last executing test programs: 8.825408342s ago: executing program 3 (id=255): getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f0000002d40)=[{&(0x7f00000008c0)=""/149, 0x95}], 0x1, 0x57, 0x0) 7.572624282s ago: executing program 3 (id=261): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsmount(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@random="d93f47151094", @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x4, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x32, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 6.603815005s ago: executing program 3 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) sendto$inet6(r3, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="12011001d31ad240f0031d5842bb0102030109022d0005000000000904c50003ff01070009050502080000030109050c"], 0x0) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="010000000000000000000a000000800004"], 0x94}}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x3, 0x5}}, './file0\x00'}) 4.959080655s ago: executing program 1 (id=270): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="400006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000200)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.788751218s ago: executing program 4 (id=272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1a8, &(0x7f0000000280)=ANY=[], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x57d2c0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000324, 0x0) syz_open_procfs$userns(r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x80) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000100)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$eJzs3c9vFFUcAPDvTH/Sqi3EqHiQJsZAorS0gCHGRLgTgj9uniotBFkooTVaJLEkeDExXjyYePIg/hdK4tWDVw9ePBkSYgwHMUTWzO5s2W53+3u7y+7nkwz73sx23pvSb9+b1/dmA+haY9k/acT+iLiaRIxUHeuN/OBY+X33/75xLtuSKBbf/SuJG58lS9XnSvLX4fyL/xuJ5Nc0Yl/P6nLnF69fmi4UZq/l+YmFy1cn5hevH754efrC7IXZK1OvT504fuz4ickj27q+6qJP3/rw45Evzrz//bcPk8kffj+TxMl4lL8hu67arx3YVsnZ92wsimUPqvdn39cT2zx3u/hnpPJz8lhSu4O2dT7/eXwmIp6Pkeip+t8cic/fbmnlgKYqJlFpo4Cuk2wp/gd3viLALqv0Ayr39vXug1dLm9wrAXbDvVPlAYBy7PdFRCX+e8tjgzEY2d6h+8mKcZ4kIrY3MleWlfHLz2duZVs0GIcDmmPpZmWUu7b9T0qxORqDpdzQ/XRF/KdVW7b/nS2WP1aTF/+we5ZuRsQLefvfH5uK/7Gq+P9gi+WLfwAAAAAAANg5d05FxGv15v+ly/N/+uvM/xmOiJM7UP76f/9L7+aJZAeKA6rcOxXxZt35v8tzfEd78tzTpfkAfcn5i4XZI/mawUPRN5Dla5f4plWvh7/c902j8qvn/2VbVn5lLmB+hru9NQtxZ6YXpnfi2qHb3bsZ8WJp/u+BfM/K+T9Z+5/Uaf+zuL66wTL2vXL7bKNj68c/0CzF7yIO1m3/H3e3k7WfzzFR6g9MVHoFq7306Vc/Nipf/EPrZO3/0NrxP5BUP69nfnPn74+Io4u9xUbHt9r/70/e66mcP/PJ9MLCtcmI/uT06v1Tm6szdKpKPFTiJYv/Qy+vPf633P+visM9EbG0wTKfezT8R6Nj2n9onSz+Z9Zu/0dXtv+bT0zdHv2pUflnN9T+Hyu16YfyPcb/oNrq53FsNEBbUl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeMKlEfFUJOn4cjpNx8cjhiPi2RhKC3PzC6+en/voykx2rPT5/2nlk35Hyvkky0+W0o/zUzX5oxGxNyK+7tlTyo+fmyvMtPriAQAAAAAAAAAAAAAAAAAAoE0Ml9b8Fwdq1/9n/uxpde2ApuvNX8U7dJ/edd/xsFhWu7840Kw6Abtj/fgHOtXG47+vqfUAdl/j+H/wsH6/H+gU+v/QvbYY//5cAB1A+w/daoNjeoPNrgfQCtp/AAAAAADoKHsP3PktiYilN/aUtkx/fsxkf+hsaasrALSMObzQvXrnWl0DoFXc4wPJcurfuov9G8/+T5pTIQAAAAAAAAAAAABglYP7rf+HbrX2+n9z+6GTrbH+v17we1wAdJDGH/2h7YdO5x4fWK+1t/4fAAAAAAAAAAAAANrA4PVL04XC7LX5xScv8VZ7VGNziaXptqjGjiYeNefMfRHRHhe424nKIzhaWI0W/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACW/R8AAP//nqEvTw==") 4.204445397s ago: executing program 1 (id=274): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.161465664s ago: executing program 1 (id=275): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x2020}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 3.921182943s ago: executing program 4 (id=276): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f00000006c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000006,umask=00000000000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000005,iocharset=iso8859-3,namecase=1,fmask=00000000000000000000406,fmask=00000000000000000000005,fmask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharsjt=iso8859-3,\x00'], 0x1, 0x1524, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x2000, 0x1000000}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 3.862088511s ago: executing program 0 (id=277): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000000)="7f", 0x1, 0x24fed0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 3.733894924s ago: executing program 0 (id=279): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000380)={0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="200abc000000bc0c7d03033d25c6f29218b0125d99967a800711d55ab5bf2bb156689181266bcbd1fbdadeb1d520fa818272bf024e37793a2b27314573a7b7be09dffb1501074cedd0a10f809ba241a2f19e821eb926049a59a043b77eeccf8582f3bc64d32760f9bb8935995c1987466c249eeb401a49ec7e583b7ce9760aa6adebf0d60e9320514b18331304985bd84eb089603b8821877931b7b96fbc6b469d30859918d24e43b842db6a7b392e3e7e29db0000000000000000000000000000009c07c6b98776d217f179c2e8312002d5ea04878aeaaf350fc1526652d4b495"], &(0x7f00000007c0)={0x0, 0x3, 0xbb, @string={0xbb, 0x3, "e1aafc16a0e15552eea91988cb741129fae5606e615934dbaa108019e235c0dd649f34b481ec9aa5b3fa80121b8380ddb72f852f4b7839d436dd49b099472486af1bf5bcc4d58dec3b8f83468f11edfa12950b33e30b6b3b61738ea41de71bd913af6106000a433e0d2cb921aeb8c85393a3b04e5ff3809e6e0d8b0d4f14d8889f2de3c4787bb74dd3f0f67c995755d0b66927be6485fb85002eff86d2592cf09eacc294d1fbc0d25e22d371bfad86a1b614bb1e153f588c98"}}, &(0x7f0000000780)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x6, "030d446c"}, @main=@item_012={0x1, 0x0, 0x9, "c5"}, @main=@item_4={0x3, 0x0, 0x16, "cddddf2c"}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6e9a, 0x0, 0x1, {0x22, 0x15c}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000003c0)={0x0, 0x8, 0x96, "f9665c33720a92388eee2348e330437a5500c50ae34548fc4a1eb14acd8d464af02212c4cd2d8caf983b503172e3fa858d2efe816512a1246984f17618cfa45759e880e87b54dcd6c6221b93376cacd4bf301fd5226c3abda49d36b6552068a60d88a5782581f90cd3391cadd141762cbdbcff564d3260f63231bec3bba016d4c9c3c54d80bf29b14497f30c3ab2f55284f78ce99214"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x1, 0xdd, "2aef135c6223bf36f845a8d63187885cd3e7da32ee068046d9f3ae2526ceb6fcb75918c490fc5c98e8ef8eb284b220cc0bac8c9414fbbfb30b2c2e92fadb8f27af9d987eedae422d438b90e213112ba81659702ed652da640be5af46a4ea29f47fd07d6bcd10d00316663249a3ed50476af468ddab9b8a9eabcff43756161f0bb6caf4afb633a63385cf6453bda9e31e5e45c69d283df22b19c042dfa78cf287c4166324eba0d5021ae5592d477cdc556048107fea43291ed05d329f67d8e13233bb03b53eacae0c110be0945763f137f94cedc5ddce13ee5ea66270ad"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0x3}}) r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000680)='net/ip6_tables_names\x00') ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000700)={{r0}, 0x2, &(0x7f00000006c0)=[0x1, 0x8], 0x7, 0x1}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iochirset', &(0x7f00000000c0)='iot', 0x0) read(r0, &(0x7f0000000180)=""/243, 0xf3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f0000000400), &(0x7f0000000440)=0x40) 3.439915962s ago: executing program 3 (id=281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 3.063580514s ago: executing program 1 (id=282): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000280)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)='A', 0x1}], 0x1}, 0x0) 3.06340697s ago: executing program 1 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$pptp(0x18, 0x1, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) 3.020707588s ago: executing program 4 (id=284): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='THAWED\x00', 0x7) 2.586075245s ago: executing program 2 (id=285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) close(r0) 2.399508698s ago: executing program 4 (id=286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x1a8, &(0x7f0000000280)=ANY=[], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x57d2c0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000324, 0x0) syz_open_procfs$userns(r2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x80) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1800011, &(0x7f0000000100)={[{@nombcache}, {@sysvgroups}, {@norecovery}, {@abort}, {@nombcache}]}, 0x28, 0x5fb, &(0x7f00000004c0)="$eJzs3c9vFFUcAPDvTH/Sqi3EqHiQJsZAorS0gCHGRLgTgj9uniotBFkooTVaJLEkeDExXjyYePIg/hdK4tWDVw9ePBkSYgwHMUTWzO5s2W53+3u7y+7nkwz73sx23pvSb9+b1/dmA+haY9k/acT+iLiaRIxUHeuN/OBY+X33/75xLtuSKBbf/SuJG58lS9XnSvLX4fyL/xuJ5Nc0Yl/P6nLnF69fmi4UZq/l+YmFy1cn5hevH754efrC7IXZK1OvT504fuz4ickj27q+6qJP3/rw45Evzrz//bcPk8kffj+TxMl4lL8hu67arx3YVsnZ92wsimUPqvdn39cT2zx3u/hnpPJz8lhSu4O2dT7/eXwmIp6Pkeip+t8cic/fbmnlgKYqJlFpo4Cuk2wp/gd3viLALqv0Ayr39vXug1dLm9wrAXbDvVPlAYBy7PdFRCX+e8tjgzEY2d6h+8mKcZ4kIrY3MleWlfHLz2duZVs0GIcDmmPpZmWUu7b9T0qxORqDpdzQ/XRF/KdVW7b/nS2WP1aTF/+we5ZuRsQLefvfH5uK/7Gq+P9gi+WLfwAAAAAAANg5d05FxGv15v+ly/N/+uvM/xmOiJM7UP76f/9L7+aJZAeKA6rcOxXxZt35v8tzfEd78tzTpfkAfcn5i4XZI/mawUPRN5Dla5f4plWvh7/c902j8qvn/2VbVn5lLmB+hru9NQtxZ6YXpnfi2qHb3bsZ8WJp/u+BfM/K+T9Z+5/Uaf+zuL66wTL2vXL7bKNj68c/0CzF7yIO1m3/H3e3k7WfzzFR6g9MVHoFq7306Vc/Nipf/EPrZO3/0NrxP5BUP69nfnPn74+Io4u9xUbHt9r/70/e66mcP/PJ9MLCtcmI/uT06v1Tm6szdKpKPFTiJYv/Qy+vPf633P+visM9EbG0wTKfezT8R6Nj2n9onSz+Z9Zu/0dXtv+bT0zdHv2pUflnN9T+Hyu16YfyPcb/oNrq53FsNEBbUl0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeMKlEfFUJOn4cjpNx8cjhiPi2RhKC3PzC6+en/voykx2rPT5/2nlk35Hyvkky0+W0o/zUzX5oxGxNyK+7tlTyo+fmyvMtPriAQAAAAAAAAAAAAAAAAAAoE0Ml9b8Fwdq1/9n/uxpde2ApuvNX8U7dJ/edd/xsFhWu7840Kw6Abtj/fgHOtXG47+vqfUAdl/j+H/wsH6/H+gU+v/QvbYY//5cAB1A+w/daoNjeoPNrgfQCtp/AAAAAADoKHsP3PktiYilN/aUtkx/fsxkf+hsaasrALSMObzQvXrnWl0DoFXc4wPJcurfuov9G8/+T5pTIQAAAAAAAAAAAABglYP7rf+HbrX2+n9z+6GTrbH+v17we1wAdJDGH/2h7YdO5x4fWK+1t/4fAAAAAAAAAAAAANrA4PVL04XC7LX5xScv8VZ7VGNziaXptqjGjiYeNefMfRHRHhe424nKIzhaWI0W/14CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACW/R8AAP//nqEvTw==") 2.378002725s ago: executing program 3 (id=287): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000002d40)=[{&(0x7f00000008c0)=""/149, 0x95}], 0x1, 0x57, 0x0) 2.329919882s ago: executing program 2 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) 1.800001876s ago: executing program 0 (id=289): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfe, 0x269, &(0x7f0000000200)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000000)="7f", 0x1, 0x24fed0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) 1.74925261s ago: executing program 2 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 1.747746837s ago: executing program 1 (id=291): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x5, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044944, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.730154188s ago: executing program 0 (id=292): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r0, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008018, &(0x7f00000000c0)=ANY=[], 0x5, 0x202, &(0x7f00000002c0)="$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") ioctl(r0, 0x1, &(0x7f0000000080)) 1.674980316s ago: executing program 2 (id=293): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f00000003c0)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@umask={'umask', 0x3d, 0x2396}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5}}, {@errors_remount}, {@discard}]}, 0x5, 0x1531, &(0x7f0000002f80)="$eJzs3AuYjlX3MPC19t43Y5r0NMlh2Huvm4cG2yRJDklySJIkSc4JSZMkCYkhp6QhCTlOksMQksPEpHE+H3JOkleSJCEhyf6uKX3+b/3fq/7f2/t5/++s33Xd1+w1z7PWs+5nzTX34blmvu42vFaT2tUbERH8U/CXLykAEAMAgwHgGgAIAKB8fPn47MfzSEz5516E/bUeTL/SHbArieefs/H8czaef87G88/ZeP45G88/Z+P552w8f8Zysq0zC13LW87dLt3/jwG+/58D8fE/Z+P5/8fw3vf5Hyfx/HM2nn/OxvPP2Xj+ORvPP2fj+ecs9jcxz5+xnOwvuY+c+1Kxf/gc8b/5c4Zf36p/sk7x4Jcy/6o+g/+nvCv0Y8cYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjLIc55y9TAPDr+kr3xRhjjDHGGGOMsb+Oz32lO2CMMcYYY4wxxti/HgIoCQoCyAW5IQbyQCxcBXFwNeSFayAC10I8XAf54HrIDwWgIBSCBCgMRUCDAQsEIRSFYhCF4lACboBEKAmloDQ4KANJcCOUhZugHNwM5eEWqAC3QkWoBJWhCtwGVeF2qAZ3QHW4E2pATagFteEuqIN3Q124B+rBvVAf7oMGcD80hAegETwIjeEhaAIPQ1NoBs2hBbSEVtD6t/nwZ/Kfh17wAvSGPpACfaEfvAj9YQAMhEEwGF6CIfAyDIVXIBWGwXB4FUbAazASXodRMBrGwBswFsbBeJgAE2ESpMGbMBneginwNkyFaTAdZkA6zIRZ8A7MhjkwF96FefAezIcFsBAWQQa8D4thCWTCB7AUPoQsWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFb4CLbBdtgBO2EX7IY98DHshU9gH3wK++Gz/2H+2d/kd0dAQIECFSrMhbkwBmMwFmMxDuMwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBBQsKiWBSjGMUSWAITMRFLYSl06DAJk7As3oTlsByWx/JYAStgRayElbAKVsGqWBWrYTWsfusCAKyBtbAW3oV34d1YF+tiPayH9bE+NsAG2BAbYiNshI2xMTbBJtgUm2JzbI4tsSW2xtbYBttgW2yL7bE9dsAO2BE7YjImYyfshJ2xM3bBLtgVu2I37IbdsQf2wOfxeXwBX8A+WEP0xX7YD/tjfxyIg3AQvoRD8GV8GV/BVByGw/FVfBVfw5F4BkfhaByDY7CqGIfjcQKSmIRpmIaTcTJOwSk4FafhNJyB6TgTZ+EsnI1zcA6+i/PwPXwPF+ACXIQZmIGLcQlmYiYuxbOYhctwOa7AlQC4EtfgWlyD63EDrsdNuAm34Bb8CD/C7bgdd+JO3I278WP8GD/BTzAVmwHAATyAB/EgHsJDeBgP4xE8gkfxKB7DY3gcj+MJPImn8CSextN4Bs/iOTyH5/E8XsBnE75svLvkulQQ2ZRQIpfIJWJEjIgVsSJOxIm8Iq+IiIiIF/Ein8gn8ov8oqAoKBJEgigiiggjjCARiqKiqIiKqCghSohEkShKiVKir3AiSSSJsqKsKCfKifLiFlFB3Coqikqinasiqoiqor2rJu4Q1UV1UUPUFLVEbVFb1BF1RF1RV9QT9UR9UV8oAGgo+uJAfFBkT6aJGIZNxXBsLlqIlqKVeA0fEW3ESGwr2on24jExGkdhR9HGJYsnRScxHjuLp8UEfEZ0FZOwm3hOdBc9RE/xvOgl2rreoo+Yin1FPzED+4sBYqAYJGZjTZE9sVriFZEqhonh4lWxCF8TI8XrYpQYLcaIN8RYMU6MFxPERDFJpIk3xWTxlpgi3hZTxTQxXcwQ6WKmmCXeEbPFHDFXvCvmiffEfLFALBSLRIZ4XywWS0Sm+EAsFR+KLLFMLBcrxEqxSqwWa8RasU6sFxvERrFJbBZbxFbxkdgmtosdYqfYJXaLPeJjsVd8IvaJT8V+8Zk4IP4mDorPxSHxhTgsvhRHxFfiqPhaHBPfiOOijzghTopT4jtxWnwvzoiz4pz4QZwXP4oL4idxUXgBEqWQUioZyFwyt4yReWSsvErGyatlXnmNjMhrZby8TuaT18v8soAsKAvJBFlYFpFaGmklyVAWlcVkVBaXJeQNMlGWlKVkaelkGZkkb5Rl5U2ynLxZlpe3yAryVllRVpKVZRV5m6wqb5fV5B2yurxT1pA1ZS1ZW94l68i7ZV15j6wn75X15X2ygbxfNpQPyEbyQdlYPiSbyIdlU9lMNpctZEvZSraWj8g28lHZVraT7eVjsoN8XHaUT8hk+aTsJJ+SneXTsot8RnaVz8pu8jnZXfaQPeVP8qL0srfsI1NkX9lPvij7y+xj4SA5WL4kh8iX5VD5ikyVw+Rw+aocIV+TI+XrcpQcLcfIN+RYOU6OlxPkRDlJpsk35WT5lpwi35ZT5TQ5Xc6Q6XKmHHip0tw/kf/Wr/kefzkky5lyaEqqHJayRW6VH8ltcrvcIXfKXXK33CP3yL1yr9wn98n9cr88IA/Ig/KgPCQPycPysDwij8ij8qg8Jo/J4/K4PCFPyh/kd/K0/F6ekWflWfmDPC/PywuX3gNQqISSSqlA5VK5VYzKo2LVVSpOXa3yCgBQ16p4dZ3Kp65X+VUBVVAVUgmqsCqitDLKKlKhKqqKqagqrkqoG1SiKqlKqdLKqTIqSd2oIv9k/t/3J3/tb8X0X94p1Vq1Vm1UG9VWtVXtVXvVQXVQHVVHlaySVSfVSXVWnVUX1UV1VV1VN9VNdVfdVU/VU/VSvVRvBJWiUlQ/9aLqrwaogWqQGqxeUkPUEDVUDVWpKlUNV8PVCDVCjVQj1Sg1So1RY9RYNVaNV+PVRDVRpak0NVlNVlPUFDVVTVXT1XSVrtLVLDVLzVaz1Vw1V81T89R8NV8tVAtVhspQi9Vilaky1VK1VGWpZWqZWqFWqFVqlVqj1qh1ap3aoDaoTWqTylJb1Va1TW1TO9QOtUvtUnvUHrVX7VX71D61X+1XB9QBdVAdVIfUIXVYHVZH1BF1VB1Vx9QxdVwdVyfUCXVKnVKn1Wl1Rp1R59Q5dV6dVxfUBXVRXcw+7QtEIAIVqCBXkCuICWKC2CA2iAvigrxB3iASRIL4ID7IF1wf5A8KBAWDQkFCUDgoEujABDagIAyKBsWCaFA8KBHcECQGJYNSQenABWWCpODGoGxwU1AuuDkoH9wSVAhuDSoGlYLKQZXgtqBqcHtQLbgjqB7cGdQIaga1gtrBXUGd4O6gbnBPUC+4N6gf3Bc0CO4PGgYPBI2CB4PGwUNBk+DhoGnQLGgetAhaBq2C1n9Vfcyu7/2ZAo+63rqPzg19dT/9ou6vB+iBepAerF/SQ/TLeqh+RafqYXp4zKt6hH5Nj9Sv61F6tB6j39Bj9Tg9Xk/QE/Uknabf1JP1W3qKfltP1dP0dD1Dp+uZepZ+R8/Wc/Rc/a6ep9/T8/UCvVAv0hn6fb1YL9GZ+gO9VH+os/QyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1R3qb3q536J16l96t9+iP9V79id6nP9X79Wf6gP6bPqg/14f0F/qw/lIf0V/po/prfUx/o4/rb/UJfVKf0t/p0/p7fUaf1ef0D/q8/lFf0D/pi9pnn9xnH96NMsrkMrlMjIkxsSbWxJk4k9fkNRETMfEm3uQz+Ux+k98UNAVNgkkwRUwRk40MmaKmqImaqClhSphEk2hKmVLGGWeSTJIpa8qacqacKW/KmwqmgqloKprKprK5zdxmbje3mzvMHeZOc6epaWqa2qa2qWPqmLqmrqln6pn6pr5pYBqYhqahaWQamcamsWlimpimpqlpbpqblqalaW1amzamjWlr2pr2pr3pYDqYjqajSTbJppPpZDqbzqaL6WK6mq6mm+lmupvupqfpaXqZXqa36W1STIrpZ/qZ/qa/GWgGmsFmsBlihpihZqhJNalmuBluRpgRZqQZaUaZ0WaMecOMNePMeDPBTDSTTJpJM5PNZDPFTDFTzVQz3Uw36SbdzDKzzGwz28w1c808M8/MN/PNQrPQZJgMs9gsNpkm0yw1S02WyTLLzXKz0qw0q81qs9asNevNerPRbDSbzWaz1Ww128w2s8PsMLvMLrPH7DF7zV6zz+wz+81+c8AcMAfNQRMDh8xhc9gcMUfMUXPUHDPHzHFz3JwwJ8wpc8qcNqfNGXPGnDPnzHnzo7lgfjIXjTcxNo+NtVfZOHu1zWuvsb+NC9pCNsEWtkWstvltgb+LjbU20Za0pWxp62wZm2Rv/F1c0VaylW0Ve5utam+31X4X17F327r2HlvP3mtr27v+Lq5v77MN7MO2oW1mG9kWtrFtZZvYh21T28w2ty1sS9vKdrCP2472CZtsn7Sd7FO/ixfbJXatXWfX2w12r/3EnrM/2KP2a3ve/mh72z52sH3JDrEv26H2FZtqh/0uHmPfsGPtODveTrAT7aTfxdPtDJtuZ9pZ9h072875XZxh37fzbKadbxfYhXbRz3F2T5n2A7vUfmiz7DK73K6wK+0qu9qu+b+9rrCb7Ga7xe6xH9ttdrvdYXfaXXb3z3H2fuyzn9r99jN7xH5lD9rP7SF7zB62X/4cZ+/fMfuNPW6/tSfsSXvKfmdP2+/tGXv25/3P3vfv7E/2ovUWCEmQJEUB5aLcFEN5KJauoji6mvLSNRShaymerqN8dD3lpwJUkApRAhWmIqTJkCWikIpSMYpScSpBN1AilaRSVJoclaEkupHK0k1Ujm6m8nQLVaBbqSJVospUhW6jqnQ7VaM7qDrdSTWoJtWi2nQX1aG7qS7dQ/XoXqpP91EDup8a0gPUiB6kxvQQNaGHqSk1o+bUglpSK2pNj1AbepTaUjtqT49RB3qcOtITlExPUid6ijrT09SFnqGu9Cx1o+eoO/WgnvQ89aIXqDf1oRTqS/3oRepPA2ggDaLB9FINAKCh9Aql0jAaTq/SCHqNRtLrNIpG0xh6g8bSOBpPE2giTaI0epMm01s0hd6mqTSNptMMSqeZNIveodk0h+bSuzSP3qP5tIAW0iLKoPdpMS2hTPqAltKHlEXLaDmtoJW0ilbTGp8bgNbTBtpIm2gzbaGt9BFto+2EtJN20W7aQx/TXvqE9tGntJ8+owOEeJA+p0P0BR2mL+kIfUVH6Ws6Rt/QcfqWTtBJOkXf0Wn6ns7QWTpHP9B5+pEu0E90kTxBiKEIZajCIMwV5g5jwjxhbHhVGBdeHeYNrwkj4bVhfHhdmC+8PswfFggLhoXChLBwWCTUoQltSGEYFg2LhdGweFgivCFMDEuGpcLSoQvLhEnhjWHZ8KawXHhzWD68JawQ3hpWDCuFD99bJbwtrBreHlYL7wirh3eGNcKaYa2wdnhXWCe8O6wb3hPWC+8Ny4X3hQ3C+8OG4QNho/DBsHH4UNgkfDhsGjYLm4ctwpZhq7B1+EjYJnw0bBu2C9uHj4UdwsfDjuETYXL4ZNgpfOoPH08J+4b9whfDF0Pv75ELo4uiGdH3o4ujS6KZ0Q+iS6MfRrOiy6LLoyuiK6Oroquja6Jro+ui66Mbohujm6Kbo1ui3tfODQ6dcNIpF7hcLreLcXlcrLvKxbmrXV53jYu4a128u87lc9e7/K6AK+gKuQRX2BVx2hlnHbnQFXXFXNQVdyXcDS7RlXSlXGnnXBmX5Fq51q61a+MedW1dO9fePeYec4+7x90T7gn3pOvknnKd3dOui3vGdXXPumfdc6676+F6uuddL/eC6+36uBSX4vq5fq6/6+8GuoFusBvshrghbqgb6lJdqhvuhrsRboQb6Ua6UW6UG+PGuLFurBvvxruJfqJLc2luspvsprgpbqqb6qa76S7dpbtZbpab7Wa7uW6um5c4z813891Ct9BluAy32C12mS7TLXVLXZbLcsvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Da3w+1wu9wut8ftcXvdXrfP7XP73X53wB04591Bd8h94Q67L90R95U76r52x9w37rj71p1wJ90p95077b53Z9xZd8794M67H90F95O76LxLi7wZmRx5KzIl8nZkamRaZHpkRiQ9MjMyK/JOZHZkTmRuBGFe5L3I/MiCyMLIokhG5P3I4siSSGbkg8jSyIeRrMiyyPLIisjKyKqI94W3hb6oL+ajvrgv4W/wib6kL+VLe+fL+CR/oy/rb/Ll/M2+vL/FV/C3+oq+kq/sm/nmvoVv6Vv51v4R38Y/6tv6dr69f8x38I/7jv4Jn+yf9J38U76zf9p38c/4rv5Z380/57v7Hr6nf9738i/43r6PT/F9fT//ou/vB/iBfpAf7F/yQ/zLfqh/xaf6YX64f9WP8K/5kf51P8qP9mP8G36sH+fH+wl+op/k0/ybfrJ/y0/xb/upfpqf7mf4dD/Tz/Lv+Nl+jp/r3/Xz/Ht+vl/gF/pFPsO/7xf7JT7Tf+CX+g99ll/ml/sVHmJW+dV+jV/r1/n1foPf6Df5zX6L3+o/8tv8dr/D7/S7/G6/x3/s9/pP/D7/qd/vP/MH/N/8Qf+5P+S/8If9l/6I/8of9V/7Y/4bf9x/60/4k/6U/86f9t/7M/6sP+d/8Of9j/6C/8lf5L9ZY4wxxhj7U+QfPN73v/meuLRl6wcAV28vdPi3NTfm/2U9QCR0iADAk326PXjp042UGjVSUlIuPTdLQlBsAQBELufngsvxMmgPj0MytIOy/21/A0SP83Sp/q/bb+tHbwGI/S85MXA5vlz/pn9Qf9y8P6y/ACCx2OWcPHA5vly/3D+oX6DNH9TP83kaQNv/khMHl+PL9ZPgUXgKkv9ooL848KeexRhjjDHGGGPsP8YAUbnLH13fZl+fJ6jLObnhcvxH1+c/+3PXpIwxxhhjjDHGGPsXeaZHzyceSU5u1+VKLQCu5Kvz4s8scv17tPEftpD/Hm38o8WV/s3EGGOMMcYY+6tdPum/0p0wxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGM51/+Pfyd2pfeRMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//tVgiNQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) 1.655437191s ago: executing program 2 (id=294): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000400000008000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = open(&(0x7f00000021c0)='./file0\x00', 0x28442, 0x182) ftruncate(r1, 0x200002) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0xfffffffffffffc01}, {0x7}, 0x0, 0x6e6bb9, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(0xffffffffffffffff, r2, 0x0, 0x80001d00c0d0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000400)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f000000bc40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRES64=0x0, @ANYRESHEX=r5, @ANYBLOB="ede2aa0940a5e0eb3140c12fcd6d29bf117f570b28657ce5e91501873522ac5cfc6a2d8107"], 0x1, 0x6f4, &(0x7f00000021c0)="$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") mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.64705989s ago: executing program 0 (id=295): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") socket(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES8=r3, @ANYRESHEX=r0], 0x0, 0x3}, 0x94) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, 0x0, 0x0) dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xf, 0x80, 0x10000, 0x6, 0xc6, 0x8001, 0xb28e, 0x46, 0x6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x8000, 0xae, 0x101, 0x2, 0xfff, 0x4d, 0x1000000, 0x1000001, 0x15b}}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) 1.544737329s ago: executing program 4 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000809, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@xino_on}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) 1.495207986s ago: executing program 3 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x404c804) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xe}], 0x1) 27.599224ms ago: executing program 4 (id=298): timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) getpid() fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 27.279589ms ago: executing program 2 (id=299): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 0s ago: executing program 0 (id=300): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x1c}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x3, 0x0, 0x0, 0x0, &(0x7f0000000100)}], 0x1, 0x0) close(0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 23.389653][ T6514] cgroup: Unknown subsys name 'net' [ 23.487263][ T6514] cgroup: Unknown subsys name 'cpuset' [ 23.489509][ T6514] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 23.626026][ T6514] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 24.794546][ T6530] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 24.797979][ T6534] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 24.798356][ T6538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 24.798522][ T6538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 24.798872][ T6538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 24.799077][ T6538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 24.799653][ T6122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 24.800594][ T6534] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 24.801551][ T6534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 24.801815][ T6534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 24.801954][ T6534] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 24.802257][ T6534] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 24.802448][ T6534] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 24.808364][ T6122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 24.811931][ T6122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 24.814175][ T6122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 24.817104][ T6122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 24.820500][ T6530] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 24.823733][ T6530] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 24.826133][ T6530] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 24.844282][ T6530] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 24.853374][ T6530] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 24.854950][ T6530] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 24.870169][ T6530] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 24.874256][ T6530] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 25.002072][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 25.019772][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 25.054522][ T6528] chnl_net:caif_netlink_parms(): no params data found [ 25.074758][ T6535] chnl_net:caif_netlink_parms(): no params data found [ 25.107608][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.109406][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.111015][ T6531] bridge_slave_0: entered allmulticast mode [ 25.112774][ T6531] bridge_slave_0: entered promiscuous mode [ 25.115360][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.116913][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.117037][ T6531] bridge_slave_1: entered allmulticast mode [ 25.117525][ T6531] bridge_slave_1: entered promiscuous mode [ 25.119318][ T6542] chnl_net:caif_netlink_parms(): no params data found [ 25.145555][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.147418][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.149046][ T6527] bridge_slave_0: entered allmulticast mode [ 25.150601][ T6527] bridge_slave_0: entered promiscuous mode [ 25.152585][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.154014][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.155451][ T6527] bridge_slave_1: entered allmulticast mode [ 25.157238][ T6527] bridge_slave_1: entered promiscuous mode [ 25.162557][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.163842][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.175448][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.175528][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.175581][ T6528] bridge_slave_0: entered allmulticast mode [ 25.178439][ T6528] bridge_slave_0: entered promiscuous mode [ 25.191495][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.191577][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.192052][ T6528] bridge_slave_1: entered allmulticast mode [ 25.192482][ T6528] bridge_slave_1: entered promiscuous mode [ 25.198802][ T6531] team0: Port device team_slave_0 added [ 25.199860][ T6531] team0: Port device team_slave_1 added [ 25.203463][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.203507][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.203599][ T6535] bridge_slave_0: entered allmulticast mode [ 25.204069][ T6535] bridge_slave_0: entered promiscuous mode [ 25.204701][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.204734][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.204815][ T6535] bridge_slave_1: entered allmulticast mode [ 25.205200][ T6535] bridge_slave_1: entered promiscuous mode [ 25.211633][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.228863][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.233241][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.234859][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.241030][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.242330][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.245621][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.246905][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.248099][ T6542] bridge_slave_0: entered allmulticast mode [ 25.249508][ T6542] bridge_slave_0: entered promiscuous mode [ 25.254824][ T6527] team0: Port device team_slave_0 added [ 25.256600][ T6527] team0: Port device team_slave_1 added [ 25.267106][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.267131][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.267141][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.268438][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.268444][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.268453][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.281776][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.283100][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.284407][ T6542] bridge_slave_1: entered allmulticast mode [ 25.285859][ T6542] bridge_slave_1: entered promiscuous mode [ 25.297386][ T6528] team0: Port device team_slave_0 added [ 25.298228][ T6528] team0: Port device team_slave_1 added [ 25.304071][ T6535] team0: Port device team_slave_0 added [ 25.305273][ T6535] team0: Port device team_slave_1 added [ 25.306030][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.306041][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.306054][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.320740][ T6542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.321057][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.321068][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.321079][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.330309][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.330329][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.330342][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.337963][ T6542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.342773][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.343161][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.343185][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.362781][ T6531] hsr_slave_0: entered promiscuous mode [ 25.364357][ T6531] hsr_slave_1: entered promiscuous mode [ 25.366202][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.366221][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.366232][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.366809][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.366815][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.366827][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.381827][ T6542] team0: Port device team_slave_0 added [ 25.383066][ T6542] team0: Port device team_slave_1 added [ 25.400984][ T6535] hsr_slave_0: entered promiscuous mode [ 25.401304][ T6535] hsr_slave_1: entered promiscuous mode [ 25.401508][ T6535] debugfs: 'hsr0' already exists in 'hsr' [ 25.401545][ T6535] Cannot create hsr debugfs directory [ 25.410218][ T6528] hsr_slave_0: entered promiscuous mode [ 25.410531][ T6528] hsr_slave_1: entered promiscuous mode [ 25.410728][ T6528] debugfs: 'hsr0' already exists in 'hsr' [ 25.410738][ T6528] Cannot create hsr debugfs directory [ 25.412249][ T6527] hsr_slave_0: entered promiscuous mode [ 25.412540][ T6527] hsr_slave_1: entered promiscuous mode [ 25.412720][ T6527] debugfs: 'hsr0' already exists in 'hsr' [ 25.412729][ T6527] Cannot create hsr debugfs directory [ 25.422386][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.422412][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.422438][ T6542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.423087][ T6542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.423095][ T6542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.423110][ T6542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.473113][ T6542] hsr_slave_0: entered promiscuous mode [ 25.473412][ T6542] hsr_slave_1: entered promiscuous mode [ 25.473586][ T6542] debugfs: 'hsr0' already exists in 'hsr' [ 25.473596][ T6542] Cannot create hsr debugfs directory [ 25.591584][ T6528] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.595267][ T6528] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.603699][ T6528] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.606522][ T6528] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.618459][ T6535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.622739][ T6535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.625327][ T6535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.628037][ T6535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.649563][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.649612][ T6528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.649797][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.649835][ T6528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.657783][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.657832][ T6535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.657910][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.657938][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.663622][ T6531] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.668075][ T6531] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.670729][ T6531] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.679432][ T6531] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.711547][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.713141][ T6527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.721031][ T6527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.723583][ T6527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.732871][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.734306][ T6527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.741935][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.741986][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.742074][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.742105][ T6531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.751285][ T662] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.752737][ T662] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.754852][ T662] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.758773][ T662] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.760642][ T662] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.762639][ T662] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.772648][ T6528] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.774956][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.775008][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.789088][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.789129][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.792699][ T6542] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.799217][ T6542] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.801523][ T6542] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.812114][ T6542] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.814874][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.820209][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.824339][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.824387][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.834485][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.834535][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.860287][ T6531] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.862729][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.863016][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.878848][ T662] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.878882][ T662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.889822][ T6535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.889866][ T6535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.894445][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.900852][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.905336][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.905375][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.905683][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.905699][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.919984][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.965236][ T6542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.980327][ T6531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.982185][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.004058][ T6542] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.004812][ T6528] veth0_vlan: entered promiscuous mode [ 26.008472][ T6528] veth1_vlan: entered promiscuous mode [ 26.018878][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.018924][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.023305][ T1982] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.023368][ T1982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.032244][ T6542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.034034][ T6542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.056565][ T6528] veth0_macvtap: entered promiscuous mode [ 26.058039][ T6528] veth1_macvtap: entered promiscuous mode [ 26.084221][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.085214][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.095331][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.108276][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.115370][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.115627][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.124408][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.124474][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.134521][ T6531] veth0_vlan: entered promiscuous mode [ 26.151601][ T6535] veth0_vlan: entered promiscuous mode [ 26.160845][ T6531] veth1_vlan: entered promiscuous mode [ 26.186716][ T6535] veth1_vlan: entered promiscuous mode [ 26.191072][ T6542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.194870][ T6527] veth0_vlan: entered promiscuous mode [ 26.199836][ T4094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.199869][ T4094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.211178][ T6527] veth1_vlan: entered promiscuous mode [ 26.221107][ T6531] veth0_macvtap: entered promiscuous mode [ 26.225370][ T6535] veth0_macvtap: entered promiscuous mode [ 26.229594][ T6531] veth1_macvtap: entered promiscuous mode [ 26.231472][ T6527] veth0_macvtap: entered promiscuous mode [ 26.234663][ T4094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.234697][ T6527] veth1_macvtap: entered promiscuous mode [ 26.234701][ T4094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.239887][ T6535] veth1_macvtap: entered promiscuous mode [ 26.243119][ T6542] veth0_vlan: entered promiscuous mode [ 26.244598][ T6542] veth1_vlan: entered promiscuous mode [ 26.254846][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.260057][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.272681][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.275715][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.283992][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.289492][ T6528] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.291867][ T662] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.291905][ T662] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.291921][ T662] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.291942][ T662] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.292604][ T6542] veth0_macvtap: entered promiscuous mode [ 26.293615][ T6542] veth1_macvtap: entered promiscuous mode [ 26.309958][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.310011][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.310044][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.310059][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.311342][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.312880][ T6542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.336861][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.338506][ T1982] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.338562][ T1982] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.338585][ T1982] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.338600][ T1982] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.359016][ T1982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.359047][ T1982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.374732][ T1982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.374772][ T1982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.405183][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.405244][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.405278][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.405302][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.451849][ T6640] binder: 6639:6640 tried to acquire reference to desc 0, got 1 instead [ 26.453829][ T6640] binder: 6639:6640 got reply transaction with bad transaction stack, transaction 5 has target 6639:0 [ 26.456477][ T6640] binder: 6639:6640 transaction reply to 0:0 failed 6/29201/-71, code 0 size 0-0 line 3069 [ 26.458921][ T6532] binder: release 6639:6640 transaction 5 out, still active [ 26.458950][ T6532] binder: undelivered TRANSACTION_COMPLETE [ 26.458965][ T6532] binder: undelivered TRANSACTION_ERROR: 29201 [ 26.462985][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.463000][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.570303][ T6643] loop1: detected capacity change from 0 to 1024 [ 26.628428][ T6643] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 26.628619][ T6643] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 26.643748][ T6643] EXT4-fs (loop1): invalid journal inode [ 26.644115][ T6643] EXT4-fs (loop1): can't get journal size [ 26.701824][ T26] binder: send failed reply for transaction 5, target dead [ 26.714368][ T6643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 26.764210][ T1982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.764248][ T1982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.777655][ T1982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.777683][ T1982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.799171][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.799198][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.807397][ T52] Bluetooth: hci3: command tx timeout [ 26.823687][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.823719][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.839244][ T6656] loop4: detected capacity change from 0 to 128 [ 26.863421][ T6656] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4627: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 26.863477][ T6656] EXT4-fs (loop4): Encoding requested by superblock is unknown [ 26.874241][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 26.875723][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 26.886171][ T52] Bluetooth: hci4: command tx timeout [ 26.886438][ T52] Bluetooth: hci1: command tx timeout [ 26.886487][ T6530] Bluetooth: hci2: command tx timeout [ 26.886868][ T6530] Bluetooth: hci0: command tx timeout [ 26.918639][ T6659] syz_tun: entered allmulticast mode [ 26.929960][ T6661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.931838][ T6661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.351775][ T6665] loop4: detected capacity change from 0 to 512 [ 27.576494][ T6528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.580717][ T6665] EXT4-fs (loop4): bad geometry: block count 65664 exceeds size of device (128 blocks) [ 27.748666][ T6676] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.757843][ T6674] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'. [ 27.770937][ T6676] Zero length message leads to an empty skb [ 27.846372][ T6674] 8021q: VLANs not supported on ip6tnl0 [ 27.871507][ T6662] loop4: detected capacity change from 0 to 32768 [ 28.054950][ T6662] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 28.329287][ T6662] XFS (loop4): Ending clean mount [ 28.331357][ T6662] XFS (loop4): Quotacheck needed: Please wait. [ 28.341925][ T6662] XFS (loop4): Quotacheck: Done. [ 28.512993][ T6535] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 29.475908][ T52] Bluetooth: hci3: command tx timeout [ 29.475950][ T52] Bluetooth: hci0: command tx timeout [ 29.475985][ T52] Bluetooth: hci2: command tx timeout [ 29.476006][ T52] Bluetooth: hci1: command tx timeout [ 29.476023][ T52] Bluetooth: hci4: command tx timeout [ 29.620984][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23'. [ 29.623683][ T6721] team0: Device vlan2 is already an upper device of the team interface [ 29.816321][ T6641] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.108732][ T6641] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.108786][ T6641] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 30.108815][ T6641] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.114651][ T6737] loop3: detected capacity change from 0 to 4096 [ 30.117782][ T6641] usb 1-1: config 0 descriptor?? [ 30.121676][ T6737] ntfs3(loop3): Primary boot: invalid bytes per MFT record 0 (0). [ 30.121889][ T6737] ntfs3(loop3): try to read out of volume at offset 0x1ffe00 [ 30.126030][ T6641] pwc: Askey VC010 type 2 USB webcam detected. [ 30.699050][ T6751] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 30.701648][ T6751] afs: Unknown parameter 'dyn ' [ 30.713547][ T6751] loop3: detected capacity change from 0 to 4096 [ 30.764851][ T6751] EXT4-fs (loop3): Test dummy encryption mode enabled [ 30.915120][ T6641] pwc: recv_control_msg error -32 req 02 val 2b00 [ 30.917588][ T6751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.925535][ T6641] pwc: recv_control_msg error -32 req 02 val 2700 [ 30.927430][ T6641] pwc: recv_control_msg error -32 req 02 val 2c00 [ 30.927858][ T6641] pwc: recv_control_msg error -32 req 04 val 1000 [ 30.928206][ T6641] pwc: recv_control_msg error -32 req 04 val 1300 [ 30.928604][ T6641] pwc: recv_control_msg error -32 req 04 val 1400 [ 30.950119][ T6756] tipc: Started in network mode [ 30.951218][ T6756] tipc: Node identity 0211273e8ecf, cluster identity 4711 [ 30.952739][ T6756] tipc: Enabled bearer , priority 0 [ 30.960022][ T6756] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 30.965485][ T6756] tipc: Resetting bearer [ 30.976316][ T6755] tipc: Disabling bearer [ 31.099256][ T6527] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.198204][ T6763] loop3: detected capacity change from 0 to 32768 [ 31.199388][ T6641] pwc: recv_control_msg error -71 req 02 val 2100 [ 31.199720][ T6641] pwc: recv_control_msg error -71 req 04 val 1500 [ 31.199931][ T6641] pwc: recv_control_msg error -71 req 02 val 2500 [ 31.200122][ T6641] pwc: recv_control_msg error -71 req 02 val 2400 [ 31.200308][ T6641] pwc: recv_control_msg error -71 req 02 val 2600 [ 31.200599][ T6641] pwc: recv_control_msg error -71 req 02 val 2900 [ 31.200794][ T6641] pwc: recv_control_msg error -71 req 02 val 2800 [ 31.201010][ T6641] pwc: recv_control_msg error -71 req 04 val 1100 [ 31.201199][ T6641] pwc: recv_control_msg error -71 req 04 val 1200 [ 31.202181][ T6641] pwc: Registered as video11. [ 31.202793][ T6641] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 31.204912][ T6641] usb 1-1: USB disconnect, device number 2 [ 31.229533][ T6767] loop2: detected capacity change from 0 to 512 [ 31.230255][ T6767] EXT4-fs: Ignoring removed bh option [ 31.233568][ T6767] EXT4-fs: Mount option(s) incompatible with ext2 [ 31.306796][ T6763] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 31.306831][ T6763] allowing incompatible features above 0.0: (unknown version) [ 31.306850][ T6763] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 31.306865][ T6763] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 31.307058][ T6763] bcachefs (loop3): initializing new filesystem [ 31.308529][ T6763] bcachefs (loop3): going read-write [ 31.324858][ T6783] 9pnet_fd: Insufficient options for proto=fd [ 31.327684][ T6763] bcachefs (loop3): marking superblocks [ 31.331340][ T6763] bcachefs (loop3): initializing freespace [ 31.332281][ T6763] bcachefs (loop3): done initializing freespace [ 31.332906][ T6763] bcachefs (loop3): reading snapshots table [ 31.332930][ T6763] bcachefs (loop3): reading snapshots done [ 31.341265][ T6763] bcachefs (loop3): done starting filesystem [ 31.723346][ T6534] Bluetooth: hci1: command tx timeout [ 31.723391][ T6534] Bluetooth: hci2: command tx timeout [ 31.723419][ T6534] Bluetooth: hci0: command tx timeout [ 31.723436][ T6534] Bluetooth: hci3: command tx timeout [ 31.734449][ T52] Bluetooth: hci4: command tx timeout [ 31.742427][ T6793] syz.2.44 uses obsolete (PF_INET,SOCK_PACKET) [ 31.749024][ T6797] trusted_key: syz.4.43 sent an empty control message without MSG_MORE. [ 31.855926][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.856605][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.210941][ T6808] tipc: Started in network mode [ 32.210980][ T6808] tipc: Node identity 7e89adde4b9a, cluster identity 4711 [ 32.211043][ T6808] tipc: Enabled bearer , priority 0 [ 32.221080][ T6808] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 32.234381][ T6808] tipc: Resetting bearer [ 32.251502][ T6807] tipc: Disabling bearer [ 32.372621][ T6527] bcachefs (loop3): shutting down [ 32.372671][ T6527] bcachefs (loop3): going read-only [ 32.372803][ T6527] bcachefs (loop3): finished waiting for writes to stop [ 32.447242][ T6527] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 32.758325][ T6817] loop1: detected capacity change from 0 to 64 [ 32.758735][ T6817] hfs: Bad value for 'uid' [ 32.762127][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 32.762154][ T6817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 32.762167][ T6817] netlink: 50 bytes leftover after parsing attributes in process `syz.1.50'. [ 33.003265][ T6527] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 33.008323][ T6527] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 33.008828][ T6527] bcachefs (loop3): marking filesystem clean [ 33.036580][ T6527] bcachefs (loop3): shutdown complete [ 33.184783][ T6819] overlay: filesystem on ./file0 not supported as upperdir [ 33.293842][ T6825] loop1: detected capacity change from 0 to 2048 [ 33.321556][ T6826] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 33.345518][ T6826] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 33.349231][ T6826] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 33.353650][ T6826] Remounting filesystem read-only [ 33.417716][ T6823] loop2: detected capacity change from 0 to 32768 [ 33.420637][ T6823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.54 (6823) [ 33.430445][ T6823] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 33.430546][ T6823] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 33.508402][ T6823] BTRFS info (device loop2): enabling ssd optimizations [ 33.508445][ T6823] BTRFS info (device loop2): enabling free space tree [ 33.563649][ T6847] capability: warning: `syz.1.58' uses deprecated v2 capabilities in a way that may be insecure [ 33.582539][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.582738][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.703097][ T6854] loop1: detected capacity change from 0 to 512 [ 33.703609][ T6854] EXT4-fs: Ignoring removed oldalloc option [ 33.713301][ T6854] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.728218][ T6854] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c02c, mo2=0102] [ 33.728289][ T6854] System zones: 0-2, 18-18, 34-34 [ 33.728665][ T6854] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.59: iget: bad i_size value: 360287970189639680 [ 33.729658][ T6854] EXT4-fs (loop1): Remounting filesystem read-only [ 33.730157][ T6854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.766304][ T52] Bluetooth: hci3: command tx timeout [ 33.766438][ T52] Bluetooth: hci4: command tx timeout [ 33.766465][ T52] Bluetooth: hci0: command tx timeout [ 33.766481][ T52] Bluetooth: hci1: command tx timeout [ 33.766496][ T52] Bluetooth: hci2: command tx timeout [ 33.820034][ T6528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.859176][ T6858] tipc: Enabled bearer , priority 0 [ 33.861094][ T6858] syzkaller0: entered promiscuous mode [ 33.862601][ T6858] syzkaller0: entered allmulticast mode [ 33.866260][ T6858] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 33.872635][ T6857] tipc: Resetting bearer [ 33.883217][ T6857] tipc: Disabling bearer [ 34.109111][ T6531] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 34.888621][ T6872] loop4: detected capacity change from 0 to 32768 [ 35.105486][ T6886] loop1: detected capacity change from 0 to 128 [ 35.136844][ T6882] loop0: detected capacity change from 0 to 32768 [ 35.137307][ T6882] btrfs: Deprecated parameter 'usebackuproot' [ 35.137393][ T6882] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 35.153239][ T6882] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.65 (6882) [ 35.249503][ T6886] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.320822][ T6528] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.383846][ T6872] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 35.424058][ T6872] allowing incompatible features above 0.0: (unknown version) [ 35.498991][ T6872] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 35.501771][ T6872] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 35.503327][ T6872] bcachefs (loop4): initializing new filesystem [ 35.507284][ T6872] bcachefs (loop4): going read-write [ 35.790710][ T6882] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 35.790772][ T6882] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 35.817210][ T6872] bcachefs (loop4): marking superblocks [ 35.839785][ T6872] bcachefs (loop4): initializing freespace [ 35.843018][ T6872] bcachefs (loop4): done initializing freespace [ 35.846223][ T6872] bcachefs (loop4): reading snapshots table [ 35.846285][ T6872] bcachefs (loop4): reading snapshots done [ 35.862969][ T6872] bcachefs (loop4): done starting filesystem [ 36.176531][ T6882] BTRFS info (device loop0): rebuilding free space tree [ 36.204316][ T6882] BTRFS info (device loop0): allowing degraded mounts [ 36.204350][ T6882] BTRFS info (device loop0): enabling ssd optimizations [ 36.204374][ T6882] BTRFS info (device loop0): turning on flush-on-commit [ 36.204380][ T6882] BTRFS info (device loop0): enabling free space tree [ 36.204386][ T6882] BTRFS info (device loop0): force clearing of disk cache [ 36.204392][ T6882] BTRFS info (device loop0): trying to use backup root at mount time [ 36.204398][ T6882] BTRFS info (device loop0): use zstd compression, level 3 [ 36.232499][ T6535] bcachefs (loop4): shutting down [ 36.232552][ T6535] bcachefs (loop4): going read-only [ 36.232584][ T6535] bcachefs (loop4): finished waiting for writes to stop [ 36.290143][ T6535] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 36.297843][ T10] cfg80211: failed to load regulatory.db [ 36.340809][ T6535] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 36.343449][ T6535] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 36.343896][ T6535] bcachefs (loop4): marking filesystem clean [ 36.381902][ T6882] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 36.382349][ T6535] bcachefs (loop4): shutdown complete [ 36.691697][ T6939] loop0: detected capacity change from 0 to 40427 [ 36.692050][ T6939] ======================================================= [ 36.692050][ T6939] WARNING: The mand mount option has been deprecated and [ 36.692050][ T6939] and is ignored by this kernel. Remove the mand [ 36.692050][ T6939] option from the mount to silence this warning. [ 36.692050][ T6939] ======================================================= [ 36.706755][ T6939] F2FS-fs (loop0): build fault injection rate: 690 [ 36.712789][ T6939] F2FS-fs (loop0): invalid crc value [ 36.756713][ T6939] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 36.763577][ T6939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 37.043924][ T6954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.79'. [ 37.319715][ T6959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.321699][ T6959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.474990][ T6961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.476919][ T6961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.083877][ T6971] loop2: detected capacity change from 0 to 24 [ 38.089358][ T6971] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 38.095212][ T6971] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 38.116269][ T6583] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.279159][ T6583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.279189][ T6583] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.279218][ T6583] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 38.279226][ T6583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.283910][ T6583] usb 1-1: config 0 descriptor?? [ 39.062831][ T6995] mmap: syz.3.91 (6995) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.231667][ T6583] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 39.231707][ T6583] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 39.231730][ T6583] hid-steam 0003:28DE:1142.0001: unbalanced collection at end of report description [ 39.231953][ T6583] hid-steam 0003:28DE:1142.0001: steam_probe:parse of hid interface failed [ 39.231984][ T6583] hid-steam 0003:28DE:1142.0001: probe with driver hid-steam failed with error -22 [ 39.525002][ T9] usb 1-1: USB disconnect, device number 3 [ 40.709733][ T7035] tipc: Started in network mode [ 40.709775][ T7035] tipc: Node identity 1e44f56cbace, cluster identity 4711 [ 40.709840][ T7035] tipc: Enabled bearer , priority 0 [ 40.715678][ T7035] syzkaller0: entered promiscuous mode [ 40.715703][ T7035] syzkaller0: entered allmulticast mode [ 40.728437][ T7035] tipc: Resetting bearer [ 40.731992][ T7033] tipc: Resetting bearer [ 40.740504][ T7033] tipc: Disabling bearer [ 41.198828][ T7047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.210413][ T7025] loop1: detected capacity change from 0 to 32768 [ 41.292211][ T7025] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 41.616867][ T7060] loop0: detected capacity change from 0 to 128 [ 41.839632][ T7025] XFS (loop1): Ending clean mount [ 42.265730][ T6528] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 42.364293][ T7081] loop3: detected capacity change from 0 to 256 [ 42.365724][ T7081] exfat: Deprecated parameter 'namecase' [ 42.379080][ T7081] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 42.390942][ T7082] Soft offlining pfn 0x20aa90 at process virtual address 0x20b8c000 [ 42.416203][ T7074] loop2: detected capacity change from 0 to 32768 [ 42.427224][ T7074] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.111 (7074) [ 42.463356][ T7082] Memory failure: 0x20aa90: unhandlable page. [ 42.793235][ T7082] loop1: detected capacity change from 0 to 4096 [ 42.884967][ T7089] loop0: detected capacity change from 0 to 128 [ 42.994342][ T7089] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.015545][ T6542] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.052889][ T7074] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 43.052956][ T7074] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 43.147672][ T7074] BTRFS info (device loop2): enabling ssd optimizations [ 43.148979][ T7074] BTRFS info (device loop2): enabling free space tree [ 43.234780][ T7082] ntfs3(loop1): ino=1a, mi_enum_attr [ 43.234909][ T7082] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 43.418557][ T6531] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 43.459772][ T7121] loop3: detected capacity change from 0 to 8 [ 43.460139][ T7121] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 43.502242][ T6786] udevd[6786]: incorrect cramfs checksum on /dev/loop3 [ 43.532801][ T6786] udevd[6786]: incorrect cramfs checksum on /dev/loop3 [ 43.643957][ T7127] loop3: detected capacity change from 0 to 16 [ 43.671457][ T7127] erofs (device loop3): unsupported i_format 32 of nid 36 [ 43.830244][ T7133] loop1: detected capacity change from 0 to 1764 [ 43.830604][ T7133] iso9660: Bad value for 'sbsector' [ 44.066930][ T7135] loop0: detected capacity change from 0 to 1764 [ 44.120272][ T7135] isofs_fill_super: get root inode failed [ 44.196285][ T7138] loop3: detected capacity change from 0 to 128 [ 44.553280][ T7138] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.670480][ T6527] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.016906][ T7156] loop4: detected capacity change from 0 to 512 [ 45.067723][ T7156] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.067765][ T7156] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.081278][ T7156] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.085049][ T7156] EXT4-fs (loop4): 1 truncate cleaned up [ 45.085509][ T7156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.293481][ T6535] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.341219][ T7169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.343045][ T7169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.735960][ T7176] loop3: detected capacity change from 0 to 128 [ 45.741275][ T7176] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.768582][ T6527] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.897396][ T7191] loop1: detected capacity change from 0 to 128 [ 46.919730][ T7194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.147'. [ 46.929092][ T7191] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.944309][ T7182] loop4: detected capacity change from 0 to 32768 [ 47.010313][ T6528] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.012353][ T7204] loop2: detected capacity change from 0 to 128 [ 47.036205][ T7204] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.112486][ T6531] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.147098][ T7182] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 47.343453][ T6535] (syz-executor,6535,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 47.363609][ T6535] ocfs2: Unmounting device (7,4) on (node local) [ 48.597553][ T7244] loop0: detected capacity change from 0 to 512 [ 48.602000][ T7244] EXT4-fs: Ignoring removed nobh option [ 48.602053][ T7244] ext4: Unknown parameter 'defcontext' [ 48.695236][ T7249] loop2: detected capacity change from 0 to 128 [ 48.702266][ T7249] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.537472][ T6531] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.770667][ T7270] loop4: detected capacity change from 0 to 256 [ 49.772314][ T7270] exfat: Deprecated parameter 'namecase' [ 49.823214][ T7270] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 49.841955][ T7256] loop1: detected capacity change from 0 to 32768 [ 50.380419][ T7256] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 50.413323][ T7256] XFS (loop1): Ending clean mount [ 50.416261][ T7256] XFS (loop1): Quotacheck needed: Please wait. [ 50.432720][ T7256] XFS (loop1): Quotacheck: Done. [ 50.797304][ T7294] loop4: detected capacity change from 0 to 128 [ 50.812773][ T7294] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.833947][ T7299] loop3: detected capacity change from 0 to 1764 [ 50.853858][ T7289] loop2: detected capacity change from 0 to 32768 [ 50.866480][ T7299] ISOFS: unable to read i-node block [ 50.998653][ T7306] loop0: detected capacity change from 0 to 4096 [ 51.010215][ T7306] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.145992][ T6535] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.149275][ T7306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.151787][ T6528] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 51.169106][ T7289] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 51.215349][ T7305] hub 9-0:1.0: USB hub found [ 51.215528][ T7305] hub 9-0:1.0: 8 ports detected [ 51.217248][ T7289] XFS (loop2): Ending clean mount [ 51.425863][ T6531] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 51.703407][ T6542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.081751][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.083983][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.102567][ T7322] loop1: detected capacity change from 0 to 32768 [ 52.359224][ T7322] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.401192][ T7349] loop4: detected capacity change from 0 to 128 [ 52.412816][ T7349] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.422725][ T7322] XFS (loop1): Ending clean mount [ 52.437175][ T6535] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.469752][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.472031][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.473820][ T6528] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 52.601903][ T7360] tipc: Enabled bearer , priority 0 [ 52.604014][ T7359] tipc: Resetting bearer [ 52.687705][ T7361] loop2: detected capacity change from 0 to 128 [ 53.027275][ T7368] loop3: detected capacity change from 0 to 32768 [ 53.052186][ T7366] loop0: detected capacity change from 0 to 32768 [ 53.126950][ T7368] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 53.127009][ T7368] allowing incompatible features above 0.0: (unknown version) [ 53.127024][ T7368] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 53.127036][ T7368] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 53.127057][ T7368] bcachefs (loop3): initializing new filesystem [ 53.128499][ T7368] bcachefs (loop3): going read-write [ 53.156388][ T7368] bcachefs (loop3): marking superblocks [ 53.158151][ T7368] bcachefs (loop3): initializing freespace [ 53.158835][ T7368] bcachefs (loop3): done initializing freespace [ 53.159275][ T7368] bcachefs (loop3): reading snapshots table [ 53.159294][ T7368] bcachefs (loop3): reading snapshots done [ 53.171090][ T7368] bcachefs (loop3): done starting filesystem [ 53.181145][ T7366] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 53.181176][ T7366] allowing incompatible features above 0.0: (unknown version) [ 53.181200][ T7366] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 53.181218][ T7366] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 53.181242][ T7366] bcachefs (loop0): initializing new filesystem [ 53.199525][ T7366] bcachefs (loop0): going read-write [ 53.226445][ T7390] loop4: detected capacity change from 0 to 1024 [ 53.287096][ T7366] bcachefs (loop0): marking superblocks [ 53.293428][ T7366] bcachefs (loop0): initializing freespace [ 53.297763][ T7366] bcachefs (loop0): done initializing freespace [ 53.300321][ T7366] bcachefs (loop0): reading snapshots table [ 53.301525][ T7366] bcachefs (loop0): reading snapshots done [ 53.319201][ T7366] bcachefs (loop0): done starting filesystem [ 53.671527][ T6542] bcachefs (loop0): shutting down [ 53.671554][ T6542] bcachefs (loop0): going read-only [ 53.671581][ T6542] bcachefs (loop0): finished waiting for writes to stop [ 53.698082][ T6542] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 53.716946][ T6590] tipc: Node number set to 890482142 [ 53.718683][ T6542] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 53.725987][ T6542] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 53.726420][ T6542] bcachefs (loop0): marking filesystem clean [ 53.739738][ T6542] bcachefs (loop0): shutdown complete [ 53.823352][ T6527] bcachefs (loop3): shutting down [ 53.823385][ T6527] bcachefs (loop3): going read-only [ 53.823785][ T6527] bcachefs (loop3): finished waiting for writes to stop [ 53.852939][ T6527] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 53.910686][ T6527] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 53.914136][ T6527] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 53.914530][ T6527] bcachefs (loop3): marking filesystem clean [ 53.944533][ T6527] bcachefs (loop3): shutdown complete [ 54.059715][ T7409] loop2: detected capacity change from 0 to 256 [ 54.061886][ T7409] exfat: Deprecated parameter 'namecase' [ 54.070090][ T7409] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 54.180504][ T7411] loop0: detected capacity change from 0 to 1024 [ 54.431218][ T7411] EXT4-fs: Ignoring removed i_version option [ 54.432598][ T7411] EXT4-fs: inline encryption not supported [ 54.434385][ T7411] EXT4-fs (loop0): Test dummy encryption mode enabled [ 54.459940][ T7411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.591138][ T7359] tipc: Disabling bearer [ 54.766427][ T7423] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.766468][ T7423] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 55.524486][ T6542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.891493][ T7431] loop0: detected capacity change from 0 to 32768 [ 55.903669][ T6534] Bluetooth: hci1: connection err: -111 [ 56.172507][ T7431] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 56.172541][ T7431] allowing incompatible features above 0.0: (unknown version) [ 56.172559][ T7431] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 56.172574][ T7431] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 56.172596][ T7431] bcachefs (loop0): initializing new filesystem [ 56.173939][ T7431] bcachefs (loop0): going read-write [ 56.217658][ T7431] bcachefs (loop0): marking superblocks [ 56.219426][ T7431] bcachefs (loop0): initializing freespace [ 56.220096][ T7431] bcachefs (loop0): done initializing freespace [ 56.220543][ T7431] bcachefs (loop0): reading snapshots table [ 56.220577][ T7431] bcachefs (loop0): reading snapshots done [ 56.252863][ T7431] bcachefs (loop0): done starting filesystem [ 56.636110][ T7462] loop3: detected capacity change from 0 to 128 [ 56.652762][ T7462] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.680871][ T6542] bcachefs (loop0): shutting down [ 56.680896][ T6542] bcachefs (loop0): going read-only [ 56.680929][ T6542] bcachefs (loop0): finished waiting for writes to stop [ 56.700876][ T6542] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 56.830182][ T6542] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 56.835684][ T6542] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 56.836213][ T6542] bcachefs (loop0): marking filesystem clean [ 56.854642][ T6542] bcachefs (loop0): shutdown complete [ 56.859108][ T6527] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.947092][ T7470] random: crng reseeded on system resumption [ 57.853128][ T7475] netlink: 'syz.2.222': attribute type 2 has an invalid length. [ 58.144872][ T7480] Soft offlining pfn 0x20aa90 at process virtual address 0x20b8c000 [ 58.164215][ T7480] Memory failure: 0x20aa90: unhandlable page. [ 58.172923][ T7480] netlink: 'syz.3.221': attribute type 10 has an invalid length. [ 58.173650][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.174638][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.203654][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.203718][ T7480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.203814][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.203843][ T7480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.211475][ T7480] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 58.253010][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 58.253088][ T7480] bridge_slave_1: left allmulticast mode [ 58.253101][ T7480] bridge_slave_1: left promiscuous mode [ 58.253205][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.258138][ T7480] bridge_slave_0: left allmulticast mode [ 58.258164][ T7480] bridge_slave_0: left promiscuous mode [ 58.258244][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.275127][ T7480] bond0: (slave bridge0): Releasing backup interface [ 58.525668][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.528343][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.549750][ T7487] loop3: detected capacity change from 0 to 4096 [ 58.576851][ T52] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 58.576893][ T52] Bluetooth: hci4: Injecting HCI hardware error event [ 58.577825][ T6534] Bluetooth: hci4: hardware error 0x00 [ 58.611430][ T7487] ntfs3(loop3): ino=1a, mi_enum_attr [ 58.611468][ T7487] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 58.631127][ T7489] loop2: detected capacity change from 0 to 2048 [ 58.757865][ T7490] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 58.788223][ T7489] NILFS (loop2): error -2 truncating bmap (ino=16) [ 58.845359][ T7490] NILFS (loop2): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 58.848286][ T7490] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 58.852836][ T7490] Remounting filesystem read-only [ 58.869389][ T6531] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 58.940351][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 59.154109][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 59.154197][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 59.386494][ T7507] loop4: detected capacity change from 0 to 128 [ 59.393701][ T7507] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.440198][ T6535] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.478500][ T7503] loop2: detected capacity change from 0 to 32768 [ 59.485125][ T7503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.230 (7503) [ 59.500783][ T7503] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 59.500864][ T7503] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 59.523776][ T7503] BTRFS info (device loop2): allowing degraded mounts [ 59.525316][ T7503] BTRFS info (device loop2): enabling ssd optimizations [ 59.527639][ T7503] BTRFS info (device loop2): enabling free space tree [ 59.527675][ T7503] BTRFS info (device loop2): force zlib compression, level 3 [ 59.642078][ T7511] loop4: detected capacity change from 0 to 32768 [ 59.661575][ T7511] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 59.971517][ T7538] fs-verity (loop2, inode 260): Error -4 writing Merkle tree block 37 [ 59.971562][ T7538] fs-verity (loop2, inode 260): Error -4 building Merkle tree [ 59.971628][ T7538] BTRFS: error (device loop2) in rollback_verity:470: errno=-4 unknown (failed to drop verity items in rollback 260) [ 59.971642][ T7538] BTRFS info (device loop2 state E): forced readonly [ 59.971670][ T7538] BTRFS error (device loop2 state E): failed to rollback verity items: -4 [ 60.008836][ T7511] XFS (loop4): Ending clean mount [ 60.115205][ T6535] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 60.208915][ T7544] loop3: detected capacity change from 0 to 1024 [ 60.214262][ T7544] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 60.214460][ T7544] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 60.224398][ T7544] EXT4-fs (loop3): invalid journal inode [ 60.224581][ T7544] EXT4-fs (loop3): can't get journal size [ 60.353131][ T7544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.371569][ T6531] BTRFS info (device loop2 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 60.851336][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 61.131016][ T6534] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 61.160915][ T6527] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.989801][ T7580] loop1: detected capacity change from 0 to 128 [ 62.055848][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 62.205845][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 62.208187][ T10] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 62.208233][ T10] usb 1-1: config 0 has no interface number 0 [ 62.212609][ T10] usb 1-1: New USB device found, idVendor=1421, idProduct=1e7d, bcdDevice=6f.f3 [ 62.212646][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.212672][ T10] usb 1-1: Product: syz [ 62.212685][ T10] usb 1-1: Manufacturer: syz [ 62.212695][ T10] usb 1-1: SerialNumber: syz [ 62.220152][ T10] usb 1-1: config 0 descriptor?? [ 62.286493][ T7580] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.319756][ T6528] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.433485][ T6644] usb 1-1: USB disconnect, device number 4 [ 62.836834][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.245'. [ 62.933073][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.245'. [ 64.221426][ T7609] netlink: 'syz.3.251': attribute type 16 has an invalid length. [ 64.221464][ T7609] netlink: 'syz.3.251': attribute type 17 has an invalid length. [ 64.237525][ T7611] loop0: detected capacity change from 0 to 128 [ 64.237823][ T7611] vfat: Unknown parameter 'ÿÿÿÿÿ' [ 64.490657][ T2413] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490804][ T2413] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.586029][ T7609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.656801][ T7617] loop2: detected capacity change from 0 to 1764 [ 64.659070][ T7617] isofs_fill_super: get root inode failed [ 64.668030][ T7615] loop4: detected capacity change from 0 to 128 [ 64.703097][ T7617] loop2: detected capacity change from 0 to 512 [ 64.714735][ T7617] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.725155][ T7615] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.741836][ T7617] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 64.741942][ T7617] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 64.741955][ T7617] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.254: Failed to acquire dquot type 1 [ 64.760137][ T7617] EXT4-fs (loop2): 1 truncate cleaned up [ 64.760647][ T7617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.883887][ T6535] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.323935][ T7628] tipc: Enabled bearer , priority 0 [ 65.330052][ T7627] tipc: Resetting bearer [ 65.514016][ T6531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.620537][ T7637] loop1: detected capacity change from 0 to 1024 [ 65.719166][ T7637] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 65.719384][ T7637] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 65.748387][ T7637] EXT4-fs (loop1): invalid journal inode [ 65.748608][ T7637] EXT4-fs (loop1): can't get journal size [ 65.764822][ T7637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 65.812860][ T7633] loop0: detected capacity change from 0 to 40427 [ 65.815920][ T7640] loop2: detected capacity change from 0 to 1024 [ 65.823546][ T7633] F2FS-fs (loop0): invalid crc value [ 65.855099][ T7633] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 65.858916][ T7633] F2FS-fs (loop0): Start checkpoint disabled! [ 65.870889][ T1982] hfsplus: b-tree write err: -5, ino 4 [ 65.879691][ T7633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 66.259148][ T7647] loop2: detected capacity change from 0 to 128 [ 66.803242][ T6644] tipc: Node number set to 2363369278 [ 66.995043][ T6528] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.005710][ T1982] kworker/u8:6: attempt to access beyond end of device [ 67.005710][ T1982] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 67.006576][ T1982] CPU: 0 UID: 0 PID: 1982 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT [ 67.006587][ T1982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 67.006592][ T1982] Workqueue: writeback wb_workfn (flush-7:0) [ 67.006610][ T1982] Call trace: [ 67.006612][ T1982] show_stack+0x2c/0x3c (C) [ 67.006622][ T1982] __dump_stack+0x30/0x40 [ 67.006628][ T1982] dump_stack_lvl+0xd8/0x12c [ 67.006633][ T1982] dump_stack+0x1c/0x28 [ 67.006638][ T1982] f2fs_handle_critical_error+0x34c/0x4b8 [ 67.006646][ T1982] f2fs_stop_checkpoint+0x5c/0x70 [ 67.006651][ T1982] f2fs_write_end_io+0x768/0xa70 [ 67.006658][ T1982] bio_endio+0x858/0x894 [ 67.006665][ T1982] submit_bio_noacct+0x158/0x177c [ 67.006671][ T1982] submit_bio+0x3b4/0x550 [ 67.006676][ T1982] f2fs_submit_write_bio+0x13c/0x324 [ 67.006682][ T1982] __submit_merged_bio+0x254/0x704 [ 67.006688][ T1982] __submit_merged_write_cond+0x23c/0x4ac [ 67.006694][ T1982] f2fs_write_data_pages+0x1d28/0x2634 [ 67.006701][ T1982] do_writepages+0x270/0x468 [ 67.006708][ T1982] __writeback_single_inode+0x15c/0x13e8 [ 67.006715][ T1982] writeback_sb_inodes+0x55c/0xe40 [ 67.006722][ T1982] wb_writeback+0x3cc/0xd70 [ 67.006728][ T1982] wb_workfn+0x338/0xdc0 [ 67.006734][ T1982] process_one_work+0x7e8/0x155c [ 67.006740][ T1982] worker_thread+0x958/0xed8 [ 67.006754][ T1982] kthread+0x5fc/0x75c [ 67.006762][ T1982] ret_from_fork+0x10/0x20 [ 67.006771][ T1982] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 67.209508][ T7662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.209692][ T7662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.665377][ T7672] loop2: detected capacity change from 0 to 128 [ 67.677211][ T7672] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.708172][ T6531] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.818192][ T7627] tipc: Disabling bearer [ 67.821785][ T7659] netlink: 96 bytes leftover after parsing attributes in process `syz.3.263'. [ 68.506585][ T7687] loop1: detected capacity change from 0 to 124 [ 68.562173][ T7689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.562665][ T7689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.663243][ T7676] tipc: Started in network mode [ 68.663294][ T7676] tipc: Node identity 0ec7e38fb28b, cluster identity 4711 [ 68.663354][ T7676] tipc: Enabled bearer , priority 0 [ 68.663858][ T7677] syzkaller0: entered promiscuous mode [ 68.663870][ T7677] syzkaller0: entered allmulticast mode [ 68.673631][ T7675] tipc: Resetting bearer [ 68.680581][ T7675] tipc: Disabling bearer [ 69.125862][ T7699] loop4: detected capacity change from 0 to 1024 [ 69.131647][ T7699] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 69.131750][ T7699] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 69.133820][ T7699] EXT4-fs (loop4): invalid journal inode [ 69.133865][ T7699] EXT4-fs (loop4): can't get journal size [ 69.136745][ T7699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.623630][ T6535] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.672833][ T7710] loop4: detected capacity change from 0 to 256 [ 69.676873][ T7710] exfat: Deprecated parameter 'namecase' [ 69.700773][ T7710] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 69.707067][ T7712] loop0: detected capacity change from 0 to 128 [ 69.764583][ T7712] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.785329][ T7716] netlink: 'syz.2.278': attribute type 7 has an invalid length. [ 69.785368][ T7716] netlink: 'syz.2.278': attribute type 4 has an invalid length. [ 69.785377][ T7716] netlink: 'syz.2.278': attribute type 7 has an invalid length. [ 69.785386][ T7716] netlink: 209028 bytes leftover after parsing attributes in process `syz.2.278'. [ 69.909540][ T6542] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.454873][ T7744] loop4: detected capacity change from 0 to 1024 [ 71.721927][ T7744] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 71.721997][ T7744] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 71.728064][ T7744] EXT4-fs (loop4): invalid journal inode [ 71.728148][ T7744] EXT4-fs (loop4): can't get journal size [ 71.744706][ T7744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.765212][ T7756] loop0: detected capacity change from 0 to 128 [ 71.775240][ T7756] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.815427][ T6542] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.847809][ T7764] loop0: detected capacity change from 0 to 512 [ 71.849332][ T7765] loop2: detected capacity change from 0 to 256 [ 71.849647][ T7765] exfat: Deprecated parameter 'utf8' [ 71.853965][ T7765] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 71.863212][ T7764] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.292: casefold flag without casefold feature [ 71.863338][ T7764] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.292: couldn't read orphan inode 15 (err -117) [ 71.863840][ T7764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.881391][ T7764] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 1718579813 > max in inode 18 [ 71.909471][ T6542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.910025][ T7768] loop2: detected capacity change from 0 to 128 [ 71.980618][ T6535] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.068022][ T7772] loop0: detected capacity change from 0 to 512 [ 72.079806][ T7772] EXT4-fs: Ignoring removed nobh option [ 72.108580][ T7772] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.295: iget: bad i_size value: 38620345925642 [ 72.111268][ T7772] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.295: couldn't read orphan inode 15 (err -117) [ 72.114351][ T7772] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.199763][ T7779] loop4: detected capacity change from 0 to 512 [ 72.246340][ T7779] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.296: casefold flag without casefold feature [ 72.249525][ T7779] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.296: couldn't read orphan inode 15 (err -117) [ 72.259590][ T7779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.944598][ T7761] loop1: detected capacity change from 0 to 32768 [ 73.492264][ T6535] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.546800][ T6542] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.615935][ T7761] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 73.639906][ T7761] overlayfs: upper fs does not support tmpfile. [ 73 ** replaying previous printk message ** [ 73.649605][ T7761] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 73.649885][ T7761] [ 73.651909][ T7761] ====================================================== [ 73.652833][ T7761] WARNING: possible circular locking dependency detected [ 73.653882][ T7761] syzkaller #0 Not tainted [ 73.654467][ T7761] ------------------------------------------------------ [ 73.655516][ T7761] syz.1.291/7761 is trying to acquire lock: [ 73.656384][ T7761] ffff0000f34289c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x104/0x26a0 [ 73.658610][ T7761] [ 73.658610][ T7761] but task is already holding lock: [ 73.659815][ T7761] ffff0000f342b1b8 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x330/0xe9c [ 73.661376][ T7761] [ 73.661376][ T7761] which lock already depends on the new lock. [ 73.661376][ T7761] [ 73.663118][ T7761] [ 73.663118][ T7761] the existing dependency chain (in reverse order) is: [ 73.664587][ T7761] [ 73.664587][ T7761] -> #4 (&oi->ip_xattr_sem){+.+.}-{4:4}: [ 73.665792][ T7761] down_write+0x50/0xc0 [ 73.666523][ T7761] ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 73.667405][ T7761] ocfs2_init_security_set+0xb4/0xd8 [ 73.668287][ T7761] ocfs2_symlink+0x16a0/0x1ff8 [ 73.669081][ T7761] vfs_symlink+0x138/0x288 [ 73.669823][ T7761] do_symlinkat+0x17c/0x360 [ 73.670694][ T7761] __arm64_sys_symlinkat+0x9c/0xb4 [ 73.671597][ T7761] invoke_syscall+0x98/0x254 [ 73.672314][ T7761] el0_svc_common+0x130/0x23c [ 73.673059][ T7761] do_el0_svc+0x48/0x58 [ 73.673738][ T7761] el0_svc+0x5c/0x254 [ 73.674511][ T7761] el0t_64_sync_handler+0x84/0x12c [ 73.675430][ T7761] el0t_64_sync+0x198/0x19c [ 73.676281][ T7761] [ 73.676281][ T7761] -> #3 (jbd2_handle){++++}-{0:0}: [ 73.677497][ T7761] start_this_handle+0xe74/0x10dc [ 73.678473][ T7761] jbd2__journal_start+0x288/0x51c [ 73.679416][ T7761] jbd2_journal_start+0x3c/0x4c [ 73.680257][ T7761] ocfs2_start_trans+0x368/0x6b0 [ 73.681109][ T7761] ocfs2_reserve_suballoc_bits+0x630/0x3b9c [ 73.682124][ T7761] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 73.683210][ T7761] ocfs2_calc_security_init+0x2e8/0x518 [ 73.684226][ T7761] ocfs2_symlink+0x978/0x1ff8 [ 73.685048][ T7761] vfs_symlink+0x138/0x288 [ 73.685841][ T7761] do_symlinkat+0x17c/0x360 [ 73.686672][ T7761] __arm64_sys_symlinkat+0x9c/0xb4 [ 73.687557][ T7761] invoke_syscall+0x98/0x254 [ 73.688385][ T7761] el0_svc_common+0x130/0x23c [ 73.689257][ T7761] do_el0_svc+0x48/0x58 [ 73.690059][ T7761] el0_svc+0x5c/0x254 [ 73.690775][ T7761] el0t_64_sync_handler+0x84/0x12c [ 73.691682][ T7761] el0t_64_sync+0x198/0x19c [ 73.692455][ T7761] [ 73.692455][ T7761] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 73.693852][ T7761] down_read+0x58/0x2f8 [ 73.694610][ T7761] ocfs2_start_trans+0x35c/0x6b0 [ 73.695459][ T7761] ocfs2_reserve_suballoc_bits+0x630/0x3b9c [ 73.696577][ T7761] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 73.697693][ T7761] ocfs2_calc_security_init+0x2e8/0x518 [ 73.698609][ T7761] ocfs2_symlink+0x978/0x1ff8 [ 73.699455][ T7761] vfs_symlink+0x138/0x288 [ 73.700216][ T7761] do_symlinkat+0x17c/0x360 [ 73.701049][ T7761] __arm64_sys_symlinkat+0x9c/0xb4 [ 73.701940][ T7761] invoke_syscall+0x98/0x254 [ 73.702878][ T7761] el0_svc_common+0x130/0x23c [ 73.703784][ T7761] do_el0_svc+0x48/0x58 [ 73.704494][ T7761] el0_svc+0x5c/0x254 [ 73.705201][ T7761] el0t_64_sync_handler+0x84/0x12c [ 73.706091][ T7761] el0t_64_sync+0x198/0x19c [ 73.706938][ T7761] [ 73.706938][ T7761] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 73.708094][ T7761] ocfs2_start_trans+0x1f4/0x6b0 [ 73.708957][ T7761] ocfs2_mknod+0xc50/0x1cf0 [ 73.709751][ T7761] ocfs2_mkdir+0x190/0x474 [ 73.710522][ T7761] vfs_mkdir+0x284/0x424 [ 73.711276][ T7761] do_mkdirat+0x1f8/0x4c8 [ 73.712081][ T7761] __arm64_sys_mkdirat+0x8c/0xa4 [ 73.713016][ T7761] invoke_syscall+0x98/0x254 [ 73.713924][ T7761] el0_svc_common+0x130/0x23c [ 73.714817][ T7761] do_el0_svc+0x48/0x58 [ 73.715590][ T7761] el0_svc+0x5c/0x254 [ 73.716323][ T7761] el0t_64_sync_handler+0x84/0x12c [ 73.717227][ T7761] el0t_64_sync+0x198/0x19c [ 73.718065][ T7761] [ 73.718065][ T7761] -> #0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 73.719702][ T7761] __lock_acquire+0x1774/0x30a4 [ 73.720646][ T7761] lock_acquire+0x14c/0x2e0 [ 73.721459][ T7761] down_write+0x50/0xc0 [ 73.722230][ T7761] ocfs2_reserve_local_alloc_bits+0x104/0x26a0 [ 73.723218][ T7761] ocfs2_reserve_clusters_with_limit+0x198/0x9e0 [ 73.724297][ T7761] ocfs2_reserve_clusters+0x3c/0x50 [ 73.725201][ T7761] ocfs2_init_xattr_set_ctxt+0x37c/0x774 [ 73.726239][ T7761] ocfs2_xattr_set+0x920/0xe9c [ 73.727054][ T7761] ocfs2_xattr_trusted_set+0x4c/0x64 [ 73.727917][ T7761] __vfs_setxattr+0x3d8/0x400 [ 73.728744][ T7761] __vfs_setxattr_noperm+0x120/0x5c4 [ 73.729668][ T7761] __vfs_setxattr_locked+0x1ec/0x218 [ 73.730515][ T7761] vfs_setxattr+0x158/0x2ac [ 73.731274][ T7761] ovl_get_workdir+0x9e4/0x1280 [ 73.732063][ T7761] ovl_fill_super+0xff4/0x2c38 [ 73.732823][ T7761] get_tree_nodev+0xb4/0x144 [ 73.733587][ T7761] ovl_get_tree+0x28/0x38 [ 73.734262][ T7761] vfs_get_tree+0x90/0x28c [ 73.734987][ T7761] do_new_mount+0x278/0x7f4 [ 73.735661][ T7761] path_mount+0x5b4/0xde0 [ 73.736395][ T7761] __arm64_sys_mount+0x3e8/0x468 [ 73.737162][ T7761] invoke_syscall+0x98/0x254 [ 73.737918][ T7761] el0_svc_common+0x130/0x23c [ 73.738618][ T7761] do_el0_svc+0x48/0x58 [ 73.739290][ T7761] el0_svc+0x5c/0x254 [ 73.739964][ T7761] el0t_64_sync_handler+0x84/0x12c [ 73.740832][ T7761] el0t_64_sync+0x198/0x19c [ 73.741529][ T7761] [ 73.741529][ T7761] other info that might help us debug this: [ 73.741529][ T7761] [ 73.743127][ T7761] Chain exists of: [ 73.743127][ T7761] &ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem [ 73.743127][ T7761] [ 73.745629][ T7761] Possible unsafe locking scenario: [ 73.745629][ T7761] [ 73.746794][ T7761] CPU0 CPU1 [ 73.747612][ T7761] ---- ---- [ 73.748461][ T7761] lock(&oi->ip_xattr_sem); [ 73.749229][ T7761] lock(jbd2_handle); [ 73.750311][ T7761] lock(&oi->ip_xattr_sem); [ 73.751466][ T7761] lock(&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]); [ 73.752683][ T7761] [ 73.752683][ T7761] *** DEADLOCK *** [ 73.752683][ T7761] [ 73.754026][ T7761] 4 locks held by syz.1.291/7761: [ 73.754869][ T7761] #0: ffff0000c9ac00e0 (&type->s_umount_key#62/1){+.+.}-{4:4}, at: alloc_super+0x1a0/0x80c [ 73.756573][ T7761] #1: ffff0000cbde4428 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 73.758152][ T7761] #2: ffff0000f342b480 (&sb->s_type->i_mutex_key#37){++++}-{4:4}, at: vfs_setxattr+0x138/0x2ac [ 73.759932][ T7761] #3: ffff0000f342b1b8 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set+0x330/0xe9c [ 73.761608][ T7761] [ 73.761608][ T7761] stack backtrace: [ 73.762584][ T7761] CPU: 1 UID: 0 PID: 7761 Comm: syz.1.291 Not tainted syzkaller #0 PREEMPT [ 73.764027][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 73.765790][ T7761] Call trace: [ 73.766349][ T7761] show_stack+0x2c/0x3c (C) [ 73.767075][ T7761] __dump_stack+0x30/0x40 [ 73.767764][ T7761] dump_stack_lvl+0xd8/0x12c [ 73.768479][ T7761] dump_stack+0x1c/0x28 [ 73.769162][ T7761] print_circular_bug+0x324/0x32c [ 73.769956][ T7761] check_noncircular+0x154/0x174 [ 73.770752][ T7761] __lock_acquire+0x1774/0x30a4 [ 73.771539][ T7761] lock_acquire+0x14c/0x2e0 [ 73.772304][ T7761] down_write+0x50/0xc0 [ 73.773000][ T7761] ocfs2_reserve_local_alloc_bits+0x104/0x26a0 [ 73.774060][ T7761] ocfs2_reserve_clusters_with_limit+0x198/0x9e0 [ 73.775099][ T7761] ocfs2_reserve_clusters+0x3c/0x50 [ 73.775975][ T7761] ocfs2_init_xattr_set_ctxt+0x37c/0x774 [ 73.776960][ T7761] ocfs2_xattr_set+0x920/0xe9c [ 73.777712][ T7761] ocfs2_xattr_trusted_set+0x4c/0x64 [ 73.778589][ T7761] __vfs_setxattr+0x3d8/0x400 [ 73.779394][ T7761] __vfs_setxattr_noperm+0x120/0x5c4 [ 73.780262][ T7761] __vfs_setxattr_locked+0x1ec/0x218 [ 73.781112][ T7761] vfs_setxattr+0x158/0x2ac [ 73.781882][ T7761] ovl_get_workdir+0x9e4/0x1280 [ 73.782741][ T7761] ovl_fill_super+0xff4/0x2c38 [ 73.783584][ T7761] get_tree_nodev+0xb4/0x144 [ 73.784371][ T7761] ovl_get_tree+0x28/0x38 [ 73.785059][ T7761] vfs_get_tree+0x90/0x28c [ 73.785792][ T7761] do_new_mount+0x278/0x7f4 [ 73.786538][ T7761] path_mount+0x5b4/0xde0 [ 73.787262][ T7761] __arm64_sys_mount+0x3e8/0x468 [ 73.788054][ T7761] invoke_syscall+0x98/0x254 [ 73.788779][ T7761] el0_svc_common+0x130/0x23c [ 73.789600][ T7761] do_el0_svc+0x48/0x58 [ 73.790276][ T7761] el0_svc+0x5c/0x254 [ 73.790949][ T7761] el0t_64_sync_handler+0x84/0x12c [ 73.791876][ T7761] el0t_64_sync+0x198/0x19c [ 73.813272][ T7761] overlayfs: upper fs missing required features. [ 73.879012][ T6528] ocfs2: Unmounting device (7,1) on (node local)