last executing test programs: 12.017850987s ago: executing program 0 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) openat$zero(0xffffff9c, 0x0, 0x0, 0x0) 11.777193757s ago: executing program 3 (id=445): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 10.045740905s ago: executing program 0 (id=447): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='br_fdb_update\x00'}, 0x10) close(r2) sendmsg$tipc(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="e6", 0x1}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)='\f', 0x1}], 0x1}, 0x0) close(r4) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0}, 0x40002140) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000cc0), 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xe, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r8, 0x0, &(0x7f0000000040)=""/27}, 0x20) 9.941729833s ago: executing program 4 (id=449): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = add_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000002680), 0x0, 0xfffffffffffffffe) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r5, 0xfffffffdffffffff) keyctl$reject(0x13, r3, 0x100000000, 0x2, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="350b00000000000000000d000f000c00018008000100", @ANYRES32=r8], 0x20}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private0}}, [@migrate={0x50, 0x11, [{@in6=@empty, @in=@local, @in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0) 8.399844485s ago: executing program 1 (id=450): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204080, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=maccyrillic,iocharset=cp737,uid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=000000000003,\x00'/36], 0x3e, 0x299, &(0x7f0000000b80)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000880), 0x1, 0x53b, &(0x7f0000000a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000140)=0xfffffbff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000300), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r4, 0x0) 8.253093227s ago: executing program 4 (id=451): socket$packet(0x11, 0x3, 0x300) chdir(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x2b) mkdir(0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xea) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_continue}]}, 0xfe, 0x49e, &(0x7f0000000b00)="$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") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x448c2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000001ed0a00bfa30000000000002503000028feffff6203f0fff8ffffff61a4f0ff000000001d030200000000007f000000000000005504000017ffffff6604000017ffffffbe400000000000007b0300fe000000001c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e7449316cc65b5d4796005c2f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da350bcc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e38ba49e3e57fafea83e00006a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bff030000000000000ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622ca231e9e98720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a3997f1cfe8a87e08f87ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c08c3a86bbcd3705432ad3f96a7bbc4a13780cf9f4a5e3a9badca61367b377cc6f77e66febca94c8d9fe6fa1148a0b65c0f1b0d00aad352d7c7b5aea945185022f2c8cae549e77a290ebffb8c9dc99168e06461c70f922231cf567a16cb2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 7.838732593s ago: executing program 0 (id=453): socket(0xa, 0x2, 0x0) r0 = creat(&(0x7f0000000380)='./file0\x00', 0x0) unshare(0x6040400) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8000, &(0x7f0000000240)={[{@errors_remount}, {@grpid}, {@lazytime}, {@noload}, {@block_validity}]}, 0x7d, 0x63c, &(0x7f0000001bc0)="$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") connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000580)={[{@barrier_val={'barrier', 0x3d, 0x9}}, {@data_ordered}, {@usrjquota_path={'usrjquota', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@nobh}, {@nojournal_checksum}, {@orlov}, {@lazytime}, {@nobarrier}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@data_writeback}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) ioctl$FS_IOC_GETFSMAP(r3, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x7f, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000040)) socket$unix(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0xfffffffe, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x256}, 0x28) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x0, 0x300}}) 6.941265389s ago: executing program 1 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000001040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10001}}, 0x10) 6.871063095s ago: executing program 2 (id=455): r0 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x1b, 0x4, @tid=r0}, &(0x7f0000000080)) ioprio_set$pid(0x3, r0, 0x4000) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14337f, 0x0) flock(r1, 0x5) ioprio_get$pid(0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000003871173b2c612704f8f8ef350a4828395b5504752c381d9924b899b546f1e84cb88dcfd666a0051a33cffdef0ee04c78e0b4f7336db0ed9c2c589bcea0893af03d505e8ea101d6c6410c402e0353956aec42cd7da081f753ab7f7057ff3d9f0bc67a9224c9c9b403c6cf639827531bc9588faf741b2fb972af481f33659d03228b04a913d5db4c5192018bdd8d10b188da68b7a037befc976cf56a", @ANYRES16=r4, @ANYBLOB="8b3300000000000000001500000010001d80040000800500070000000000"], 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x14, 0x30, 0x405}, 0x14}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2000084c, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r6, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861727365743d69736f383835392d312c67174665bc6be915f40000", @ANYRESHEX=r7, @ANYRESHEX, @ANYRES64=r7, @ANYBLOB="2c647e4fb60000100000"], 0x81, 0x14f5, &(0x7f0000001580)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 5.981800221s ago: executing program 2 (id=456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000074d564b0000000001"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = open(0x0, 0xf68efd4a01d5371f, 0x131) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES8, @ANYRES32, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRES8, @ANYRES8=r7], 0xff, 0x1f1, &(0x7f0000000900)="$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") mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000a39000/0x1000)=nil, 0x1000, 0x0) 5.916856936s ago: executing program 1 (id=457): mkdir(&(0x7f0000000340)='./file0\x00', 0x136) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x2, 0x1000}, 0x48) timer_create(0x0, 0x0, &(0x7f00000002c0)) timer_gettime(0x0, &(0x7f0000000440)) poll(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r4}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8}]}}}]}, 0x4c}}, 0x0) 5.833955774s ago: executing program 3 (id=458): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0xffff, 0x4) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0x10000000}, 0x10) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x4, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000009000000000000000800000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000100000000000000ffb702000008000000b7030000000800008500000006000000181100"/124, @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018370000030000000000000000000000183a0000030000000000000000000000183a000002000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000008510000006000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x8d4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0xc, 0x90, 0x101}, 0x11, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001740)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x2}, 0x90) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000001780), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r2, r3, 0x4, r4}, 0x10) write(r1, &(0x7f0000000140)="240000001a005f0714f9f407000909000a000000000c0000000000000800040000000000", 0x24) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r5 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11}}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) getpeername(r5, &(0x7f0000000280)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f00000001c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x5, &(0x7f0000001800)=ANY=[@ANYBLOB="b4090000000000006111248000000000850000000000000000a8b729f7be5224b0a0bca9437337a75fef9dc0bcf0f9f802f73bbb3e9847751ce7c5368803b0bccf4443d6a402c76af5b7eb79cdaec51b3cd8ed8c17c529f7b1b6fda80f642e201bc9c11aa82aff02700c2a3934bdf0b23ca7bf9300baf5abe9ff653da364a46a893e6757eeb1bc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x80) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 4.748210746s ago: executing program 3 (id=459): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[], 0x0}, 0x90) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x810, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = gettid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$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") r3 = open(&(0x7f0000000000)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, 0x5405, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000497000/0x4000)=nil, 0x7fffdfb68000}, 0x1}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 4.704892009s ago: executing program 0 (id=460): socket$packet(0x11, 0x3, 0x300) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000680)=""/215, 0x71) r3 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="28000000000000000000000007000000014410"], 0x28}}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)) add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2041, 0x1}, 0x10, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) 4.661708593s ago: executing program 1 (id=461): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(0xffffffffffffffff) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xc0008000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x28, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x62}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000380)='%pi6 \x00'}, 0x20) pwritev(r6, &(0x7f00000006c0)=[{&(0x7f00000005c0)="535f2a9b948d01851f242d0b5c87ec8c8c185c340b206a68896b2e8ccc193d2ab7becf44915e62a5b8cb0a434f15709cf0d4bdb1d5a7d32d5628d4be3cff9049327bc628a90764b1598d30cecacde74322239e7b19d50f352eed9b80df6208b5b0ccd59810b73647b1a42cff70655397cd6750fdf521146209c610f9bcd95de3c6dba0cdf2497e18248b89972524b21d0a066c348e18017d5dcfb36a6df7e6675d5980c96c", 0xa5}, {&(0x7f0000000840)="68ae2ead5593094a6b7c0220110628860e8943dbe1b275c1d865b602341eee8f72c662647c68d16e7b4e2d6b41643ae12c795dea72a33b341774102adc4a4241675663ceb46d643aa1f7d34a0c90a66d35df51075491ea045a514ab5cccd13395aee241cd6b446bbc5a53d45c10d1dfa404660300425ed19adca4d560960263ec3a6f5dd28d52a43622ed1a953a693b450e3b3207e047dae9fb7652bb710575deeaac49b", 0xa4}, {&(0x7f0000000340)="05944ee9", 0x4}, {&(0x7f0000000540)}], 0x4, 0x1, 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r7, &(0x7f0000000700)=[{&(0x7f0000000480)='%', 0x1}, {&(0x7f0000000580)="fa", 0x1}, {&(0x7f0000000080)="19", 0x1}, {&(0x7f0000000240)='[', 0x1}, {&(0x7f0000000680)="1e", 0x1}], 0x5, 0x0) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x1100) get_mempolicy(0x0, &(0x7f0000000800), 0xdaf, &(0x7f0000ffc000/0x4000)=nil, 0xc) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1}, 0x18}}, 0x0) 4.59005463s ago: executing program 2 (id=462): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@nolazytime}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noquota}, {@dioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x289b}}, {@nojournal_checksum}, {@data_err_abort}]}, 0x0, 0x5b7, &(0x7f0000001a00)="$eJzs3c1rHOUfAPDvbF6avvx+TaEU9SCBHqzUbprElwoe6lG0WNB7uyTbULLpluymNLHQ9mAvXqQIIhbEP8C7Bw/Ff8C/oqCFoiXowcvIbGbztpuXppsmzX4+MMnzPDOZ53lm5pl8n51dNoCuNZT9KES8GhFfJxFHV6zrjXzl0OJ2C09vjWdLEmn62Z9JJHlZc/sk/304z7wSEb9+GXG60FpvbW5+qlSplGfy/HB9+vpwbW7+zNXp0mR5snxtdGzs3Dtjo++/927H+vrmxX+++/ThR+e+Ornw7U+Pj91P4nwcydet7MdzuLMyMxRD+THpi/NrNhzpQGV7SbLbDWBbevJx3hfZPeBo9OSjHtj/bkdECnSpxPiHLtWMA5pz+w3mwftyivfkw8UJUGv/exdfG4mBxtzo0EKyamaUHYzBDtSf1fHzHw/uZ0ssvw7RiV0DbOjO3Yg429vbev9L8vvf9p3dwjZr6+jQ67DAFjzM4p+32sU/haX4J1rin1+q0Wbsbsfm47/wuAPVrCuL/z5oG/8uPbQa7Mlz/2sEZn3JlauVcnZv+39EnIq+A1l+o+c55xYepeutWxn/ZUtWfzMWzNvxuPfA6r+ZKNVLz9PnlZ7cjXitbfybLJ3/pE38mx2Pi1us40T5wevrrdu8/20d3GLVm0p/jHij7flfnu4kGz+fHG5cD8PNq6LV3/dO/LZe/Wvj/8jznerfZrLzf2jj/g8mK5/X1p69jh8G/i2vt267139/8nkj3Z+X3SzV6zMjEf3JJ63lo8t/28w3t8/6f+rkxve/tdd/envxArwc6w7rVe4dv3e5pXBgq/3fWVn/J5bOf1ay2flfTiQtJe0Tjz7+4vvmztI0O3rLtnb+326kTq1uevLXBv3aSru2dzUDAAAAAADA3lWIiCORFIpL6UKhWFz8DO/xOFSoVGv101eqs9cmovFZ2cHoKzSfdB9d8X6IkfxNq8386Jr8WEQci4hveg428sXxamVitzsPAAAAAAAAAAAAAAAAAAAAe8ThiIF2n//P/N6z260Ddpyv/Ibutf74z9d04puegD3pmf//78uvAobuJP6H7mX8Q/cy/qF7Gf/QvZ5l/Pct/koP7FRjgBfK/3/oXsY/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNTFCxeyJV14ems8y0/cmJudqt44M1GuTRWnZ8eL49WZ68XJanWyUi6OV6c321+lWr0+MhqzN4fr5Vp9uDY3f2m6OnutfunqdGmyfKnc90J6BQAAAAAAAAAAAAAAAAAAAC+X2tz5KFUq5Zna3PxUqVLJShqJpZJyf0vJthJH8hqfdz8vR6J5fPdKe3Yu0bs3mrGPEmmapnciTXe3Gbt3TwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtf4LAAD//ySTMd8=") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/protocols\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40c5, 0x80) r4 = open(0x0, 0x81, 0x185) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000001c0)='./file0\x00', 0xb4f) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000280)=""/151, 0x97}, {&(0x7f00000000c0)=""/21, 0x15}], 0x2) write$9p(r3, &(0x7f0000000a00)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60c832623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c44915e2788548bff9772ad43de43d08afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cd5e1d5b04cedb1b2d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d23c91156aede4333ee6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd06000000000000006a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a527503", 0x60c) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xee01) inotify_add_watch(r5, &(0x7f0000000180)='./file0\x00', 0x10000000) 4.493151658s ago: executing program 4 (id=463): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r4, 0x1, 0x2, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 3.603747613s ago: executing program 0 (id=464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x9, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="000000000000f27023896f5e432ba60f8a911a15"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1cdb, r0, 0x8, &(0x7f0000000580), &(0x7f00000005c0)=[{0x5, 0x4, 0xb, 0x4}, {0x1, 0x5, 0x4, 0x6}, {0x0, 0x5, 0x1, 0x8}, {0x3, 0x2, 0x6}, {0x5, 0x2, 0xd, 0xb}, {0x2, 0x3, 0x3, 0x7}, {0x3, 0x3, 0x7, 0xb}, {0x1, 0x1, 0xe, 0x6}], 0x10, 0x4}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, r2, 0xef784000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f0000000140)="170000000000020000ffbe8c2ee1768814002b000203000afdff020657fc5ad90200bb6a880000d6c9db0000db0000eb00df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd30500000000", 0xb8) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="a548", 0x2}], 0x1}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x4001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [], [0x0, 0x0, 0x0, 0x8], 0x0, [0x1]}}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, 'Q\x00\x00\x00'}]}, 0x54}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x64, 0x2}, @cond}) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2778) 3.533904739s ago: executing program 4 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) pipe(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1a, &(0x7f00000003c0)=""/244, &(0x7f00000000c0)=0xf4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) accept4(r4, 0x0, 0x0, 0x0) 3.489649633s ago: executing program 1 (id=466): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000400b060a70000000000001090224000100000006090400000103000000092100000001220500090581030000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000001f00)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r2, 0xc0189436, 0x0) sysfs$1(0x1, &(0x7f0000000040)='cgroup2\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r4, 0x0, 0x8000002b) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x15, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300), 0x4) 2.82106796s ago: executing program 2 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000001040)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x10001}}, 0x10) 2.678041922s ago: executing program 0 (id=468): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 2.446414443s ago: executing program 4 (id=469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x301880, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000180)='`', 0xca, 0xf00, &(0x7f0000000240)={0x6, 0x0, r5, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRESHEX=r7, @ANYRESHEX]) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r9, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r9, &(0x7f0000000580)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@fscache}]}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x284}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_PLINK_STATE={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x11}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x80) 1.896409379s ago: executing program 3 (id=470): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = memfd_create(&(0x7f0000000000)='\x107', 0x0) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000004c0)=0x0) write$binfmt_elf32(r2, &(0x7f0000000540)=ANY=[@ANYRES8=r4, @ANYRESHEX, @ANYRES8=r1], 0x58) finit_module(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001740)=0x6) ioprio_set$pid(0x0, 0x0, 0x0) r5 = msgget(0x3, 0x548) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000580)=""/190) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000080)='\t', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r6, 0x1) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x7d, &(0x7f00000000c0)={r8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x7d, &(0x7f0000000500)={r8, 0x200}, 0x8) 1.809811766s ago: executing program 2 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0xf, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1000, 0x0, 0x7f}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000001040)=0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 1.801011787s ago: executing program 4 (id=472): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1a08050, &(0x7f0000000540)=ANY=[], 0x2, 0x578, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) timer_create(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000140)={'syz_tun\x00', {0x2, 0x0, @broadcast}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000), &(0x7f0000048000), 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0xffffffffffffffa8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x80005b, 0x1008a}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@errors_remount}, {@dioread_nolock}, {@data_writeback}, {@grpquota}]}, 0x1, 0x4c4, &(0x7f00000000c0)="$eJzs3E9sFNUfAPDvbFta/v3YHyIKohbR2EhsoaBw8ILRxIMmRjzosWkLqRRqaE2EoFkSg0dD4t149OrBq3oxxpOJVzyaGBJiuABeHDO7M+12u9vSdtu12c8nGfa9+ffemzdv9s17XQLoWoPZP0ktfCsi9kREqXGHwdrH/bvXxh/cvTYelTQ9+1dSPexeFs/lp4mdeWSoFFH6LFnYUGf2ytULY9PTk5fz+MjcxQ9HZq9cfXHq4tj5yfOTl0ZPnz554vipl0dfWn2hmqSXlevewU9nDh144/2bb433FusH8s/6crTLYAw2y0rVc+1OrMN214WT3g5mhFXJ7v+suvqq7X9P9ITKg26Rpmna33pzJW10fckaYMtKotM5ADqj+KLP3n+LpVlHYNvGdD867s6Z2gtQVu77+RLxdHVlMQ7S1/B+206DEfFe5e+vsiU2aBwCAKDeD2eKnmBD/688sGi//+VzKOWI+H9E7I2IRyJiX0Q8GhH7I+KxiHi84fw9EZEuk/5gQ3xp/6d0ez3lW0nW/3sln9ta6P9F/SxYuSeP7Y4oOsyTx/JrMhR9/eempiePL5PGj6/99kWrbfX9v2zJ0i/6gnk+bvc2DNBNjM2NrbnADe5cjzjY21j+pDcimZ8JSCLiQEQcXMV5y3XhqRe+OTQf6Vu838rlr0qbzqO1Yaoi/Tri+Vr9V2JR/S+kmCw/PzkyENOTx0ayu+BY0zR++fXG263SX7H83/3ReMjrp74/m7es9cvqf0fd/R/F/O1C+ctJRDI/Xzu7+jRu/P55y3eatd7/25J3q+HivfTjsbm5y8cjtiVvLl0/unBsEc8+o1Ir/9CR5u1/b35MdiWeiIjsJn4yIp6K2htilvfDEfFMRBxZpvw/v/rsB2sv/8bKyj/R9Pm3qP4X5utbBZJKbe8mm3ouHL71oMXD4+Hq/2Q1NJSvaf78SxY9IlrltPi2y9b8s96LBwAAAFtEKSJ21Y0l7YpSaXi4Nga0L3aUpmdm546em/no0kS2LaIcfaVipKs2HtyXFOOf5br4aEP8RD5u/GXP9mp8eHxmeqKjJQd2Vtt8UhqefxbU2n/mz/YMMQP/ZX7yA91rpfa//+YmZQTYdA///f/TJxuaEWDT1bX/SotdKmv4uy9gC/D+D91raftv1Q1Y7hhgq0m1Zehqq2r/R1fuGwBbR2+8Mx8udTQnwGbT/4eutOLv+tcVSPubbxqIpTvHwPIn7Im1ZWN7k7Q6Esh6Vh1Jfftajir+N4WW+0RpdSfsj/bU6bn1X5bz+9t+86f538q3uwa/3ZR22izQkccRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA2/0bAAD//xq14Bs=") getsockopt$nfc_llcp(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x20000000) 1.697269656s ago: executing program 3 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioperm(0x0, 0x9b4, 0x36f) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@fwd, @var]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000c00)=""/4096, 0x38, 0x1000, 0x1}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) fgetxattr(r4, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0x9100) 161.796567ms ago: executing program 3 (id=474): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="14"], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x24, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x0, [@dev, @remote, @rand_addr, @local, @empty, @multicast2, @local]}, @noop, @noop, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@remote}, {}, {@broadcast, 0x9}, {@loopback}]}, @generic={0x0, 0xf, "191f408b9203caa52a2d966487"}, @ssrr={0x89, 0x17, 0x0, [@multicast2, @remote, @multicast1, @multicast1, @dev]}, @timestamp_prespec={0x44, 0xc, 0xcb, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x44}}]}]}}}}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsopen(&(0x7f00000000c0)='proc\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c8000c00080001000a0804000300000091d6cce8a5012487a891d3c53b629964df06d196df5e0f2d4f68cb983e3442d0c8c945761134c1459e3e5e46fbf4c5a0b606efffa19a2c866570ec3cf1285165f0abb1205e7a0c0257a64df42b206e1809298ea163bfdc00f59103dce12c457a19e40f61ce9c6196d08724e87c8fb36b4386627e4ab6b3da7d69dd1f29099c40625cccac23ac717613ef2fff9ae060f5dd4e95884d76fdba1d722638d247d07fc40061f1ed0f0d13ac1d6fd3aacd6e8debad76a326b4dcf4165bb28e6ee69f44b41091a7f490d4ac"], 0x11) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x20, 0x1, 0xd2, 0xffff7fff, {{0xc, 0x4, 0x2, 0x1a, 0x30, 0x64, 0x0, 0x5, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0x5, '2w@'}, @lsrr={0x83, 0x17, 0x54, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast1, @rand_addr, @private=0xa010101]}]}}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0xa00, 0xa, 0x14}, 0x18) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) 149.503408ms ago: executing program 1 (id=475): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=476): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = dup(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) capget(&(0x7f00000001c0), 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000180)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={0x0, 0x1, 0x6, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x27, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x60) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) kernel console output (not intermixed with test programs): 11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.899665][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.909697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.918639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.926731][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.934804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.948943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.957688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.967775][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.974880][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.983230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.992370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.001434][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.008573][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.023926][ T3637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.035989][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.048905][ T3638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.064312][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.072376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.081229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.090930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.102442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.111728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.120329][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.129004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.137742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.147052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.161893][ T3634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.174454][ T3634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.200336][ T3641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.210886][ T3641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.231905][ T3640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.241656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.255082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.264009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.274032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.283911][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.293255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.302635][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.311437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.321441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.330425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.338783][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.348200][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.356084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.363811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.371864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.386786][ T3638] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.416811][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.447585][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.470487][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.477667][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.486844][ T3639] Bluetooth: hci4: command tx timeout [ 54.493859][ T48] Bluetooth: hci0: command tx timeout [ 54.494446][ T3644] Bluetooth: hci2: command tx timeout [ 54.499856][ T3639] Bluetooth: hci3: command tx timeout [ 54.523088][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.545780][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.564203][ T3639] Bluetooth: hci1: command tx timeout [ 54.578589][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.595219][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.602334][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.630646][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.661563][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.684979][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.705566][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.724355][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.753381][ T3638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.764684][ T3638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.789903][ T3637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.828699][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.860348][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.871602][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.898276][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.926500][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.935186][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.944010][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.951543][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.962932][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.011348][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.021262][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.061883][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.069993][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.083057][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.092179][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.100807][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.108336][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.116603][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.124816][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.135076][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.142541][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.157007][ T3641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.165770][ T3637] device veth0_vlan entered promiscuous mode [ 55.178090][ T3640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.191789][ T3634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.210277][ T3637] device veth1_vlan entered promiscuous mode [ 55.222242][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.231366][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.241139][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.278100][ T3638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.305514][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.315915][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.325613][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.335624][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.344850][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.387354][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.399494][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.409890][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.424340][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.432891][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.447531][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.460288][ T3637] device veth0_macvtap entered promiscuous mode [ 55.470461][ T3637] device veth1_macvtap entered promiscuous mode [ 55.482123][ T3634] device veth0_vlan entered promiscuous mode [ 55.492583][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.507963][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.519329][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.532270][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.543536][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.557367][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.567711][ T3641] device veth0_vlan entered promiscuous mode [ 55.583565][ T3634] device veth1_vlan entered promiscuous mode [ 55.602900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.611503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.620707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.648939][ T3641] device veth1_vlan entered promiscuous mode [ 55.661663][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.671392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.679586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.689461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.697895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.706753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.718631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.726993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.736247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.744960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.753578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.761769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.782777][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.791498][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.812060][ T3634] device veth0_macvtap entered promiscuous mode [ 55.820858][ T3638] device veth0_vlan entered promiscuous mode [ 55.833263][ T3637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.846313][ T3634] device veth1_macvtap entered promiscuous mode [ 55.862492][ T3638] device veth1_vlan entered promiscuous mode [ 55.869922][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.878403][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.886306][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.895269][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.905377][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.913456][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.922344][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.931010][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.941522][ T3640] device veth0_vlan entered promiscuous mode [ 55.950830][ T3637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.960450][ T3637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.969574][ T3637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.978980][ T3637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.000922][ T3641] device veth0_macvtap entered promiscuous mode [ 56.050906][ T3634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.061744][ T3634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.075911][ T3634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.084175][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.093417][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.102516][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.111543][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.121222][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.134669][ T3640] device veth1_vlan entered promiscuous mode [ 56.141843][ T3641] device veth1_macvtap entered promiscuous mode [ 56.172043][ T3638] device veth0_macvtap entered promiscuous mode [ 56.180845][ T3634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.191750][ T3634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.205932][ T3634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.222029][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.240389][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.250572][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.261871][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.273017][ T3641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.285017][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.293058][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.301440][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.310085][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.319445][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.328467][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.337070][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.346681][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.356049][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.364897][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.375497][ T3638] device veth1_macvtap entered promiscuous mode [ 56.389326][ T3634] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.398725][ T3634] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.408184][ T3634] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.416970][ T3634] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.438751][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.449619][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.459742][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.470217][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.481155][ T3641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.508304][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.516877][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.526445][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.535288][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.543888][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.558145][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.569252][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.571184][ T3639] Bluetooth: hci3: command tx timeout [ 56.579648][ T3644] Bluetooth: hci0: command tx timeout [ 56.585070][ T3639] Bluetooth: hci4: command tx timeout [ 56.589865][ T3644] Bluetooth: hci2: command tx timeout [ 56.595412][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.611077][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.621624][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.632492][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.643877][ T3644] Bluetooth: hci1: command tx timeout [ 56.644936][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.658084][ T3641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.667330][ T3641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.676187][ T3641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.684900][ T3641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.701928][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.711079][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.721391][ T3640] device veth0_macvtap entered promiscuous mode [ 56.749113][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.759982][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.770148][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.781484][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.792063][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.802673][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.815649][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.826074][ T3640] device veth1_macvtap entered promiscuous mode [ 56.841535][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.850744][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.865743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.874210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.882091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.890437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.899365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.917849][ T3638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.926881][ T3638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.935969][ T3638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.945853][ T3638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.017172][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.028870][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.039189][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.050740][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.061159][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.071878][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.082216][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.092901][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.104666][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.125816][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.134086][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.134134][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.157141][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.166346][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.177008][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.189908][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.200074][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.211296][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.221397][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.232903][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.243132][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.253674][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.265102][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.280935][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.297265][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.320545][ T3640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.329368][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.329413][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.347500][ T3640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.362273][ T3640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.372126][ T3640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.402326][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.463496][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.475737][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.489827][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.546567][ T3694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.560289][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.570748][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.574691][ T3696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.584483][ T3694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.594780][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.604165][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.614715][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.634349][ T3696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.650911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.664438][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.673210][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.777836][ T3723] random: crng reseeded on system resumption [ 58.222174][ T3696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.222333][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.242574][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.279996][ T3696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.292511][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.319623][ T3725] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.329620][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.384968][ T3727] loop1: detected capacity change from 0 to 512 [ 58.422769][ T3727] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 58.495488][ T3727] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.509872][ T3727] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.2: bad orphan inode 15 [ 58.607994][ T3733] loop4: detected capacity change from 0 to 512 [ 58.622636][ T3727] ext4_test_bit(bit=14, block=18) = 1 [ 58.631178][ T3727] is_bad_inode(inode)=0 [ 58.645276][ T3644] Bluetooth: hci2: command tx timeout [ 58.723761][ T3644] Bluetooth: hci1: command tx timeout [ 58.735207][ T3644] Bluetooth: hci4: command tx timeout [ 58.756767][ T3642] Bluetooth: hci0: command tx timeout [ 58.756815][ T3639] Bluetooth: hci3: command tx timeout [ 58.774786][ T3727] NEXT_ORPHAN(inode)=1023 [ 58.779149][ T3727] max_ino=32 [ 58.782362][ T3727] i_nlink=0 [ 58.788403][ T3733] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 58.816556][ T3727] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2932: inode #15: comm syz.1.2: corrupted xattr block 19 [ 58.904632][ T3738] Device name cannot be null; rc = [-22] [ 59.499057][ T3727] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 59.622790][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 59.674744][ T3733] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 59.694020][ T3727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.708787][ T3733] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5: invalid indirect mapped block 2683928664 (level 1) [ 59.746524][ T3733] EXT4-fs (loop4): Remounting filesystem read-only [ 59.764052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 59.790608][ T3733] EXT4-fs (loop4): 1 truncate cleaned up [ 59.853778][ T3747] process 'syz.3.7' launched './file1' with NULL argv: empty string added [ 59.884256][ T3747] loop3: detected capacity change from 0 to 164 [ 59.900494][ T3733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.950486][ T3747] rock: directory entry would overflow storage [ 59.956963][ T3747] rock: sig=0x4f50, size=4, remaining=3 [ 59.962574][ T3747] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 60.564526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 60.572908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 60.576949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 60.590917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 60.603644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 60.623013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 60.633643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 60.641924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 60.661583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 61.158619][ C1] eth0: bad gso: type: 1, size: 1408 [ 61.262818][ T3752] tipc: Started in network mode [ 61.267969][ T3752] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 61.276213][ T3752] tipc: Enabled bearer , priority 0 [ 61.295775][ T3752] tipc: Enabled bearer , priority 0 [ 61.621614][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 61.666439][ T3733] ======================================================= [ 61.666439][ T3733] WARNING: The mand mount option has been deprecated and [ 61.666439][ T3733] and is ignored by this kernel. Remove the mand [ 61.666439][ T3733] option from the mount to silence this warning. [ 61.666439][ T3733] ======================================================= [ 61.850915][ T3640] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 61.950059][ T3640] EXT4-fs (loop4): Remounting filesystem read-only [ 61.970958][ T3640] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 61.991478][ T3640] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 62.304781][ T3625] tipc: Node number set to 10136234 [ 63.167126][ T3765] loop2: detected capacity change from 0 to 256 [ 63.541262][ T3758] loop3: detected capacity change from 0 to 164 [ 63.667130][ T3769] loop1: detected capacity change from 0 to 8192 [ 63.836858][ T3773] tmpfs: Unknown parameter 'usrquota' [ 64.094463][ T3741] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 64.933338][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 65.022918][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.145944][ T3717] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.189057][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.229029][ T3779] loop1: detected capacity change from 0 to 128 [ 65.418919][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.168595][ T3786] Bluetooth: MGMT ver 1.22 [ 67.357506][ T3787] loop2: detected capacity change from 0 to 1024 [ 67.529621][ T3717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.555740][ T3717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.565725][ T3717] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 67.574837][ T3717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.760301][ T3717] usb 1-1: config 0 descriptor?? [ 67.849192][ T3787] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.20: Invalid block bitmap block 0 in block_group 0 [ 67.864279][ T3787] Quota error (device loop2): write_blk: dquota write failed [ 67.871768][ T3787] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 67.881723][ T3787] EXT4-fs error (device loop2): ext4_acquire_dquot:6777: comm syz.2.20: Failed to acquire dquot type 0 [ 67.895568][ T3787] EXT4-fs error (device loop2): ext4_free_blocks:6212: comm syz.2.20: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.910782][ T3787] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.20: Invalid inode bitmap blk 0 in block_group 0 [ 67.924414][ T3787] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 67.940142][ T34] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 67.949576][ T3787] EXT4-fs (loop2): 1 orphan inode deleted [ 67.956056][ T3787] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 68.019870][ T34] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:2: Failed to release dquot type 0 [ 68.081768][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.662544][ T3717] usbhid 1-1:0.0: can't add hid device: -71 [ 68.732544][ T3717] usbhid: probe of 1-1:0.0 failed with error -71 [ 68.908700][ T3717] usb 1-1: USB disconnect, device number 2 [ 68.971922][ T3637] EXT4-fs (loop2): unmounting filesystem. [ 69.156000][ T3802] loop2: detected capacity change from 0 to 256 [ 69.191713][ T3802] exfat: Deprecated parameter 'utf8' [ 69.210593][ T3802] exfat: Deprecated parameter 'namecase' [ 69.304850][ T3802] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1806556a, utbl_chksum : 0xe619d30d) [ 69.412355][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.421393][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.429913][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.467705][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.483107][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.498029][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.372179][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.379377][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.473398][ C1] eth0: bad gso: type: 1, size: 1408 [ 71.564584][ T3639] Bluetooth: hci4: command tx timeout [ 72.125964][ T3849] fuse: Unknown parameter 'group_i00000000000000000000' [ 72.147305][ T3806] chnl_net:caif_netlink_parms(): no params data found [ 72.723737][ T3717] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.064716][ T3639] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 73.074262][ T3639] Bluetooth: hci0: Injecting HCI hardware error event [ 73.084173][ T48] Bluetooth: hci0: hardware error 0x00 [ 73.182141][ T3717] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 73.213832][ T3717] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 73.253347][ T3717] usb 1-1: config 1 has no interface number 1 [ 73.283944][ T3717] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 73.316498][ T3717] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 73.524514][ T3717] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 73.533558][ T3717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.640339][ T3717] usb 1-1: Product: syz [ 73.646181][ T3717] usb 1-1: Manufacturer: syz [ 73.650956][ T3717] usb 1-1: SerialNumber: syz [ 73.924311][ T3644] Bluetooth: hci4: command tx timeout [ 74.097685][ T3806] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.115797][ T3806] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.157844][ T3806] device bridge_slave_0 entered promiscuous mode [ 74.268107][ T3717] usb 1-1: USB disconnect, device number 3 [ 74.462005][ T46] device hsr_slave_0 left promiscuous mode [ 74.659022][ T46] device hsr_slave_1 left promiscuous mode [ 74.689335][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.709157][ T3877] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 75.038924][ T3881] block device autoloading is deprecated and will be removed. [ 75.523726][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 75.833801][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.879389][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.887448][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.897283][ T46] device bridge_slave_1 left promiscuous mode [ 75.915020][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.939556][ T46] device bridge_slave_0 left promiscuous mode [ 75.949955][ T3886] syz.0.35[3886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.950056][ T3886] syz.0.35[3886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.956096][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.013675][ T48] Bluetooth: hci4: command tx timeout [ 76.031188][ T46] device veth1_macvtap left promiscuous mode [ 76.038440][ T46] device veth0_macvtap left promiscuous mode [ 76.056002][ T46] device veth1_vlan left promiscuous mode [ 76.070142][ T46] device veth0_vlan left promiscuous mode [ 76.073826][ T3891] Invalid ELF header magic: != ELF [ 76.325842][ T3900] loop2: detected capacity change from 0 to 1024 [ 76.345087][ T3900] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 not in group (block 131174)! [ 76.355876][ T3900] EXT4-fs (loop2): group descriptors corrupted! [ 76.485978][ T7] cfg80211: failed to load regulatory.db [ 76.590087][ T46] team0 (unregistering): Port device team_slave_1 removed [ 76.617544][ T46] team0 (unregistering): Port device team_slave_0 removed [ 76.647453][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.678144][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.906962][ T46] bond0 (unregistering): Released all slaves [ 76.981386][ T3806] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.988763][ T3806] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.996686][ T3806] device bridge_slave_1 entered promiscuous mode [ 77.010011][ T3883] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 77.081798][ T3806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.279330][ T3906] loop1: detected capacity change from 0 to 512 [ 77.306019][ T3906] EXT4-fs (loop1): Invalid log block size: 33554433 [ 77.339193][ T3806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.609325][ T3909] Zero length message leads to an empty skb [ 78.325992][ T3644] Bluetooth: hci4: command tx timeout [ 78.503342][ T3806] team0: Port device team_slave_0 added [ 78.549711][ T3806] team0: Port device team_slave_1 added [ 78.572050][ T3920] loop2: detected capacity change from 0 to 512 [ 78.579688][ T3916] capability: warning: `syz.1.42' uses deprecated v2 capabilities in a way that may be insecure [ 78.648841][ T3923] loop3: detected capacity change from 0 to 256 [ 78.671132][ T3923] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x88d18ad4, utbl_chksum : 0xe619d30d) [ 78.683694][ T3923] exFAT-fs (loop3): failed to load alloc-bitmap [ 78.690003][ T3923] exFAT-fs (loop3): failed to recognize exfat type [ 78.725845][ T3806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.769199][ T3799] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 78.813925][ T3806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.841159][ T3806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.948614][ T3806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.028430][ T3920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 79.139235][ T3806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.229288][ T3920] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 79.257495][ T3806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.645923][ T3935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'. [ 79.666821][ T3806] device hsr_slave_0 entered promiscuous mode [ 79.691262][ T3806] device hsr_slave_1 entered promiscuous mode [ 79.722928][ T3806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.730573][ T3941] loop0: detected capacity change from 0 to 64 [ 79.768843][ T3806] Cannot create hsr debugfs directory [ 79.894631][ T3941] MINIX-fs: bad superblock or unable to read bitmaps [ 79.985333][ T3637] EXT4-fs (loop2): unmounting filesystem. [ 80.077046][ T3946] loop3: detected capacity change from 0 to 256 [ 80.228880][ T3946] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 80.938863][ T3954] loop2: detected capacity change from 0 to 128 [ 80.964314][ T3644] Bluetooth: hci3: command tx timeout [ 81.712881][ T3952] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 81.759113][ T3952] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 82.070839][ T3935] netlink: 52 bytes leftover after parsing attributes in process `syz.1.43'. [ 82.170938][ T152] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.027353][ T3973] capability: warning: `syz.3.50' uses 32-bit capabilities (legacy support in use) [ 83.043686][ T3644] Bluetooth: hci3: command tx timeout [ 83.094037][ T152] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.127202][ T152] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 83.160957][ T152] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 83.199075][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.239488][ T152] usb 3-1: config 0 descriptor?? [ 83.472079][ T3977] loop3: detected capacity change from 0 to 4096 [ 83.570230][ T3977] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 83.586774][ T3806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.628427][ T3806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.668841][ T3806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.689079][ T3806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.702352][ T3985] netlink: 'syz.0.51': attribute type 4 has an invalid length. [ 83.791447][ C1] eth0: bad gso: type: 1, size: 1408 [ 83.901808][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 83.939528][ T3806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.948267][ T3992] loop0: detected capacity change from 0 to 512 [ 83.974884][ T3992] EXT4-fs: Ignoring removed nobh option [ 84.012522][ T3806] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.037623][ T3992] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 84.053887][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.062330][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.135079][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.144762][ T3992] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.52: attempt to clear invalid blocks 2 len 1 [ 84.198426][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.207762][ T3992] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 84.238093][ T3696] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.245237][ T3696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.253011][ T3992] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.52: invalid indirect mapped block 1819239214 (level 0) [ 84.299199][ T3992] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.52: invalid indirect mapped block 1819239214 (level 1) [ 84.327286][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.354971][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.370181][ T3992] EXT4-fs (loop0): 1 truncate cleaned up [ 84.381714][ T3992] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 84.394571][ T3696] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.401697][ T3696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.427821][ T4009] loop1: detected capacity change from 0 to 256 [ 84.451988][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.520772][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.547020][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.573339][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.646641][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.690134][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.700804][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.717324][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.736357][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.822091][ T4015] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 13: comm syz.0.52: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 84.858938][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.213810][ T3644] Bluetooth: hci3: command tx timeout [ 85.272476][ T3718] usb 3-1: USB disconnect, device number 2 [ 85.348228][ T3806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.359933][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 85.453948][ T3806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.462263][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.470516][ T4025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.481840][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.694069][ T4030] loop0: detected capacity change from 0 to 47 [ 86.376614][ T26] audit: type=1326 audit(1724963736.366:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4024 comm="syz.1.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x0 [ 86.536745][ T3719] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.183960][ T3719] usb 4-1: Using ep0 maxpacket: 32 [ 87.394705][ T3719] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 87.630673][ T3719] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 87.956128][ T3719] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 87.968955][ T3719] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 87.982822][ T3719] usb 4-1: config 0 interface 0 has no altsetting 0 [ 88.072483][ T3644] Bluetooth: hci1: unexpected subevent 0x12 length: 19 > 5 [ 88.174027][ T3719] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 88.183095][ T3719] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 88.238902][ T4065] loop1: detected capacity change from 0 to 2048 [ 88.245779][ T3644] Bluetooth: hci1: command tx timeout [ 88.262883][ T3719] usb 4-1: Product: syz [ 88.272898][ T3719] usb 4-1: Manufacturer: syz [ 88.292675][ T3719] usb 4-1: SerialNumber: syz [ 88.299728][ T3719] usb 4-1: config 0 descriptor?? [ 88.319832][ T4065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.348143][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.357884][ T3719] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 88.379606][ T4068] loop2: detected capacity change from 0 to 1024 [ 88.385047][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.433852][ T3806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.439226][ T3719] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 88.499506][ T3719] usb 4-1: USB disconnect, device number 2 [ 88.535480][ T3719] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 88.547109][ T4068] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 88.576179][ T4068] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 88.620310][ T4029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.037579][ T3637] EXT4-fs (loop2): unmounting filesystem. [ 89.053085][ T4098] loop1: detected capacity change from 0 to 128 [ 89.085168][ T4098] FAT-fs (loop1): Directory bread(block 160) failed [ 89.119018][ T4098] FAT-fs (loop1): Directory bread(block 161) failed [ 89.166365][ T4098] FAT-fs (loop1): Directory bread(block 162) failed [ 89.173090][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.181562][ T4098] FAT-fs (loop1): Directory bread(block 163) failed [ 89.210083][ T3857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.225249][ T4098] FAT-fs (loop1): Directory bread(block 164) failed [ 89.231882][ T4098] FAT-fs (loop1): Directory bread(block 165) failed [ 89.253445][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.271997][ T4101] loop3: detected capacity change from 0 to 512 [ 89.285206][ T4101] EXT4-fs: Invalid commit interval 1836789753, must be smaller than 21474836 [ 89.303881][ T4098] FAT-fs (loop1): Directory bread(block 166) failed [ 89.309039][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.310893][ T4098] FAT-fs (loop1): Directory bread(block 167) failed [ 89.336851][ T3806] device veth0_vlan entered promiscuous mode [ 89.351108][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.363356][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.412159][ T3806] device veth1_vlan entered promiscuous mode [ 89.446574][ T4098] FAT-fs (loop1): Directory bread(block 160) failed [ 89.477686][ T4098] FAT-fs (loop1): Directory bread(block 161) failed [ 89.491884][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.519906][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.567033][ T3806] device veth0_macvtap entered promiscuous mode [ 89.596774][ T3806] device veth1_macvtap entered promiscuous mode [ 89.616254][ T4106] loop2: detected capacity change from 0 to 8192 [ 89.650405][ T4106] FAT-fs (loop2): Unrecognized mount option "GPL" or missing value [ 89.651106][ T3806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.742027][ T3806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.763723][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.778898][ T3806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.797291][ T3806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.809084][ T3806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.819603][ T3806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.830262][ T3806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.842653][ T3806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.896575][ T3806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.932290][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.946862][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.961729][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.981658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.995187][ T3806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.023626][ T3806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.044149][ T3806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.083184][ T3806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.153789][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.170038][ T3806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.180531][ T3806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.191331][ T3806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.201807][ T3806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.221048][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.239794][ T3806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.123118][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.133082][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.184913][ T3806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.180037][ T4138] loop0: detected capacity change from 0 to 8 [ 92.220917][ T4138] SQUASHFS error: lzo decompression failed, data probably corrupt [ 92.229100][ T4138] SQUASHFS error: Failed to read block 0x91: -5 [ 92.235474][ T4138] SQUASHFS error: Unable to read metadata cache entry [8f] [ 92.242746][ T4138] SQUASHFS error: Unable to read inode 0x11f [ 92.408295][ T3806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.631178][ T3806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.640094][ T3806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.793777][ T22] usb 4-1: New USB device found, idVendor=b5c7, idProduct=5746, bcdDevice=a6.21 [ 92.799246][ T3799] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.813450][ T22] usb 4-1: New USB device strings: Mfr=127, Product=212, SerialNumber=3 [ 92.827953][ T22] usb 4-1: Product: syz [ 92.832142][ T22] usb 4-1: Manufacturer: syz [ 93.408481][ T22] usb 4-1: can't set config #1, error -71 [ 93.420115][ T22] usb 4-1: USB disconnect, device number 3 [ 93.630034][ T4146] loop2: detected capacity change from 0 to 8 [ 93.861321][ T4146] SQUASHFS error: Failed to read block 0x4e8: -5 [ 94.674685][ T26] audit: type=1800 audit(1724963744.666:3): pid=4146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.74" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 94.764553][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.800842][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.896968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.938918][ T4150] loop3: detected capacity change from 0 to 4096 [ 95.177838][ T4170] loop2: detected capacity change from 0 to 16 [ 95.868180][ T4170] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 16700) [ 95.915695][ T3799] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.938403][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.961921][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.976041][ T4150] NILFS (loop3): invalid segment: Checksum error in segment payload [ 96.027968][ T3748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.113765][ T4150] NILFS (loop3): trying rollback from an earlier position [ 96.338507][ T4150] NILFS (loop3): recovery complete [ 96.376445][ T4150] NILFS (loop3): error -4 creating segctord thread [ 96.623009][ T4188] overlayfs: failed to resolve './file1': -2 [ 96.828837][ T4188] loop1: detected capacity change from 0 to 256 [ 97.094013][ T26] audit: type=1326 audit(1724963746.996:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4175 comm="syz.2.80" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bf79ef9 code=0x7fc00000 [ 97.777767][ T4188] FAT-fs (loop1): error, clusters badly computed (2 != 1) [ 98.556376][ T4202] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 98.661995][ T4188] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 98.691399][ T4203] tipc: Can't bind to reserved service type 0 [ 98.811017][ T4188] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 98.912603][ T26] audit: type=1326 audit(1724963748.906:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4187 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 99.006263][ T4216] loop2: detected capacity change from 0 to 128 [ 99.685311][ T4216] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 99.723498][ T4215] syz.2.85: attempt to access beyond end of device [ 99.723498][ T4215] loop2: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 99.819496][ T26] audit: type=1326 audit(1724963749.736:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4187 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 99.993801][ T3789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.244303][ T3644] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 100.260027][ T3644] Bluetooth: hci4: Injecting HCI hardware error event [ 100.268661][ T48] Bluetooth: hci4: hardware error 0x00 [ 100.563739][ T3789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.607154][ T3789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.704353][ T3789] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 100.713424][ T3789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.907086][ T4232] fuse: Bad value for 'fd' [ 101.273767][ T22] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 101.528287][ T3789] usb 4-1: config 0 descriptor?? [ 101.544449][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 101.645724][ C1] eth0: bad gso: type: 1, size: 1408 [ 101.683798][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.699416][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.722285][ T22] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.742089][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.778525][ T22] usb 1-1: config 0 descriptor?? [ 101.788837][ T4237] loop2: detected capacity change from 0 to 512 [ 101.800731][ T4237] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.880146][ T4237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.897278][ T4237] ext4 filesystem being mounted at /24/control supports timestamps until 2038 (0x7fffffff) [ 102.010708][ T4217] binder: 4214:4217 ioctl c0306201 20000580 returned -14 [ 102.245166][ T4242] syz.2.91[4242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.245611][ T4242] syz.2.91[4242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.279743][ T4242] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.91: path /24/control: bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 102.414064][ T48] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 102.834107][ T3637] EXT4-fs (loop2): unmounting filesystem. [ 102.844656][ T22] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input5 [ 102.872178][ T22] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 103.006639][ T947] usb 1-1: USB disconnect, device number 4 [ 103.053486][ T4246] loop2: detected capacity change from 0 to 512 [ 103.069743][ T3799] udevd[3799]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 103.076874][ T4246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.108651][ T4246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 103.128663][ T4246] EXT4-fs (loop2): orphan cleanup on readonly fs [ 103.137472][ T4246] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 103.163149][ T4246] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 103.175363][ T4246] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #13: comm syz.2.92: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 103.195592][ T4246] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.92: couldn't read orphan inode 13 (err -117) [ 103.207731][ T4246] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.219955][ T4246] EXT4-fs (loop2): unmounting filesystem. [ 103.321149][ T4246] loop2: detected capacity change from 0 to 256 [ 103.328172][ T4246] exfat: Deprecated parameter 'utf8' [ 103.333570][ T4246] exfat: Deprecated parameter 'namecase' [ 103.344956][ T4246] exfat: Deprecated parameter 'namecase' [ 103.350617][ T4246] exfat: Deprecated parameter 'utf8' [ 103.378876][ T4246] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 103.544803][ T3789] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 103.554332][ T3789] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 103.561831][ T3789] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 103.594786][ T3789] usb 4-1: USB disconnect, device number 4 [ 103.881048][ T4254] loop0: detected capacity change from 0 to 128 [ 106.281352][ T3639] Bluetooth: hci5: sending frame failed (-49) [ 106.288436][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 106.324667][ T4274] loop0: detected capacity change from 0 to 1024 [ 107.979379][ T4277] sched: RT throttling activated [ 110.328841][ T4286] ubi0: attaching mtd0 [ 110.342705][ T4286] ubi0: scanning is finished [ 110.347373][ T4286] ubi0: empty MTD device detected [ 110.774112][ T4286] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 110.843990][ T102] hfsplus: b-tree write err: -5, ino 4 [ 114.233242][ T4329] loop0: detected capacity change from 0 to 512 [ 114.373426][ T4329] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 115.217300][ T4342] loop3: detected capacity change from 0 to 256 [ 115.292573][ T4329] System zones: 0-2, 18-18, 34-35 [ 115.393525][ T4329] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 115.432271][ T4329] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 116.237862][ T4349] loop3: detected capacity change from 0 to 256 [ 116.464536][ T4352] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.109: Directory hole found for htree leaf block 0 [ 116.488792][ T4352] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.109: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 116.511875][ T4352] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 12: comm syz.0.109: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 116.533186][ T4352] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz.0.109: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 116.555175][ T4352] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 14: comm syz.0.109: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 116.577773][ T4352] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 15: comm syz.0.109: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 116.598997][ T4352] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz.0.109: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 116.624560][ T4352] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 17: comm syz.0.109: path /21/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 116.645269][ T4352] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 18: comm syz.0.109: lblock 23 mapped to illegal pblock 18 (length 1) [ 116.781828][ C1] eth0: bad gso: type: 1, size: 1408 [ 116.879313][ T4357] loop1: detected capacity change from 0 to 512 [ 116.909602][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 116.986595][ T4357] EXT4-fs (loop1): 1 orphan inode deleted [ 116.998955][ T4361] vcan0 speed is unknown, defaulting to 1000 [ 117.007427][ T4361] vcan0 speed is unknown, defaulting to 1000 [ 117.015286][ T4361] vcan0 speed is unknown, defaulting to 1000 [ 117.057109][ T4362] TCP: MD5 Hash mismatch for [fe80::bb]:0->[ff02::1]:20002 L3 index 0 [ 117.077443][ T4357] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.104840][ T4357] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038 (0x7fffffff) [ 117.166856][ T4361] infiniband syz1: set active [ 117.171847][ T4361] infiniband syz1: added vcan0 [ 117.188138][ T22] vcan0 speed is unknown, defaulting to 1000 [ 117.222286][ T4361] RDS/IB: syz1: added [ 117.226945][ T4361] smc: adding ib device syz1 with port count 1 [ 117.233303][ T4361] smc: ib device syz1 port 1 has pnetid [ 117.252627][ T4361] vcan0 speed is unknown, defaulting to 1000 [ 117.348496][ T4361] vcan0 speed is unknown, defaulting to 1000 [ 117.349952][ T4368] loop0: detected capacity change from 0 to 256 [ 117.366897][ T22] vcan0 speed is unknown, defaulting to 1000 [ 117.394384][ T4368] FAT-fs (loop0): Unrecognized mount option "shoŠtname=mixed" or missing value [ 117.513942][ T4361] vcan0 speed is unknown, defaulting to 1000 [ 117.608337][ T4361] vcan0 speed is unknown, defaulting to 1000 [ 117.701450][ T4361] vcan0 speed is unknown, defaulting to 1000 [ 117.798630][ T4371] netlink: 165 bytes leftover after parsing attributes in process `syz.0.118'. [ 119.737065][ T4382] rdma_rxe: rxe_register_device failed with error -23 [ 120.070135][ T4382] rdma_rxe: failed to add veth1_vlan [ 120.402959][ T26] audit: type=1800 audit(1724963770.396:7): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.117" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 120.786506][ T4387] IPv6: sit1: Disabled Multicast RS [ 121.115501][ T4391] loop2: detected capacity change from 0 to 40427 [ 121.154020][ T4391] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 121.163015][ T4391] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 121.304643][ T4391] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.314946][ T4387] loop3: detected capacity change from 0 to 512 [ 121.342937][ T4387] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 121.383662][ T4387] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 121.395915][ T4391] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 121.403073][ T4391] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.355777][ T3637] syz-executor: attempt to access beyond end of device [ 122.355777][ T3637] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.378020][ T4405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.126'. [ 122.425148][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 122.429473][ T4408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.556221][ T4408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.708089][ T22] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 122.716363][ T4412] vcan0 speed is unknown, defaulting to 1000 [ 123.922762][ T4423] loop0: detected capacity change from 0 to 32768 [ 123.945577][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.964651][ T4423] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.131 (4423) [ 124.106544][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 124.293738][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 124.569911][ T4427] loop2: detected capacity change from 0 to 512 [ 124.633334][ T4423] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.643889][ T4423] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 124.652610][ T4423] BTRFS info (device loop0): using free space tree [ 124.683867][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.705869][ T4427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 124.745950][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 124.778334][ T4427] ext4 filesystem being mounted at /32/bus supports timestamps until 2038 (0x7fffffff) [ 124.855072][ T22] usb 4-1: SerialNumber: syz [ 125.007645][ T4404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 126.080968][ T4458] loop1: detected capacity change from 0 to 1024 [ 126.122379][ T4458] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.151804][ T22] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 126.379456][ T22] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 126.445695][ T22] usb 4-1: USB disconnect, device number 5 [ 126.673508][ T4423] BTRFS error (device loop0): open_ctree failed [ 126.857631][ T3637] EXT4-fs (loop2): unmounting filesystem. [ 126.872074][ T4473] loop3: detected capacity change from 0 to 512 [ 126.933653][ T4473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.954124][ T4473] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 126.991111][ T4479] loop1: detected capacity change from 0 to 1024 [ 126.998097][ T4479] hfsplus: unable to parse mount options [ 130.103385][ T4488] tls_set_device_offload_rx: netdev not found [ 130.624642][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 130.722652][ T4497] loop2: detected capacity change from 0 to 8 [ 130.755318][ T4497] SQUASHFS error: lzo decompression failed, data probably corrupt [ 130.763366][ T4497] SQUASHFS error: Failed to read block 0x91: -5 [ 130.769673][ T4497] SQUASHFS error: Unable to read metadata cache entry [8f] [ 130.777006][ T4497] SQUASHFS error: Unable to read inode 0x11f [ 131.416490][ T4501] loop3: detected capacity change from 0 to 128 [ 134.177997][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.189221][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.346587][ T4504] loop1: detected capacity change from 0 to 164 [ 134.421799][ T4521] loop3: detected capacity change from 0 to 1024 [ 134.800521][ T4529] ubi0: attaching mtd0 [ 134.809642][ T4529] ubi0: scanning is finished [ 135.562054][ T4529] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 135.651867][ T4523] vcan0 speed is unknown, defaulting to 1000 [ 135.699073][ T102] hfsplus: b-tree write err: -5, ino 4 [ 135.899974][ T4535] fuse: Bad value for 'fd' [ 136.090498][ T4538] loop3: detected capacity change from 0 to 256 [ 136.451162][ T4541] loop3: detected capacity change from 0 to 512 [ 137.112218][ T4541] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 137.122063][ T4541] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 137.131251][ T4541] EXT4-fs (loop3): Couldn't mount because of unsupported optional features (fffc1829) [ 137.140841][ T4541] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 137.226389][ T4543] loop2: detected capacity change from 0 to 512 [ 137.285051][ T4543] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 137.293110][ T4543] System zones: 0-2, 18-18, 34-35 [ 137.456197][ T4550] loop3: detected capacity change from 0 to 47 [ 137.491720][ T4543] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 137.506384][ T4543] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff) [ 138.304615][ T4560] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.148: Directory hole found for htree leaf block 0 [ 138.374877][ T3637] EXT4-fs (loop2): unmounting filesystem. [ 138.596811][ T4565] loop2: detected capacity change from 0 to 2048 [ 138.719043][ T4565] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.850730][ T4566] device veth0_vlan left promiscuous mode [ 138.872036][ T4566] device veth0_vlan entered promiscuous mode [ 138.932979][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.985090][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.992986][ T3694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.401634][ T4574] netlink: 44 bytes leftover after parsing attributes in process `syz.4.154'. [ 140.118378][ T4573] loop0: detected capacity change from 0 to 256 [ 140.653679][ T947] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.893795][ T947] usb 4-1: Using ep0 maxpacket: 16 [ 141.038591][ T4585] loop2: detected capacity change from 0 to 256 [ 141.154055][ T4587] fuse: Bad value for 'fd' [ 141.203709][ T947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.229262][ T947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.303614][ T947] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.338799][ T947] usb 4-1: New USB device found, idVendor=1e7d, idProduct=71ce, bcdDevice= 0.00 [ 141.418193][ T947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.492181][ T947] usb 4-1: config 0 descriptor?? [ 141.623787][ T26] audit: type=1326 audit(1724963791.546:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.2.155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f256bf79ef9 code=0x0 [ 142.226801][ T947] hid-generic 0003:1E7D:71CE.0003: unknown main item tag 0x0 [ 142.249814][ T947] hid-generic 0003:1E7D:71CE.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:71ce] on usb-dummy_hcd.3-1/input0 [ 143.418861][ T4605] loop0: detected capacity change from 0 to 512 [ 143.537649][ T4605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.904978][ T4605] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 144.194793][ T4605] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.232614][ T4605] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 144.259591][ T4611] loop1: detected capacity change from 0 to 512 [ 144.322402][ T4605] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 144.332953][ T4605] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz.0.162: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 144.415132][ T4605] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.162: couldn't read orphan inode 13 (err -117) [ 144.437750][ T4613] loop2: detected capacity change from 0 to 512 [ 144.454979][ T4611] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 144.473296][ T4605] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.499971][ T4605] EXT4-fs (loop0): unmounting filesystem. [ 144.553779][ T4611] System zones: 0-2, 18-18, 34-35 [ 144.568246][ T4611] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.578442][ T4611] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 144.582281][ T4613] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 144.687786][ T4613] EXT4-fs (loop2): 1 truncate cleaned up [ 144.714863][ T4613] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 145.048916][ T4623] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.163: Directory hole found for htree leaf block 0 [ 145.109814][ T4624] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.163: path /31/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 145.149667][ T4624] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 12: comm syz.1.163: path /31/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 145.425588][ T4605] loop0: detected capacity change from 0 to 256 [ 145.442668][ T4605] exfat: Deprecated parameter 'utf8' [ 145.518462][ T4605] exfat: Deprecated parameter 'namecase' [ 145.533985][ T4605] exfat: Deprecated parameter 'namecase' [ 145.578769][ T4605] exfat: Deprecated parameter 'utf8' [ 145.591866][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 145.653943][ T4605] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 145.844215][ T4619] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 146.428333][ T3637] EXT4-fs (loop2): unmounting filesystem. [ 146.478305][ T4636] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 146.637524][ T14] usb 4-1: USB disconnect, device number 6 [ 148.705907][ T4642] loop2: detected capacity change from 0 to 256 [ 148.915345][ T4642] exFAT-fs (loop2): error, invalid access to FAT bad cluster (entry 0x00000005) [ 148.963710][ T4642] exFAT-fs (loop2): failed to load alloc-bitmap [ 149.003352][ T4642] exFAT-fs (loop2): failed to recognize exfat type [ 149.265916][ T4655] fuse: Bad value for 'fd' [ 149.272301][ T4653] loop1: detected capacity change from 0 to 512 [ 149.373908][ T4642] xt_limit: Overflow, try lower: 6/2147483648 [ 149.450523][ T4653] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.170: casefold flag without casefold feature [ 149.532381][ T4659] Bluetooth: MGMT ver 1.22 [ 149.657030][ T4653] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.170: missing EA_INODE flag [ 149.697954][ T4653] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.170: error while reading EA inode 2 err=-117 [ 149.897765][ T4653] EXT4-fs (loop1): 1 orphan inode deleted [ 149.903529][ T4653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.733228][ T4653] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.170: Directory hole found for htree leaf block 0 [ 151.794413][ T4653] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.170: Directory hole found for htree leaf block 0 [ 151.852284][ T4672] loop2: detected capacity change from 0 to 1024 [ 152.264894][ T4681] netlink: 16 bytes leftover after parsing attributes in process `syz.3.178'. [ 152.399547][ T4682] ubi0: attaching mtd0 [ 152.832263][ T4682] ubi0: scanning is finished [ 152.854676][ T4682] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 152.926371][ T4684] loop3: detected capacity change from 0 to 2048 [ 152.935958][ T4684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.052186][ T4691] vcan0 speed is unknown, defaulting to 1000 [ 156.406891][ T4704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.183'. [ 156.980837][ T3696] hfsplus: b-tree write err: -5, ino 4 [ 157.086451][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 157.089178][ T4709] fuse: Bad value for 'fd' [ 157.159968][ T4711] loop4: detected capacity change from 0 to 1024 [ 157.646273][ T4711] EXT4-fs: Ignoring removed orlov option [ 157.754889][ T4711] EXT4-fs (loop4): Test dummy encryption mode enabled [ 157.993976][ T4711] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 160.834504][ T4711] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 161.090292][ T3806] EXT4-fs (loop4): unmounting filesystem. [ 164.498511][ T4778] fuse: Bad value for 'fd' [ 165.468893][ T4784] loop3: detected capacity change from 0 to 512 [ 166.150853][ T4789] loop0: detected capacity change from 0 to 512 [ 166.192809][ T4784] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.197: casefold flag without casefold feature [ 166.216005][ T4784] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.197: missing EA_INODE flag [ 166.232801][ T4784] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.197: error while reading EA inode 2 err=-117 [ 166.247503][ T4789] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 166.256502][ T4789] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 166.289026][ T4784] EXT4-fs (loop3): 1 orphan inode deleted [ 166.296227][ T4784] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.318148][ T4784] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.197: Directory hole found for htree leaf block 0 [ 166.336266][ T4784] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.197: Directory hole found for htree leaf block 0 [ 166.509453][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 166.598178][ T4791] loop1: detected capacity change from 0 to 4096 [ 166.659101][ T4791] ntfs: (device loop1): map_mft_record_page(): Attempt to read mft record 0x0, which is beyond the end of the mft. This is probably a bug in the ntfs driver. [ 166.697435][ T4791] ntfs: (device loop1): map_mft_record(): Failed with error code 2. [ 166.844052][ T4791] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 167.613670][ T4791] ntfs: (device loop1): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net [ 167.714078][ T4807] loop0: detected capacity change from 0 to 256 [ 167.984748][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 168.100098][ T4811] loop0: detected capacity change from 0 to 1024 [ 168.203884][ T4811] hfsplus: failed to load root directory [ 168.316578][ T3716] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.214289][ T4817] loop0: detected capacity change from 0 to 256 [ 169.354434][ T4817] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.369422][ T4817] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 170.786365][ T4831] fuse: Bad value for 'fd' [ 172.120349][ T4843] loop1: detected capacity change from 0 to 164 [ 172.365854][ T4848] loop0: detected capacity change from 0 to 512 [ 172.509405][ T4848] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.218: casefold flag without casefold feature [ 172.522504][ T4848] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.218: missing EA_INODE flag [ 172.534966][ T4848] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.218: error while reading EA inode 2 err=-117 [ 172.564907][ T4848] EXT4-fs (loop0): 1 orphan inode deleted [ 172.570709][ T4848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 172.726547][ T4848] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.218: Directory hole found for htree leaf block 0 [ 173.806173][ T4851] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.218: Directory hole found for htree leaf block 0 [ 174.189126][ T4862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.220'. [ 174.799653][ T4864] loop4: detected capacity change from 0 to 512 [ 174.884144][ T4864] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 174.988940][ T4864] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 175.038494][ T4864] EXT4-fs (loop4): Remounting filesystem read-only [ 175.062006][ T4864] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.221: invalid indirect mapped block 1 (level 1) [ 175.080515][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 175.090957][ T4867] loop3: detected capacity change from 0 to 512 [ 175.199433][ T4864] EXT4-fs (loop4): 1 truncate cleaned up [ 175.255223][ T4867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 175.270010][ T4864] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 175.287468][ T4867] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 175.496720][ T4875] input: syz1 as /devices/virtual/input/input6 [ 175.843728][ T3642] Bluetooth: hci2: command 0x0406 tx timeout [ 175.850848][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 175.857693][ T3644] Bluetooth: hci1: command 0x0406 tx timeout [ 176.609216][ T3806] EXT4-fs (loop4): unmounting filesystem. [ 176.664548][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 177.761756][ T4900] loop1: detected capacity change from 0 to 164 [ 178.489105][ T4899] rock: directory entry would overflow storage [ 178.495409][ T4899] rock: sig=0x4f50, size=4, remaining=3 [ 178.500988][ T4899] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 178.586022][ T4904] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 178.722697][ T4904] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 179.170286][ T4916] tipc: Started in network mode [ 179.175229][ T4916] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 179.182334][ T4916] tipc: Enabled bearer , priority 0 [ 179.190487][ T4916] tipc: Enabled bearer , priority 0 [ 180.263898][ T22] tipc: Node number set to 10136234 [ 180.716495][ T4923] loop1: detected capacity change from 0 to 512 [ 181.635307][ T4923] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.234: casefold flag without casefold feature [ 181.681031][ T4923] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz.1.234: missing EA_INODE flag [ 181.720998][ T4923] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.234: error while reading EA inode 2 err=-117 [ 181.739077][ T4923] EXT4-fs (loop1): 1 orphan inode deleted [ 181.746854][ T4923] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.770041][ T4923] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.234: Directory hole found for htree leaf block 0 [ 181.788365][ T4923] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.234: Directory hole found for htree leaf block 0 [ 182.642297][ T4950] loop4: detected capacity change from 0 to 164 [ 182.800030][ T4952] loop0: detected capacity change from 0 to 2048 [ 182.884537][ T4952] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 182.889510][ T4956] loop3: detected capacity change from 0 to 512 [ 182.907602][ T4952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.086024][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 183.110752][ T4956] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 183.379280][ T4956] System zones: 0-2, 18-18, 34-35 [ 183.858196][ T4956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.897524][ T4956] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038 (0x7fffffff) [ 184.467209][ T4969] loop1: detected capacity change from 0 to 1024 [ 185.167817][ T4975] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.242: Directory hole found for htree leaf block 0 [ 185.185391][ T26] audit: type=1326 audit(1724963834.586:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bf79ef9 code=0x7ffc0000 [ 185.262146][ C1] eth0: bad gso: type: 1, size: 1408 [ 185.306018][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 185.481239][ T26] audit: type=1326 audit(1724963835.266:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4962 comm="syz.2.245" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bf79ef9 code=0x7ffc0000 [ 185.679444][ T26] audit: type=1800 audit(1724963835.676:11): pid=4977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.244" name="bus" dev="loop1" ino=26 res=0 errno=0 [ 185.704599][ T1037] block nbd1: Attempted send on invalid socket [ 185.711000][ T1037] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 185.953506][ T4980] 9pnet_fd: Insufficient options for proto=fd [ 186.264525][ T4981] EXT4-fs (nbd1): unable to read superblock [ 186.365502][ T4988] loop0: detected capacity change from 0 to 256 [ 186.406827][ T4988] FAT-fs (loop0): bogus sectors per cluster 30 [ 186.414110][ T4988] FAT-fs (loop0): Can't find a valid FAT filesystem [ 186.569022][ T4988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.490140][ T4996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 187.646134][ T3644] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 187.843917][ T5006] loop3: detected capacity change from 0 to 2048 [ 188.359843][ T4995] delete_channel: no stack [ 188.390302][ T5007] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.550213][ T5005] loop4: detected capacity change from 0 to 512 [ 188.677483][ T5005] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.257: casefold flag without casefold feature [ 188.693141][ T5005] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.257: missing EA_INODE flag [ 188.706661][ T5005] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.257: error while reading EA inode 2 err=-117 [ 188.720794][ T5005] EXT4-fs (loop4): 1 orphan inode deleted [ 188.726894][ T5005] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 188.756965][ T5005] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.257: Directory hole found for htree leaf block 0 [ 188.922276][ T5014] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.257: Directory hole found for htree leaf block 0 [ 189.218627][ T4384] hfsplus: b-tree write err: -5, ino 4 [ 189.260403][ T5017] ptrace attach of "./syz-executor exec"[5020] was attempted by "./syz-executor exec"[5017] [ 189.394910][ T5013] loop2: detected capacity change from 0 to 128 [ 189.429328][ T5013] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 189.460598][ T3806] EXT4-fs (loop4): unmounting filesystem. [ 189.511634][ T5027] loop3: detected capacity change from 0 to 256 [ 189.628275][ T5030] loop4: detected capacity change from 0 to 512 [ 189.781007][ T5013] syz.2.260: attempt to access beyond end of device [ 189.781007][ T5013] loop2: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 189.803697][ T5013] syz.2.260: attempt to access beyond end of device [ 189.803697][ T5013] loop2: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 190.411404][ T5036] ipt_REJECT: ECHOREPLY no longer supported. [ 190.496849][ T5029] FAT-fs (loop2): FAT read failed (blocknr 128) [ 190.513503][ T5030] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 190.531303][ T5030] System zones: 0-2, 18-18, 34-35 [ 190.605756][ T5030] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 190.665765][ T5036] netlink: 'syz.1.263': attribute type 8 has an invalid length. [ 190.673420][ T5036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.695663][ T5030] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 191.143493][ T5044] netlink: 1300 bytes leftover after parsing attributes in process `syz.1.263'. [ 191.298903][ T5046] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.261: Directory hole found for htree leaf block 0 [ 191.347131][ T5046] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.261: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 191.378816][ T5046] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz.4.261: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 191.404851][ T5046] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz.4.261: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 191.429316][ T5046] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz.4.261: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 191.451460][ T5046] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz.4.261: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 191.473655][ T5046] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.261: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 191.499893][ T5046] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.261: path /28/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 191.703673][ T3644] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 191.712299][ T3644] Bluetooth: hci1: Injecting HCI hardware error event [ 191.721005][ T3642] Bluetooth: hci1: hardware error 0x00 [ 191.853637][ T3806] EXT4-fs (loop4): unmounting filesystem. [ 191.870797][ T5048] program syz.3.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.057388][ T5051] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 192.180041][ T5054] netlink: 'syz.2.267': attribute type 39 has an invalid length. [ 192.203255][ T26] audit: type=1326 audit(1724963842.196:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5049 comm="syz.2.267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f256bf79ef9 code=0x0 [ 192.930319][ T5063] loop1: detected capacity change from 0 to 16 [ 193.054725][ T5063] erofs: (device loop1): mounted with root inode @ nid 36. [ 193.301350][ T5065] loop2: detected capacity change from 0 to 164 [ 194.493352][ T3642] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 194.513164][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.519505][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.920558][ T5078] loop0: detected capacity change from 0 to 512 [ 195.721128][ T5078] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.272: casefold flag without casefold feature [ 195.748748][ T5078] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.272: missing EA_INODE flag [ 195.761936][ T5078] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.272: error while reading EA inode 2 err=-117 [ 195.801143][ T5078] EXT4-fs (loop0): 1 orphan inode deleted [ 195.807121][ T5078] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 195.834099][ T5078] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.272: Directory hole found for htree leaf block 0 [ 195.850412][ T5078] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.272: Directory hole found for htree leaf block 0 [ 196.629590][ T5092] loop4: detected capacity change from 0 to 512 [ 197.673143][ T5092] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 197.815542][ T5092] System zones: 0-2, 18-18, 34-35 [ 198.022409][ T5092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 198.089487][ T5092] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 199.479343][ T5111] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.277: Directory hole found for htree leaf block 0 [ 199.572439][ T3806] EXT4-fs (loop4): unmounting filesystem. [ 199.582593][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 202.098769][ T5145] netlink: 164 bytes leftover after parsing attributes in process `syz.3.289'. [ 203.301123][ C1] eth0: bad gso: type: 1, size: 1408 [ 203.339390][ C1] eth0: bad gso: type: 1, size: 1408 [ 203.733644][ T5153] loop0: detected capacity change from 0 to 40427 [ 203.742448][ T5153] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 203.750249][ T5153] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 203.799169][ T5153] F2FS-fs (loop0): Found nat_bits in checkpoint [ 203.833502][ T5153] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 203.880004][ T5153] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 203.887123][ T5153] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.526997][ T5170] loop3: detected capacity change from 0 to 512 [ 205.714784][ T3641] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 205.714841][ T3641] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 205.722721][ T3641] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 205.743248][ T3641] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 205.769630][ T5171] loop1: detected capacity change from 0 to 512 [ 205.777258][ T3641] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 205.777301][ T3641] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 205.777312][ T3641] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 205.842213][ T5170] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 205.909116][ T5170] System zones: 0-2, 18-18, 34-35 [ 205.996940][ T5171] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 206.007198][ T5170] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 206.021986][ T5170] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038 (0x7fffffff) [ 206.212411][ T5176] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.294: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 206.318261][ T5171] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6). [ 206.344034][ T5171] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 206.730042][ T5190] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.295: Directory hole found for htree leaf block 0 [ 206.777912][ T5190] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.295: path /77/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 206.811881][ T5190] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz.3.295: path /77/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 206.837312][ T5190] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.295: path /77/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 206.859806][ T5190] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz.3.295: path /77/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 206.883460][ T5190] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz.3.295: path /77/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 206.913179][ T5190] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.295: path /77/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 207.098846][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 207.121014][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 207.124916][ T5193] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 207.218086][ T5196] overlayfs: missing 'lowerdir' [ 207.274414][ T5193] binder: 5192:5193 ioctl 4004556e 4 returned -22 [ 207.310248][ T5200] loop0: detected capacity change from 0 to 512 [ 207.357778][ T5200] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 207.387405][ T5200] EXT4-fs (loop0): orphan cleanup on readonly fs [ 207.471951][ T5200] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.298: casefold flag without casefold feature [ 207.561261][ T5200] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.298: unexpected EA_INODE flag [ 207.577077][ T5200] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.298: couldn't read orphan inode 16 (err -117) [ 207.592104][ T5200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 207.637005][ T5210] Process accounting resumed [ 207.677718][ T3641] EXT4-fs (loop0): unmounting filesystem. [ 207.763835][ T3789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 208.145666][ T3789] usb 2-1: Using ep0 maxpacket: 32 [ 208.263722][ T3789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.283350][ T3789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.310928][ T3789] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 208.337109][ T3789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.384172][ T3789] usb 2-1: config 0 descriptor?? [ 208.424921][ T3789] hub 2-1:0.0: USB hub found [ 208.709581][ T5206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.776228][ T5206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.924242][ T3789] hub 2-1:0.0: 1 port detected [ 209.776287][ T5233] loop2: detected capacity change from 0 to 512 [ 209.860544][ T5233] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 209.863886][ T3789] hub 2-1:0.0: activate --> -90 [ 209.879099][ T5233] System zones: 0-2, 18-18, 34-35 [ 209.890258][ T5233] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 209.901726][ T5233] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038 (0x7fffffff) [ 211.299652][ T5247] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 211.318962][ T5243] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.312: Directory hole found for htree leaf block 0 [ 211.473195][ T5231] loop1: detected capacity change from 0 to 512 [ 211.492022][ T3637] EXT4-fs (loop2): unmounting filesystem. [ 211.535476][ T5231] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 211.643355][ T5231] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 211.650517][ T5251] loop3: detected capacity change from 0 to 2048 [ 211.661199][ T5251] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 211.709140][ T5231] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff) [ 211.732721][ T5251] EXT4-fs (loop3): group descriptors corrupted! [ 211.885700][ T7] usb 2-1: USB disconnect, device number 2 [ 211.903803][ T3789] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 211.921997][ T3789] usb 2-1-port1: config error [ 212.642087][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 214.456774][ T5293] loop1: detected capacity change from 0 to 512 [ 214.890692][ T5293] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 214.928186][ T5293] System zones: 0-2, 18-18, 34-35 [ 214.964766][ T5293] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 215.094507][ T5293] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038 (0x7fffffff) [ 216.122336][ T5309] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.328: Directory hole found for htree leaf block 0 [ 216.164148][ T5310] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.328: path /56/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 217.376903][ T5315] xt_connbytes: Forcing CT accounting to be enabled [ 217.383856][ T5315] x_tables: ip_tables: osf match: only valid for protocol 6 [ 218.227334][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 219.016110][ T5329] loop1: detected capacity change from 0 to 256 [ 219.054044][ T5329] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 221.155212][ T5347] loop1: detected capacity change from 0 to 512 [ 221.530533][ T5347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.625692][ T5347] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038 (0x7fffffff) [ 222.160286][ T5363] loop2: detected capacity change from 0 to 512 [ 222.645880][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 222.677041][ T5363] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 222.695498][ T5363] System zones: 0-2, 18-18, 34-35 [ 222.735641][ T5363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 222.778694][ T5363] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038 (0x7fffffff) [ 223.100603][ T5378] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 224.590531][ T5387] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.344: Directory hole found for htree leaf block 0 [ 224.611225][ T5387] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.344: path /73/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 224.643251][ T5387] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz.2.344: path /73/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 224.664500][ T5387] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz.2.344: path /73/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 224.686033][ T5387] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz.2.344: path /73/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 224.708880][ T5387] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz.2.344: path /73/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 224.729545][ T5387] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz.2.344: path /73/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 224.752169][ T5387] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz.2.344: path /73/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 224.772697][ T5387] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 18: comm syz.2.344: lblock 23 mapped to illegal pblock 18 (length 1) [ 227.320113][ T3637] EXT4-fs (loop2): unmounting filesystem. [ 228.473818][ T152] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 228.843630][ T152] usb 3-1: Using ep0 maxpacket: 8 [ 228.971205][ T152] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=1c.ef [ 228.992014][ T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.996661][ T5438] loop1: detected capacity change from 0 to 512 [ 229.009945][ T152] usb 3-1: config 0 descriptor?? [ 229.108395][ T5440] 9pnet: p9_errstr2errno: server reported unknown error œæç [ 229.449583][ T3718] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 229.942071][ T5438] EXT4-fs (loop1): 1 orphan inode deleted [ 229.949047][ T5438] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 229.958634][ T5438] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038 (0x7fffffff) [ 229.989191][ T26] audit: type=1804 audit(1724963879.986:13): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.360" name="/newroot/63/file1/bus" dev="loop1" ino=16 res=1 errno=0 [ 230.143171][ T5443] loop0: detected capacity change from 0 to 164 [ 230.603809][ T3718] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 231.276483][ T3718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.300185][ T4471] usb 3-1: USB disconnect, device number 3 [ 231.308101][ T3718] usb 4-1: config 0 descriptor?? [ 231.377576][ T3718] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 231.904876][ T3718] gspca_sunplus: reg_w_riv err -71 [ 231.912271][ T3718] sunplus: probe of 4-1:0.0 failed with error -71 [ 231.958431][ T3718] usb 4-1: USB disconnect, device number 7 [ 233.003002][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 233.075144][ T5459] loop2: detected capacity change from 0 to 164 [ 235.369173][ T5465] "syz.2.367" (5465) uses obsolete ecb(arc4) skcipher [ 235.566338][ T5471] loop0: detected capacity change from 0 to 256 [ 235.598672][ T5471] exfat: Deprecated parameter 'utf8' [ 235.610782][ T5471] exfat: Deprecated parameter 'namecase' [ 235.913722][ T5471] exfat: Deprecated parameter 'utf8' [ 235.924797][ T5471] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x114b6bd0) [ 235.954762][ T5471] exFAT-fs (loop0): invalid boot region [ 235.970551][ T5471] exFAT-fs (loop0): failed to recognize exfat type [ 238.963640][ T5508] loop3: detected capacity change from 0 to 512 [ 239.617817][ T5508] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 239.698052][ T5508] System zones: 0-2, 18-18, 34-35 [ 242.713898][ T5508] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 242.722913][ T5508] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038 (0x7fffffff) [ 242.780966][ T5527] loop4: detected capacity change from 0 to 128 [ 242.989779][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 243.974235][ T5528] device pim6reg1 entered promiscuous mode [ 244.051393][ T5544] loop3: detected capacity change from 0 to 64 [ 244.135140][ T5545] loop1: detected capacity change from 0 to 512 [ 244.141735][ T5545] ext4: Unknown parameter 'func' [ 244.359658][ T5550] fuse: Unknown parameter 'f0x000000000000000700000000000000000000' [ 245.271664][ T5548] loop1: detected capacity change from 0 to 2048 [ 245.327414][ T5548] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 245.571712][ T5548] syz.1.390: attempt to access beyond end of device [ 245.571712][ T5548] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 245.593818][ T5564] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.726978][ T5568] Invalid option length (210556) for dns_resolver key [ 245.809909][ T5548] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 16777227 [ 245.819949][ T5548] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=16) [ 245.869545][ T5548] Remounting filesystem read-only [ 245.881291][ T5548] NILFS (loop1): error -5 truncating bmap (ino=16) [ 246.173504][ T5577] netlink: 16 bytes leftover after parsing attributes in process `syz.2.395'. [ 246.945664][ T3634] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 247.224985][ T3634] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 247.232421][ T3634] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 247.333743][ T3634] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 247.350080][ T3634] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 247.395401][ T3634] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 247.543263][ T3634] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 247.550813][ T3634] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 247.573250][ T3634] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 247.608306][ T3634] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 247.636756][ T3634] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 247.994792][ T5584] loop4: detected capacity change from 0 to 2048 [ 249.134397][ T5584] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 250.267698][ T3806] EXT4-fs (loop4): unmounting filesystem. [ 250.602766][ T5627] loop1: detected capacity change from 0 to 128 [ 250.780790][ T5626] Invalid ELF header magic: != ELF [ 255.685865][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.692228][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.853718][ T3789] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 256.169488][ T5678] vcan0 speed is unknown, defaulting to 1000 [ 256.863701][ T3789] usb 1-1: config 0 has no interfaces? [ 257.047061][ T3789] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 257.085990][ T3789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.091354][ T5682] loop3: detected capacity change from 0 to 512 [ 257.117114][ T3789] usb 1-1: config 0 descriptor?? [ 257.193882][ T5682] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.422: bad orphan inode 15 [ 257.223809][ T5682] EXT4-fs (loop3): Remounting filesystem read-only [ 257.234794][ T5682] ext4_test_bit(bit=14, block=5) = 0 [ 257.254698][ T5682] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 257.340875][ T5682] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 257.394161][ T5682] EXT4-fs (loop3): Remounting filesystem read-only [ 257.410648][ T3625] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 257.437035][ T5682] fuse: Unknown parameter 'hash' [ 257.893276][ T5666] binder: Unknown parameter '0000000000000000000018446744073709551615' [ 257.935780][ T4471] usb 1-1: USB disconnect, device number 5 [ 257.942602][ T5689] IPv6: NLM_F_REPLACE set, but no existing node found! [ 258.750517][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 259.163765][ T3625] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 259.189772][ T3625] usb 3-1: can't read configurations, error -71 [ 259.834159][ T5711] loop1: detected capacity change from 0 to 128 [ 259.939742][ T5711] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 260.107249][ T5711] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038 (0x7fffffff) [ 261.445723][ T3634] EXT4-fs (loop1): unmounting filesystem. [ 261.473849][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 261.594791][ T3789] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 261.813573][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 261.935215][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 262.017153][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 262.124157][ T3789] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 262.613197][ T3789] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.633584][ T7] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 263.404061][ T3789] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 263.414115][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.426593][ T7] usb 4-1: config 0 descriptor?? [ 263.593989][ T3789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.878396][ T3789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.887390][ T3789] usb 1-1: Product: syz [ 263.891732][ T3789] usb 1-1: Manufacturer: syz [ 263.898837][ T3789] usb 1-1: SerialNumber: syz [ 264.677273][ T5746] loop0: detected capacity change from 0 to 1024 [ 264.740538][ T5748] loop4: detected capacity change from 0 to 128 [ 264.779965][ T5746] syz.0.433: attempt to access beyond end of device [ 264.779965][ T5746] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 264.808269][ C1] eth0: bad gso: type: 1, size: 1408 [ 264.844612][ T5746] Buffer I/O error on dev loop0, logical block 2889, async page read [ 264.918296][ T5721] loop3: detected capacity change from 0 to 1024 [ 264.925429][ T5746] syz.0.433: attempt to access beyond end of device [ 264.925429][ T5746] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 264.950998][ T5746] Buffer I/O error on dev loop0, logical block 2889, async page read [ 265.564112][ T26] audit: type=1800 audit(1724963915.566:14): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.433" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 265.981153][ T5721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.353245][ T5721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 266.363750][ T3789] cdc_ncm 1-1:1.0: bind() failure [ 266.427347][ T5721] EXT4-fs (loop3): Test dummy encryption mode enabled [ 266.447874][ T3789] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 266.469109][ T5721] EXT4-fs: failed to create workqueue [ 266.481013][ T3789] cdc_ncm 1-1:1.1: bind() failure [ 266.525908][ T5721] EXT4-fs (loop3): mount failed [ 266.539551][ T3789] usb 1-1: USB disconnect, device number 6 [ 266.695601][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 266.701551][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 267.811910][ T7] usb 4-1: USB disconnect, device number 8 [ 269.132443][ T5784] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 269.140391][ T5784] netlink: 156 bytes leftover after parsing attributes in process `syz.1.446'. [ 270.207081][ T5790] loop1: detected capacity change from 0 to 64 [ 270.335763][ T5793] loop4: detected capacity change from 0 to 512 [ 270.363394][ T5793] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.451: inline data xattr refers to an external xattr inode [ 270.379841][ T5793] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.451: couldn't read orphan inode 12 (err -117) [ 270.393116][ T5793] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 270.409913][ T5793] syz.4.451[5793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.410001][ T5793] syz.4.451[5793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.654222][ T5805] loop0: detected capacity change from 0 to 1024 [ 272.567501][ T5806] loop0: detected capacity change from 0 to 2048 [ 272.637785][ T5806] EXT4-fs: Ignoring removed nobh option [ 272.643377][ T5806] EXT4-fs: Ignoring removed orlov option [ 272.699947][ T5806] EXT4-fs: quotafile must be on filesystem root [ 273.919864][ T26] audit: type=1326 audit(1724963923.916:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 273.980431][ T26] audit: type=1326 audit(1724963923.956:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 274.014526][ T3806] EXT4-fs (loop4): unmounting filesystem. [ 274.024616][ T26] audit: type=1326 audit(1724963923.956:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 274.050172][ T5828] loop3: detected capacity change from 0 to 512 [ 274.801215][ T26] audit: type=1326 audit(1724963923.956:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 274.869589][ T26] audit: type=1326 audit(1724963923.956:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 274.907567][ T5828] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.459: casefold flag without casefold feature [ 274.975307][ T26] audit: type=1326 audit(1724963923.956:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 275.083325][ T26] audit: type=1326 audit(1724963923.956:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 275.106762][ T5828] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.459: missing EA_INODE flag [ 275.113605][ T26] audit: type=1326 audit(1724963923.956:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 275.141150][ T5828] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.459: error while reading EA inode 2 err=-117 [ 275.555522][ T26] audit: type=1326 audit(1724963923.956:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 275.579461][ T26] audit: type=1326 audit(1724963923.956:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5826 comm="syz.1.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef2f79ef9 code=0x7ffc0000 [ 275.604503][ T5828] EXT4-fs (loop3): 1 orphan inode deleted [ 275.611361][ T5828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 275.683654][ T3789] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 275.692477][ T5828] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.459: Directory hole found for htree leaf block 0 [ 275.725258][ T5828] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.459: Directory hole found for htree leaf block 0 [ 276.660408][ T3638] EXT4-fs (loop3): unmounting filesystem. [ 276.738521][ T5863] Invalid ELF header magic: != ELF [ 276.758108][ T5863] Process accounting resumed [ 276.770044][ T5860] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 276.779008][ T5860] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 276.804476][ T3789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.846903][ T3789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.880463][ T5865] loop4: detected capacity change from 0 to 164 [ 276.974691][ T3789] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 277.279239][ T5865] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 277.293615][ T3789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.331070][ T3789] usb 2-1: config 0 descriptor?? [ 278.719637][ T5882] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 278.723097][ T3642] Bluetooth: Wrong link type (-71) [ 278.728211][ T5882] netlink: 'syz.3.474': attribute type 2 has an invalid length. [ 278.735585][ T3789] usbhid 2-1:0.0: can't add hid device: -71 [ 278.755138][ T3789] usbhid: probe of 2-1:0.0 failed with error -71 [ 278.757189][ T3642] Bluetooth: hci2: link tx timeout [ 278.769672][ T3642] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00 [ 278.778589][ T3642] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 [ 278.788264][ T3642] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3642, name: kworker/u5:3 [ 278.797794][ T3642] preempt_count: 0, expected: 0 [ 278.802951][ T3642] RCU nest depth: 1, expected: 0 [ 278.809892][ T3642] 3 locks held by kworker/u5:3/3642: [ 278.815709][ T3642] #0: ffff88807884b938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.860606][ T3642] #1: ffffc90003eafd20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 278.873143][ T3642] #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 278.883572][ T3642] CPU: 1 PID: 3642 Comm: kworker/u5:3 Not tainted 6.1.106-syzkaller #0 [ 278.891824][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 278.901878][ T3642] Workqueue: hci2 hci_tx_work [ 278.906570][ T3642] Call Trace: [ 278.909854][ T3642] [ 278.912784][ T3642] dump_stack_lvl+0x1e3/0x2cb [ 278.917498][ T3642] ? nf_tcp_handle_invalid+0x642/0x642 [ 278.922961][ T3642] ? panic+0x764/0x764 [ 278.927027][ T3642] ? preempt_schedule_common+0xa6/0xd0 [ 278.932512][ T3642] __might_resched+0x5cb/0x780 [ 278.937316][ T3642] ? _printk+0xd1/0x111 [ 278.941476][ T3642] ? __wake_up_klogd+0x1c/0x100 [ 278.946342][ T3642] ? __might_sleep+0xb0/0xb0 [ 278.950941][ T3642] ? _printk+0xd1/0x111 [ 278.955103][ T3642] ? vprintk_emit+0x622/0x740 [ 278.959800][ T3642] ? printk_sprint+0x490/0x490 [ 278.964585][ T3642] ? mark_lock+0x9a/0x340 [ 278.968930][ T3642] __mutex_lock+0xbd/0xd80 [ 278.973364][ T3642] ? _printk+0xd1/0x111 [ 278.977527][ T3642] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 278.982740][ T3642] ? mutex_lock_nested+0x10/0x10 [ 278.987707][ T3642] ? hci_conn_get_phy+0x370/0x370 [ 278.992739][ T3642] hci_cmd_sync_submit+0x3b/0x2e0 [ 278.997786][ T3642] hci_disconnect+0xe6/0x2c0 [ 279.002383][ T3642] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 279.008383][ T3642] ? __lock_acquire+0x1f80/0x1f80 [ 279.013426][ T3642] __check_timeout+0x333/0x460 [ 279.018230][ T3642] ? __check_timeout+0x181/0x460 [ 279.023177][ T3642] hci_tx_work+0x138b/0x1ec0 [ 279.027793][ T3642] ? hci_cmd_work+0x660/0x660 [ 279.032473][ T3642] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 279.038375][ T3642] ? do_raw_spin_unlock+0x137/0x8a0 [ 279.043582][ T3642] ? process_one_work+0x7a9/0x11d0 [ 279.048709][ T3642] process_one_work+0x8a9/0x11d0 [ 279.053677][ T3642] ? worker_detach_from_pool+0x260/0x260 [ 279.059328][ T3642] ? _raw_spin_lock_irqsave+0x120/0x120 [ 279.064891][ T3642] ? kthread_data+0x4e/0xc0 [ 279.069412][ T3642] ? wq_worker_running+0x97/0x190 [ 279.074463][ T3642] worker_thread+0xa47/0x1200 [ 279.079149][ T3642] ? release_firmware_map_entry+0x186/0x186 [ 279.085079][ T3642] kthread+0x28d/0x320 [ 279.089169][ T3642] ? worker_clr_flags+0x190/0x190 [ 279.094225][ T3642] ? kthread_blkcg+0xd0/0xd0 [ 279.098821][ T3642] ret_from_fork+0x1f/0x30 [ 279.103253][ T3642] [ 279.115899][ T3642] [ 279.118254][ T3642] ============================= [ 279.123103][ T3642] [ BUG: Invalid wait context ] [ 279.127945][ T3642] 6.1.106-syzkaller #0 Tainted: G W [ 279.128774][ T3789] usb 2-1: USB disconnect, device number 3 [ 279.134524][ T3642] ----------------------------- [ 279.134531][ T3642] kworker/u5:3/3642 is trying to lock: [ 279.134540][ T3642] ffff88807decc9b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x3b/0x2e0 [ 279.134584][ T3642] other info that might help us debug this: [ 279.134589][ T3642] context-{4:4} [ 279.134595][ T3642] 3 locks held by kworker/u5:3/3642: [ 279.134603][ T3642] #0: ffff88807884b938 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 279.185591][ T3642] #1: ffffc90003eafd20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 279.196983][ T3642] #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460 [ 279.206453][ T3642] stack backtrace: [ 279.210146][ T3642] CPU: 1 PID: 3642 Comm: kworker/u5:3 Tainted: G W 6.1.106-syzkaller #0 [ 279.219839][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 279.229875][ T3642] Workqueue: hci2 hci_tx_work [ 279.234539][ T3642] Call Trace: [ 279.237810][ T3642] [ 279.240741][ T3642] dump_stack_lvl+0x1e3/0x2cb [ 279.245438][ T3642] ? nf_tcp_handle_invalid+0x642/0x642 [ 279.250880][ T3642] ? panic+0x764/0x764 [ 279.254943][ T3642] __lock_acquire+0x14b1/0x1f80 [ 279.259813][ T3642] lock_acquire+0x1f8/0x5a0 [ 279.264302][ T3642] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 279.269486][ T3642] ? read_lock_is_recursive+0x10/0x10 [ 279.274852][ T3642] ? __wake_up_klogd+0x1c/0x100 [ 279.279702][ T3642] ? __might_sleep+0xb0/0xb0 [ 279.284272][ T3642] ? _printk+0xd1/0x111 [ 279.288407][ T3642] ? vprintk_emit+0x622/0x740 [ 279.293070][ T3642] ? printk_sprint+0x490/0x490 [ 279.297820][ T3642] ? mark_lock+0x9a/0x340 [ 279.302176][ T3642] __mutex_lock+0x132/0xd80 [ 279.306665][ T3642] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 279.311845][ T3642] ? _printk+0xd1/0x111 [ 279.315981][ T3642] ? hci_cmd_sync_submit+0x3b/0x2e0 [ 279.321162][ T3642] ? mutex_lock_nested+0x10/0x10 [ 279.326089][ T3642] ? hci_conn_get_phy+0x370/0x370 [ 279.331096][ T3642] hci_cmd_sync_submit+0x3b/0x2e0 [ 279.336103][ T3642] hci_disconnect+0xe6/0x2c0 [ 279.340674][ T3642] ? hci_conn_hash_lookup_handle+0x240/0x240 [ 279.346633][ T3642] ? __lock_acquire+0x1f80/0x1f80 [ 279.351644][ T3642] __check_timeout+0x333/0x460 [ 279.356396][ T3642] ? __check_timeout+0x181/0x460 [ 279.361323][ T3642] hci_tx_work+0x138b/0x1ec0 [ 279.365910][ T3642] ? hci_cmd_work+0x660/0x660 [ 279.370579][ T3642] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 279.376454][ T3642] ? do_raw_spin_unlock+0x137/0x8a0 [ 279.381635][ T3642] ? process_one_work+0x7a9/0x11d0 [ 279.386745][ T3642] process_one_work+0x8a9/0x11d0 [ 279.391668][ T3642] ? worker_detach_from_pool+0x260/0x260 [ 279.397283][ T3642] ? _raw_spin_lock_irqsave+0x120/0x120 [ 279.402811][ T3642] ? kthread_data+0x4e/0xc0 [ 279.407300][ T3642] ? wq_worker_running+0x97/0x190 [ 279.412311][ T3642] worker_thread+0xa47/0x1200 [ 279.416971][ T3642] ? release_firmware_map_entry+0x186/0x186 [ 279.422859][ T3642] kthread+0x28d/0x320 [ 279.426918][ T3642] ? worker_clr_flags+0x190/0x190 [ 279.431926][ T3642] ? kthread_blkcg+0xd0/0xd0 [ 279.436496][ T3642] ret_from_fork+0x1f/0x30 [ 279.440898][ T3642] [ 279.513610][ T3642] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 281.523571][ T3642] Bluetooth: hci2: command 0x0406 tx timeout [ 283.603666][ T3642] Bluetooth: hci2: command 0x0406 tx timeout