last executing test programs: 2m18.195190829s ago: executing program 1 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd2(0x4001, 0x800) eventfd2(0x4, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xa000, 0xfffffff2, 0x6, 0x201, 0x0, [{0x7f, 0x1, 0x81}, {0x0, 0x71, 0x1, '\x00', 0x1}, {0x13, 0x80, 0x9, '\x00', 0x81}, {0x7e, 0x4, 0x40, '\x00', 0x4e}, {0x3, 0x5, 0x9, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x66}, {0x8, 0x6, 0x0, '\x00', 0x3}, {0x1, 0x3, 0x2, '\x00', 0xcd}, {0x8, 0x1, 0x5, '\x00', 0x6b}, {0x7, 0x1, 0x12, '\x00', 0xff}, {0x4, 0x6, 0x2, '\x00', 0xef}, {0x7, 0x5, 0x4, '\x00', 0x49}, {0xf7, 0xa, 0x39, '\x00', 0x3}, {0xa2, 0x0, 0x8, '\x00', 0x1}, {0xff, 0x3, 0xff, '\x00', 0xd}, {0x0, 0x37, 0xa}, {0x0, 0x2, 0x9, '\x00', 0x5}, {0x1, 0xff, 0x2, '\x00', 0x4}, {0xd, 0x3, 0x76, '\x00', 0xf9}, {0x0, 0x63, 0xa, '\x00', 0x17}, {0x1, 0x54, 0x29, '\x00', 0x3}, {0x7d, 0x8, 0x8, '\x00', 0x5}, {0x0, 0x80, 0xf1, '\x00', 0x7}, {0x0, 0x6, 0x4, '\x00', 0x1}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x2000000000004, 0x6d, 0x2, 0x1002, 0x80000ef, 0x200, 0x7fffffffffffb, 0x8d, 0x2, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbdf], 0x2000, 0x67a64fa265d6d617}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m16.925267183s ago: executing program 1 (id=52): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000080000000000000009000000731105000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x2, 0x4000000, 0xffffffff}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4000080) 2m15.187045764s ago: executing program 1 (id=55): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0x8, 0xc9100122, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m13.651994028s ago: executing program 1 (id=57): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000240)={0x0, &(0x7f0000000480)=[@rdmsr={0x66, 0x18, {0x40000092}}], 0xffffffffffffff42}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x198, &(0x7f0000000340)="$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") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="3000000013000100000000000000b700080000000900000008000000ffffffff080013"], 0x30}], 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x1000) read(r5, &(0x7f0000000200)=""/189, 0xbd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000180)={0xc7, 0x0, 0x1}) 2m12.703144068s ago: executing program 1 (id=60): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") userfaultfd(0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 2m7.747681657s ago: executing program 1 (id=74): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) setresgid(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0xffe0, 0x8}, {0x10, 0x10}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='./file1\x00', 0x12000335) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/172, 0xac}], 0x1, 0x3ff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x940650, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x101) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000140)={0x49a0, 0x0, '\x00', 0x0, &(0x7f00000000c0)}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) 1m52.369378342s ago: executing program 32 (id=74): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) setresgid(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0xffe0, 0x8}, {0x10, 0x10}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f00000000c0)='./file1\x00', 0x12000335) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000000)=""/172, 0xac}], 0x1, 0x3ff, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0xf}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x940650, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x20642, 0x101) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000140)={0x49a0, 0x0, '\x00', 0x0, &(0x7f00000000c0)}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) 1m30.605957598s ago: executing program 4 (id=150): timerfd_create(0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close_range(r1, 0xffffffffffffffff, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8602, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x80000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x38f9, 0x0) write(0xffffffffffffffff, &(0x7f0000000040), 0xffffff4a) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r3, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x4, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000801000000000000006210000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRESOCT=r2, @ANYBLOB="05"], 0x10) sendmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)}, 0x42fc548cc52abc3d) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r6}, &(0x7f0000000400)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r1], 0x0, 0x0) 1m27.962900708s ago: executing program 4 (id=156): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x3ff, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x805, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000340)=@arm64={0x7, 0xe, 0x6, '\x00', 0x1259}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0x0, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x1, 0x0, 0xfc}, {0x3000, 0xd000, 0x5, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x2, 0x6}, {0xeeee8000, 0xffff1000, 0x3, 0x9, 0x0, 0x2, 0x7, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0xe000, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0xffffffff, 0x50, 0x2, 0xf801, 0x0, [0x0, 0x0, 0x104]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1m27.600615818s ago: executing program 4 (id=159): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, r5, 0x25, 0x0, @val=@netkit}, 0x1c) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1m23.018995374s ago: executing program 4 (id=162): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) chdir(&(0x7f0000000140)='./file0\x00') r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x8, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) 1m21.273225124s ago: executing program 4 (id=167): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x200a4800) recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88035b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000080)=0xc) 1m17.264262346s ago: executing program 4 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") userfaultfd(0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x102, 0x20) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000000)) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) 1m15.558888737s ago: executing program 33 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") userfaultfd(0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e21, [0x0, 0xffffffff, 0x1, 0x3000000], [0xfffffffe], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x102, 0x20) ioctl$FIGETBSZ(r7, 0x2, &(0x7f0000000000)) ioctl$EXT4_IOC_GETSTATE(r7, 0x40046629, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) 34.082606563s ago: executing program 3 (id=240): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x74, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x74}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff080002"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 32.763496911s ago: executing program 3 (id=242): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000010240), 0x5a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) 29.287291922s ago: executing program 3 (id=248): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000a40)=ANY=[@ANYBLOB='iocharset=cp857,fmask=00000000000000000064347,errors=continue,iocharset=iso8859-7,fmask=00000000000000000000005,umask=00777777777777777777777,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000001,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',rootcontexuser_u,obj_role=,obj_re=9p\x00,fscontext=system_u,\x00'/73], 0x1, 0x152f, &(0x7f00000037c0)="$eJzs3AucTVX7OPDnWWvtMSSdJrkMa61nc5LLIklySZJLkiRJkltC0iSvJCSG3JKGJCSXIbkMIblMTBr3+/2SkCRNkoTklqz/Z8r81Vvv/33f39svv/9vnu/nsz+znrP2s/ba85yzz977nJlvug6r1aR29UZEBP8R/OVHIgDEAsAgALgGAAIAKB9XPi6zP6fExP9sI+zP9VDKlZ4Bu5K4/tkb1z974/pnb1z/7I3rn71x/bM3rn/2xvVnLDvbMqPgtbxk34Xv/2dn/P7/v0hG6XFfrCt9fTeAmH81hev//z/8D3K5/v9rBf/KSlz/7I3rn13FXukJsP8B+PWfHeT4hz1c/+yN689Ydvbre8GxcOXvR//VC0Sy92cgV/r5xxhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMsezjrL1MAkNW+0vNijDHGGGOMMcbYn8fnuNIzYIwxxhhjjDHG2H8/BAESFAQQAzkgFnJCLhAAMVn910IcXAd54XrIB/mhABSEeCgEhUGDAQsEIRSBohCFG6AY3AjFoQSUhFLgoDSUgZugLNwM5eAWKA+3QgW4DSpCJagMVeB2qAp3QDW4E6rDXVADakItqA13Qx24B+rCvVAP7oP6cD80gAegITwIjeAhaAwPQxN4BJrCo9AMmkMLaAmt/kv5L0BPeBF6QW9IhD7QF16CftAfBsBAGAQvw2B4BYbAq5AEQ2EYvAbD4XUYAW/ASBgFo+FNGANvwVgYB+NhAiTDRJgEb8NkeAemwFSYBtMhBWbATHgXZsFsmAPvwVx4H+bBfFgACyEVPoBFsBjS4ENYAh9BOiyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBR/DbvgE9sBe2Aefwn747N/MP/N3+d0QEFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMC/mxXyYDwtgAYzHeCyMhdGgQULCIlgEoxjFYlgMi2NxLIkl0aHDMlgGy+LNWA7LYXksjxWwAlbESlgJq2AVrIpVsRpWw+pYHWtgDayFtfBuvBv7YF2si/WwHtbH+lm3p7ARNsLG2BibYBNsik2xGTbDFtgCW2ErbI2tsQ22wXbYDttje+yAHTABE7AjdsRO2Ak7Y2fsgl2wK3bFbtgdu2e8kAPwRXwRe2MN0Qf7Yl/sh0k5BuBAHIgv42B8BV/BVzEJh+IwfA1fw9dxBJ7GkTgKR+NorCrewrE4DklMwGRMxkk4CSfjZJyCU3EqTscUnIEzcSbOwtk4G9/Dufg+vo/zcT4uxFRMxUW4GNMwDZfgGUzHpbgMl+MKXIkrcDWuwdW4DtfjOtyIG3EzbsatuBW343bciTvxY1QA+Anuxb2YhPtxPx7AA3gQD+IhPIQZmIGH8TAewSN4FI/iMTyGx/EEnsQTeApP4Wk8g2fxLJ7H83gBn4v/qvHHJdYmgcikhBIxIkbEiliRS+QSuUVukUfkEREREXEiTuQVeUU+kU8UEAVEvIgXhUVhYYQRJMLMI4WIiqgoJoqJ4qK4KClKCiecKCPKiLKirCgnyony4lZRQdwmKopKoq2rIqqIqqKdqybuFNVFdVFD1BS1RG1RW9QRdURdUVfUE/VEfVFfNBAPiIaiDw7Ah0RmZZqIodhUDMNmormQl45QrcUIbCPainbiCTEKR2IH0doliKdFRzEWO4m/iXH4rOgiJmBX8bzoJrqLHuIF0VO0cb1EbzEF+4i+Yjr2E/3FADFQzMKa4j2cm7OWeFUkiaFimHhNLMTXxQjxhhgpRonR4k0xRrwlxopxYryYIJLFRDFJvC0mi3fEFDFVTBPTRYqYIWaKd8UsMVvMEe+JueJ9MU/MFwvEQpEqPhCLxGKRJj4US8RHIl0sFcvEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHaxQ+wUu8THYrf4ROwRe8U+8anYLz4TB8Tn4qD4QhwSX4oM8ZU4LL4WR8Q34qj4VhwT34nj4oQ4Kb4Xp8QP4rQ4I86Kc+K8+FFcED+Ji8ILkCiFlFLJQMbIHDJW5pS55FUytwyyjv8yTl4n88rrZT6ZXxaQBWW8LCQLSy2NtJJkKIvIojIqb5DF5I2yuCwhS8pS0snSsoy8SZaVN8ty8hZZXt4qK8jbZEVZSVaWVeTtsqq8Q0Lkl23UkDVlLVlb3i0T4R5ZV94r68n7ZH15v2wgH5AN5YOykXxINpYPyybyEdlUPiqbyeayhWwpW8nHZGv5uGwj28p28gnZXj4pO8inZIJ8WnaU/tJT5FnZRT4nu8rnZTfZXfaQP8mL0stesreEPiD7ypdkP9lfDpAD5SD5shwsX5FD5KsySQ6Vw+Rrcrh8XY6Qb8iRcpQcLd+UY+RbcqwcJ8fLCTJZTpST5NtysnxHTpFT5TQ5XabIGXLApZHmSPlP89/+g/whP299s9wit8ptcrvcIXfKXfJjuVvulnvkHrlP7pP75X55QB6QB+VBeUgekhkyQx6Wh+UReUQelUflMXlMHpcn5Dn5vTwlf5Cn5Rl5Rp6T5+V5eeHS7wAUKqGkUipQMSqHilU5VS51lcqtrlZ51DUqoq5Vceo6lVddr/Kp/KqAKqjiVSFVWGlllFWkQlVEFVVRdQNeesKokqqUcqq0KqNu+nfyVTF1oyquSvwmP2t+if9gfq1UK9VatVZtVBvVTrVT7VV71UF1UAkqQXVUHVUn1Ul1Vp1VF9VFdVVdVTfVTfVQPVRP1VP1Ur1UokpUfdVLqp/qrwaogWqQellk7sMQNUQlqSQ1TA1Tw9VwNUKNUCPVSDVajVZj1Bg1Vo1V49V4layS1SQ1SU1Wk9UUNUVNU9NUikpRM9VMNUvNUnPUHDVXzVXz1Dy1QC1QqSpVLVKLVJpKU0vUEpWulqqlarlarlaqlWq1Wq3WqrVqvVqvNqqNKl1tUVvUNrVN7VA71C61S+1Wu9UetUftU/vUfrVfHVAH1EF1UB1Sh1SGylCH1WF1RB1RR9VRdUwdU8fVcXVSnVSn1Cl1Wp1WZ9VZdV6dVxfUBXVRXcw87QtEIAIVqCAmiAlig9ggV5AryB3kDvIEeYJIEAnigrggb3B9kC/IHxQICgbxQaGgcKADE9hAXCp6NLghKBbcGBQPSgQlg1KBC0oHZYKbgrLBzUG54JagfHBrUCG4LagYVAoqB1WC24OqwR1BteDOoHpwV1AjqBnUCmoHdwd1gnuCusG9Qb3gvqB+cH/QIHggaBg8GDQKHgoaBw8HTYJHgqbBo0GzoHnQImgZtPpTx/f+dP7HXS/dWyfqPrqvfkn30/31AD1QD9Iv68H6FT1Ev6qT9FA9TL+mh+vX9Qj9hh6pR+nR+k09Rr+lx+pxeryeoJP1RD1Jv60n63f0FD1VT9PTdYqeoWfqd/UsPVvP0e/pufp9PU/P1wv0Qp2qP9CL9GKdpj/US/RHOl0v1cv0cr1Cr9Sr9Gq9Rq/V6/R6vUFv1Jv0Zr1Fb9Xb9Ha9Q+/Uu/THerf+RO/Re/U+/anerz/TB/Tn+qD+Qh/SX+oM/ZU+rL/WR/Q3+qj+Vh/T3+nj+oQ+qb/Xp/QP+rQ+o8/qc/q8/lFf0D/pi9pnntxnvr0bZZSJMTEm1sSaXCaXyW1ymzwmj4mYiIkzcSavyWvymXymgClg4k28KWwKm0xkyBQxRUzURE0xU8wUN8VNSVPSOONMGVPGlDVlTTlTzpQ35U0FU8FUNBVNZVPZ3G5uN3eYO8yd5k5zl7nL1DQ1TW1T29QxdUxdU9fUM/VMfVPfNDANTEPT0DQyjUxj09g0MU1MU9PUNDPNTAvTwrQyrUxr09q0MW1MO9POtDftTQfTwSSYBNPRdDSdTCfT2XQ2XUwX09V0Nd1MN9PD9DA9TU/Ty/QyiSbR9DV9TT/TzwwwA8wgM8gMNoPNEDPEJJkkM8wMM8PNcDPCjDAjzSgzOvNE1bxlxppxZryZYJJNsplkJpnJZrKZYqaYaWaaSTEpZqaZaWaZWWaOmWPmmrlmnplnFpgFJtWkmkVmkUkzaWaJWWLSTbpZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9vsMXvMPrPP7Df7zQFzwBw0B80hc8hkmAxz2Bw2R8wRc9QcNcfMMXPcHDcnzUlzypwyp81pc9acNedN/kvvl97E2pw2l73K5rZX2zz2Gvv3cQFb0MbbQraw1Tafzf+b2Fhri9sStqQtZZ0tbcvYm34XV7SVbGVbxd5uq9o7bLXfxXXsPbauvdfWs/fZ2vbu38T17f22gX3ENkQEsM1tY9vSNrGP2Kb2UdvMNrctbEvb3j5pO9inbIJ92na0z/wuXmQX2zV2rV1n19s9dq89a8/ZI/Ybe97+aHvZ3naQfdkOtq/YIfZVm2SH/i4ebd+0Y+xbdqwdZ8fbCb+Lp9npNsXOsDPtu3aWnf27ONV+YOfaNDvPzrcL7MKf48w5pdkP7RL7kU23ASyzy+0Ku9Kusqv/71yX2412k91sd9tP7Da73e6wO+2urBNhu9fus5/a/fYze9h+bQ/aL+whe9Rm2K9+jjP376j91h6z39nj9oQ9ab+3p+wPKis7c9+/tz/Zi9ZbICQgSYoCiqEcFEs5KRddRbnpaspD11CErqU4uo7y0vWUj/JTASpI8VSICpMmQ5aIQipCRSlKN1DW9EpSKXJUmsrQTVSWbqZydAuVp1upAt1GFakSVaYqdDtVpTuoGt1J1ekuqkE1qRbVprupDt1Ddeleqkf3UX26nxrQA9SQHqRG9BA1poepCT1CTelRakbNqQW1pFb0GLWmx6kNtaV29AS1pyepAz1FCfQ0daRnqBP9jTrTs9SFnqOu9Dx1o+7Ug16gnvQi9aLelEh9qC+9RP2oPw2ggTSIXqbB9AoNoVcpiYbSMHqNhtPrNILeoJE0ikbTmzSG3qKxNI7G0wRKpok0id6myfQOTaGpNI2mUwrNoJn0Ls2i2TSH3qO59D7No/m0gBZSKn1Ai2gxpdGHtIQ+onRaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpK22g77aCdtIs+pt30Ce2hvbSPPqX99BkdoM/pIH1Bh+hLyqCv6DB9TUfoGzpK3/re9B0dpxN0kr6nU/QDnaYzdJbO0Xn6kS7QT3SRPEGIoQhlqMIgjAlzhLFhzjBXeFWYO7w6zBNeE0bCa8O48Lowb3h9mC/MHxYIC4bxYaGwcKhDE9qQwjAsEhYNo+ENYbHwxrB4WCIsGZYKXVg6LBPeFJYNbw7LhbeE5cNbwwrhbWHFsFL4yH1VwtvDquEdYbXwzrB6eFdYI6wZ1gprh3eHdcJ7wrrhvWG98L6wXHh/2CB8IGwYPhg2Ch8KG4cPh03CR8Km4aNhs7B52CJsGbYKHwtbh4+HbcK2YbvwqrB9+GTYIXwqTAifDjuGz/zcf//irP4nftefGPYJ+4YvhS+F3t8rF0QXRlOjH0QXRRdH06IfRpdEP4qmR5dGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGN0U3R72vnQMcOuGkUy5wMS6Hi3U5XS53lcvtrnZ53DUu4q51ce46l9dd7/K5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd4Mr5m50xV0JV9KVcs6VdmVcS9fKtXKt3eOujWvr2rkn3BPuSfeke8o95Z52Hd0zrpP7m+vsnnVd3HPuOfe86+a6ux7uBdfTTczzy2sy0fV1fV0/188NcAPcIDfIDXaD3RA3xCW5JDfMDXPD3XA3wo1wI91IN9qNdmPcGDfWjXXj3XiX7JLdJDfJTXaT3RQ3xU1z01yKS3Ez3Uw3y81yVWf/spV5bp5b4Ba4VJfqFrnMc8Y0t8Qtceku3S1zy9wKt8KtcqvcGrfGrXPr3Aa3wW1ym9wWt8Vtc9vcDrfD7XK73G632+3x1/wyqNvvDrgD7qA76A65L12G+8oddl+7I+4bd9R9646579xxd8KddN+7U+4Hd9qdcWfdOXfe/eguuJ/cReddcmRiZFLk7cjkyDuRKZGpkWmR6ZGUyIzIzMi7kVmR2ZE5kfcicyPvR+ZF5kcWRBZGUiMfRBZFFkfSIh9GlkQ+iqRHlkaWRZZHVkRWRrwvtC30RXxRH/U3+GL+Rl/cl/AlfSnvfGlfxt/ky/qbfTl/iy/vb/UV/G2+oq/kK/tHfTPf3LfwLX0r/5hv7R/3bXxb384/4dv7J30H/5RP8E/7jv4Z38n/zXf2z/ou/jnf1T/vu/nuvod/wff0L/pevrdP9H18X/+S7+f7+wF+oB/kX/aD/St+iH/VJ/mhfph/zQ/3r/sR/g0/0o/yo2Pe9GOyLpFhgk/2E/0k/7af7N/xU/xUP81P9yl+hp/p3/Wz/Gw/x7/n5/r3/Tw/3y/wC32q/8Av8ot9mv/QL/Ef+XS/NOumsV/lV/s1fq1f59f7DX6j3+Q3+y1+q9/mt/sdfqff5T/2u/0nfo/f6/f5T/1+/5k/4D/3B/0X/pD/0mf4r/xh/7U/4r/xR/23/pj/zh/3J/xJ/70/5X/wp/0Zf9af8+f9j/6C/8lf5L9ZY4wxxhj7l0y83BS/7fnldn6fP8gRv1q5LwBcvb1gxq/7M88oN+T7pd1fxLePAMDTvbs+lLXUqJGYmHhp3XQJQdH5AFmfBGX6+asHl+Kl0A6ehARoC2X/cP79Rffz9E/Gj94KkOtXObFwOb48/ucAmPgH4z/2xOhFFcKzcf+P8ecDFC96OScnXI6XQruf76+0hXL/YP75W/+T+ef8Ihmgza9ycsPl+PL8y8Dj8Awk/GZNxhhjjDHGGGPsF/1F5c5Z159Z3/j8o+vzeHU5Jwdcjv/Z9TljjDHGGGOMMcauvGe793jqsYSEtp3//Ua1/1LWv9xoCv9dI3PjDxveA2Q9ogDgPxwQILMh/8q92PqXbCvp0kvn77tWnPMB/M8o5Z/RuMIHJsYYY4wxxtif7vJJ/28fV1dqQowxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWDb0V/w7sSu9j4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtiV9n8CAAD//7wUAB0=") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x340, 0x11, 0x148, 0x340, 0x0, 0x3e0, 0x2a8, 0x2a8, 0x3e0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x2, 0x3f, 0x0, 0x0, 0x3, 0x9}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz0\x00', {0x80000001}}}}, {{@ip={@multicast2, @empty, 0x0, 0xffffff00, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x1d, 0x0, 0x44}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) setsockopt$inet_int(r4, 0x0, 0xb, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) 26.131184934s ago: executing program 3 (id=251): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x14, r3, 0x8b3b2c1205c54311, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000100) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x74, r3, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x74}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff0500030080ffffff080002"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 25.646752259s ago: executing program 3 (id=253): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) chmod(&(0x7f0000000380)='./file1\x00', 0x122) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 23.962476967s ago: executing program 3 (id=256): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r4 = syz_io_uring_setup(0x126e, &(0x7f0000000480)={0x0, 0x72d9, 0x80, 0x0, 0x100000}, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_rr_get_interval(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) 19.225837411s ago: executing program 6 (id=259): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @private1, 0x3dd}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x1, 0x3, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) chmod(&(0x7f0000000380)='./file1\x00', 0x122) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) 17.257809265s ago: executing program 6 (id=265): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x4880) ptrace(0x10, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ptrace$pokeuser(0x6, r2, 0x388, 0x41d9fda7) chdir(&(0x7f0000000140)='./file0\x00') r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) wait4(r4, 0x0, 0x8, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) 12.640397668s ago: executing program 2 (id=277): r0 = io_uring_setup(0x4a86, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="a5", 0x1, 0x40, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0x8, 0xc9100122, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.707128252s ago: executing program 6 (id=279): r0 = socket(0x1, 0x5, 0x0) close(r0) epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000300), 0xd, 0x5f1, &(0x7f0000001200)="$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") r3 = dup(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x5f, 0x20000000) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$getregset(0x4205, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) stat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000600)={[{@noblock_validity}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@journal_async_commit}, {@auto_da_alloc}, {@lazytime}, {@nobarrier}, {@nouid32}]}, 0xd, 0x5f3, &(0x7f0000001800)="$eJzs3c1vFOUfAPDvbF9oKb9fCzEqHqSJMZAoLS1giPEAV0MafIkXL1ZaECnQtDXaakJJ8GJivBhj4smD+F8okSsnPXnw4smQEDEcTVwz25nSbWf73t3KfD7JsjPz7PT5DtvvzjNPn2c2gNLqT/+pRByMiMkkojeZXyxrj6ywf+F1D//65Hz6SKJafePPJJJsW/76JHvuyXbuioiff0riQNvKeqdn5y6PTkyMT2XrgzNXJgenZ+eOXroyenH84vjV4ZeGT508cfLU0LFNHdf1gm1nb77/Ye9nI29/983fydD3v40kcTpezV649Di2S3/01/5PkpVFPae2u7IWact+T5a+xUl7CwNiQ/L3ryMinoreaItHb15vfPpaS4MDdlQ1iagCJZXIfyipvB2QX9svvw6utKRVAjTD/TMLHQAr8799oW8wump9A3sfJrG0WyeJiM31zNXbFxF374zcvHBn5GbsUD8cUGz+RkQ8XZT/SS3/+6Ir+mr5X6nL/7RdcC57Tre/vsn6l3cVy39onoX871o1/6NB/r+zJP/f3WT9/Y8W3+uuy//uzR4SAAAAAAAAlNbtMxHxYtHf/yuL43+iYPxPT0Sc3ob6+5etr/z7f+XeNlQDFLh/JuKVwvG/lXz0b19btvS/2niAjuTCpYnxYxHx/4g4Eh170vWhVeo4+vmBrxuV9Wfj//JHWv/dbCxgFse99j31+4yNzoxu9biBiPs3Ip4pHP+bLJ7/k4Lzf/p5MLnOOg48f+tco7K18x/YKdVvIw4Xnv/zu1Z0Zs8N788xWGsPDOatgpWe/fiLHxrVv9n8d4sJ2Lr0/L931fyPvmTp/XqmN17H8dn2aqOyzbb/O5M3a7ecyT+dPhqdmZkaiuhMzralW+u2D288Zngc5fmQ50ua/0eeW73/r6j93x0R88t+dvKgfk5x7sl/en5vHFH607X/oRXS/B/b0Pl/du5ymvxTdVtWXRi+1fdjo/rXd/4/UTvXH8m26P+DBV8tv0zPFKRje1FRs+MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMdBJSL2RVIZWFyuVAYGInoi4onYW5m4Nj3zwoVrH1wdS8tq3/9fyb/pt3dhPcm//79vyfrwsvXjEbE/Ir5s666tD5y/NjHW6oMHAAAAAAAAAAAAAAAAAACAXaKnwfz/1B9trY4O2HHtrQ4AaJmC/P+lFXEAzef8D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kN5rSf/H1QXNCEcAAAAAABga/Yfuv1rEhHzL3fXHqnOrKyjpZEBO62yoVd371gcQPO5xQ+Ul6F/UF6u8YFkjfKuhjuttedqJs9vYWcAAAAAAAAAAAAAKJ3DB83/h7La2Px/4HFi/j+UVz7//1CL4wCazzU+EGvM5M/m/+/Z2F4AAAAAAAAAAAAAwHaanp27PDoxMT5l4a3dEUYzF6rV6vX0t2C3xPMfX8iHwu+WeJYt5HP91rdX6z6TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAev8GAAD//0+WKN0=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) 10.606493627s ago: executing program 2 (id=281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 10.063154641s ago: executing program 2 (id=282): r0 = memfd_create(0x0, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 9.388729714s ago: executing program 5 (id=283): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000440)={0x0, 0x9b}, 0x0) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) syz_io_uring_setup(0x2af5, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, 0x128}, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) write$FUSE_IOCTL(r3, 0x0, 0x0) write(r0, 0x0, 0x0) 8.668225741s ago: executing program 2 (id=284): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 8.557845815s ago: executing program 34 (id=256): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r4 = syz_io_uring_setup(0x126e, &(0x7f0000000480)={0x0, 0x72d9, 0x80, 0x0, 0x100000}, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [0x0, 0xff], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x5, 0x8001, 0xf53, 'syz0\x00', 'syz1\x00', {0xffffffffffffff7f}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_rr_get_interval(r1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) 8.262866081s ago: executing program 0 (id=287): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x3ff, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x805, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000340)=@arm64={0x7, 0xe, 0x6, '\x00', 0x1259}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0x0, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x1, 0x0, 0xfc}, {0x3000, 0xd000, 0x5, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x2, 0x6}, {0xeeee8000, 0xffff1000, 0x3, 0x9, 0x0, 0x2, 0x7, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0xe000, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0xffffffff, 0x50, 0x2, 0xf801, 0x0, [0x0, 0x0, 0x104]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 8.098485433s ago: executing program 0 (id=288): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, &(0x7f00000057c0)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40850) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000000000000000000000000000ef07"}}}]}, 0x48}}, 0x0) 8.091269024s ago: executing program 2 (id=289): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x8048451}, 0x48110) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10003, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x3, 0x400, 0x80, 0x89, 0x0, 0xa, 0x8d], 0x100000, 0x240046}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000040)=0xffffffffffffff67) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.717823438s ago: executing program 5 (id=290): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f00000005c0), 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) 6.055775918s ago: executing program 0 (id=291): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="a5", 0x1, 0x40, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0x8, 0xc9100122, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.55934952s ago: executing program 0 (id=292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.855213327s ago: executing program 5 (id=293): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=@delchain={0x40, 0x2c, 0xf31, 0x80, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008844}, 0x0) 3.654386769s ago: executing program 6 (id=294): r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x20, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 3.204610263s ago: executing program 2 (id=295): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x2, 0x0, 0x0, 0x25dfdbfe}, 0x10}}, 0x0) 3.188567099s ago: executing program 5 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.126386887s ago: executing program 0 (id=297): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x3ff, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x805, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)=@arm64={0x7, 0xe, 0x6, '\x00', 0x1259}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0x0, 0xff, 0x7, 0x4, 0x0, 0x0, 0x3, 0x1, 0x0, 0xfc}, {0x3000, 0xd000, 0x5, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x2, 0x6}, {0xeeee8000, 0xffff1000, 0x3, 0x9, 0x0, 0x2, 0x7, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x0, 0xe000, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x26}, {0x80a0000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0xffffffff, 0x50, 0x2, 0xf801, 0x0, [0x0, 0x0, 0x104]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.811127456s ago: executing program 5 (id=298): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 2.715208116s ago: executing program 0 (id=299): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000440)={0x0, 0x9b}, 0x0) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) syz_io_uring_setup(0x2af5, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, 0x128}, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x100000004, 0x0) write$FUSE_IOCTL(r3, 0x0, 0x0) write(r0, 0x0, 0x0) 2.628344007s ago: executing program 6 (id=300): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) bind$inet6(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x1, 0x3, 0x3}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) chmod(&(0x7f0000000380)='./file1\x00', 0x122) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r1, r1, 0x0, 0xe3aa6ea) 2.222698965s ago: executing program 5 (id=301): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, &(0x7f00000057c0)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000000000000000000000000000ef07"}}}]}, 0x48}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) 0s ago: executing program 6 (id=302): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r2, 0x2285, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, 0x0, 0x0) write$sndseq(r3, &(0x7f00000005c0), 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 82.848125][ T5828] cgroup: Unknown subsys name 'net' [ 82.958260][ T5828] cgroup: Unknown subsys name 'cpuset' [ 82.968164][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.640916][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.064619][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.074186][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.085506][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.094831][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.104419][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.112846][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.122083][ T5856] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.130645][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.139939][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.148938][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.150613][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.160905][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.166479][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.170954][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.181149][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.194927][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.196362][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.210969][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.213770][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.226536][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.229621][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.241585][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.249484][ T5160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.259498][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.270563][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.169221][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.209428][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.336595][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 88.353724][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 88.373431][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.534550][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.543012][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.550506][ T5848] bridge_slave_0: entered allmulticast mode [ 88.559965][ T5848] bridge_slave_0: entered promiscuous mode [ 88.606879][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.614460][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.622202][ T5848] bridge_slave_1: entered allmulticast mode [ 88.630757][ T5848] bridge_slave_1: entered promiscuous mode [ 88.748620][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.756889][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.764464][ T5843] bridge_slave_0: entered allmulticast mode [ 88.772400][ T5843] bridge_slave_0: entered promiscuous mode [ 88.811495][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.835032][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.842505][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.851067][ T5843] bridge_slave_1: entered allmulticast mode [ 88.859268][ T5843] bridge_slave_1: entered promiscuous mode [ 88.880704][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.888113][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.895800][ T5842] bridge_slave_0: entered allmulticast mode [ 88.904105][ T5842] bridge_slave_0: entered promiscuous mode [ 88.917072][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.954690][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.962049][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.969554][ T5852] bridge_slave_0: entered allmulticast mode [ 88.977852][ T5852] bridge_slave_0: entered promiscuous mode [ 88.986015][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.993500][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.000761][ T5842] bridge_slave_1: entered allmulticast mode [ 89.009350][ T5842] bridge_slave_1: entered promiscuous mode [ 89.029642][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.037291][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.045009][ T5841] bridge_slave_0: entered allmulticast mode [ 89.053128][ T5841] bridge_slave_0: entered promiscuous mode [ 89.080617][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.088550][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.096901][ T5852] bridge_slave_1: entered allmulticast mode [ 89.105522][ T5852] bridge_slave_1: entered promiscuous mode [ 89.140588][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.147989][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.155444][ T5841] bridge_slave_1: entered allmulticast mode [ 89.163560][ T5841] bridge_slave_1: entered promiscuous mode [ 89.175504][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.214344][ T5848] team0: Port device team_slave_0 added [ 89.238136][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.279419][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.293324][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.305884][ T5848] team0: Port device team_slave_1 added [ 89.329889][ T5854] Bluetooth: hci0: command tx timeout [ 89.335934][ T51] Bluetooth: hci4: command tx timeout [ 89.335967][ T5160] Bluetooth: hci3: command tx timeout [ 89.343602][ T5854] Bluetooth: hci1: command tx timeout [ 89.348633][ T5844] Bluetooth: hci2: command tx timeout [ 89.373118][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.415165][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.429331][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.441932][ T5843] team0: Port device team_slave_0 added [ 89.452535][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.520853][ T5843] team0: Port device team_slave_1 added [ 89.543905][ T5842] team0: Port device team_slave_0 added [ 89.551679][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.558887][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.584895][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.626659][ T5852] team0: Port device team_slave_0 added [ 89.636376][ T5842] team0: Port device team_slave_1 added [ 89.644020][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.650988][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.677459][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.691644][ T5841] team0: Port device team_slave_0 added [ 89.713542][ T5852] team0: Port device team_slave_1 added [ 89.746420][ T5841] team0: Port device team_slave_1 added [ 89.754158][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.761139][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.787813][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.855618][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.862584][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.888758][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.928540][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.935737][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.961685][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.005089][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.012063][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.038316][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.051518][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.058573][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.085002][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.104376][ T5848] hsr_slave_0: entered promiscuous mode [ 90.111490][ T5848] hsr_slave_1: entered promiscuous mode [ 90.120841][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.128059][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.154903][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.169449][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.176744][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.203336][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.237163][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.244251][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.271105][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.378135][ T5843] hsr_slave_0: entered promiscuous mode [ 90.385474][ T5843] hsr_slave_1: entered promiscuous mode [ 90.392223][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 90.398436][ T5843] Cannot create hsr debugfs directory [ 90.517396][ T5842] hsr_slave_0: entered promiscuous mode [ 90.525821][ T5842] hsr_slave_1: entered promiscuous mode [ 90.534883][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 90.540742][ T5842] Cannot create hsr debugfs directory [ 90.593547][ T5852] hsr_slave_0: entered promiscuous mode [ 90.600616][ T5852] hsr_slave_1: entered promiscuous mode [ 90.608348][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 90.614519][ T5852] Cannot create hsr debugfs directory [ 90.641672][ T5841] hsr_slave_0: entered promiscuous mode [ 90.649443][ T5841] hsr_slave_1: entered promiscuous mode [ 90.656457][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 90.662213][ T5841] Cannot create hsr debugfs directory [ 91.351402][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.365969][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.380258][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.403333][ T5844] Bluetooth: hci1: command tx timeout [ 91.403400][ T5850] Bluetooth: hci4: command tx timeout [ 91.409461][ T5854] Bluetooth: hci3: command tx timeout [ 91.414924][ T5850] Bluetooth: hci0: command tx timeout [ 91.425720][ T5160] Bluetooth: hci2: command tx timeout [ 91.432003][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.507757][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.521055][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.544823][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.557859][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.687293][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.700129][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.715648][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.749506][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.898486][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.909367][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.920833][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.933768][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.952151][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.974050][ T808] cfg80211: failed to load regulatory.db [ 92.096151][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.108896][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.139031][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.166496][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.179377][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.195892][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.203629][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.244902][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.252182][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.287522][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.409438][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.465197][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.472491][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.501685][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.516501][ T140] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.523918][ T140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.619759][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.671278][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.737155][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.744530][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.801342][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.814820][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.822052][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.862347][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.869526][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.898208][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.905505][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.980042][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.046810][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.180192][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.226619][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.234366][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.246881][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.254176][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.417388][ T5848] veth0_vlan: entered promiscuous mode [ 93.461285][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.484825][ T5850] Bluetooth: hci0: command tx timeout [ 93.491110][ T5160] Bluetooth: hci2: command tx timeout [ 93.491539][ T5844] Bluetooth: hci1: command tx timeout [ 93.496772][ T5160] Bluetooth: hci3: command tx timeout [ 93.502506][ T5854] Bluetooth: hci4: command tx timeout [ 93.540320][ T5848] veth1_vlan: entered promiscuous mode [ 93.791583][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.809646][ T5848] veth0_macvtap: entered promiscuous mode [ 93.831665][ T5843] veth0_vlan: entered promiscuous mode [ 93.868753][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.882354][ T5848] veth1_macvtap: entered promiscuous mode [ 93.937195][ T5843] veth1_vlan: entered promiscuous mode [ 93.978240][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.048320][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.116458][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.128716][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.158559][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.173315][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.206502][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.303479][ T5842] veth0_vlan: entered promiscuous mode [ 94.377994][ T5843] veth0_macvtap: entered promiscuous mode [ 94.409609][ T5842] veth1_vlan: entered promiscuous mode [ 94.439417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.457157][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.470072][ T5843] veth1_macvtap: entered promiscuous mode [ 94.578946][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.589387][ T5852] veth0_vlan: entered promiscuous mode [ 94.595535][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.614324][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.636993][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.645296][ T5841] veth0_vlan: entered promiscuous mode [ 94.693168][ T5852] veth1_vlan: entered promiscuous mode [ 94.712276][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.724785][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.751688][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.780103][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.790152][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810914][ T5842] veth0_macvtap: entered promiscuous mode [ 94.823844][ T5841] veth1_vlan: entered promiscuous mode [ 94.882010][ T5842] veth1_macvtap: entered promiscuous mode [ 95.034576][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.069337][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.107159][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.120879][ T5852] veth0_macvtap: entered promiscuous mode [ 95.128255][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.178352][ T5967] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 95.203759][ T5852] veth1_macvtap: entered promiscuous mode [ 95.221535][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.268576][ T5841] veth0_macvtap: entered promiscuous mode [ 95.298984][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.312779][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.325876][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.333570][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.371667][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.382345][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.423394][ T5841] veth1_macvtap: entered promiscuous mode [ 95.464875][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.510099][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.562900][ T5854] Bluetooth: hci4: command tx timeout [ 95.569092][ T51] Bluetooth: hci3: command tx timeout [ 95.569116][ T5160] Bluetooth: hci0: command tx timeout [ 95.574725][ T51] Bluetooth: hci2: command tx timeout [ 95.574781][ T5844] Bluetooth: hci1: command tx timeout [ 95.679850][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.697282][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.708975][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.719835][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.752181][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.768064][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.852726][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.862043][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.903871][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.940652][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.957850][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.982500][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.163499][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.184022][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.381391][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.416933][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.515661][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.536975][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.664662][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.674051][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.722272][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.767263][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.015981][ T6004] Zero length message leads to an empty skb [ 97.096916][ T6001] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.429837][ T6012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.626830][ T6014] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.022083][ T6034] loop0: detected capacity change from 0 to 512 [ 98.051432][ T6032] loop4: detected capacity change from 0 to 1024 [ 98.136713][ T6032] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.25: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 98.216994][ T6034] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.250208][ T6034] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.260933][ T6032] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 98.262104][ T6032] EXT4-fs error (device loop4): ext4_quota_enable:7195: comm syz.4.25: Bad quota inode: 4, type: 1 [ 98.271411][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 98.271503][ C0] EXT4-fs (loop4): initial error at time 1773967529: ext4_ext_check_inode:521: inode 4 [ 98.271538][ C0] EXT4-fs (loop4): last error at time 1773967529: ext4_ext_check_inode:521: inode 4 [ 98.330443][ T6032] loop4: lost filesystem error report for type 5 error -117 [ 98.330751][ T6032] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 98.423730][ T6032] EXT4-fs (loop4): mount failed [ 99.236051][ T6034] EXT4-fs error (device loop0): ext4_do_update_inode:5572: inode #2: comm syz.0.26: corrupted inode contents [ 99.262821][ T6034] EXT4-fs error (device loop0): ext4_dirty_inode:6453: inode #2: comm syz.0.26: mark_inode_dirty error [ 99.286251][ T6032] loop4: detected capacity change from 0 to 1024 [ 99.293386][ T6032] EXT4-fs: Ignoring removed i_version option [ 99.302431][ T6034] EXT4-fs error (device loop0): ext4_do_update_inode:5572: inode #2: comm syz.0.26: corrupted inode contents [ 99.316101][ T6032] EXT4-fs: Mount option(s) incompatible with ext2 [ 99.324713][ T6034] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.26: mark_inode_dirty error [ 99.344108][ T6042] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #2: comm syz.0.26: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 99.344108][ T6042] [ 99.960310][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.991832][ T6055] loop4: detected capacity change from 0 to 512 [ 100.874737][ T6055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.916782][ T6055] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.957242][ T6074] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #2: comm syz.4.31: corrupted inode contents [ 102.146361][ T6074] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #2: comm syz.4.31: mark_inode_dirty error [ 102.197152][ T6074] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #2: comm syz.4.31: corrupted inode contents [ 102.223677][ T6074] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.31: mark_inode_dirty error [ 102.373879][ T6077] netlink: 36 bytes leftover after parsing attributes in process `syz.2.35'. [ 102.432590][ T6066] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.31: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 102.432590][ T6066] [ 102.761797][ T6072] ======================================================= [ 102.761797][ T6072] WARNING: The mand mount option has been deprecated and [ 102.761797][ T6072] and is ignored by this kernel. Remove the mand [ 102.761797][ T6072] option from the mount to silence this warning. [ 102.761797][ T6072] ======================================================= [ 102.918708][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.006065][ T6090] loop3: detected capacity change from 0 to 512 [ 103.061722][ T6090] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.086881][ T6090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.152919][ T6090] EXT4-fs (loop3): 1 truncate cleaned up [ 103.279289][ T6095] netlink: 36 bytes leftover after parsing attributes in process `syz.1.40'. [ 103.824163][ T6090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.175609][ T6099] loop1: detected capacity change from 0 to 1024 [ 105.217393][ T6099] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.41: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 105.748105][ T6099] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 105.752727][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 105.769248][ C1] EXT4-fs (loop1): initial error at time 1773967536: ext4_ext_check_inode:521: inode 4 [ 105.778974][ C1] EXT4-fs (loop1): last error at time 1773967536: ext4_ext_check_inode:521: inode 4 [ 105.898735][ T6099] EXT4-fs error (device loop1): ext4_quota_enable:7195: comm syz.1.41: Bad quota inode: 4, type: 1 [ 106.769127][ T6099] loop1: lost filesystem error report for type 5 error -117 [ 106.874168][ T6099] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.915234][ T6099] EXT4-fs (loop1): mount failed [ 107.282854][ T6099] loop1: detected capacity change from 0 to 1024 [ 107.291046][ T5846] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.293748][ T6099] EXT4-fs: Ignoring removed i_version option [ 107.308095][ T6099] EXT4-fs: Mount option(s) incompatible with ext2 [ 107.398139][ T6122] loop2: detected capacity change from 0 to 512 [ 107.426644][ T6122] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.522335][ T6122] EXT4-fs (loop2): 1 truncate cleaned up [ 108.246403][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 108.283000][ T6122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.306475][ T5846] usb 4-1: device descriptor read/all, error -71 [ 108.635573][ T6129] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 108.715124][ T6131] loop4: detected capacity change from 0 to 512 [ 108.745932][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.758679][ T6131] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.369102][ T6131] EXT4-fs (loop4): 1 truncate cleaned up [ 109.406808][ T6131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.484559][ T5909] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.022779][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 110.060107][ T6152] netlink: 36 bytes leftover after parsing attributes in process `syz.1.52'. [ 110.839442][ T5909] usb 3-1: device descriptor read/all, error -71 [ 111.376267][ T5936] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.446656][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.534102][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 112.563296][ T5936] usb 5-1: device descriptor read/all, error -71 [ 112.827771][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.079931][ T6170] loop1: detected capacity change from 0 to 16 [ 113.137096][ T6170] erofs (device loop1): mounted with root inode @ nid 36. [ 113.181747][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 113.210491][ T6172] loop4: detected capacity change from 0 to 512 [ 113.238978][ T6172] EXT4-fs: Ignoring removed oldalloc option [ 113.261696][ T6170] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 113.309399][ T6170] syz.1.57: attempt to access beyond end of device [ 113.309399][ T6170] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 113.347597][ T6170] syz.1.57: attempt to access beyond end of device [ 113.347597][ T6170] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 113.363391][ T6170] syz.1.57: attempt to access beyond end of device [ 113.363391][ T6170] loop1: rw=0, sector=16, nr_sectors = 8 limit=16 [ 113.374506][ T6172] EXT4-fs (loop4): 1 truncate cleaned up [ 113.376972][ T6170] erofs (device loop1): read error -5 @ 1 of nid 89 [ 113.400967][ T29] audit: type=1800 audit(1773967544.165:2): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.57" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 113.475060][ T6172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.513904][ T6183] loop1: detected capacity change from 0 to 512 [ 114.567518][ T6183] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.638151][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.678270][ T6183] EXT4-fs (loop1): 1 truncate cleaned up [ 114.747666][ T6191] loop3: detected capacity change from 0 to 512 [ 114.783312][ T6183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.847986][ T6191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.981320][ T6191] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.233681][ T6200] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #2: comm syz.3.61: corrupted inode contents [ 116.247072][ T6200] EXT4-fs error (device loop3): ext4_dirty_inode:6453: inode #2: comm syz.3.61: mark_inode_dirty error [ 116.260474][ T6200] EXT4-fs error (device loop3): ext4_do_update_inode:5572: inode #2: comm syz.3.61: corrupted inode contents [ 116.273159][ T6200] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.61: mark_inode_dirty error [ 116.287821][ T6197] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #2: comm syz.3.61: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 116.287821][ T6197] [ 116.733969][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.914272][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.046199][ T6211] loop4: detected capacity change from 0 to 256 [ 117.105554][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 117.137032][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.176694][ T10] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.201000][ T10] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 117.239604][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 117.264253][ T10] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 117.302591][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.458021][ T10] usb 2-1: config 0 descriptor?? [ 118.142301][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 118.319675][ T10] usb 2-1: can't set config #0, error -71 [ 118.401505][ T10] usb 2-1: USB disconnect, device number 2 [ 118.693770][ T6227] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 118.715847][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.767131][ T6230] loop2: detected capacity change from 0 to 512 [ 118.792433][ T6232] loop4: detected capacity change from 0 to 512 [ 118.816178][ T6232] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.853231][ T6230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.897656][ T6232] EXT4-fs (loop4): 1 truncate cleaned up [ 118.910964][ T6232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.936044][ T6230] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.963648][ T6237] loop1: detected capacity change from 0 to 512 [ 119.013879][ T6237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.080979][ T6237] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.859052][ T6245] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.72: corrupted inode contents [ 119.871881][ T6245] EXT4-fs error (device loop2): ext4_dirty_inode:6453: inode #2: comm syz.2.72: mark_inode_dirty error [ 119.885847][ T6245] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.72: corrupted inode contents [ 119.898028][ T6245] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.72: mark_inode_dirty error [ 119.912716][ T6246] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.72: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 119.912716][ T6246] [ 120.259662][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.358851][ T6251] loop3: detected capacity change from 0 to 512 [ 120.538152][ T6251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.613761][ T6251] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.557550][ T5936] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.715588][ T6262] EXT4-fs warning (device loop3): ext4_group_extend:1885: will only finish group (16384 blocks, 16256 new) [ 121.730862][ T6262] EXT4-fs warning (device loop3): ext4_group_extend:1890: can't read last block, resize aborted [ 122.529681][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.549856][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.0.80'. [ 122.698058][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 123.715777][ T5936] usb 5-1: device descriptor read/all, error -71 [ 124.368955][ T6046] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 124.410279][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.529571][ T6283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.572770][ T6046] usb 1-1: Using ep0 maxpacket: 16 [ 124.573135][ T6287] loop3: detected capacity change from 0 to 1024 [ 124.585025][ T6288] loop4: detected capacity change from 0 to 1024 [ 124.589623][ T6046] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.625701][ T6046] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.646699][ T6287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.666165][ T6288] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.86: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 124.668762][ T6046] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 124.684363][ T6288] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 124.702089][ T6288] EXT4-fs error (device loop4): ext4_quota_enable:7195: comm syz.4.86: Bad quota inode: 4, type: 1 [ 124.710839][ T6046] usb 1-1: config 0 interface 0 has no altsetting 0 [ 124.711765][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 124.737037][ C0] EXT4-fs (loop4): initial error at time 1773967555: ext4_ext_check_inode:521: inode 4 [ 124.746898][ C0] EXT4-fs (loop4): last error at time 1773967555: ext4_ext_check_inode:521: inode 4 [ 124.758898][ T6288] loop4: lost filesystem error report for type 5 error -117 [ 124.759736][ T6288] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 124.782736][ T6288] EXT4-fs (loop4): mount failed [ 124.790431][ T6046] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 124.830345][ T6287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.843289][ T6046] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.871622][ T6046] usb 1-1: config 0 descriptor?? [ 124.898458][ T6293] loop4: detected capacity change from 0 to 1024 [ 124.908254][ T6293] EXT4-fs: Ignoring removed i_version option [ 124.915886][ T6293] EXT4-fs: Mount option(s) incompatible with ext2 [ 126.670051][ T6301] loop4: detected capacity change from 0 to 512 [ 126.694216][ T6046] usbhid 1-1:0.0: can't add hid device: -71 [ 126.734641][ T6046] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 126.762750][ T6301] EXT4-fs: Ignoring removed oldalloc option [ 126.841087][ T6301] EXT4-fs (loop4): 1 truncate cleaned up [ 126.851958][ T6046] usb 1-1: USB disconnect, device number 2 [ 126.898986][ T6301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.098749][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.187705][ T6314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'. [ 128.588930][ T6320] loop2: detected capacity change from 0 to 512 [ 129.784252][ T6320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.802538][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.811998][ T6320] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.819300][ T6330] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.95: corrupted inode contents [ 130.897826][ T6330] EXT4-fs error (device loop2): ext4_dirty_inode:6453: inode #2: comm syz.2.95: mark_inode_dirty error [ 130.910561][ T6330] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.95: corrupted inode contents [ 130.924290][ T6330] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.95: mark_inode_dirty error [ 130.943202][ T6331] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.95: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 130.943202][ T6331] [ 131.266853][ T6335] loop4: detected capacity change from 0 to 512 [ 131.329854][ T6335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.405060][ T6335] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.421920][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.617487][ T6345] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #2: comm syz.4.97: corrupted inode contents [ 132.647492][ T6345] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #2: comm syz.4.97: mark_inode_dirty error [ 132.670823][ T6345] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #2: comm syz.4.97: corrupted inode contents [ 132.693492][ T6345] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.97: mark_inode_dirty error [ 132.743614][ T6346] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.97: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 132.743614][ T6346] [ 132.960721][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.970662][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.159650][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.067681][ T6364] loop4: detected capacity change from 0 to 1024 [ 135.121983][ T6364] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.245472][ T6364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.341973][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.586177][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.596316][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.608634][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.618497][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.623513][ T6378] loop3: detected capacity change from 0 to 512 [ 135.671027][ T6378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.786933][ T6378] EXT4-fs (loop3): 1 truncate cleaned up [ 135.871860][ T6378] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.817083][ T5850] Bluetooth: hci5: command tx timeout [ 138.875840][ T5846] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.915413][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.044528][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 139.231289][ T5846] usb 4-1: device descriptor read/all, error -71 [ 140.150724][ T5850] Bluetooth: hci5: command tx timeout [ 141.650130][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.896792][ T6424] loop4: detected capacity change from 0 to 1024 [ 141.909147][ T6424] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.991428][ T6424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.759586][ T5850] Bluetooth: hci5: command tx timeout [ 143.583213][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.751336][ T6374] chnl_net:caif_netlink_parms(): no params data found [ 144.082576][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 144.623667][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.643263][ T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.666550][ T24] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 144.702443][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.799668][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 144.809504][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.827237][ T24] usb 1-1: config 0 descriptor?? [ 144.845885][ T5850] Bluetooth: hci5: command tx timeout [ 145.057777][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 145.075582][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 145.104817][ T24] usb 1-1: USB disconnect, device number 3 [ 146.113692][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.121191][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.131307][ T6374] bridge_slave_0: entered allmulticast mode [ 146.142195][ T6374] bridge_slave_0: entered promiscuous mode [ 146.154422][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.162603][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.184937][ T6374] bridge_slave_1: entered allmulticast mode [ 146.222977][ T6374] bridge_slave_1: entered promiscuous mode [ 146.357681][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.393167][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.532456][ T6374] team0: Port device team_slave_0 added [ 146.557495][ T6374] team0: Port device team_slave_1 added [ 146.665168][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.707317][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.761456][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.808958][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.819782][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.852362][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.097518][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.617588][ T6374] hsr_slave_0: entered promiscuous mode [ 148.711648][ T6374] hsr_slave_1: entered promiscuous mode [ 148.832932][ T6374] debugfs: 'hsr0' already exists in 'hsr' [ 148.843648][ T6374] Cannot create hsr debugfs directory [ 148.957618][ T6489] loop4: detected capacity change from 0 to 16 [ 149.014787][ T6489] erofs (device loop4): mounted with root inode @ nid 36. [ 149.116643][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 149.171314][ T6489] erofs (device loop4): readahead error at folio 2 @ nid 89 [ 149.803280][ T6489] syz.4.127: attempt to access beyond end of device [ 149.803280][ T6489] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 149.946312][ T6489] syz.4.127: attempt to access beyond end of device [ 149.946312][ T6489] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 149.961135][ T6489] syz.4.127: attempt to access beyond end of device [ 149.961135][ T6489] loop4: rw=0, sector=16, nr_sectors = 8 limit=16 [ 149.974781][ T6489] erofs (device loop4): read error -5 @ 1 of nid 89 [ 149.983549][ T29] audit: type=1800 audit(1773967580.765:3): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.127" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 150.410924][ T6505] loop2: detected capacity change from 0 to 256 [ 151.384462][ T6499] KVM: debugfs: duplicate directory 6499-6 [ 151.460079][ T6511] loop4: detected capacity change from 0 to 512 [ 151.606923][ T6374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.715742][ T6374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.748522][ T6511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.774911][ T6374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.792946][ T6511] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.827060][ T6374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.860231][ T6511] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #2: comm syz.4.136: corrupted inode contents [ 152.873112][ T6511] EXT4-fs error (device loop4): ext4_dirty_inode:6453: inode #2: comm syz.4.136: mark_inode_dirty error [ 152.898482][ T6511] EXT4-fs error (device loop4): ext4_do_update_inode:5572: inode #2: comm syz.4.136: corrupted inode contents [ 152.918920][ T6511] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.136: mark_inode_dirty error [ 152.983927][ T6528] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.136: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 152.983927][ T6528] [ 153.155121][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.205353][ T6374] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.215642][ T6533] loop2: detected capacity change from 0 to 16 [ 153.294976][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.302248][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.323461][ T6533] erofs (device loop2): mounted with root inode @ nid 36. [ 153.364443][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 153.379451][ T5852] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.625001][ T6079] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.632283][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.988847][ T6536] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 153.996910][ T6536] syz.2.138: attempt to access beyond end of device [ 153.996910][ T6536] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 154.049394][ T6536] syz.2.138: attempt to access beyond end of device [ 154.049394][ T6536] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 154.123124][ T6536] syz.2.138: attempt to access beyond end of device [ 154.123124][ T6536] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 154.136663][ T6536] erofs (device loop2): read error -5 @ 1 of nid 89 [ 154.143801][ T29] audit: type=1800 audit(1773967584.925:4): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.138" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 155.248841][ T6554] loop2: detected capacity change from 0 to 16 [ 155.341375][ T6554] erofs (device loop2): mounted with root inode @ nid 36. [ 155.430486][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.143'. [ 155.463809][ T6548] erofs (device loop2): readahead error at folio 2 @ nid 89 [ 155.488972][ T6548] syz.2.143: attempt to access beyond end of device [ 155.488972][ T6548] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 155.550917][ T6548] syz.2.143: attempt to access beyond end of device [ 155.550917][ T6548] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 155.594407][ T6548] syz.2.143: attempt to access beyond end of device [ 155.594407][ T6548] loop2: rw=0, sector=16, nr_sectors = 8 limit=16 [ 155.647980][ T6548] erofs (device loop2): read error -5 @ 1 of nid 89 [ 155.678982][ T29] audit: type=1800 audit(1773967586.455:5): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.143" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 155.716667][ T6564] loop3: detected capacity change from 0 to 512 [ 155.828202][ T6564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.861100][ T6564] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.381725][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.427191][ T6578] loop2: detected capacity change from 0 to 128 [ 156.536074][ T6578] syz.2.151: attempt to access beyond end of device [ 156.536074][ T6578] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 157.352394][ T6594] loop2: detected capacity change from 0 to 1024 [ 157.377606][ T6594] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.440988][ T6594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.518031][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.611846][ T6374] veth0_vlan: entered promiscuous mode [ 158.683485][ T5998] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.716297][ T6605] loop2: detected capacity change from 0 to 512 [ 158.733615][ T6374] veth1_vlan: entered promiscuous mode [ 158.746147][ T6605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.770937][ T6605] EXT4-fs (loop2): 1 truncate cleaned up [ 158.795616][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.822224][ T6605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.867799][ T6374] veth0_macvtap: entered promiscuous mode [ 158.874263][ T5998] usb 1-1: Using ep0 maxpacket: 16 [ 158.882835][ T5998] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.894812][ T5998] usb 1-1: config 0 has no interface number 0 [ 158.902365][ T5998] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.913985][ T5998] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.923882][ T5998] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 158.937281][ T5998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.950974][ T6374] veth1_macvtap: entered promiscuous mode [ 158.975191][ T5998] usb 1-1: config 0 descriptor?? [ 159.148650][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.194354][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.235767][ T6079] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.264281][ T6079] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.577982][ T6079] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.835338][ T6613] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.158'. [ 160.583948][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.642208][ T6079] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.603237][ T5998] usbhid 1-1:0.1: can't add hid device: -71 [ 161.611386][ T5998] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 161.625129][ T5998] usb 1-1: USB disconnect, device number 4 [ 162.601338][ T6009] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.632798][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 162.652763][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 163.230327][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 163.240650][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 163.248584][ T10] usb 5-1: device descriptor read/all, error -32 [ 163.428367][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.692216][ T6626] loop2: detected capacity change from 0 to 128 [ 164.546960][ T29] audit: type=1800 audit(1773967595.315:6): pid=6626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.161" name="bus" dev="loop2" ino=1048608 res=0 errno=0 [ 165.688583][ T6640] loop3: detected capacity change from 0 to 1024 [ 165.697653][ T6640] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.861058][ T6640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.896186][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.948247][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.083339][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.092000][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.341088][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.752243][ T6652] KVM: debugfs: duplicate directory 6652-6 [ 168.023799][ T5858] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 168.335598][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.523600][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 168.535670][ T5858] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.562757][ T5858] usb 4-1: config 0 has no interface number 0 [ 168.569011][ T5858] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.591261][ T5858] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.612058][ T5858] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 168.648918][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.708252][ T5858] usb 4-1: config 0 descriptor?? [ 168.848770][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.959798][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.398373][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.863129][ T5936] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 170.513850][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 170.587344][ T5858] usbhid 4-1:0.1: can't add hid device: -71 [ 170.723058][ T5858] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 170.844402][ T5936] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.039315][ T5936] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.354536][ T5936] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 171.609841][ T5858] usb 4-1: USB disconnect, device number 6 [ 171.649196][ T5936] usb 1-1: config 0 interface 0 has no altsetting 0 [ 171.710735][ T5936] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 171.775504][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.907633][ T5936] usb 1-1: config 0 descriptor?? [ 172.018738][ T35] bridge_slave_1: left allmulticast mode [ 172.062852][ T35] bridge_slave_1: left promiscuous mode [ 172.099831][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.185657][ T35] bridge_slave_0: left allmulticast mode [ 172.220518][ T6683] loop5: detected capacity change from 0 to 1024 [ 172.236612][ T35] bridge_slave_0: left promiscuous mode [ 172.247191][ T6683] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.274104][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.381663][ T6683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.411139][ T5160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.424954][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.436553][ T5160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.454285][ T5160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.463265][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.803592][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.714740][ T5160] Bluetooth: hci4: command tx timeout [ 174.869358][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.992586][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.017756][ T35] bond0 (unregistering): Released all slaves [ 175.118559][ T6703] loop5: detected capacity change from 0 to 512 [ 175.212322][ T6703] EXT4-fs: Ignoring removed oldalloc option [ 175.315404][ T5936] usbhid 1-1:0.0: can't add hid device: -71 [ 175.330767][ T5936] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 175.344944][ T5936] usb 1-1: USB disconnect, device number 5 [ 175.349546][ T6703] EXT4-fs (loop5): 1 truncate cleaned up [ 175.378679][ T6712] loop3: detected capacity change from 0 to 1024 [ 175.432831][ T6712] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.187: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 175.453632][ T6703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.454401][ T6712] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 175.582685][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 175.598355][ C0] EXT4-fs (loop3): initial error at time 1773967606: ext4_ext_check_inode:521: inode 4 [ 175.608206][ C0] EXT4-fs (loop3): last error at time 1773967606: ext4_ext_check_inode:521: inode 4 [ 175.628583][ T6712] EXT4-fs error (device loop3): ext4_quota_enable:7195: comm syz.3.187: Bad quota inode: 4, type: 1 [ 175.670779][ T6712] loop3: lost filesystem error report for type 5 error -117 [ 175.671107][ T6712] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 175.734724][ T6712] EXT4-fs (loop3): mount failed [ 176.794805][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.904285][ T5160] Bluetooth: hci4: command tx timeout [ 178.523097][ T6009] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 178.744275][ T6009] usb 6-1: Using ep0 maxpacket: 16 [ 178.796274][ T6009] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.827587][ T6009] usb 6-1: config 0 has no interface number 0 [ 178.850947][ T6009] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.887058][ T6747] loop2: detected capacity change from 0 to 512 [ 178.895000][ T6009] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.934187][ T5160] Bluetooth: hci4: command tx timeout [ 178.951700][ T6747] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.194: inode has both inline data and extents flags [ 178.954020][ T6009] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 178.965059][ T6747] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.982669][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 178.997093][ T6747] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.194: couldn't read orphan inode 15 (err -117) [ 178.998426][ C1] EXT4-fs (loop2): initial error at time 1773967609: ext4_orphan_get:1391: inode 15 [ 179.019564][ C1] EXT4-fs (loop2): last error at time 1773967609: ext4_orphan_get:1391: inode 15 [ 179.142466][ T6009] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.174533][ T6747] loop2: lost filesystem error report for type 5 error -117 [ 179.192305][ T6747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.235990][ T35] hsr_slave_0: left promiscuous mode [ 179.244688][ T6009] usb 6-1: config 0 descriptor?? [ 179.271605][ T35] hsr_slave_1: left promiscuous mode [ 179.309510][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.331561][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.356335][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.372878][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.413255][ T6747] syz.2.194 (pid 6747) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 179.478189][ T35] veth1_macvtap: left promiscuous mode [ 179.503397][ T35] veth0_macvtap: left promiscuous mode [ 179.524702][ T35] veth1_vlan: left promiscuous mode [ 179.548561][ T35] veth0_vlan: left promiscuous mode [ 179.577117][ T29] audit: type=1804 audit(1773967610.325:7): pid=6757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.194" name="/newroot/43/file0/file1" dev="loop2" ino=20 res=1 errno=0 [ 180.864061][ T6009] usbhid 6-1:0.1: can't add hid device: -71 [ 180.874506][ T6009] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 180.895891][ T6009] usb 6-1: USB disconnect, device number 2 [ 181.042801][ T5160] Bluetooth: hci4: command tx timeout [ 183.160881][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.543010][ T6772] capability: warning: `syz.5.200' uses deprecated v2 capabilities in a way that may be insecure [ 184.475580][ T6775] loop5: detected capacity change from 0 to 1024 [ 184.520976][ T6775] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.201: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 184.597050][ T6775] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 184.602496][ T6775] EXT4-fs error (device loop5): ext4_quota_enable:7195: comm syz.5.201: Bad quota inode: 4, type: 1 [ 184.611858][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 184.611885][ C1] EXT4-fs (loop5): initial error at time 1773967615: ext4_ext_check_inode:521: inode 4 [ 184.611923][ C1] EXT4-fs (loop5): last error at time 1773967615: ext4_ext_check_inode:521: inode 4 [ 184.651576][ T6781] loop2: detected capacity change from 0 to 512 [ 184.659613][ T6775] loop5: lost filesystem error report for type 5 error -117 [ 184.659908][ T6775] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.688198][ T6775] EXT4-fs (loop5): mount failed [ 184.711290][ T6781] EXT4-fs: Ignoring removed oldalloc option [ 185.722407][ T6781] EXT4-fs (loop2): 1 truncate cleaned up [ 185.740895][ T6781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.818273][ T35] team0 (unregistering): Port device team_slave_1 removed [ 186.964684][ T35] team0 (unregistering): Port device team_slave_0 removed [ 187.702900][ T5858] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 187.893069][ T5858] usb 6-1: Using ep0 maxpacket: 16 [ 187.919774][ T5858] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.965732][ T5858] usb 6-1: config 0 has no interface number 0 [ 187.991466][ T5858] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.032740][ T5858] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.067769][ T5858] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 188.099044][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.132864][ T5858] usb 6-1: config 0 descriptor?? [ 188.839024][ T6686] chnl_net:caif_netlink_parms(): no params data found [ 189.113176][ T5858] usbhid 6-1:0.1: can't add hid device: -71 [ 189.328950][ T5858] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 190.109492][ T5858] usb 6-1: USB disconnect, device number 3 [ 190.834889][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.119983][ T6686] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.129615][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.138178][ T6686] bridge_slave_0: entered allmulticast mode [ 191.147343][ T6686] bridge_slave_0: entered promiscuous mode [ 191.169336][ T6686] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.183867][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.216456][ T6686] bridge_slave_1: entered allmulticast mode [ 191.264826][ T6686] bridge_slave_1: entered promiscuous mode [ 191.339296][ T6833] loop5: detected capacity change from 0 to 1024 [ 191.362457][ T6833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.429735][ T6833] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.718956][ T6686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.750734][ T6686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.745276][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.751715][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.990683][ T6847] loop3: detected capacity change from 0 to 1024 [ 195.023322][ T6847] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.072840][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.098788][ T6847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.217810][ T6686] team0: Port device team_slave_0 added [ 195.255205][ T6686] team0: Port device team_slave_1 added [ 195.456530][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.472757][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.483344][ T5846] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 195.532754][ T6686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.557456][ T6686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.566476][ T6686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.593904][ T6686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.692756][ T5846] usb 6-1: Using ep0 maxpacket: 16 [ 195.705885][ T5846] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 196.104780][ T5846] usb 6-1: config 0 has no interface number 0 [ 196.681059][ T6686] hsr_slave_0: entered promiscuous mode [ 196.704996][ T6686] hsr_slave_1: entered promiscuous mode [ 196.712533][ T6686] debugfs: 'hsr0' already exists in 'hsr' [ 196.736724][ T5846] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.750608][ T5846] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.763746][ T5846] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 196.772964][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.779154][ T6686] Cannot create hsr debugfs directory [ 196.787880][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.820159][ T5846] usb 6-1: config 0 descriptor?? [ 197.081589][ T6871] loop3: detected capacity change from 0 to 512 [ 197.123263][ T6870] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.216'. [ 197.233432][ T6871] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.214: inode has both inline data and extents flags [ 197.262770][ T6871] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.282651][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 197.298296][ C0] EXT4-fs (loop3): initial error at time 1773967628: ext4_orphan_get:1391: inode 15 [ 197.307759][ C0] EXT4-fs (loop3): last error at time 1773967628: ext4_orphan_get:1391: inode 15 [ 198.233172][ T6871] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.214: couldn't read orphan inode 15 (err -117) [ 198.260993][ T6871] loop3: lost filesystem error report for type 5 error -117 [ 198.264310][ T6871] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.253911][ T5846] usbhid 6-1:0.1: can't add hid device: -71 [ 199.264253][ T5846] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 199.313116][ T5846] usb 6-1: USB disconnect, device number 4 [ 200.320440][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.109319][ T6888] loop5: detected capacity change from 0 to 128 [ 201.180155][ T6888] syz.5.221: attempt to access beyond end of device [ 201.180155][ T6888] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 201.258190][ T6686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.321161][ T6879] KVM: debugfs: duplicate directory 6879-6 [ 201.338227][ T6686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.432023][ T6686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.495900][ T6686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.897155][ T6903] loop5: detected capacity change from 0 to 1024 [ 202.944238][ T6903] EXT4-fs: Ignoring removed nomblk_io_submit option [ 203.082156][ T6903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.510801][ T6686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.239652][ T6916] loop3: detected capacity change from 0 to 1024 [ 204.269956][ T6686] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.314317][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.321621][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.450680][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.457994][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.506664][ T6916] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #4: comm syz.3.225: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 204.591229][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.672810][ T6916] loop3: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 204.682003][ T6916] EXT4-fs error (device loop3): ext4_quota_enable:7195: comm syz.3.225: Bad quota inode: 4, type: 1 [ 204.691397][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 204.691425][ C0] EXT4-fs (loop3): initial error at time 1773967635: ext4_ext_check_inode:521: inode 4 [ 204.691461][ C0] EXT4-fs (loop3): last error at time 1773967635: ext4_ext_check_inode:521: inode 4 [ 204.849453][ T6916] loop3: lost filesystem error report for type 5 error -117 [ 204.913349][ T6916] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 205.550218][ T6916] EXT4-fs (loop3): mount failed [ 205.594733][ T6935] loop2: detected capacity change from 0 to 512 [ 205.738319][ T6942] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.227'. [ 205.805142][ T6935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.879777][ T6935] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.037851][ T6945] loop5: detected capacity change from 0 to 256 [ 206.092505][ T6945] exfat: Bad value for 'umask' [ 206.341793][ T6951] loop3: detected capacity change from 0 to 1024 [ 206.403132][ T6951] EXT4-fs: Ignoring removed i_version option [ 206.434796][ T6951] EXT4-fs: Mount option(s) incompatible with ext2 [ 206.542365][ T6956] loop5: detected capacity change from 0 to 128 [ 206.638620][ T6956] EXT4-fs (loop5): Test dummy encryption mode enabled [ 206.838430][ T6956] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.895521][ T6956] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.042438][ T6956] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 207.792392][ T6959] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.228: corrupted inode contents [ 207.975694][ T6959] EXT4-fs error (device loop2): ext4_dirty_inode:6453: inode #2: comm syz.2.228: mark_inode_dirty error [ 208.104483][ T6959] EXT4-fs error (device loop2): ext4_do_update_inode:5572: inode #2: comm syz.2.228: corrupted inode contents [ 208.231504][ T6686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.251729][ T6959] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.228: mark_inode_dirty error [ 208.379096][ T6963] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.228: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 208.379096][ T6963] [ 208.604811][ T6374] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.104674][ T6976] loop5: detected capacity change from 0 to 512 [ 209.149186][ T6976] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.234: inode has both inline data and extents flags [ 209.250819][ T6976] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 209.251209][ T6976] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.234: couldn't read orphan inode 15 (err -117) [ 209.260665][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 209.260689][ C0] EXT4-fs (loop5): initial error at time 1773967640: ext4_orphan_get:1391: inode 15 [ 209.260722][ C0] EXT4-fs (loop5): last error at time 1773967640: ext4_orphan_get:1391: inode 15 [ 209.382694][ T6976] loop5: lost filesystem error report for type 5 error -117 [ 209.386999][ T6976] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.600490][ T29] audit: type=1804 audit(1773967640.375:8): pid=6987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.234" name="/newroot/18/file0/file1" dev="loop5" ino=20 res=1 errno=0 [ 209.665993][ T6686] veth0_vlan: entered promiscuous mode [ 209.780024][ T6686] veth1_vlan: entered promiscuous mode [ 209.871325][ T6374] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.764517][ T6686] veth0_macvtap: entered promiscuous mode [ 210.810771][ T6686] veth1_macvtap: entered promiscuous mode [ 212.015706][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.022176][ T5862] Bluetooth: hci3: command 0x0406 tx timeout [ 212.022531][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 212.028399][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 212.029119][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.241833][ T6686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.466384][ T6305] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.496370][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.513988][ T6305] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.784248][ T6305] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.055770][ T6305] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.599249][ T7001] netlink: 'syz.3.240': attribute type 72 has an invalid length. [ 213.901208][ T7011] loop5: detected capacity change from 0 to 256 [ 213.951300][ T7011] exfat: Bad value for 'umask' [ 214.247739][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 215.304822][ T7020] loop5: detected capacity change from 0 to 128 [ 215.314808][ T7020] EXT4-fs (loop5): Test dummy encryption mode enabled [ 215.340359][ T7020] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.355376][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 215.361404][ T7020] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.733851][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.785325][ T24] usb 4-1: config 0 has no interface number 0 [ 215.825437][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.875365][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.176329][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.986924][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 217.017405][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.042396][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.144111][ T24] usb 4-1: config 0 descriptor?? [ 217.192887][ T24] usb 4-1: can't set config #0, error -71 [ 217.239251][ T24] usb 4-1: USB disconnect, device number 7 [ 217.309181][ T7037] loop3: detected capacity change from 0 to 256 [ 217.346153][ T7037] exfat: Bad value for 'umask' [ 217.689737][ T6374] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.360629][ T6079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.383375][ T6079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.564074][ T7054] netlink: 'syz.3.251': attribute type 72 has an invalid length. [ 220.653480][ T7060] loop6: detected capacity change from 0 to 1024 [ 220.674510][ T7060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.800153][ T7060] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.763913][ T7069] loop3: detected capacity change from 0 to 1024 [ 221.917951][ T7069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 221.930569][ T6686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.006553][ T7069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.505840][ T5843] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.887926][ T7095] loop2: detected capacity change from 0 to 256 [ 223.890265][ T7096] loop6: detected capacity change from 0 to 512 [ 223.926232][ T7095] exfat: Bad value for 'umask' [ 223.945493][ T7096] EXT4-fs: Ignoring removed oldalloc option [ 224.102566][ T7096] EXT4-fs (loop6): 1 truncate cleaned up [ 224.168965][ T7096] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.362730][ T7101] loop2: detected capacity change from 0 to 128 [ 226.981429][ T7101] EXT4-fs (loop2): Test dummy encryption mode enabled [ 227.010753][ T7101] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 227.011149][ T7101] EXT4-fs: failed to create workqueue [ 227.033473][ T7101] EXT4-fs (loop2): mount failed [ 227.166035][ T6686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.435451][ T7106] loop6: detected capacity change from 0 to 1024 [ 227.462897][ T7106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.538642][ T7106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.200474][ T6686] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.363280][ T6009] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 229.554845][ T6009] usb 3-1: Using ep0 maxpacket: 16 [ 229.575600][ T6009] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 229.584916][ T6009] usb 3-1: config 0 has no interface number 0 [ 229.591785][ T6009] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.613675][ T6009] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.626822][ T6009] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 229.646502][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.697669][ T6009] usb 3-1: config 0 descriptor?? [ 231.381424][ T6009] usbhid 3-1:0.1: can't add hid device: -71 [ 231.387485][ T6009] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 231.400193][ T6009] usb 3-1: USB disconnect, device number 5 [ 235.962601][ T7201] loop6: detected capacity change from 0 to 1024 [ 236.010552][ T7204] loop5: detected capacity change from 0 to 128 [ 236.051622][ T7201] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #4: comm syz.6.279: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 236.089834][ T7201] loop6: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 236.092664][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 236.108281][ C1] EXT4-fs (loop6): initial error at time 1773967666: ext4_ext_check_inode:521: inode 4 [ 236.117994][ C1] EXT4-fs (loop6): last error at time 1773967666: ext4_ext_check_inode:521: inode 4 [ 236.131887][ T7201] EXT4-fs error (device loop6): ext4_quota_enable:7195: comm syz.6.279: Bad quota inode: 4, type: 1 [ 236.174311][ T7201] loop6: lost filesystem error report for type 5 error -117 [ 236.185459][ T7201] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 236.280073][ T7201] EXT4-fs (loop6): mount failed [ 236.322150][ T29] audit: type=1800 audit(1773967667.095:9): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.280" name="bus" dev="loop5" ino=1048620 res=0 errno=0 [ 236.804848][ T7218] loop6: detected capacity change from 0 to 1024 [ 236.844463][ T7218] EXT4-fs: Ignoring removed i_version option [ 236.971834][ T7218] EXT4-fs: Mount option(s) incompatible with ext2 [ 238.374846][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.388922][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 238.398770][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 238.415216][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 238.424206][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 240.524487][ T5844] Bluetooth: hci6: command tx timeout [ 240.591623][ T7241] chnl_net:caif_netlink_parms(): no params data found [ 242.602748][ T5844] Bluetooth: hci6: command tx timeout [ 242.623413][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.666599][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.696661][ T7241] bridge_slave_0: entered allmulticast mode [ 242.739859][ T7241] bridge_slave_0: entered promiscuous mode [ 242.888624][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.918779][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.953894][ T7241] bridge_slave_1: entered allmulticast mode [ 242.982579][ T7241] bridge_slave_1: entered promiscuous mode [ 243.192995][ T7241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.255629][ T7241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.457856][ T7241] team0: Port device team_slave_0 added [ 243.506853][ T7241] team0: Port device team_slave_1 added [ 243.686902][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.700292][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.767393][ T7241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.867756][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.896447][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.946571][ T7288] loop6: detected capacity change from 0 to 1024 [ 243.959979][ T7288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.988041][ T7241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.036699][ T7288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.342743][ T5844] Bluetooth: hci6: command tx timeout [ 246.440703][ T7280] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 246.453013][ T7280] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 246.461769][ T7280] CPU: 0 UID: 0 PID: 7280 Comm: syz.2.295 Not tainted syzkaller #0 PREEMPT(full) [ 246.471427][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.482639][ T7280] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 246.488744][ T7280] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 246.508792][ T7280] RSP: 0018:ffffc9000571f9a0 EFLAGS: 00010006 [ 246.515058][ T7280] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 246.523237][ T7280] RDX: 1ffff92000ae3f40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 246.531346][ T7280] RBP: ffffc9000571faa0 R08: 0000000000000003 R09: 0000000000000004 [ 246.539333][ T7280] R10: dffffc0000000000 R11: fffff52000ae3f50 R12: 0000000000000000 [ 246.547319][ T7280] R13: ffff8880357ecdd0 R14: 0000000000000018 R15: ffffc9000571fc20 [ 246.556006][ T7280] FS: 00005555655ae500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 246.565089][ T7280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.571785][ T7280] CR2: 00007f51c39e9e80 CR3: 00000000564c0000 CR4: 00000000003526f0 [ 246.579962][ T7280] Call Trace: [ 246.583281][ T7280] [ 246.586332][ T7280] ? __lock_acquire+0x6b5/0x2cf0 [ 246.591299][ T7280] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 246.596781][ T7280] ? do_raw_spin_lock+0x12b/0x2f0 [ 246.601829][ T7280] rwsem_del_wake_waiter+0x25d/0x2e0 [ 246.607687][ T7280] rwsem_down_write_slowpath+0xa6f/0x1080 [ 246.613779][ T7280] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 246.619714][ T7280] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 246.626038][ T7280] ? futex_wake+0x4ac/0x580 [ 246.630759][ T7280] ? __pfx_futex_wait+0x10/0x10 [ 246.636547][ T7280] ? vm_mmap_pgoff+0x234/0x4f0 [ 246.641623][ T7280] down_write_killable+0x1eb/0x240 [ 246.647051][ T7280] ? __pfx_down_write_killable+0x10/0x10 [ 246.652828][ T7280] ? apparmor_mmap_file+0x197/0x3e0 [ 246.658055][ T7280] ? security_mmap_file+0x4df/0xa20 [ 246.663633][ T7280] vm_mmap_pgoff+0x234/0x4f0 [ 246.668602][ T7280] ? __se_sys_futex+0x3a8/0x450 [ 246.673839][ T7280] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 246.679054][ T7280] ? __pfx___se_sys_futex+0x10/0x10 [ 246.684445][ T7280] ? rcu_is_watching+0x15/0xb0 [ 246.689923][ T7280] ? ksys_mmap_pgoff+0xf3/0x760 [ 246.694799][ T7280] ? __x64_sys_mmap+0x7f/0x140 [ 246.699585][ T7280] do_syscall_64+0x14d/0xf80 [ 246.704193][ T7280] ? trace_irq_disable+0x3b/0x150 [ 246.709322][ T7280] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.715399][ T7280] ? clear_bhb_loop+0x40/0x90 [ 246.720089][ T7280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.725995][ T7280] RIP: 0033:0x7f09a739c502 [ 246.730436][ T7280] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 246.750056][ T7280] RSP: 002b:00007ffdb330d558 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 246.758529][ T7280] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f09a739c502 [ 246.766521][ T7280] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 246.774511][ T7280] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 246.782500][ T7280] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffdb330d6c0 [ 246.790480][ T7280] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 246.798475][ T7280] [ 246.801593][ T7280] Modules linked in: [ 246.805520][ T7280] ---[ end trace 0000000000000000 ]--- [ 246.810996][ T7280] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 246.816572][ T7280] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 246.836209][ T7280] RSP: 0018:ffffc9000571f9a0 EFLAGS: 00010006 [ 246.842315][ T7280] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 246.850312][ T7280] RDX: 1ffff92000ae3f40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 246.858314][ T7280] RBP: ffffc9000571faa0 R08: 0000000000000003 R09: 0000000000000004 [ 246.866310][ T7280] R10: dffffc0000000000 R11: fffff52000ae3f50 R12: 0000000000000000 [ 246.874300][ T7280] R13: ffff8880357ecdd0 R14: 0000000000000018 R15: ffffc9000571fc20 [ 246.882371][ T7280] FS: 00005555655ae500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 246.891400][ T7280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.897995][ T7280] CR2: 00007f51c39e9e80 CR3: 00000000564c0000 CR4: 00000000003526f0 [ 246.905983][ T7280] Kernel panic - not syncing: Fatal exception [ 246.912379][ T7280] Kernel Offset: disabled [ 246.916701][ T7280] Rebooting in 86400 seconds..