 1 port detected [ 109.827685][ T6053] wg2: entered promiscuous mode [ 109.840051][ T6053] wg2: entered allmulticast mode [ 110.147835][ T6060] loop0: detected capacity change from 0 to 1024 [ 110.176146][ T6060] EXT4-fs: Ignoring removed oldalloc option [ 110.222994][ T6060] EXT4-fs: Ignoring removed bh option [ 110.244848][ T6060] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 110.337957][ T6060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.676053][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.140527][ T6073] syz.0.52[6073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.140687][ T6073] syz.0.52[6073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.215888][ T6074] (null): rxe_set_mtu: Set mtu to 256 [ 111.254298][ T6074] rdma_rxe: rxe_newlink: failed to add vcan0 [ 111.531218][ T6074] loop0: detected capacity change from 0 to 1024 [ 111.576446][ T6074] EXT4-fs: Ignoring removed orlov option [ 111.623466][ T6074] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 111.686257][ T6074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.830992][ T6084] loop1: detected capacity change from 0 to 512 [ 111.865115][ T6084] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.874748][ T6084] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.891002][ T6084] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.916696][ T6084] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.985574][ T6084] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.55: Allocating blocks 41-42 which overlap fs metadata [ 112.007897][ T6084] __quota_error: 63 callbacks suppressed [ 112.007929][ T6084] Quota error (device loop1): write_blk: dquota write failed [ 112.034863][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.040291][ T6084] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 112.064654][ T6084] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.55: Allocating blocks 41-42 which overlap fs metadata [ 112.090303][ T6084] Quota error (device loop1): write_blk: dquota write failed [ 112.099842][ T6084] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 112.110790][ T6084] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.55: Failed to acquire dquot type 1 [ 112.133623][ T6084] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 112.171821][ T6084] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.55: corrupted inode contents [ 112.200070][ T6084] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #12: comm syz.1.55: mark_inode_dirty error [ 112.233425][ T6084] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.55: corrupted inode contents [ 112.262951][ T6084] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.55: mark_inode_dirty error [ 112.318263][ T6084] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.55: corrupted inode contents [ 112.362470][ T6084] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 112.386267][ T6084] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.55: corrupted inode contents [ 112.417020][ T6084] EXT4-fs error (device loop1): ext4_truncate:4288: inode #12: comm syz.1.55: mark_inode_dirty error [ 112.455688][ T6084] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 112.482352][ T6084] EXT4-fs (loop1): 1 truncate cleaned up [ 112.516755][ T6084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.596935][ T6084] Quota error (device loop1): write_blk: dquota write failed [ 112.628756][ T6084] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 112.674327][ T6084] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.55: Failed to acquire dquot type 1 [ 112.722718][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.733302][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.764520][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.769781][ T6088] ALSA: mixer_oss: invalid index 100000 [ 112.798830][ T6089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.182748][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.193295][ T6093] wg2: left promiscuous mode [ 113.198062][ T6093] wg2: left allmulticast mode [ 113.293198][ T6093] wg2: entered promiscuous mode [ 113.307134][ T6093] wg2: entered allmulticast mode [ 114.017064][ T6111] syz.1.64[6111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.017213][ T6111] syz.1.64[6111] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.075249][ T6111] syz1: rxe_newlink: already configured on vcan0 [ 114.292454][ T6116] loop2: detected capacity change from 0 to 1024 [ 114.319974][ T6116] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.345177][ T6116] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 114.372158][ T6116] EXT4-fs (loop2): orphan cleanup on readonly fs [ 114.390649][ T6116] EXT4-fs error (device loop2): ext4_free_blocks:6676: comm syz.2.65: Freeing blocks not in datazone - block = 0, count = 4096 [ 114.395426][ T6111] loop1: detected capacity change from 0 to 1024 [ 114.440969][ T6116] EXT4-fs (loop2): 1 orphan inode deleted [ 114.467248][ T6116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 114.512169][ T6111] EXT4-fs: Ignoring removed orlov option [ 114.552805][ T6111] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 114.800069][ T6111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.176396][ T6124] Bluetooth: hci4: Frame reassembly failed (-84) [ 115.236569][ T2917] Bluetooth: hci4: Frame reassembly failed (-84) [ 115.255101][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.275800][ T6117] ALSA: mixer_oss: invalid index 100000 [ 115.610386][ T6127] loop1: detected capacity change from 0 to 512 [ 115.662725][ T6127] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.729987][ T6127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.776488][ T6127] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.801947][ T6127] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.844352][ T6129] wg2: left promiscuous mode [ 115.849744][ T6129] wg2: left allmulticast mode [ 115.878982][ T6129] wg2: entered promiscuous mode [ 115.891897][ T6129] wg2: entered allmulticast mode [ 115.907160][ T6127] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.67: Allocating blocks 41-42 which overlap fs metadata [ 115.921571][ T6127] Quota error (device loop1): write_blk: dquota write failed [ 115.947010][ T6127] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 115.981525][ T6127] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.67: Allocating blocks 41-42 which overlap fs metadata [ 116.042303][ T6127] Quota error (device loop1): write_blk: dquota write failed [ 116.060273][ T6127] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 116.079892][ T6127] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.67: Failed to acquire dquot type 1 [ 116.163322][ T6127] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 116.201707][ T6127] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.67: corrupted inode contents [ 116.252261][ T6127] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #12: comm syz.1.67: mark_inode_dirty error [ 116.295523][ T6127] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.67: corrupted inode contents [ 116.311323][ T6127] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.67: mark_inode_dirty error [ 116.326608][ T6127] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.67: corrupted inode contents [ 116.339607][ T6127] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 116.354155][ T6127] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.67: corrupted inode contents [ 116.385301][ T6127] EXT4-fs error (device loop1): ext4_truncate:4288: inode #12: comm syz.1.67: mark_inode_dirty error [ 116.419013][ T6127] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 116.431515][ T6127] EXT4-fs (loop1): 1 truncate cleaned up [ 116.444502][ T6127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.518507][ T6127] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.67: Failed to acquire dquot type 1 [ 116.765595][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.913542][ T6145] hub 8-0:1.0: USB hub found [ 116.918494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.947904][ T6145] hub 8-0:1.0: 1 port detected [ 116.955839][ T6142] vcan0 speed is unknown, defaulting to 1000 [ 117.141857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.151884][ T5801] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.381955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.448491][ T6152] syz.1.75[6152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.448655][ T6152] syz.1.75[6152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.509881][ T6152] syz1: rxe_newlink: already configured on vcan0 [ 117.528886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 117.692282][ T6154] loop1: detected capacity change from 0 to 1024 [ 117.707829][ T6154] EXT4-fs: Ignoring removed orlov option [ 117.738515][ T6154] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 117.798214][ T6154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.810895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 118.173464][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.358919][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.704382][ T6166] wg2: left promiscuous mode [ 118.717897][ T6166] wg2: left allmulticast mode [ 118.750378][ T6159] ALSA: mixer_oss: invalid index 100000 [ 118.769309][ T6169] wg2: entered promiscuous mode [ 118.785832][ T6169] wg2: entered allmulticast mode [ 119.099805][ T6173] loop1: detected capacity change from 0 to 512 [ 119.118925][ T6173] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.140680][ T6173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.206836][ T6173] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.231665][ T6173] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.320711][ T6173] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.81: Allocating blocks 41-42 which overlap fs metadata [ 119.363105][ T6173] __quota_error: 2 callbacks suppressed [ 119.363123][ T6173] Quota error (device loop1): write_blk: dquota write failed [ 119.382674][ T6173] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 119.402099][ T6173] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.81: Allocating blocks 41-42 which overlap fs metadata [ 119.473875][ T6173] Quota error (device loop1): write_blk: dquota write failed [ 119.521910][ T6173] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 119.574960][ T6173] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.81: Failed to acquire dquot type 1 [ 119.681358][ T6173] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 119.784495][ T6173] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.81: corrupted inode contents [ 120.143435][ T6173] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #12: comm syz.1.81: mark_inode_dirty error [ 120.306189][ T6186] vcan0 speed is unknown, defaulting to 1000 [ 120.639436][ T6173] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.81: corrupted inode contents [ 120.724784][ T6173] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.81: mark_inode_dirty error [ 120.752325][ T6173] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.81: corrupted inode contents [ 120.784490][ T6173] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 120.850859][ T6173] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.81: corrupted inode contents [ 120.897396][ T6173] EXT4-fs error (device loop1): ext4_truncate:4288: inode #12: comm syz.1.81: mark_inode_dirty error [ 120.929429][ T6173] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 120.971110][ T6173] EXT4-fs (loop1): 1 truncate cleaned up [ 121.012559][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.102703][ T6173] Quota error (device loop1): write_blk: dquota write failed [ 121.135003][ T6173] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 121.154763][ T6173] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.81: Failed to acquire dquot type 1 [ 121.239029][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.434869][ T6193] hub 8-0:1.0: USB hub found [ 121.439565][ T6191] vcan0 speed is unknown, defaulting to 1000 [ 121.450168][ T6194] loop1: detected capacity change from 0 to 1024 [ 121.470820][ T6193] hub 8-0:1.0: 1 port detected [ 121.485880][ T6194] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.514121][ T6194] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 121.530646][ T6194] EXT4-fs (loop1): orphan cleanup on readonly fs [ 121.542484][ T6194] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.86: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.578593][ T6194] EXT4-fs (loop1): 1 orphan inode deleted [ 121.589335][ T6194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.672223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.681079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 121.689874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.677103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 122.692898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 123.695300][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.892266][ T6205] syz1: rxe_newlink: already configured on vcan0 [ 124.091383][ T6206] loop1: detected capacity change from 0 to 1024 [ 124.104164][ T6206] EXT4-fs: Ignoring removed orlov option [ 124.110969][ T6206] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 124.165038][ T6206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.257289][ T6206] [ 124.259705][ T6206] ====================================================== [ 124.267018][ T6206] WARNING: possible circular locking dependency detected [ 124.274520][ T6206] syzkaller #0 Not tainted [ 124.279054][ T6206] ------------------------------------------------------ [ 124.286283][ T6206] syz.1.88/6206 is trying to acquire lock: [ 124.292220][ T6206] ffff88805d12b610 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}, at: ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 124.304187][ T6206] [ 124.304187][ T6206] but task is already holding lock: [ 124.311709][ T6206] ffff88805d164888 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x15fa/0x1c90 [ 124.321161][ T6206] [ 124.321161][ T6206] which lock already depends on the new lock. [ 124.321161][ T6206] [ 124.331769][ T6206] [ 124.331769][ T6206] the existing dependency chain (in reverse order) is: [ 124.340823][ T6206] [ 124.340823][ T6206] -> #1 (&ei->i_data_sem/3){++++}-{3:3}: [ 124.348768][ T6206] down_write+0x97/0x1f0 [ 124.353571][ T6206] ext4_xattr_inode_lookup_create+0x15fe/0x1d80 [ 124.360387][ T6206] ext4_xattr_ibody_set+0x202/0x6a0 [ 124.366324][ T6206] ext4_xattr_set_handle+0xaad/0x1290 [ 124.372277][ T6206] ext4_xattr_set+0x22d/0x320 [ 124.377511][ T6206] __vfs_setxattr+0x431/0x470 [ 124.382736][ T6206] __vfs_setxattr_noperm+0x12d/0x5e0 [ 124.388567][ T6206] vfs_setxattr+0x16c/0x2f0 [ 124.393860][ T6206] path_setxattr+0x362/0x550 [ 124.399012][ T6206] __x64_sys_setxattr+0xbb/0xd0 [ 124.404516][ T6206] do_syscall_64+0x55/0xb0 [ 124.409565][ T6206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.416024][ T6206] [ 124.416024][ T6206] -> #0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}: [ 124.424929][ T6206] __lock_acquire+0x2ddb/0x7c80 [ 124.430417][ T6206] lock_acquire+0x197/0x410 [ 124.435513][ T6206] down_write+0x97/0x1f0 [ 124.440327][ T6206] ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 124.447162][ T6206] ext4_xattr_block_set+0x23e/0x32a0 [ 124.453087][ T6206] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 124.459819][ T6206] __ext4_expand_extra_isize+0x306/0x400 [ 124.466016][ T6206] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 124.472236][ T6206] ext4_setattr+0x1673/0x1c90 [ 124.477635][ T6206] notify_change+0xb0d/0xe10 [ 124.482897][ T6206] do_truncate+0x19b/0x220 [ 124.487945][ T6206] vfs_truncate+0x266/0x300 [ 124.493263][ T6206] do_sys_truncate+0xe0/0x1a0 [ 124.498481][ T6206] do_syscall_64+0x55/0xb0 [ 124.503454][ T6206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.509910][ T6206] [ 124.509910][ T6206] other info that might help us debug this: [ 124.509910][ T6206] [ 124.520508][ T6206] Possible unsafe locking scenario: [ 124.520508][ T6206] [ 124.528069][ T6206] CPU0 CPU1 [ 124.533631][ T6206] ---- ---- [ 124.539011][ T6206] lock(&ei->i_data_sem/3); [ 124.543630][ T6206] lock(&sb->s_type->i_mutex_key#8/1); [ 124.551734][ T6206] lock(&ei->i_data_sem/3); [ 124.558961][ T6206] lock(&sb->s_type->i_mutex_key#8/1); [ 124.564566][ T6206] [ 124.564566][ T6206] *** DEADLOCK *** [ 124.564566][ T6206] [ 124.572741][ T6206] 5 locks held by syz.1.88/6206: [ 124.577694][ T6206] #0: ffff88802c4de418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 124.586885][ T6206] #1: ffff88805d164a10 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x187/0x220 [ 124.597204][ T6206] #2: ffff88805d164ba0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xef3/0x1c90 [ 124.607449][ T6206] #3: ffff88805d164888 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x15fa/0x1c90 [ 124.617359][ T6206] #4: ffff88805d1646c8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3dc/0x6e0 [ 124.627683][ T6206] [ 124.627683][ T6206] stack backtrace: [ 124.633634][ T6206] CPU: 0 PID: 6206 Comm: syz.1.88 Not tainted syzkaller #0 [ 124.640863][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.651126][ T6206] Call Trace: [ 124.654443][ T6206] [ 124.657437][ T6206] dump_stack_lvl+0x16c/0x230 [ 124.662174][ T6206] ? load_image+0x3b0/0x3b0 [ 124.666735][ T6206] ? show_regs_print_info+0x20/0x20 [ 124.671967][ T6206] ? print_circular_bug+0x12b/0x1a0 [ 124.677278][ T6206] check_noncircular+0x2bd/0x3c0 [ 124.682243][ T6206] ? print_deadlock_bug+0x5d0/0x5d0 [ 124.687530][ T6206] ? lockdep_lock+0xe0/0x220 [ 124.692213][ T6206] __lock_acquire+0x2ddb/0x7c80 [ 124.697138][ T6206] ? verify_lock_unused+0x140/0x140 [ 124.702504][ T6206] lock_acquire+0x197/0x410 [ 124.707208][ T6206] ? ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 124.713655][ T6206] ? __might_sleep+0xe0/0xe0 [ 124.718292][ T6206] ? read_lock_is_recursive+0x20/0x20 [ 124.724064][ T6206] ? dquot_free_inode+0x871/0xa00 [ 124.729179][ T6206] ? ext4_reserve_inode_write+0x248/0x2a0 [ 124.734943][ T6206] down_write+0x97/0x1f0 [ 124.739215][ T6206] ? ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 124.745686][ T6206] ? down_read_killable+0x340/0x340 [ 124.750950][ T6206] ? ext4_get_dquots+0xd/0x20 [ 124.755655][ T6206] ? dquot_drop+0x135/0x160 [ 124.760280][ T6206] ext4_xattr_inode_lookup_create+0x1917/0x1d80 [ 124.766612][ T6206] ? ext4_xattr_ibody_set+0x6a0/0x6a0 [ 124.772015][ T6206] ? __lock_acquire+0x7c80/0x7c80 [ 124.777075][ T6206] ? ext4_getblk+0x299/0x6d0 [ 124.781787][ T6206] ? __getblk_gfp+0x54/0x660 [ 124.786410][ T6206] ? ext4_xattr_block_set+0xd6/0x32a0 [ 124.791850][ T6206] ext4_xattr_block_set+0x23e/0x32a0 [ 124.797245][ T6206] ? ext4_xattr_inode_get+0x1a9/0x310 [ 124.802850][ T6206] ? xattr_find_entry+0x12b/0x2f0 [ 124.808166][ T6206] ? xattr_find_entry+0x2a6/0x2f0 [ 124.813253][ T6206] ? ext4_xattr_block_find+0x350/0x350 [ 124.818738][ T6206] ? ext4_xattr_block_find+0xea/0x350 [ 124.824137][ T6206] ext4_expand_extra_isize_ea+0x10ea/0x19e0 [ 124.830103][ T6206] __ext4_expand_extra_isize+0x306/0x400 [ 124.835786][ T6206] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 124.841280][ T6206] ext4_setattr+0x1673/0x1c90 [ 124.846079][ T6206] ? ext4_write_inode+0x550/0x550 [ 124.851136][ T6206] notify_change+0xb0d/0xe10 [ 124.855752][ T6206] do_truncate+0x19b/0x220 [ 124.860287][ T6206] ? put_page_bootmem+0x2c0/0x2c0 [ 124.865445][ T6206] ? bpf_lsm_path_truncate+0x9/0x10 [ 124.870673][ T6206] vfs_truncate+0x266/0x300 [ 124.875207][ T6206] do_sys_truncate+0xe0/0x1a0 [ 124.880081][ T6206] ? break_lease+0xd0/0xd0 [ 124.884795][ T6206] ? lockdep_hardirqs_on+0x98/0x150 [ 124.890122][ T6206] do_syscall_64+0x55/0xb0 [ 124.894649][ T6206] ? clear_bhb_loop+0x40/0x90 [ 124.899343][ T6206] ? clear_bhb_loop+0x40/0x90 [ 124.904521][ T6206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.910454][ T6206] RIP: 0033:0x7f84fa98eec9 [ 124.914902][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.934733][ T6206] RSP: 002b:00007f84fb7e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 124.943354][ T6206] RAX: ffffffffffffffda RBX: 00007f84fabe6090 RCX: 00007f84fa98eec9 [ 124.951433][ T6206] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000000100 [ 124.959422][ T6206] RBP: 00007f84faa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 124.967473][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.975494][ T6206] R13: 00007f84fabe6128 R14: 00007f84fabe6090 R15: 00007fffdba9bf28 [ 124.983608][ T6206] [ 125.200312][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.384745][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.391281][ T1286] ieee802154 phy1 wpan1: encryption failed: -22