last executing test programs: 16.583474882s ago: executing program 1 (id=2289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x7c0f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123200000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.130687568s ago: executing program 1 (id=2297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x302, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x7, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0xf, 0xfffff000}, {0x0, 0x998}, {0x3, 0xa}, {0xd, 0xfb8}, {0x4, 0x1ff}, {0x0, 0x10000}, {0x10, 0x4}]}, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x7, 0x2}, {0x8, 0x5}, {0x7, 0xe3db}, {0xb, 0xfea}, {0x4}, {0x0, 0x40}]}]}, {0x0, [0x61, 0x4f, 0x0, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/145, 0x9f, 0x91, 0x1, 0x8001, 0x0, @void, @value}, 0x20) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/42, 0x2a}], 0x9, &(0x7f0000000580)=""/26, 0x1a}, 0x2000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 12.694686s ago: executing program 2 (id=2304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000000)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@nombcache}]}, 0x1, 0x589, &(0x7f0000000bc0)="$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") ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x21000849, &(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRESHEX=r2, @ANYRES16, @ANYRESHEX=r3, @ANYBLOB="2cd0d5fdd8", @ANYRES32=r1, @ANYRES16=0x0], 0x81, 0x14f5, &(0x7f0000004140)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001440), 0x0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000240), &(0x7f0000000280)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000020109ffff0000000000"], 0x14}}, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000880)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x24, 0x0) 11.07601793s ago: executing program 2 (id=2306): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000280)={0x0, r5}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}], {0x14, 0x10}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='sysv\x00', 0x1008000, 0x0) 10.829587292s ago: executing program 0 (id=2308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x7c0f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123200000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.772070168s ago: executing program 3 (id=2309): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123200000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.151498537s ago: executing program 4 (id=2310): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000280)={0x0, r5}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='sysv\x00', 0x1008000, 0x0) 9.063510705s ago: executing program 0 (id=2311): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000001500)="010000", 0x3, 0xfffffffffffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000011c00)={0x0, 0x0, 0x0}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000", @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000040)={@in, 0x0, 0x0, 0x0, 0x0, "f55f817bc06c88f47480ab5a58b45baf660401c8bc69351dac1f1747678b1958be4f737c06ed8b91cfcb18062bc5832e880319bf07279cd8bb654dd3911a359dbee08f634402630b53fa8ce128836865"}, 0xd8) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000180)={0x0, 0x6}) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f0200c00e7f4e32f61bcdf1e422000000000100800000000000001000aadc28da3457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 9.048823276s ago: executing program 4 (id=2312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe2$watch_queue(&(0x7f0000000000), 0x80) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000280)='p', 0x1, 0xc000, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0x9}, 0x20) sendto$inet(r4, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) 8.780668621s ago: executing program 2 (id=2313): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open$dir(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x54) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001500000095000000000000a688e125801fae3200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 8.039874469s ago: executing program 4 (id=2314): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200400, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x3, 0xa73, &(0x7f0000003cc0)="$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") recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000000240)=@qipcrtr, 0x80, &(0x7f0000000800)=[{&(0x7f0000000380)=""/136, 0x88}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000500)=""/83, 0x53}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000740)=""/156, 0x9c}, {&(0x7f0000002800)=""/4096, 0x1000}], 0x7}, 0xc656}], 0x1, 0x62, &(0x7f0000000600)) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000005404d55f6e8583547d8ec38275f9f00fed7401512bf7fb0e5e1cec32df6d045a776f7efa696907bfaca5043a6c6f1bfb6d39d4a3d62874045637b63695e129298ffffa09e13a3ccb81b2c517ba1501f81890a85480aa80cad53ef4df57375fb3863f183bdd38bdf843e172035e58c043a0d010344120a5e1d916336c3e9e3c0de10cf1818cab54c8f17b178af2a63f4cdcca458c9946f59a", @ANYRES16=r3, @ANYBLOB="050f00000000000000001300000004000980"], 0x18}}, 0x0) dup3(r1, r0, 0x0) rmdir(&(0x7f0000000140)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xfffffffe}, {}, {0x6, 0x0, 0x0, 0x7ffffdc1}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1008002, &(0x7f0000000700), 0x1, 0x5e7, &(0x7f0000001200)="$eJzs3c9vFGUfAPDvbLelpbxvC3nzKh6kiTGQKC0tYIjxAFdDGvwRD3qx0oJIgYbWaNGEkuDFxHgxxsSTB/G/UCJXTnLy4MWTISFqOJq4ZrYzZbfdbenSdirz+SRLZ55nh+c73X77zD59ntkASmso/acSsTciZpKIgWRhqa4aWeXQ4vPu//nx6fSRRK322u9JJFlZ/vwk+9qfHdwbET/9mMSerpXtzs5fOT8xPT11OdsfmbswMzI7f+XguQsTZ6fOTl0ce2Hs2NEjR4+NHurovK62KDt5/b0PBj4df+vbr/9KRr/7ZTyJ4/Fy9sTG89goQzFU/54kK6v6j210YwXpyn5OGl/ipFpgQKxL/vp1R8QTMRBd8eDFG4hPXik0OGBT1ZKIGlBSifyHksqvA/L39svfB1cKuSoBtsK9E4sDACvzv7o4Nhi99bGBnfeTaBzWSSKis5G5Zrsi4vat8etnbo1fj00ahwNaW7gWEU+2yv+knv+D0RuD9fyvNOV/el1wKvualr/aYfvLh4rlP2ydxfzvXTX/o03+v92Q/+902P7Qg813+5ryv6/TUwIAAAAAAIDSunkiIp5v9ff/ytL8n2gx/6c/Io5vQPtDy/ZX/v2/cncDmgFauHci4qWW838r+ezfwa5s6z/1+QDdyZlz01OHIuK/EXEgunek+6OrtHHwsz1ftasbyub/5Y+0/dvZXMAsjrvVHc3HTE7MTTzqeQMR965FPNU4//fOm1lNstT/Jy36//T3wcxDtrHn2Run2tWtnf/AZql9E7G/Zf//4K4Vyer35xipXw+M5FcFKz390efft2u/0/x3iwl4dGn/v3P1/B9MGu/XM7v+Ng7PV2vt6jq9/u9JXq/fcqYnK/twYm7u8mhET3KyKy1tKh9bf8zwOMrzIc+XNP8PPLPq+N9SV9vY5/ZFxMKy/zv5o3lNce7/f/f/2i4e1/9QnDT/J9fV/69/Y+zG4A/t2n+4/v9Iva8/kJUY/4NFX+Zp2tNc3iIdq62qtjpeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgcVCJiVySV4aXtSmV4OKI/Iv4XOyvTl2bnnjtz6f2Lk2ld/fP/K/kn/Q4s7if55/8PNuyPLds/HBG7I+KLrr76/vDpS9OTRZ88AAAAAAAAAAAAAAAAAAAAbBP9bdb/p37rKjo6YNNViw4AKEyL/L9TRBzA1tP/Q3nJfyivasTxomMAiqH/h/KS/1Be8h/KS/5Decl/AAAAAAB4rOzed/PnJCIWXuyrP1I9WV13oZEBm61SdABAYdziB8rL1B8oL+/xgWSN+t62B6115GpmTj/CwQAAAAAAAAAAAABQOvv3Wv8PZWX9P5SX9f9QXvn6/30FxwFsPe/xgVhjJX/L9f9rHgUAAAAAAAAAAAAAbKTZ+SvnJ6anpy7beGN7hLGVG7Va7Wr6U7Bd4vmXb+RT4bdLPMs28rV+D3dUcb+TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZv8EAAD//2MGI2c=") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(0x0, 0x22) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r4, 0x0, 0x0) 7.861737316s ago: executing program 0 (id=2315): r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2012c31, &(0x7f0000000280)={[{@nombcache}, {}, {@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@norecovery}]}, 0x9, 0x610, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000100)) mknodat$null(r0, &(0x7f0000000000)='./bus\x00', 0x40, 0x103) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c2, 0x29e8}}, {{@in6=@private0, 0x0, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000040)={0xb, {{0x2, 0x4e22, @remote}}, {{0x2, 0x8f, @remote}}}, 0x108) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r5, 0x100, 0x0) getdents(r5, 0x0, 0x300) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0xb, 0x4) 7.81445962s ago: executing program 3 (id=2316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[], 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)='%-010d \x00'}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) 6.215192528s ago: executing program 3 (id=2317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="0100000000000000000007000000080009000104000008000b00000000"], 0x24}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x0, 0x0, 0x2}}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f00000000c0)) bind$rds(r3, &(0x7f00000021c0)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001fc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001780)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001ec0)}}], 0x90}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x19}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x10) 6.026459125s ago: executing program 2 (id=2318): socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GETX(r0, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000140), &(0x7f0000008f40)=""/4119, 0xfffffddc}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000140)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x00\x00\x00\x00\x00\x00\x00', 0x4) fallocate(r4, 0x0, 0x0, 0x2400001) fallocate(r4, 0x3, 0x3, 0xffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x14, 0x2, 0x2, 0x101}, 0x14}}, 0x0) 5.209418471s ago: executing program 1 (id=2319): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000280)={0x0, r5}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./file0\x00', 0x0, 0x1008000, 0x0) 5.20870717s ago: executing program 3 (id=2320): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket(0x10, 0x803, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) ptrace(0x8, r4) socket$packet(0x11, 0x3, 0x300) syz_open_pts(0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) ptrace(0x10, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 5.151534026s ago: executing program 0 (id=2321): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b6a, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x10e, &(0x7f00000003c0)={[{@errors_remount}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@nodelalloc}, {@block_validity}, {@noblock_validity}]}, 0x1, 0x45d, &(0x7f0000001380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8}, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x7d, &(0x7f0000000000)={r6}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)={r7, 0x3, 0x4a82}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0x12}, @nested={0x8, 0x9, 0x0, 0x1, [@generic="860ffdca"]}]}, 0x20}, 0x1, 0x3000000}, 0x0) 4.714929686s ago: executing program 1 (id=2322): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x7c0f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123200000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.272419466s ago: executing program 4 (id=2323): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}}}, 0x1c}}, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000007c0)) r4 = socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) r6 = fcntl$dupfd(r3, 0x0, r4) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080)={0x0, r5}) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000280)={0x0, r5}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4880) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='sysv\x00', 0x1008000, 0x0) 3.896302831s ago: executing program 3 (id=2324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0xa00010, &(0x7f0000000700)=ANY=[@ANYBLOB='nodecomp\a\x00e,decompnsd=\x00'/36, @ANYRESHEX, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$eJzs3c1rHOcdB/DvrFZryQVHSezELYGKGNJSUVsvKK16iVtK0SGUkB56FrYcC6+VIClFCaWo79BTD/kD0oNuPRV6N6Tn9parjoFCLznppjKzs9LaWil6s1ZqPx/z7PM888w888xvZ2Zndi0mwP+t+Yk0n6TI/MTb62V9a3OmvbU5c6Vubicpy42k2clSLCfFZ8nddFK+Xk6s5y8OWs8nS3Pvfv7l1hedWrNO1fyNw5Y7mo06ZTzJUJ0/o/Wn4/Q33CmU/dzr398xFLtbWAbsVjdwMGg7+2wcZ/FTHrfARVB0Pjf3GUuuJhmprwNSnx0a5zu6s3essxwAAABcUi9sZzvruTbocQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBlUj//v6hTo1seT9F9/n+rnpa6fKk9GfQAAAAAAAAAAOAMfHM721nPtW59p6h+83+9qlyvXr+WD7OaxazkdtazkLWsZSVTScZ6OmqtL6ytrUwdYcnpvktOn8/2AgAAAAAAAMD/qN9kfu/3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGKShOi86xaJO17vlsTSaSUaStMr5NpJ/dcuXRNFv4pPzHwcAAACcysgJlnlhO9tZz7Vufaeo7vlfqe6XR/JhlrOWpaylncXcr++hy7v+xtbmTHtrc+Zxmfb3+8P/HGsYVY+7X0P0W/PNao7RPMhSNeV27lWDuZ9GtWTpZnc8/cf163JMxVu1I47sfp2XK/vzQd8iDMRYFZHh3YhM1mMro/Hi4ZH4yneneeiaptLY/ebn+nOI+dU6L7fnDxcz5o1UkZju2fteOTwSybf+/tefP2wvP3r4YHXi4mzSCT27T8z0ROLVSx2J5jHnn6wicWO3Pp+f5GeZyHjeyUqW8ossZC2L2anbF+r9uXwdOzxSd5+qvfNVI2nV70vnLHqUMY3nx1VpIa9Xy17LUoq8n/tZzJvVv+lM5XuZzWzmet7hGweOu9q26qhvHO+ov/XtujCa5I91Pmidj9Qyri/2xLX3nDtWtfVO2YvSS2d/bmx+oy6U6/htnV8Mz0ZiqicSLx8eib9Ux8Zqe/nRysOFDw7of+OZ+ht1Xu5xv79QnxLl/vJSRuozydN7R9n28u5Z5ul4tepfXDptjX1tN6q2ougeqT898Eht1ddw+3uartpe7ds2U7Xd7Gl76nor76e9ez0EwAV29TtXW6P/Hv3n6Kejvxt9OPr2yI+ufP/Ka60M/2P4B83JoTcarxV/y6f51d79PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHKrH338aKHdXlzpX2gc3HS2haJ+kM95rEth0IXuQwRP3eHdC7E5l7owlKRfU/0WneThosClcGft8Qd3Vj/6+LtLjxfeW3xvcXl4dnZucm72zZk7D5bai5Od10GPEnge9j70+7cXF+oBmwAAAAAAAAAAAECO9vc2O/X//zvxXxoMehsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy21+Is0nKTI1eXuyrG9tzrTL1C3vzdlM0mgkxS+T4rPkbjopYz3dFW8dsJ5Plube/fzLrS/2+mpW85ed1vkpbNQp40mG6vys+rt36v6K3S0sA3arGzgYtP8GAAD//+IHAOM=") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x8a, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebb8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345dbf71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697eb3d7000000000000dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d250721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a886411000000000057", 0x0, 0xff, 0x60000000, 0xfffffd3c, 0x0, 0x0, 0x0}, 0x50) 3.36903552s ago: executing program 0 (id=2325): add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000001500)="010000", 0x3, 0xfffffffffffffffc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000011c00)={0x0, 0x0, 0x0}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000", @ANYRES32=r1], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000040)={@in, 0x0, 0x0, 0x0, 0x0, "f55f817bc06c88f47480ab5a58b45baf660401c8bc69351dac1f1747678b1958be4f737c06ed8b91cfcb18062bc5832e880319bf07279cd8bb654dd3911a359dbee08f634402630b53fa8ce128836865"}, 0xd8) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000180)={0x0, 0x6}) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f0200c00e7f4e32f61bcdf1e422000000000100800000000000001000aadc28da3457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3.04096957s ago: executing program 4 (id=2326): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x3804c82, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x788, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) dup(0xffffffffffffffff) getresuid(0x0, &(0x7f0000000480), 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000903000000000000000000000105000000080000000000000000000003000000000200000002000000000200000000000000000003000000000100000002"], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x242, 0x0) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file1', [], 0xa, "0a345f27458881110800033c3eedafebd12f8ebb4f0803003a0c59b56b00a52333bd8c43b6467b8a07ba03f0316c60cf"}, 0x3b) close(r5) ioctl$TIOCGPTPEER(r5, 0x5441, 0xffff) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={{r0}, 0x3, &(0x7f0000000080)=[0xffffffff, 0x0, 0x4], 0x9, 0x2}) 3.035306461s ago: executing program 1 (id=2327): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x801, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) close(r0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @private1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600"/1469], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="05ff03076844268cb89e14f00800fe", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x3, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024000100000000000000000000000000060003000020"], 0x1c}}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000000), 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001000)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x800}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@mark={0xc, 0x15, {0x0, 0xffff}}]}, 0xc4}}, 0x0) 2.994436724s ago: executing program 1 (id=2328): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@inlinecrypt}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000280)='}($\x00'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)=0x4000) 2.636193227s ago: executing program 0 (id=2329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000500)={0x0, 0x302, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x7, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0xf, 0xfffff000}, {0x0, 0x998}, {0x3, 0xa}, {0xd, 0xfb8}, {0x4, 0x1ff}, {0x0, 0x10000}, {0x10, 0x4}]}, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x7, 0x2}, {0x8, 0x5}, {0x7, 0xe3db}, {0xb, 0xfea}, {0x4}, {0x0, 0x40}]}]}, {0x0, [0x61, 0x4f, 0x0, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/145, 0x9f, 0x91, 0x1, 0x8001, 0x0, @void, @value}, 0x20) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/42, 0x2a}], 0x9, &(0x7f0000000580)=""/26, 0x1a}, 0x2000) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 2.463066933s ago: executing program 2 (id=2330): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x80) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b000000", 0xd, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x13, 0xa, 0x603, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000053}, 0x40095) r1 = socket(0x2, 0x3, 0x8) r2 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x103102) capset(&(0x7f0000000300)={0x19980330}, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="b900000002000000b6"]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) ioctl$sock_netdev_private(r1, 0x8990, &(0x7f0000000000)="831cd2bd37c4fed05886312a3a") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e4d700", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @empty, @loopback={0xfec0ffff00000000, 0xffffac1414aa}, [], "ef9edaaa64947bfe"}}}}}}}, 0x0) mprotect(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x0) mlockall(0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0xee00) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000340)={0x60, 0x2, &(0x7f00000d4000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x8000, &(0x7f00000002c0)=[{0x9, 0x5, 0x5}, {0x8, 0x4, 0x6}, {0xfffffffeffffffff, 0x400, 0x400}, {0x80000001, 0x607, 0x2}, {0x7, 0x4, 0x5}], 0x5, 0x3, 0x4, 0x4a, 0x51, 0x9}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) 1.671970916s ago: executing program 3 (id=2331): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x8000000000000001, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000704fcff", 0x58}], 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./bus\x00', 0x228a4, 0x0, 0x80, 0x0, &(0x7f0000000000)) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9801) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='\x00', 0x0, &(0x7f0000000340)='./file0\x00') sendto$inet(r0, 0x0, 0x0, 0x20000ff9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$eJzs3T+LHGUcB/Df7M3OrlrsFlYiOKCFVciltdlDEhCvMmyhFnqYC8jtItzBgX9wTWVrY2HhKxAEX4iN70CwFeyMEHhkZmeyu5dlcxuyJyafT5MnzzzfeX7Ps8PdXHHPffzq9OROGXfvffV79PtZdEYxivtZDKMTrW9ixei7AAD+z+6nFH+luW1yWUT0d1cWALBDl/v+ny+av1xJWQDADt1+/4N3Dw4Pb75Xlv24Nf32fFz9ZF/9O79+cDc+jUkcx/UYxIOI+kWhG/XbQtW8lVKa5WVlGG9MZ+fjKjn96Nfm/gd/RtT5/RjEsO56+LZR5985vLlfzi3lZ1UdLzbzj6r8jRjEyw/DK/kba/IxLuLN15fqvxaD+O2T+CwmcacuYpH/er8s307f//3lh1V5VT6bnY979biFtHfFHw0AAAAAAAAAAAAAAAAAAAAAAM+wa83ZOb2oz++puprzd/YeVP/pRtkarp7PM89n7Y2WzwdKKc1S/Nier3O9LMvUDFzk83glXz5YEAAAAAAAAAAAAAAAAAAAAJ5fZ59/cXI0mRyfPpVGexpAHhH/3I540vuMlnpei82De82cR5NJp2mujsmXe2KvHZNFbCyjWsST7kYeW639hUdqbho//bzt7P3Hj+mun+tpNtqn6+QoW7+HvWh7+s1G/VBELMYUccm5ios9aTC/T9rqIyjWXhpsvfbipbox2zAmsk2FvfXHfOeanuziKop6V9fGu01jKX7h2bjU8xz9efzRrxWZ0zoAAAAAAAAAAAAAAAAAAGCnFr/9u+bivY3RTurtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuFKLv/+/RWPWhI9Pz/LHDC7i9Ow/XiIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPgX8DAAD//x0KWZ8=") r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendfile(r5, r6, 0x0, 0xd344) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) 1.606919072s ago: executing program 4 (id=2332): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x23, 0x39, &(0x7f0000000040)="f58668bf07051561674c35b22c3d5fea172207d3795327b067eccd8f46e72923762b5f", &(0x7f0000000100)=""/57, 0x6, 0x0, 0x17, 0x0, &(0x7f0000000140)="a814712927f9315d00bebb6d94963bcee985a10c7a8080", 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0x8, &(0x7f0000000040), 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2a020480) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 0s ago: executing program 2 (id=2333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x302, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r4, 0xc8036ab6d6cbef07}, 0x14}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x7, [@enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0xf, 0xfffff000}, {0x0, 0x998}, {0x3, 0xa}, {0xd, 0xfb8}, {0x4, 0x1ff}, {0x0, 0x10000}, {0x10, 0x4}]}, @enum={0x5, 0x6, 0x0, 0x6, 0x4, [{0x7, 0x2}, {0x8, 0x5}, {0x7, 0xe3db}, {0xb, 0xfea}, {0x4}, {0x0, 0x40}]}]}, {0x0, [0x61, 0x4f, 0x0, 0x30, 0x5f]}}, &(0x7f00000006c0)=""/145, 0x9f, 0x91, 0x1, 0x8001, 0x0, @void, @value}, 0x20) r5 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000000080)=""/14, 0xe}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f00000002c0)=""/211, 0xd3}, {&(0x7f00000003c0)=""/132, 0x84}, {&(0x7f0000000480)=""/42, 0x2a}], 0x9, &(0x7f0000000580)=""/26, 0x1a}, 0x2000) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) kernel console output (not intermixed with test programs): bute type 2 has an invalid length. [ 852.052152][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1880'. [ 853.035971][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1882'. [ 853.079624][T11837] loop4: detected capacity change from 0 to 512 [ 853.133580][T11841] dlm: no locking on control device [ 853.160612][T11837] EXT4-fs (loop4): 1 truncate cleaned up [ 853.177350][T11837] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 853.266305][T11839] loop3: detected capacity change from 0 to 4096 [ 853.568976][T11839] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 856.129702][T11112] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 856.213109][T11112] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 857.071703][T11112] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 857.290582][T11888] ax25_connect(): syz.2.1899 uses autobind, please contact jreuter@yaina.de [ 857.371149][T11892] loop2: detected capacity change from 0 to 128 [ 857.666349][ T8144] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 857.952951][T11897] loop3: detected capacity change from 0 to 2048 [ 858.173751][T11897] Alternate GPT is invalid, using primary GPT. [ 858.180538][T11897] loop3: p1 p2 p3 [ 858.647827][T11892] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 858.680855][T11892] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 858.761531][T11903] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1901'. [ 858.764709][ T3027] Alternate GPT is invalid, using primary GPT. [ 858.833584][ T3027] loop3: p1 p2 p3 [ 860.770802][ T8144] usb 5-1: Using ep0 maxpacket: 8 [ 860.897688][ T8144] usb 5-1: device descriptor read/all, error -71 [ 860.908930][ T25] audit: type=1326 audit(1727541453.836:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11919 comm="syz.0.1906" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3cc0b8ff9 code=0x0 [ 860.937691][T11922] loop4: detected capacity change from 0 to 2048 [ 860.989527][T11924] loop1: detected capacity change from 0 to 256 [ 861.080375][T11929] loop2: detected capacity change from 0 to 256 [ 861.200028][T11922] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 862.121108][T11934] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 862.333803][T11924] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 862.536206][T11929] exFAT-fs (loop2): bogus fat length [ 862.541741][T11929] exFAT-fs (loop2): failed to read boot sector [ 862.550346][T11929] exFAT-fs (loop2): failed to recognize exfat type [ 862.564490][T11934] EXT4-fs (loop4): Remounting filesystem read-only [ 863.807120][T10415] udevd[10415]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 863.833327][ T9946] udevd[9946]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 863.833429][T11291] udevd[11291]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 865.064299][T10415] udevd[10415]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 865.100074][ T9946] udevd[9946]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 865.113075][T11291] udevd[11291]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 865.202472][T11955] Process accounting resumed [ 865.515293][T11963] loop2: detected capacity change from 0 to 2048 [ 866.651117][T10415] Alternate GPT is invalid, using primary GPT. [ 866.758757][T10415] loop2: p1 p2 p3 [ 866.767378][T11969] dlm: no locking on control device [ 866.839969][T11963] Alternate GPT is invalid, using primary GPT. [ 866.846546][T11963] loop2: p1 p2 p3 [ 867.643640][T11981] loop2: detected capacity change from 0 to 256 [ 867.908202][T11978] loop3: detected capacity change from 0 to 32768 [ 867.950728][T11978] XFS: attr2 mount option is deprecated. [ 867.957291][T11978] XFS: noikeep mount option is deprecated. [ 868.022831][T11984] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 868.479920][T11978] XFS (loop3): Mounting V5 Filesystem [ 868.502480][T11986] loop0: detected capacity change from 0 to 128 [ 868.733864][T11978] XFS (loop3): Ending clean mount [ 868.786590][T11978] XFS (loop3): Quotacheck needed: Please wait. [ 868.822224][T11986] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 868.849716][T11291] udevd[11291]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 868.900112][ T9946] udevd[9946]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 868.911760][T10415] udevd[10415]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 868.941839][T11986] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 868.973294][ C0] vkms_vblank_simulate: vblank timer overrun [ 869.049747][ T9946] udevd[9946]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 869.367805][T10415] udevd[10415]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 869.382350][T11291] udevd[11291]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 869.869928][T11978] XFS (loop3): Quotacheck: Done. [ 870.057113][T12000] loop1: detected capacity change from 0 to 512 [ 871.885968][T12000] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 871.897996][T11112] XFS (loop3): Unmounting Filesystem [ 871.924789][T12000] EXT4-fs (loop1): Ignoring removed nobh option [ 871.941448][T12002] rdma_rxe: rxe_register_device failed with error -23 [ 871.947328][T12000] EXT4-fs (loop1): journaled quota format not specified [ 871.978474][T12002] rdma_rxe: failed to add vcan0 [ 874.352539][T12026] Process accounting resumed [ 875.665287][T12040] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 876.822615][T12054] loop4: detected capacity change from 0 to 1024 [ 877.752395][T12056] loop2: detected capacity change from 0 to 1024 [ 880.701633][ T3615] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 880.704338][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 880.737343][T12056] EXT4-fs (loop2): Test dummy encryption mode enabled [ 880.851479][T12056] EXT4-fs (loop2): Test dummy encryption mode enabled [ 880.875371][T12056] EXT4-fs (loop2): Ignoring removed orlov option [ 880.877163][T12062] loop1: detected capacity change from 0 to 256 [ 880.917222][T12056] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 880.947873][T12068] loop3: detected capacity change from 0 to 512 [ 881.080784][T12062] FAT-fs (loop1): Directory bread(block 64) failed [ 881.101527][T12062] FAT-fs (loop1): Directory bread(block 65) failed [ 881.108684][T12062] FAT-fs (loop1): Directory bread(block 66) failed [ 881.115771][T12062] FAT-fs (loop1): Directory bread(block 67) failed [ 881.122344][T12062] FAT-fs (loop1): Directory bread(block 68) failed [ 881.128942][T12062] FAT-fs (loop1): Directory bread(block 69) failed [ 881.139337][T12062] FAT-fs (loop1): Directory bread(block 70) failed [ 881.146419][T12062] FAT-fs (loop1): Directory bread(block 71) failed [ 881.153000][T12062] FAT-fs (loop1): Directory bread(block 72) failed [ 881.160906][T12062] FAT-fs (loop1): Directory bread(block 73) failed [ 881.615232][T12072] vcan0 speed is unknown, defaulting to 1000 [ 881.726943][T12068] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 881.797673][T12068] ext4 filesystem being mounted at /24/bus supports timestamps until 2038 (0x7fffffff) [ 882.743504][T12074] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1941'. [ 884.169461][ T8144] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 884.688603][ T8144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 884.729802][T12099] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 884.767755][ T8144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 884.782550][ T8144] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 884.793645][ T8144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.813835][ T8144] usb 2-1: config 0 descriptor?? [ 885.721542][T12102] Process accounting resumed [ 885.830080][ T8144] ath6kl: Failed to submit usb control message: -71 [ 885.858805][ T8144] ath6kl: unable to send the bmi data to the device: -71 [ 885.865860][ T8144] ath6kl: Unable to send get target info: -71 [ 885.866203][T12117] loop3: detected capacity change from 0 to 2048 [ 885.924298][ T8144] ath6kl: Failed to init ath6kl core: -71 [ 885.974633][T12117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 885.981210][ T8144] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 886.033512][ T8144] usb 2-1: USB disconnect, device number 18 [ 886.039179][T12123] loop0: detected capacity change from 0 to 512 [ 886.045795][T12120] loop4: detected capacity change from 0 to 1024 [ 886.074058][T12117] UDF-fs: error (device loop3): udf_read_inode: (ino 1329) failed !bh [ 886.235945][T12120] autofs4:pid:12120:autofs_fill_super: pipe file descriptor does not contain proper ops [ 886.454427][T12130] UDF-fs: error (device loop3): udf_read_inode: (ino 1329) failed !bh [ 886.469058][ T8148] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 887.029934][T12123] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 887.041836][T12123] ext4 filesystem being mounted at /129/bus supports timestamps until 2038 (0x7fffffff) [ 887.245058][ T9] hfsplus: b-tree write err: -5, ino 4 [ 887.938237][ T8148] usb 3-1: Using ep0 maxpacket: 32 [ 888.631999][ T8148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.734018][ T8148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.051316][ T8148] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 889.061409][ T8148] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 889.071623][ T8148] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 889.081605][ T8148] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 889.114901][T12155] loop4: detected capacity change from 0 to 512 [ 889.281808][ T8148] usb 3-1: string descriptor 0 read error: -71 [ 889.288074][ T8148] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 889.297636][ T8148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.884784][T12164] Process accounting resumed [ 891.924658][ T8148] usb 3-1: can't set config #1, error -71 [ 891.945039][T12155] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 891.957040][ T8148] usb 3-1: USB disconnect, device number 14 [ 892.000901][T12155] EXT4-fs (loop4): Invalid want_extra_isize 9 [ 892.824905][T12181] loop2: detected capacity change from 0 to 256 [ 892.934147][T12181] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 892.948827][T12185] loop4: detected capacity change from 0 to 512 [ 892.951316][T12183] loop0: detected capacity change from 0 to 2048 [ 893.173984][T12185] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 893.181655][T12183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 893.460980][T12189] loop1: detected capacity change from 0 to 32768 [ 893.517964][T12183] UDF-fs: error (device loop0): udf_read_inode: (ino 1329) failed !bh [ 893.626733][T12189] XFS: attr2 mount option is deprecated. [ 893.632466][T12189] XFS: noikeep mount option is deprecated. [ 894.054417][T12196] UDF-fs: error (device loop0): udf_read_inode: (ino 1329) failed !bh [ 894.492847][T12185] EXT4-fs (loop4): Ignoring removed nobh option [ 894.521268][T12185] EXT4-fs (loop4): journaled quota format not specified [ 894.576621][T12189] XFS (loop1): Mounting V5 Filesystem [ 895.007674][T12189] XFS (loop1): Ending clean mount [ 895.016421][T12189] XFS (loop1): Quotacheck needed: Please wait. [ 895.104674][T12189] XFS (loop1): Quotacheck: Done. [ 895.144162][T12217] netlink: 'syz.4.1979': attribute type 1 has an invalid length. [ 895.275414][ T5330] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 895.775805][ T5330] usb 1-1: Using ep0 maxpacket: 32 [ 895.810955][T12221] loop3: detected capacity change from 0 to 128 [ 895.837906][ T9685] XFS (loop1): Unmounting Filesystem [ 895.933976][ T5330] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.026593][ T5330] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.592516][ T5330] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 896.603643][ T5330] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 896.614442][ T5330] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 896.634099][ T5330] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 896.674180][T12230] loop4: detected capacity change from 0 to 128 [ 896.758671][T12230] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 896.769755][T12230] ext4 filesystem being mounted at /117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 896.801262][ C0] vkms_vblank_simulate: vblank timer overrun [ 896.844048][ T5330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 896.858339][ T5330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.882810][ T5330] usb 1-1: Product: syz [ 896.887634][ T5330] usb 1-1: Manufacturer: syz [ 896.892383][ T5330] usb 1-1: SerialNumber: syz [ 897.764926][ T5330] cdc_ncm 1-1:1.0: bind() failure [ 897.779233][ T5330] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 897.797160][ T5330] cdc_ncm 1-1:1.1: bind() failure [ 897.860250][ T5330] usb 1-1: USB disconnect, device number 22 [ 898.106093][T12248] loop4: detected capacity change from 0 to 256 [ 898.935936][T12248] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 899.034974][T12248] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 899.213429][T12248] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 900.823159][T12268] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2000'. [ 900.936834][T12271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 901.298083][T12275] loop2: detected capacity change from 0 to 2048 [ 901.415576][T12277] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 901.506792][ T3577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 901.516447][ T3577] CPU: 1 PID: 3577 Comm: kworker/u5:4 Not tainted 5.15.167-syzkaller #0 [ 901.524778][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 901.534834][ T3577] Workqueue: hci3 hci_rx_work [ 901.539520][ T3577] Call Trace: [ 901.542796][ T3577] [ 901.545720][ T3577] dump_stack_lvl+0x1e3/0x2d0 [ 901.550402][ T3577] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 901.556037][ T3577] ? panic+0x860/0x860 [ 901.560111][ T3577] ? sysfs_create_dir_ns+0x282/0x390 [ 901.565404][ T3577] sysfs_create_dir_ns+0x2c6/0x390 [ 901.570519][ T3577] ? sysfs_warn_dup+0xa0/0xa0 [ 901.575288][ T3577] ? do_raw_spin_unlock+0x137/0x8b0 [ 901.580501][ T3577] kobject_add_internal+0x6e0/0xe00 [ 901.585711][ T3577] kobject_add+0x14e/0x210 [ 901.590136][ T3577] ? device_add+0x3c2/0xfd0 [ 901.594645][ T3577] ? kobject_init+0x1d0/0x1d0 [ 901.599328][ T3577] ? __raw_spin_lock_init+0x41/0x100 [ 901.604617][ T3577] ? get_device_parent+0x128/0x400 [ 901.609736][ T3577] device_add+0x476/0xfd0 [ 901.614083][ T3577] hci_conn_add_sysfs+0xe4/0x1f0 [ 901.619027][ T3577] le_conn_complete_evt+0xc15/0x1500 [ 901.624325][ T3577] ? cs_le_create_conn+0x5f0/0x5f0 [ 901.629455][ T3577] hci_le_meta_evt+0xd86/0x3f50 [ 901.633732][T12275] trusted_key: encrypted_key: insufficient parameters specified [ 901.634310][ T3577] ? __lock_acquire+0x1ff0/0x1ff0 [ 901.634337][ T3577] ? __mutex_lock_common+0x444/0x25a0 [ 901.652317][ T3577] ? hci_remote_host_features_evt+0x280/0x280 [ 901.658390][ T3577] ? __mutex_unlock_slowpath+0x218/0x750 [ 901.664026][ T3577] ? hci_event_packet+0x3b4/0x1550 [ 901.669147][ T3577] ? mutex_unlock+0x10/0x10 [ 901.673658][ T3577] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 901.679641][ T3577] ? print_irqtrace_events+0x210/0x210 [ 901.685293][ T3577] hci_event_packet+0xc41/0x1550 [ 901.690254][ T3577] ? rcu_lock_release+0x20/0x20 [ 901.695123][ T3577] ? hci_send_to_monitor+0x99/0x4d0 [ 901.700329][ T3577] hci_rx_work+0x232/0x990 [ 901.704761][ T3577] process_one_work+0x8a1/0x10c0 [ 901.709723][ T3577] ? worker_detach_from_pool+0x260/0x260 [ 901.715362][ T3577] ? _raw_spin_lock_irqsave+0x120/0x120 [ 901.720910][ T3577] ? kthread_data+0x4e/0xc0 [ 901.725418][ T3577] ? wq_worker_running+0x97/0x170 [ 901.730449][ T3577] worker_thread+0xaca/0x1280 [ 901.735158][ T3577] kthread+0x3f6/0x4f0 [ 901.739231][ T3577] ? rcu_lock_release+0x20/0x20 [ 901.744089][ T3577] ? kthread_blkcg+0xd0/0xd0 [ 901.748692][ T3577] ret_from_fork+0x1f/0x30 [ 901.753124][ T3577] [ 901.759644][ T3577] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 901.773167][ T3577] Bluetooth: hci3: failed to register connection device [ 901.781922][ T9695] Bluetooth: hci3: link tx timeout [ 901.787823][ T9695] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 901.802141][ T9695] Bluetooth: hci3: link tx timeout [ 901.808302][ T9695] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 901.818680][ T9695] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 901.826697][ T9695] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 901.934801][T12280] vcan0 speed is unknown, defaulting to 1000 [ 902.061454][T12284] loop1: detected capacity change from 0 to 1024 [ 902.158445][T12284] hfsplus: bad catalog entry type [ 902.547547][T12290] loop2: detected capacity change from 0 to 1024 [ 903.467646][ T4161] hfsplus: b-tree write err: -5, ino 4 [ 903.586881][T12294] xt_TCPMSS: Only works on TCP SYN packets [ 903.786461][T12280] chnl_net:caif_netlink_parms(): no params data found [ 904.422192][ T5257] Bluetooth: hci3: command 0x0406 tx timeout [ 904.440211][ T5257] Bluetooth: hci0: command 0x0409 tx timeout [ 904.530251][T12300] loop3: detected capacity change from 0 to 2048 [ 904.710773][T12300] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 904.927386][T12280] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.953441][T12280] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.962145][T12280] device bridge_slave_0 entered promiscuous mode [ 904.973471][T12280] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.986665][T12280] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.011631][T12280] device bridge_slave_1 entered promiscuous mode [ 905.797459][T12316] loop2: detected capacity change from 0 to 512 [ 905.912033][T12323] netlink: 'syz.1.2006': attribute type 1 has an invalid length. [ 906.030833][T12280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.070826][T12316] EXT4-fs (loop2): orphan cleanup on readonly fs [ 906.083079][T12280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.095868][T12316] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.2003: corrupted in-inode xattr [ 906.134324][T12316] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2003: couldn't read orphan inode 15 (err -117) [ 906.135818][T12280] team0: Port device team_slave_0 added [ 906.170981][T12280] team0: Port device team_slave_1 added [ 906.194001][T12316] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 906.276643][T12326] loop1: detected capacity change from 0 to 2048 [ 906.556929][T12280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.583957][T12332] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 906.639629][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.686087][T12326] trusted_key: encrypted_key: insufficient parameters specified [ 906.695921][ T9695] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 906.705550][ T9695] CPU: 1 PID: 9695 Comm: kworker/u5:2 Not tainted 5.15.167-syzkaller #0 [ 906.713879][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 906.723936][ T9695] Workqueue: hci2 hci_rx_work [ 906.728617][ T9695] Call Trace: [ 906.731892][ T9695] [ 906.734818][ T9695] dump_stack_lvl+0x1e3/0x2d0 [ 906.739496][ T9695] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 906.745127][ T9695] ? panic+0x860/0x860 [ 906.749202][ T9695] ? sysfs_create_dir_ns+0x282/0x390 [ 906.754492][ T9695] sysfs_create_dir_ns+0x2c6/0x390 [ 906.759603][ T9695] ? sysfs_warn_dup+0xa0/0xa0 [ 906.764277][ T9695] ? do_raw_spin_unlock+0x137/0x8b0 [ 906.769484][ T9695] kobject_add_internal+0x6e0/0xe00 [ 906.774692][ T9695] kobject_add+0x14e/0x210 [ 906.779110][ T9695] ? device_add+0x3c2/0xfd0 [ 906.783615][ T9695] ? kobject_init+0x1d0/0x1d0 [ 906.788291][ T9695] ? __raw_spin_lock_init+0x41/0x100 [ 906.793563][ T9695] ? get_device_parent+0x128/0x400 [ 906.798662][ T9695] device_add+0x476/0xfd0 [ 906.802988][ T9695] hci_conn_add_sysfs+0xe4/0x1f0 [ 906.807909][ T9695] le_conn_complete_evt+0xc15/0x1500 [ 906.813182][ T9695] ? cs_le_create_conn+0x5f0/0x5f0 [ 906.818284][ T9695] hci_le_meta_evt+0xd86/0x3f50 [ 906.823127][ T9695] ? __lock_acquire+0x1ff0/0x1ff0 [ 906.828139][ T9695] ? __mutex_lock_common+0x444/0x25a0 [ 906.833502][ T9695] ? hci_remote_host_features_evt+0x280/0x280 [ 906.839550][ T9695] ? __mutex_unlock_slowpath+0x218/0x750 [ 906.845168][ T9695] ? hci_event_packet+0x3b4/0x1550 [ 906.850265][ T9695] ? mutex_unlock+0x10/0x10 [ 906.854750][ T9695] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 906.860713][ T9695] ? print_irqtrace_events+0x210/0x210 [ 906.866157][ T9695] hci_event_packet+0xc41/0x1550 [ 906.871083][ T9695] ? rcu_lock_release+0x20/0x20 [ 906.875921][ T9695] ? hci_send_to_monitor+0x99/0x4d0 [ 906.881104][ T9695] hci_rx_work+0x232/0x990 [ 906.885510][ T9695] process_one_work+0x8a1/0x10c0 [ 906.890443][ T9695] ? worker_detach_from_pool+0x260/0x260 [ 906.896062][ T9695] ? _raw_spin_lock_irqsave+0x120/0x120 [ 906.901593][ T9695] ? kthread_data+0x4e/0xc0 [ 906.906078][ T9695] ? wq_worker_running+0x97/0x170 [ 906.911085][ T9695] worker_thread+0xaca/0x1280 [ 906.915766][ T9695] kthread+0x3f6/0x4f0 [ 906.919814][ T9695] ? rcu_lock_release+0x20/0x20 [ 906.924645][ T9695] ? kthread_blkcg+0xd0/0xd0 [ 906.929221][ T9695] ret_from_fork+0x1f/0x30 [ 906.933630][ T9695] [ 906.939191][ T3869] Bluetooth: hci0: command 0x041b tx timeout [ 906.949596][ T9695] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 906.963379][ T9695] Bluetooth: hci2: failed to register connection device [ 906.970614][ T9695] Bluetooth: hci2: link tx timeout [ 906.977234][ T3869] Bluetooth: hci3: command 0x0406 tx timeout [ 906.981790][ T9695] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 906.991351][ T9695] Bluetooth: hci2: link tx timeout [ 906.996566][ T9695] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00 [ 907.009319][ T9695] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00 [ 907.017150][ T9695] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 907.030919][T12280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.049515][T12280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.059969][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.087798][T12280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.138795][T12280] device hsr_slave_0 entered promiscuous mode [ 907.169596][T12280] device hsr_slave_1 entered promiscuous mode [ 907.586888][T12336] loop0: detected capacity change from 0 to 32768 [ 907.614589][T12280] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.636163][T12316] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 3: comm syz.2.2003: lblock 0 mapped to illegal pblock 3 (length 1) [ 907.646271][T12336] XFS: attr2 mount option is deprecated. [ 907.655763][T12336] XFS: noikeep mount option is deprecated. [ 907.668900][T12316] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2003: error -117 reading directory block [ 907.795332][T12316] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 3: comm syz.2.2003: lblock 0 mapped to illegal pblock 3 (length 1) [ 907.823708][T12336] XFS (loop0): Mounting V5 Filesystem [ 907.988408][T12347] loop1: detected capacity change from 0 to 16 [ 908.170209][T12336] XFS (loop0): Ending clean mount [ 908.177196][T12336] XFS (loop0): Quotacheck needed: Please wait. [ 908.184227][T12316] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.2003: error -117 reading directory block [ 908.262979][T12347] erofs: (device loop1): mounted with root inode @ nid 36. [ 908.337772][T12347] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 908.366125][T12280] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.551900][T12336] XFS (loop0): Quotacheck: Done. [ 909.393831][T12280] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.404961][ T3615] Bluetooth: hci3: command 0x0406 tx timeout [ 909.697561][ T8144] Bluetooth: hci2: command 0x0406 tx timeout [ 909.703629][ T8144] Bluetooth: hci0: command 0x040f tx timeout [ 909.741850][ T9686] XFS (loop0): Unmounting Filesystem [ 909.843608][T12280] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.702622][T12280] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 910.749601][T12280] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 910.781995][T12280] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 910.817090][T12280] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 910.940159][ T3744] device hsr_slave_0 left promiscuous mode [ 910.962892][ T3744] device hsr_slave_1 left promiscuous mode [ 910.980371][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.031456][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.063104][ T3744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.069858][T12376] dccp_v4_rcv: dropped packet with invalid checksum [ 911.080865][ T3744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.127075][ T3744] device bridge_slave_1 left promiscuous mode [ 911.133294][ T3744] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.156301][ T3744] device bridge_slave_0 left promiscuous mode [ 911.164784][ T3744] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.205798][ T3744] device veth1_macvtap left promiscuous mode [ 911.231489][ T3744] device veth0_macvtap left promiscuous mode [ 911.241933][ T3744] device veth1_vlan left promiscuous mode [ 911.319460][ T3744] device veth0_vlan left promiscuous mode [ 911.589334][T12384] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 912.088379][ T5330] Bluetooth: hci0: command 0x0419 tx timeout [ 912.094441][ T5330] Bluetooth: hci2: command 0x0406 tx timeout [ 912.293105][ T3744] team0 (unregistering): Port device team_slave_1 removed [ 912.323134][ T3744] team0 (unregistering): Port device team_slave_0 removed [ 912.353354][ T3744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.389428][ T3744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.642356][ T3744] bond0 (unregistering): Released all slaves [ 912.894582][T12280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.936355][T12394] loop2: detected capacity change from 0 to 128 [ 912.975912][T12280] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.995168][T12394] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 913.005120][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 913.016616][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 913.062639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 913.071501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 913.158370][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.165530][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.197202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 913.219325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.243529][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.250819][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.258813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.274943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 914.048870][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 914.057789][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 914.066218][ T4927] Bluetooth: hci4: command 0x1003 tx timeout [ 914.072439][ T3577] Bluetooth: hci4: sending frame failed (-49) [ 914.085548][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 914.094501][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 914.103519][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 914.125747][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 914.170721][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 914.199069][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 914.234573][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 914.245130][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 914.247211][T12280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 914.537476][ T8150] Bluetooth: hci2: command 0x0406 tx timeout [ 915.193888][T12412] program syz.2.2024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.197452][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.219665][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 915.233661][T12280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.682990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 915.698608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 915.771720][T12424] xt_cgroup: path and classid specified [ 916.324214][ T8145] Bluetooth: hci4: command 0x1001 tx timeout [ 916.370873][ T3577] Bluetooth: hci4: sending frame failed (-49) [ 916.444776][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 916.456292][T12280] device veth0_vlan entered promiscuous mode [ 916.510135][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 916.599927][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 916.624051][T12280] device veth1_vlan entered promiscuous mode [ 916.738397][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 916.757058][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 917.247297][T12438] loop3: detected capacity change from 0 to 64 [ 917.485583][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 917.529361][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 917.573134][T12280] device veth0_macvtap entered promiscuous mode [ 917.615945][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 917.629882][T12444] loop2: detected capacity change from 0 to 2048 [ 917.647362][T12280] device veth1_macvtap entered promiscuous mode [ 917.709932][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.866260][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.958203][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.164523][T12446] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 918.179736][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.414899][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.467534][ T3577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 918.477179][ T3577] CPU: 1 PID: 3577 Comm: kworker/u5:4 Not tainted 5.15.167-syzkaller #0 [ 918.485590][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 918.495640][ T3577] Workqueue: hci3 hci_rx_work [ 918.500323][ T3577] Call Trace: [ 918.503598][ T3577] [ 918.506522][ T3577] dump_stack_lvl+0x1e3/0x2d0 [ 918.511206][ T3577] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 918.516844][ T3577] ? panic+0x860/0x860 [ 918.520915][ T3577] ? sysfs_create_dir_ns+0x282/0x390 [ 918.526202][ T3577] sysfs_create_dir_ns+0x2c6/0x390 [ 918.531314][ T3577] ? sysfs_warn_dup+0xa0/0xa0 [ 918.535985][ T3577] ? do_raw_spin_unlock+0x137/0x8b0 [ 918.541192][ T3577] kobject_add_internal+0x6e0/0xe00 [ 918.546402][ T3577] kobject_add+0x14e/0x210 [ 918.550821][ T3577] ? device_add+0x3c2/0xfd0 [ 918.555326][ T3577] ? kobject_init+0x1d0/0x1d0 [ 918.555906][T12448] trusted_key: encrypted_key: insufficient parameters specified [ 918.560002][ T3577] ? __raw_spin_lock_init+0x41/0x100 [ 918.560027][ T3577] ? get_device_parent+0x128/0x400 [ 918.560053][ T3577] device_add+0x476/0xfd0 [ 918.578722][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.582303][ T3577] hci_conn_add_sysfs+0xe4/0x1f0 [ 918.596987][ T3577] le_conn_complete_evt+0xc15/0x1500 [ 918.602285][ T3577] ? cs_le_create_conn+0x5f0/0x5f0 [ 918.607413][ T3577] hci_le_meta_evt+0xd86/0x3f50 [ 918.612276][ T3577] ? __lock_acquire+0x1ff0/0x1ff0 [ 918.617305][ T3577] ? __mutex_lock_common+0x444/0x25a0 [ 918.622691][ T3577] ? hci_remote_host_features_evt+0x280/0x280 [ 918.628306][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.628754][ T3577] ? __mutex_unlock_slowpath+0x218/0x750 [ 918.644743][ T3577] ? hci_event_packet+0x3b4/0x1550 [ 918.649860][ T3577] ? mutex_unlock+0x10/0x10 [ 918.654364][ T3577] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 918.660343][ T3577] ? print_irqtrace_events+0x210/0x210 [ 918.664964][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.665797][ T3577] hci_event_packet+0xc41/0x1550 [ 918.680488][ T3577] ? rcu_lock_release+0x20/0x20 [ 918.685350][ T3577] ? hci_send_to_monitor+0x99/0x4d0 [ 918.686654][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.690544][ T3577] hci_rx_work+0x232/0x990 [ 918.690575][ T3577] process_one_work+0x8a1/0x10c0 [ 918.707731][ T5257] Bluetooth: hci1: command 0x0406 tx timeout [ 918.710280][ T3577] ? worker_detach_from_pool+0x260/0x260 [ 918.721830][ T3577] ? _raw_spin_lock_irqsave+0x120/0x120 [ 918.727378][ T3577] ? kthread_data+0x4e/0xc0 [ 918.731882][ T3577] ? wq_worker_running+0x97/0x170 [ 918.736906][ T3577] worker_thread+0xaca/0x1280 [ 918.741607][ T3577] kthread+0x3f6/0x4f0 [ 918.741812][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.745665][ T3577] ? rcu_lock_release+0x20/0x20 [ 918.745688][ T3577] ? kthread_blkcg+0xd0/0xd0 [ 918.764856][ T3577] ret_from_fork+0x1f/0x30 [ 918.769288][ T3577] [ 918.774024][ T3577] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 918.787383][ T3577] Bluetooth: hci3: failed to register connection device [ 918.794615][ T3577] Bluetooth: hci3: link tx timeout [ 918.799723][ T3577] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 918.808904][T12280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.810780][ T3577] Bluetooth: hci3: link tx timeout [ 918.821436][ T3577] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 918.829181][ T3577] Bluetooth: hci3: killing stalled connection 00:00:00:00:00:00 [ 918.836822][ T3577] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 918.848116][ T8148] Bluetooth: hci4: command 0x1009 tx timeout [ 918.887554][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 918.961895][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 919.158106][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.190765][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.222956][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.254948][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.283824][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.303546][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.313383][T12280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.346587][T12280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.379557][T12280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.387931][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 919.407282][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 919.458755][T12280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.498302][T12280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.507014][T12280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.537135][T12280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.527088][T12460] loop3: detected capacity change from 0 to 1024 [ 920.548014][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.592959][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.607666][ T3799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.626900][ T3799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.654699][ T3746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 920.726555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 920.762491][T12460] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 920.779082][T12460] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 921.732858][T12479] loop1: detected capacity change from 0 to 256 [ 921.839362][T12479] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 921.882034][T12479] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 922.013789][T12485] loop3: detected capacity change from 0 to 512 [ 922.119071][T12485] EXT4-fs (loop3): orphan cleanup on readonly fs [ 922.119870][T12482] binder: 12481:12482 ioctl c0306201 20000380 returned -14 [ 922.126676][T12485] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #4: comm syz.3.2040: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 922.155237][T12485] EXT4-fs error (device loop3): ext4_quota_enable:6390: comm syz.3.2040: Bad quota inode: 4, type: 1 [ 922.171541][T12485] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 922.186385][T12485] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 922.193056][T12485] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 922.356080][T12483] vcan0 speed is unknown, defaulting to 1000 [ 923.547540][T12502] vcan0 speed is unknown, defaulting to 1000 [ 924.176230][T12504] loop1: detected capacity change from 0 to 512 [ 924.193254][ T1103] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.263126][T12504] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2044: bg 0: block 393: padding at end of block bitmap is not set [ 924.298340][ T8145] Bluetooth: hci6: command 0x0409 tx timeout [ 924.310408][T12483] chnl_net:caif_netlink_parms(): no params data found [ 924.319176][T12504] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 924.349653][ T1103] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.371904][T12504] EXT4-fs (loop1): 2 truncates cleaned up [ 924.379221][T12504] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 924.660719][ T1103] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.582483][ T1103] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.643925][T12523] loop3: detected capacity change from 0 to 256 [ 925.659287][T12525] loop4: detected capacity change from 0 to 2048 [ 925.834096][T12525] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 927.189422][ T3883] Bluetooth: hci6: command 0x041b tx timeout [ 927.218867][T12483] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.244224][T12483] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.280997][T12483] device bridge_slave_0 entered promiscuous mode [ 927.314427][T12483] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.371632][T12483] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.380438][T12483] device bridge_slave_1 entered promiscuous mode [ 927.605397][T12483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 927.700426][T12543] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2051'. [ 927.910184][T12543] vcan0 speed is unknown, defaulting to 1000 [ 928.392068][T12483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.482181][T12547] loop4: detected capacity change from 0 to 16 [ 928.529714][T12545] binder: 12544:12545 ioctl c0306201 20000380 returned -14 [ 928.622862][T12547] erofs: (device loop4): mounted with root inode @ nid 36. [ 928.670999][T12547] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 928.675653][T12483] team0: Port device team_slave_0 added [ 928.684043][T12547] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -4 in[53, 4043] out[1851] [ 928.746720][T12547] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 928.754476][T12483] team0: Port device team_slave_1 added [ 928.821910][T12547] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 928.835462][T12483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.859845][T12547] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -4 in[53, 4043] out[1851] [ 928.879472][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.949250][T12547] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 928.962035][T12552] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 929.015385][T12552] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -4 in[53, 4043] out[1851] [ 929.414249][T12556] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 929.474928][T12552] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 929.558330][T12556] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -4 in[53, 4043] out[1851] [ 929.574404][ T8147] Bluetooth: hci6: command 0x040f tx timeout [ 929.584217][T12483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.597701][T12556] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 929.609527][T12547] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 929.669818][T12547] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -4 in[53, 4043] out[1851] [ 929.701685][T12483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.719831][T12483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.774271][T12547] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 929.788891][T12483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.833699][T12562] overlayfs: refusing to follow metacopy origin for (/file0) [ 931.924067][ T8147] Bluetooth: hci6: command 0x0419 tx timeout [ 931.935848][T12483] device hsr_slave_0 entered promiscuous mode [ 931.946239][T12483] device hsr_slave_1 entered promiscuous mode [ 931.953497][T12483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 931.962230][T12483] Cannot create hsr debugfs directory [ 932.345228][T12581] vcan0 speed is unknown, defaulting to 1000 [ 933.190580][T12595] loop1: detected capacity change from 0 to 2048 [ 933.599045][T12595] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 935.749380][T12483] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 936.595214][T12483] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 936.729131][T12655] loop1: detected capacity change from 0 to 2048 [ 936.729873][T12666] loop4: detected capacity change from 0 to 1024 [ 936.737971][T12483] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 937.189997][T12671] loop1: p1 < > p4 [ 937.200972][T12668] vcan0 speed is unknown, defaulting to 1000 [ 937.241090][T12483] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 937.250661][T12666] hfsplus: request for non-existent node 40 in B*Tree [ 937.266642][T12666] hfsplus: request for non-existent node 40 in B*Tree [ 937.308623][ T1103] device hsr_slave_0 left promiscuous mode [ 937.325312][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.340227][T12671] loop1: p4 size 8388608 extends beyond EOD, truncated [ 937.347804][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.366506][ T1103] device bridge_slave_1 left promiscuous mode [ 937.367294][T12655] loop1: p1 < > p4 [ 937.372824][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.389349][T12655] loop1: p4 size 8388608 extends beyond EOD, truncated [ 937.397280][ T1103] device bridge_slave_0 left promiscuous mode [ 937.407541][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.466025][ T3027] loop1: p1 < > p4 [ 937.488426][ T3027] loop1: p4 size 8388608 extends beyond EOD, truncated [ 937.495833][ T1103] device veth1_macvtap left promiscuous mode [ 937.502205][ T1103] device veth1_vlan left promiscuous mode [ 937.509919][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 937.520319][ T1103] device veth0_vlan left promiscuous mode [ 937.576734][T10415] udevd[10415]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 937.589435][ T9946] udevd[9946]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 937.666586][ T9946] udevd[9946]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 937.694429][T10415] udevd[10415]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 937.736610][ T9946] udevd[9946]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 937.750971][T10415] udevd[10415]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 937.954119][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 937.975346][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 938.000150][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.017531][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.106316][ T1103] bond0 (unregistering): Released all slaves [ 938.316978][T12682] vcan0 speed is unknown, defaulting to 1000 [ 938.429375][T12684] loop1: detected capacity change from 0 to 512 [ 938.512830][T12689] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 938.523056][T12483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.585026][T12684] Quota error (device loop1): v2_read_file_info: Free block number too big (6 >= 6). [ 938.636273][T12684] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 938.655065][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 938.663194][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 938.742181][T12483] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.748668][T12684] EXT4-fs (loop1): mount failed [ 938.849848][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 938.878780][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 938.898369][ T5528] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.905500][ T5528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.929098][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 938.958200][T12709] loop3: detected capacity change from 0 to 256 [ 938.961336][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 938.974434][ T5528] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.981559][ T5528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.999096][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 939.064267][T12709] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 939.210790][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 939.233562][T12718] nftables ruleset with unbound set [ 939.241692][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 939.411097][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 939.586637][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 939.621363][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 939.647187][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 939.659721][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 939.779273][T12483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 939.791183][T12483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 939.820615][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 939.886763][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 939.903412][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 939.918108][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 939.934356][ T5528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 939.941805][T12729] loop1: detected capacity change from 0 to 512 [ 940.156815][T12729] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 940.217598][T12729] EXT4-fs (loop1): 1 truncate cleaned up [ 940.223263][T12729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 940.987409][T12754] sctp: [Deprecated]: syz.3.2090 (pid 12754) Use of int in max_burst socket option deprecated. [ 940.987409][T12754] Use struct sctp_assoc_value instead [ 941.830817][T12483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.915433][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 941.923271][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 942.128133][T12767] loop3: detected capacity change from 0 to 4096 [ 942.197289][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 942.239001][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 942.252046][T12767] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 942.417710][T12483] device veth0_vlan entered promiscuous mode [ 942.453550][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 942.481433][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 942.496732][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 942.511668][T12767] overlayfs: missing 'lowerdir' [ 942.517348][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 942.581433][T12483] device veth1_vlan entered promiscuous mode [ 942.703307][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 942.745735][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 942.788464][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 942.815566][T12767] ntfs3: loop3: mft corrupted [ 942.824874][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 942.879988][T12483] device veth0_macvtap entered promiscuous mode [ 942.913051][T12483] device veth1_macvtap entered promiscuous mode [ 942.980487][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.057563][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.096966][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.126686][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.159242][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.202928][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.224828][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.268620][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.290272][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.322663][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.338013][T12483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.356731][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 943.375093][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 943.409215][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 943.447436][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 943.486745][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.517891][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.535661][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.567135][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.579015][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.609681][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.631622][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.644446][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.663124][T12483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.707189][T12483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.739598][T12483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.755261][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 943.769832][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 943.794426][T12796] vcan0 speed is unknown, defaulting to 1000 [ 943.871649][T12483] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.888852][T12483] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.897792][T12483] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.906484][T12483] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 944.087013][T12799] vcan0 speed is unknown, defaulting to 1000 [ 944.108472][T12802] loop1: detected capacity change from 0 to 512 [ 944.389870][T12802] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 944.904391][T12802] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 945.021365][T12802] EXT4-fs (loop1): 1 truncate cleaned up [ 945.029977][T12802] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 945.083233][ T4161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.340362][ T3647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.348598][ T3647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.375696][ T4161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.381896][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 945.420060][T12817] netlink: 'syz.3.2101': attribute type 1 has an invalid length. [ 945.482585][ T9517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 946.072462][T12826] loop1: detected capacity change from 0 to 2048 [ 946.273306][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2105'. [ 946.325651][T12835] loop3: detected capacity change from 0 to 512 [ 946.339669][T12826] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 946.372716][T12835] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 946.421145][T12836] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2105'. [ 946.495773][T12835] EXT4-fs (loop3): 1 truncate cleaned up [ 946.501695][T12835] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 948.164384][T12841] loop4: detected capacity change from 0 to 2048 [ 948.879680][T12847] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 948.952874][T12849] vcan0 speed is unknown, defaulting to 1000 [ 949.044465][ T9695] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 949.056170][ T9695] CPU: 1 PID: 9695 Comm: kworker/u5:2 Not tainted 5.15.167-syzkaller #0 [ 949.064511][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 949.074563][ T9695] Workqueue: hci0 hci_rx_work [ 949.079252][ T9695] Call Trace: [ 949.082528][ T9695] [ 949.085459][ T9695] dump_stack_lvl+0x1e3/0x2d0 [ 949.090147][ T9695] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 949.095786][ T9695] ? panic+0x860/0x860 [ 949.099865][ T9695] ? sysfs_create_dir_ns+0x282/0x390 [ 949.105158][ T9695] sysfs_create_dir_ns+0x2c6/0x390 [ 949.110277][ T9695] ? sysfs_warn_dup+0xa0/0xa0 [ 949.114962][ T9695] ? do_raw_spin_unlock+0x137/0x8b0 [ 949.120172][ T9695] kobject_add_internal+0x6e0/0xe00 [ 949.125388][ T9695] kobject_add+0x14e/0x210 [ 949.129809][ T9695] ? device_add+0x3c2/0xfd0 [ 949.134312][ T9695] ? kobject_init+0x1d0/0x1d0 [ 949.138995][ T9695] ? __raw_spin_lock_init+0x41/0x100 [ 949.144286][ T9695] ? get_device_parent+0x128/0x400 [ 949.149393][ T9695] device_add+0x476/0xfd0 [ 949.153722][ T9695] hci_conn_add_sysfs+0xe4/0x1f0 [ 949.158657][ T9695] le_conn_complete_evt+0xc15/0x1500 [ 949.163934][ T9695] ? cs_le_create_conn+0x5f0/0x5f0 [ 949.169040][ T9695] hci_le_meta_evt+0xd86/0x3f50 [ 949.173881][ T9695] ? __lock_acquire+0x1ff0/0x1ff0 [ 949.178899][ T9695] ? __mutex_lock_common+0x444/0x25a0 [ 949.184264][ T9695] ? hci_remote_host_features_evt+0x280/0x280 [ 949.190317][ T9695] ? __mutex_unlock_slowpath+0x218/0x750 [ 949.195933][ T9695] ? hci_event_packet+0x3b4/0x1550 [ 949.201034][ T9695] ? mutex_unlock+0x10/0x10 [ 949.205656][ T9695] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 949.211639][ T9695] ? print_irqtrace_events+0x210/0x210 [ 949.217085][ T9695] hci_event_packet+0xc41/0x1550 [ 949.222034][ T9695] ? rcu_lock_release+0x20/0x20 [ 949.226891][ T9695] ? hci_send_to_monitor+0x99/0x4d0 [ 949.232085][ T9695] hci_rx_work+0x232/0x990 [ 949.236627][ T9695] process_one_work+0x8a1/0x10c0 [ 949.241578][ T9695] ? worker_detach_from_pool+0x260/0x260 [ 949.247202][ T9695] ? _raw_spin_lock_irqsave+0x120/0x120 [ 949.252739][ T9695] ? kthread_data+0x4e/0xc0 [ 949.257234][ T9695] ? wq_worker_running+0x97/0x170 [ 949.262245][ T9695] worker_thread+0xaca/0x1280 [ 949.266931][ T9695] kthread+0x3f6/0x4f0 [ 949.270985][ T9695] ? rcu_lock_release+0x20/0x20 [ 949.275822][ T9695] ? kthread_blkcg+0xd0/0xd0 [ 949.280397][ T9695] ret_from_fork+0x1f/0x30 [ 949.284809][ T9695] [ 949.294810][ T9695] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 949.303943][T12841] trusted_key: encrypted_key: insufficient parameters specified [ 949.308144][ T9695] Bluetooth: hci0: failed to register connection device [ 949.364809][T12855] vcan0 speed is unknown, defaulting to 1000 [ 949.755310][T12861] loop3: detected capacity change from 0 to 512 [ 949.914987][T12861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 949.983071][T12861] EXT4-fs (loop3): 1 truncate cleaned up [ 949.983096][T12861] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 950.030791][T12862] vcan0 speed is unknown, defaulting to 1000 [ 950.438538][T12881] vcan0 speed is unknown, defaulting to 1000 [ 950.650289][T12885] loop4: detected capacity change from 0 to 256 [ 950.697391][T12885] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 950.697714][T12885] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 951.002295][T12887] loop1: detected capacity change from 0 to 32768 [ 951.070029][T12887] XFS: attr2 mount option is deprecated. [ 951.070056][T12887] XFS: noikeep mount option is deprecated. [ 951.177916][T12887] XFS (loop1): Mounting V5 Filesystem [ 951.773747][ T4927] Bluetooth: hci1: command 0x0409 tx timeout [ 951.982116][T12887] XFS (loop1): Ending clean mount [ 951.984346][T12887] XFS (loop1): Quotacheck needed: Please wait. [ 952.017530][T12862] chnl_net:caif_netlink_parms(): no params data found [ 952.076667][T12887] XFS (loop1): Quotacheck: Done. [ 952.239901][ T3883] Bluetooth: hci4: command 0x0409 tx timeout [ 952.763748][ T9685] XFS (loop1): Unmounting Filesystem [ 954.030885][T12920] loop4: detected capacity change from 0 to 512 [ 954.076546][T12862] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.084560][T12862] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.140072][T12920] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 954.164264][T12862] device bridge_slave_0 entered promiscuous mode [ 954.237500][T12862] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.251088][T12920] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 954.299888][T12862] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.345405][T12920] EXT4-fs (loop4): 1 truncate cleaned up [ 954.351106][T12920] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 954.400305][T12862] device bridge_slave_1 entered promiscuous mode [ 954.513020][ T8150] Bluetooth: hci4: command 0x041b tx timeout [ 955.179291][T12862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.331215][T12862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.429970][T12936] loop4: detected capacity change from 0 to 512 [ 955.506329][T12936] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 955.623155][T12936] EXT4-fs (loop4): 1 truncate cleaned up [ 955.628799][T12936] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 955.659179][T12862] team0: Port device team_slave_0 added [ 955.742482][T12862] team0: Port device team_slave_1 added [ 955.804104][ T25] audit: type=1800 audit(1727541541.459:435): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2129" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 955.826825][T12862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.834460][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 955.865447][T12862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.914635][T12939] vcan0 speed is unknown, defaulting to 1000 [ 955.921131][T12862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.946645][T12862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.019211][T12862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.111852][T12862] device hsr_slave_0 entered promiscuous mode [ 956.128673][T12862] device hsr_slave_1 entered promiscuous mode [ 956.143197][T12862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 956.161483][T12862] Cannot create hsr debugfs directory [ 956.693293][T12862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.713942][ T8144] Bluetooth: hci4: command 0x040f tx timeout [ 956.735032][T12950] syz.0.2132[12950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 956.735093][T12950] syz.0.2132[12950] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 956.776238][T12939] chnl_net:caif_netlink_parms(): no params data found [ 956.937397][T12862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.997740][T12950] vcan0 speed is unknown, defaulting to 1000 [ 957.115334][T12862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.229453][T12939] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.247835][T12939] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.259957][T12939] device bridge_slave_0 entered promiscuous mode [ 957.273746][T12939] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.283658][T12939] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.318594][T12939] device bridge_slave_1 entered promiscuous mode [ 957.368216][T12862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.467594][T12939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.491083][T12939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.608073][T12959] trusted_key: encrypted_key: insufficient parameters specified [ 958.206678][T12939] team0: Port device team_slave_0 added [ 958.221875][ T3615] Bluetooth: hci1: command 0x0409 tx timeout [ 958.241282][T12939] team0: Port device team_slave_1 added [ 958.297365][T12939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.311185][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.337669][T12939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.355254][T12939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.362411][T12939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 958.409345][T12939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.449469][T12862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 958.481657][T12862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 958.515278][T12939] device hsr_slave_0 entered promiscuous mode [ 958.522782][T12939] device hsr_slave_1 entered promiscuous mode [ 958.531512][T12939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 958.563402][T12939] Cannot create hsr debugfs directory [ 958.569061][T12862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 958.586087][T12862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 958.796878][T12939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.877507][T12939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.946127][T12862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.978812][ T5258] Bluetooth: hci4: command 0x0419 tx timeout [ 958.989864][T12939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.014331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 959.034011][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 959.046292][T12862] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.066695][T12939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.101019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 959.139752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 959.184630][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.191701][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.220574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 959.238856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 959.258684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 959.280573][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.287693][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.306711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 959.350486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 959.369180][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 959.410186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 959.432810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 959.454120][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 959.465242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 959.528056][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 959.542371][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 959.568237][T12862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 959.618565][T12862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 959.627181][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 959.647116][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 959.681213][T12939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 959.708403][T12939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 959.738356][T12939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 959.782952][T12939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 959.885820][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 959.899487][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 959.936007][T12862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.001247][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 960.025611][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 960.059384][T12939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.108460][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 960.136320][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 960.150926][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 960.158845][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 960.179462][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 960.190519][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 960.212336][T12862] device veth0_vlan entered promiscuous mode [ 960.222794][T12939] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.252832][T12862] device veth1_vlan entered promiscuous mode [ 960.270953][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 960.310482][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 960.324742][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 960.335196][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.342251][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.350085][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 960.412213][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 960.430726][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 960.448448][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 960.452121][ T5330] Bluetooth: hci1: command 0x041b tx timeout [ 960.457736][ T3696] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.469494][ T3696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.502713][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 960.512299][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 960.522418][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 960.536703][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 960.581101][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 960.590497][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 960.615312][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 960.623899][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 960.643039][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 960.654902][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 960.673240][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 960.691326][T12939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 960.709266][T12939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 960.723647][T12862] device veth0_macvtap entered promiscuous mode [ 960.743642][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 960.753819][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 960.775309][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 960.819603][T12862] device veth1_macvtap entered promiscuous mode [ 960.867917][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.894876][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.904904][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.915641][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.926294][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.937047][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.947709][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.958429][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.968826][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.979522][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.989700][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.000444][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.012055][T12862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.022044][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 961.030905][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 961.041517][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 961.073655][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.112866][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.122702][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.134015][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.144628][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.167570][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.177458][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.188224][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.198202][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.208936][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.229248][T12862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 961.241227][T12862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.255471][T12862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.278859][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 961.298319][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 961.313151][T12862] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.322369][T12862] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.331646][T12862] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.340784][T12862] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.492138][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 961.502082][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 961.523849][T12939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.591969][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 961.611870][ T3696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.615184][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 961.620541][ T3696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.674872][ T4161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 961.690372][ T3696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.692839][T12939] device veth0_vlan entered promiscuous mode [ 961.705355][ T3696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.719971][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 961.727914][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 961.737490][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 961.747059][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 961.756306][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 961.769787][T12939] device veth1_vlan entered promiscuous mode [ 961.809304][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 961.825023][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 961.848703][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 961.858212][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 961.877852][T12939] device veth0_macvtap entered promiscuous mode [ 961.891856][T12939] device veth1_macvtap entered promiscuous mode [ 961.910905][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 961.949746][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 961.993380][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.004724][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.015772][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.028274][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.038986][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.050234][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.150567][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.225819][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.319810][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.408772][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.498840][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 962.570070][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.629126][T12939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.706496][ T5329] Bluetooth: hci1: command 0x040f tx timeout [ 962.735846][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 962.775171][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 962.803650][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 962.821969][T12878] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 962.831055][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 962.851182][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.862493][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.873389][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.884103][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.894386][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.904909][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.915235][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.926125][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.936001][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.946567][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.957267][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.967823][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.977713][T12939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 962.988209][T12939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 962.999396][T12939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.022344][T12939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.031664][T12939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.041236][T12939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.049957][T12939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.065718][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 963.079619][ T3696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 963.095633][T12878] usb 3-1: Using ep0 maxpacket: 8 [ 963.201198][ T3744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.220526][ T3744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.235402][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.244295][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 963.253038][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.270246][T12878] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 963.278646][T12878] usb 3-1: config 179 has no interface number 0 [ 963.288912][T12878] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 963.300289][T12878] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 963.301437][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 963.312206][T12878] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 963.330642][T12878] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 963.342356][T12878] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 963.376438][T12878] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 963.390857][T12878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.420677][T12978] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 963.464798][T12984] 9pnet: Insufficient options for proto=fd [ 963.591048][T12990] vcan0 speed is unknown, defaulting to 1000 [ 963.636528][T12984] configfs: Unknown parameter 'fd' [ 964.375020][ T8144] usb 3-1: USB disconnect, device number 15 [ 964.384501][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 964.392817][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 964.454703][T12997] loop1: detected capacity change from 0 to 1024 [ 964.467611][T12998] loop3: detected capacity change from 0 to 2048 [ 964.503202][T12997] hfsplus: extend alloc file! (8192,65536,366) [ 964.631483][T12998] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 965.040939][T12876] Bluetooth: hci1: command 0x0419 tx timeout [ 965.126698][T13008] loop1: detected capacity change from 0 to 8 [ 965.137988][T13004] loop4: detected capacity change from 0 to 2048 [ 965.176063][T13008] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 965.532841][T12876] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 966.410871][T12876] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 967.175925][T12876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.185399][T13004] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 967.230892][ T25] audit: type=1800 audit(1727541551.999:436): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2135" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 967.474420][ T25] audit: type=1800 audit(1727541552.009:437): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2135" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 967.513611][T12876] usb 1-1: config 0 descriptor?? [ 967.563994][T13020] loop1: detected capacity change from 0 to 2048 [ 967.595194][T12876] cp210x 1-1:0.0: cp210x converter detected [ 967.686683][T13024] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 967.775841][T13026] loop3: detected capacity change from 0 to 128 [ 967.809492][ T3577] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 967.819514][ T3577] CPU: 0 PID: 3577 Comm: kworker/u5:4 Not tainted 5.15.167-syzkaller #0 [ 967.827854][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 967.837911][ T3577] Workqueue: hci2 hci_rx_work [ 967.842596][ T3577] Call Trace: [ 967.845878][ T3577] [ 967.848806][ T3577] dump_stack_lvl+0x1e3/0x2d0 [ 967.853495][ T3577] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 967.859129][ T3577] ? panic+0x860/0x860 [ 967.863296][ T3577] ? sysfs_create_dir_ns+0x282/0x390 [ 967.864159][T13020] trusted_key: encrypted_key: insufficient parameters specified [ 967.868586][ T3577] sysfs_create_dir_ns+0x2c6/0x390 [ 967.881286][ T3577] ? sysfs_warn_dup+0xa0/0xa0 [ 967.885969][ T3577] ? do_raw_spin_unlock+0x137/0x8b0 [ 967.891182][ T3577] kobject_add_internal+0x6e0/0xe00 [ 967.896392][ T3577] kobject_add+0x14e/0x210 [ 967.900816][ T3577] ? device_add+0x3c2/0xfd0 [ 967.905325][ T3577] ? kobject_init+0x1d0/0x1d0 [ 967.910005][ T3577] ? __raw_spin_lock_init+0x41/0x100 [ 967.915298][ T3577] ? get_device_parent+0x128/0x400 [ 967.920418][ T3577] device_add+0x476/0xfd0 [ 967.924766][ T3577] hci_conn_add_sysfs+0xe4/0x1f0 [ 967.929708][ T3577] le_conn_complete_evt+0xc15/0x1500 [ 967.935005][ T3577] ? cs_le_create_conn+0x5f0/0x5f0 [ 967.940128][ T3577] hci_le_meta_evt+0xd86/0x3f50 [ 967.944988][ T3577] ? __lock_acquire+0x1ff0/0x1ff0 [ 967.950028][ T3577] ? __mutex_lock_common+0x444/0x25a0 [ 967.955414][ T3577] ? hci_remote_host_features_evt+0x280/0x280 [ 967.961487][ T3577] ? __mutex_unlock_slowpath+0x218/0x750 [ 967.967125][ T3577] ? hci_event_packet+0x3b4/0x1550 [ 967.972246][ T3577] ? mutex_unlock+0x10/0x10 [ 967.976746][ T3577] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 967.982724][ T3577] ? print_irqtrace_events+0x210/0x210 [ 967.988177][ T3577] hci_event_packet+0xc41/0x1550 [ 967.993106][ T3577] ? rcu_lock_release+0x20/0x20 [ 967.997950][ T3577] ? hci_send_to_monitor+0x99/0x4d0 [ 968.003137][ T3577] hci_rx_work+0x232/0x990 [ 968.007546][ T3577] process_one_work+0x8a1/0x10c0 [ 968.012479][ T3577] ? worker_detach_from_pool+0x260/0x260 [ 968.018098][ T3577] ? _raw_spin_lock_irqsave+0x120/0x120 [ 968.023632][ T3577] ? kthread_data+0x4e/0xc0 [ 968.028118][ T3577] ? wq_worker_running+0x97/0x170 [ 968.033130][ T3577] worker_thread+0xaca/0x1280 [ 968.037818][ T3577] kthread+0x3f6/0x4f0 [ 968.041878][ T3577] ? rcu_lock_release+0x20/0x20 [ 968.046713][ T3577] ? kthread_blkcg+0xd0/0xd0 [ 968.051295][ T3577] ret_from_fork+0x1f/0x30 [ 968.055722][ T3577] [ 968.058768][ C0] vkms_vblank_simulate: vblank timer overrun [ 968.067927][ T3577] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 968.084158][ T3577] Bluetooth: hci2: failed to register connection device [ 968.094443][ T3577] Bluetooth: hci2: link tx timeout [ 968.099586][ T3577] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 968.107320][ T3577] Bluetooth: hci2: link tx timeout [ 968.112468][ T3577] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00 [ 968.120221][ T3577] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00 [ 968.127943][ T3577] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 969.074345][T13036] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2145'. [ 969.097824][T12876] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 969.105379][T12876] cp210x 1-1:0.0: querying part number failed [ 969.238516][T12876] usb 1-1: cp210x converter now attached to ttyUSB0 [ 969.288910][T12876] usb 1-1: USB disconnect, device number 23 [ 969.323313][T12876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 970.183523][T12876] cp210x 1-1:0.0: device disconnected [ 970.451581][T13043] program syz.2.2153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 971.109906][T13057] loop1: detected capacity change from 0 to 2048 [ 971.321498][T13070] trusted_key: encrypted_key: insufficient parameters specified [ 971.454827][T13068] vcan0 speed is unknown, defaulting to 1000 [ 972.056994][T13057] EXT4-fs (loop1): Ignoring removed nobh option [ 972.103186][T13057] EXT4-fs (loop1): quotafile must be on filesystem root [ 972.186932][T13072] loop2: detected capacity change from 0 to 512 [ 972.289313][T13072] EXT4-fs (loop2): bad geometry: first data block 16711680 is beyond end of filesystem (64) [ 972.569223][T13078] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2160'. [ 972.597831][T13077] loop3: detected capacity change from 0 to 2048 [ 972.606753][T13076] loop1: detected capacity change from 0 to 64 [ 972.737926][T13076] Trying to free block not in datazone [ 972.744267][T13076] Trying to free block not in datazone [ 972.750452][T13076] Trying to free block not in datazone [ 972.755915][T13076] Trying to free block not in datazone [ 972.761540][T13076] Trying to free block not in datazone [ 972.766992][T13076] minix_free_block (loop1:6): bit already cleared [ 972.774504][T13076] Trying to free block not in datazone [ 972.779986][T13076] Trying to free block not in datazone [ 972.802892][T13081] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 972.881563][T13083] loop2: detected capacity change from 0 to 512 [ 972.937950][T13077] trusted_key: encrypted_key: insufficient parameters specified [ 972.954636][ T9695] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 972.964800][ T9695] CPU: 0 PID: 9695 Comm: kworker/u5:2 Not tainted 5.15.167-syzkaller #0 [ 972.973135][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 972.983190][ T9695] Workqueue: hci1 hci_rx_work [ 972.987905][ T9695] Call Trace: [ 972.991179][ T9695] [ 972.994110][ T9695] dump_stack_lvl+0x1e3/0x2d0 [ 972.998795][ T9695] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 973.004517][ T9695] ? panic+0x860/0x860 [ 973.008592][ T9695] ? sysfs_create_dir_ns+0x282/0x390 [ 973.014315][ T9695] sysfs_create_dir_ns+0x2c6/0x390 [ 973.019435][ T9695] ? sysfs_warn_dup+0xa0/0xa0 [ 973.024116][ T9695] ? do_raw_spin_unlock+0x137/0x8b0 [ 973.029332][ T9695] kobject_add_internal+0x6e0/0xe00 [ 973.034552][ T9695] kobject_add+0x14e/0x210 [ 973.039014][ T9695] ? device_add+0x3c2/0xfd0 [ 973.043522][ T9695] ? kobject_init+0x1d0/0x1d0 [ 973.048205][ T9695] ? __raw_spin_lock_init+0x41/0x100 [ 973.053498][ T9695] ? get_device_parent+0x128/0x400 [ 973.058617][ T9695] device_add+0x476/0xfd0 [ 973.062957][ T9695] hci_conn_add_sysfs+0xe4/0x1f0 [ 973.067901][ T9695] le_conn_complete_evt+0xc15/0x1500 [ 973.073201][ T9695] ? cs_le_create_conn+0x5f0/0x5f0 [ 973.078331][ T9695] hci_le_meta_evt+0xd86/0x3f50 [ 973.083191][ T9695] ? __lock_acquire+0x1ff0/0x1ff0 [ 973.088221][ T9695] ? __mutex_lock_common+0x444/0x25a0 [ 973.093614][ T9695] ? hci_remote_host_features_evt+0x280/0x280 [ 973.099688][ T9695] ? __mutex_unlock_slowpath+0x218/0x750 [ 973.105324][ T9695] ? hci_event_packet+0x3b4/0x1550 [ 973.110446][ T9695] ? mutex_unlock+0x10/0x10 [ 973.114955][ T9695] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 973.120939][ T9695] ? print_irqtrace_events+0x210/0x210 [ 973.126404][ T9695] hci_event_packet+0xc41/0x1550 [ 973.131359][ T9695] ? rcu_lock_release+0x20/0x20 [ 973.136231][ T9695] ? hci_send_to_monitor+0x99/0x4d0 [ 973.141433][ T9695] hci_rx_work+0x232/0x990 [ 973.145862][ T9695] process_one_work+0x8a1/0x10c0 [ 973.150814][ T9695] ? worker_detach_from_pool+0x260/0x260 [ 973.156451][ T9695] ? _raw_spin_lock_irqsave+0x120/0x120 [ 973.162003][ T9695] ? kthread_data+0x4e/0xc0 [ 973.166516][ T9695] ? wq_worker_running+0x97/0x170 [ 973.171649][ T9695] worker_thread+0xaca/0x1280 [ 973.176357][ T9695] kthread+0x3f6/0x4f0 [ 973.180426][ T9695] ? rcu_lock_release+0x20/0x20 [ 973.185278][ T9695] ? kthread_blkcg+0xd0/0xd0 [ 973.189872][ T9695] ret_from_fork+0x1f/0x30 [ 973.194307][ T9695] [ 973.210561][T13083] EXT4-fs (loop2): Test dummy encryption mode enabled [ 973.213790][ T9695] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 973.230981][ T9695] Bluetooth: hci1: failed to register connection device [ 973.312468][T13083] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2163: inline data xattr refers to an external xattr inode [ 973.423654][T13083] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2163: couldn't read orphan inode 12 (err -117) [ 973.539310][T13083] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 973.719447][T13100] loop1: detected capacity change from 0 to 1024 [ 974.893543][T13106] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.2163: Directory hole found for htree leaf block 0 [ 975.148017][T13100] EXT4-fs (loop1): Mount option "dioread_nolock" incompatible with ext3 [ 975.486087][T13111] QAT: Invalid ioctl -2144835806 [ 975.559408][T13120] loop3: detected capacity change from 0 to 512 [ 976.700367][T13123] vcan0 speed is unknown, defaulting to 1000 [ 977.473449][ T1103] device hsr_slave_0 left promiscuous mode [ 977.504962][ T1103] device hsr_slave_1 left promiscuous mode [ 978.039253][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.050474][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.066224][T13120] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 978.080792][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.099597][T13120] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 978.109640][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.118510][ T1103] device bridge_slave_1 left promiscuous mode [ 978.131075][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.143543][ T1103] device bridge_slave_0 left promiscuous mode [ 978.176558][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.398403][ T1103] device hsr_slave_0 left promiscuous mode [ 978.423720][ T1103] device hsr_slave_1 left promiscuous mode [ 978.432317][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.440044][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.447398][ T4919] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 978.458739][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.466567][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.475215][ T1103] device bridge_slave_1 left promiscuous mode [ 978.481977][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.490149][ T1103] device bridge_slave_0 left promiscuous mode [ 978.497143][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.511579][ T1103] device veth1_macvtap left promiscuous mode [ 978.519968][ T1103] device veth1_vlan left promiscuous mode [ 978.525894][ T1103] device veth0_vlan left promiscuous mode [ 978.532775][ T1103] device veth1_macvtap left promiscuous mode [ 978.539069][ T1103] device veth0_macvtap left promiscuous mode [ 978.545641][ T1103] device veth1_vlan left promiscuous mode [ 978.551399][ T1103] device veth0_vlan left promiscuous mode [ 978.729175][ T4919] usb 1-1: Using ep0 maxpacket: 8 [ 978.859339][ T4919] usb 1-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b [ 978.868465][ T4919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.907891][ T4919] usb 1-1: config 0 descriptor?? [ 979.174769][T13145] loop3: detected capacity change from 0 to 40427 [ 979.182657][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 979.206517][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 979.219695][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.237934][T13145] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 979.256224][T13145] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 979.268571][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.353063][ T1103] bond0 (unregistering): Released all slaves [ 979.556357][T13148] loop3: detected capacity change from 0 to 2048 [ 979.626957][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 979.644862][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 979.674948][T13149] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 979.696938][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.731419][T13148] trusted_key: encrypted_key: insufficient parameters specified [ 979.738962][ T9695] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 979.748972][ T9695] CPU: 0 PID: 9695 Comm: kworker/u5:2 Not tainted 5.15.167-syzkaller #0 [ 979.757451][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 979.767505][ T9695] Workqueue: hci1 hci_rx_work [ 979.772188][ T9695] Call Trace: [ 979.775464][ T9695] [ 979.778387][ T9695] dump_stack_lvl+0x1e3/0x2d0 [ 979.783054][ T9695] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 979.788715][ T9695] ? panic+0x860/0x860 [ 979.792782][ T9695] ? sysfs_create_dir_ns+0x282/0x390 [ 979.798068][ T9695] sysfs_create_dir_ns+0x2c6/0x390 [ 979.803174][ T9695] ? sysfs_warn_dup+0xa0/0xa0 [ 979.807855][ T9695] ? do_raw_spin_unlock+0x137/0x8b0 [ 979.813055][ T9695] kobject_add_internal+0x6e0/0xe00 [ 979.818259][ T9695] kobject_add+0x14e/0x210 [ 979.822691][ T9695] ? device_add+0x3c2/0xfd0 [ 979.827184][ T9695] ? kobject_init+0x1d0/0x1d0 [ 979.831857][ T9695] ? __raw_spin_lock_init+0x41/0x100 [ 979.837221][ T9695] ? get_device_parent+0x128/0x400 [ 979.842328][ T9695] device_add+0x476/0xfd0 [ 979.846657][ T9695] hci_conn_add_sysfs+0xe4/0x1f0 [ 979.851596][ T9695] le_conn_complete_evt+0xc15/0x1500 [ 979.856880][ T9695] ? cs_le_create_conn+0x5f0/0x5f0 [ 979.861999][ T9695] hci_le_meta_evt+0xd86/0x3f50 [ 979.866930][ T9695] ? __lock_acquire+0x1ff0/0x1ff0 [ 979.872046][ T9695] ? __mutex_lock_common+0x444/0x25a0 [ 979.877460][ T9695] ? hci_remote_host_features_evt+0x280/0x280 [ 979.883529][ T9695] ? __mutex_unlock_slowpath+0x218/0x750 [ 979.889149][ T9695] ? hci_event_packet+0x3b4/0x1550 [ 979.894270][ T9695] ? mutex_unlock+0x10/0x10 [ 979.898776][ T9695] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 979.904741][ T9695] ? print_irqtrace_events+0x210/0x210 [ 979.910369][ T9695] hci_event_packet+0xc41/0x1550 [ 979.915312][ T9695] ? rcu_lock_release+0x20/0x20 [ 979.920149][ T9695] ? hci_send_to_monitor+0x99/0x4d0 [ 979.925330][ T9695] hci_rx_work+0x232/0x990 [ 979.929732][ T9695] process_one_work+0x8a1/0x10c0 [ 979.934669][ T9695] ? worker_detach_from_pool+0x260/0x260 [ 979.940301][ T9695] ? _raw_spin_lock_irqsave+0x120/0x120 [ 979.945827][ T9695] ? kthread_data+0x4e/0xc0 [ 979.950312][ T9695] ? wq_worker_running+0x97/0x170 [ 979.955337][ T9695] worker_thread+0xaca/0x1280 [ 979.960039][ T9695] kthread+0x3f6/0x4f0 [ 979.964095][ T9695] ? rcu_lock_release+0x20/0x20 [ 979.968938][ T9695] ? kthread_blkcg+0xd0/0xd0 [ 979.973506][ T9695] ret_from_fork+0x1f/0x30 [ 979.977925][ T9695] [ 979.982384][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.992611][ T9695] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 980.006689][ T9695] Bluetooth: hci1: failed to register connection device [ 980.077659][ T1103] bond0 (unregistering): Released all slaves [ 980.216140][ T5329] usb 1-1: USB disconnect, device number 24 [ 980.273549][T13151] x_tables: duplicate underflow at hook 4 [ 980.592164][T13162] loop1: detected capacity change from 0 to 512 [ 980.608713][T13166] loop4: detected capacity change from 0 to 128 [ 980.655383][T13169] loop3: detected capacity change from 0 to 128 [ 980.691409][T13166] EXT4-fs (loop4): Test dummy encryption mode enabled [ 980.713289][T13162] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 980.713289][T13162] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 980.713289][T13162] [ 980.782150][T13166] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 980.917623][T13166] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038 (0x7fffffff) [ 980.944768][T13162] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 980.964789][T13162] EXT4-fs (loop1): 1 truncate cleaned up [ 981.026161][T13162] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 983.053365][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 983.207982][T13200] 9pnet: p9_fd_create_tcp (13200): problem connecting socket to 127.0.0.1 [ 983.346924][T13206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2193'. [ 983.356504][T13199] delete_channel: no stack [ 984.691977][T13245] loop1: detected capacity change from 0 to 512 [ 985.027802][T13245] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 985.654808][T13256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2201'. [ 985.773409][T13245] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 985.774519][T13245] EXT4-fs (loop1): 1 truncate cleaned up [ 985.774545][T13245] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 985.946273][T13262] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2206'. [ 987.203593][T13278] loop4: detected capacity change from 0 to 32768 [ 987.245234][T13278] XFS: attr2 mount option is deprecated. [ 987.245262][T13278] XFS: noikeep mount option is deprecated. [ 987.471555][T13278] XFS (loop4): Mounting V5 Filesystem [ 988.183524][T13278] XFS (loop4): Ending clean mount [ 988.185589][T13278] XFS (loop4): Quotacheck needed: Please wait. [ 988.389023][T13278] XFS (loop4): Quotacheck: Done. [ 989.094773][T12280] XFS (loop4): Unmounting Filesystem [ 994.396010][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2217'. [ 995.644619][T13388] loop4: detected capacity change from 0 to 512 [ 995.692784][T13391] netem: unknown loss type 5 [ 995.863222][T13388] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2237: casefold flag without casefold feature [ 995.863463][T13388] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2237: couldn't read orphan inode 15 (err -117) [ 995.863593][T13388] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 996.008420][T13399] loop2: detected capacity change from 0 to 512 [ 996.572067][ T25] audit: type=1326 audit(1727541579.080:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13383 comm="syz.3.2236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec61472ff9 code=0x0 [ 996.600709][T13399] EXT4-fs (loop2): Ignoring removed orlov option [ 996.600751][T13399] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 996.717741][T13399] EXT4-fs (loop2): 1 truncate cleaned up [ 996.717760][T13399] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,resuid=0x000000000000ee01,orlov,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 996.741484][T13401] serio: Serial port pts0 [ 996.945840][T13405] Can't find ip_set type bitmap:ip [ 997.365868][ T25] audit: type=1326 audit(1727541579.819:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13410 comm="syz.3.2240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec61472ff9 code=0x0 [ 997.429440][ T8148] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 997.862613][ T8148] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 997.862650][ T8148] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 997.862685][ T8148] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 997.862709][ T8148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.901834][T13409] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 997.984893][T13422] loop1: detected capacity change from 0 to 512 [ 998.054547][T13422] EXT4-fs (loop1): Test dummy encryption mode enabled [ 998.477358][T13422] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2243: inline data xattr refers to an external xattr inode [ 998.479155][T13422] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2243: couldn't read orphan inode 12 (err -117) [ 998.485473][T13422] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 998.954078][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.096807][ T8150] usb 3-1: USB disconnect, device number 16 [ 1000.192586][T13435] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.2243: Directory hole found for htree leaf block 0 [ 1002.164097][T13459] loop4: detected capacity change from 0 to 512 [ 1003.947907][T13459] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1003.963663][T13459] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2251: bg 0: block 248: padding at end of block bitmap is not set [ 1003.977342][T13459] Quota error (device loop4): write_blk: dquota write failed [ 1003.977508][T13459] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1003.977539][T13459] EXT4-fs error (device loop4): ext4_acquire_dquot:6196: comm syz.4.2251: Failed to acquire dquot type 1 [ 1003.980034][T13459] EXT4-fs (loop4): 1 truncate cleaned up [ 1003.983136][T13459] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue. Quota mode: writeback. [ 1004.266306][T13471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2254'. [ 1004.512159][T13477] Illegal XDP return value 4294967274, expect packet loss! [ 1005.966566][T13501] ipt_CLUSTERIP: Please specify destination IP [ 1007.655846][T13524] hpfs: Bad magic ... probably not HPFS [ 1007.689344][T13520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2267'. [ 1008.025934][T13529] vcan0 speed is unknown, defaulting to 1000 [ 1008.293401][ T9695] Bluetooth: hci1: link tx timeout [ 1008.301023][ T9695] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 1008.365588][T13537] loop2: detected capacity change from 0 to 16 [ 1008.393599][T13540] loop1: detected capacity change from 0 to 256 [ 1009.090735][T13537] erofs: (device loop2): mounted with root inode @ nid 36. [ 1010.124580][T13554] loop2: detected capacity change from 0 to 128 [ 1010.268905][T13554] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1010.318182][T13554] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038 (0x7fffffff) [ 1010.365240][ T5258] Bluetooth: hci1: command 0x0405 tx timeout [ 1011.092307][T13567] loop1: detected capacity change from 0 to 2048 [ 1011.216663][T13575] syz.4.2284[13575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1011.216761][T13575] syz.4.2284[13575] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1011.234522][T13578] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1011.294620][T13580] loop2: detected capacity change from 0 to 512 [ 1011.461276][T13580] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2280: iget: bad extended attribute block 1 [ 1011.480289][T13580] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2280: couldn't read orphan inode 15 (err -117) [ 1011.504123][T13586] xt_TCPMSS: Only works on TCP SYN packets [ 1011.534312][T13580] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,auto_da_alloc=0x000000000000007f,noload,nobarrier,nodiscard,,errors=continue. Quota mode: none. [ 1011.739947][T13567] trusted_key: encrypted_key: insufficient parameters specified [ 1011.802447][ T9695] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1011.813670][ T9695] CPU: 1 PID: 9695 Comm: kworker/u5:2 Not tainted 5.15.167-syzkaller #0 [ 1011.822003][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1011.832058][ T9695] Workqueue: hci2 hci_rx_work [ 1011.836741][ T9695] Call Trace: [ 1011.840009][ T9695] [ 1011.842935][ T9695] dump_stack_lvl+0x1e3/0x2d0 [ 1011.847635][ T9695] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1011.853265][ T9695] ? panic+0x860/0x860 [ 1011.857334][ T9695] ? sysfs_create_dir_ns+0x282/0x390 [ 1011.862620][ T9695] sysfs_create_dir_ns+0x2c6/0x390 [ 1011.867730][ T9695] ? sysfs_warn_dup+0xa0/0xa0 [ 1011.872522][ T9695] ? do_raw_spin_unlock+0x137/0x8b0 [ 1011.877721][ T9695] kobject_add_internal+0x6e0/0xe00 [ 1011.882928][ T9695] kobject_add+0x14e/0x210 [ 1011.887361][ T9695] ? device_add+0x3c2/0xfd0 [ 1011.891870][ T9695] ? kobject_init+0x1d0/0x1d0 [ 1011.896557][ T9695] ? __raw_spin_lock_init+0x41/0x100 [ 1011.901849][ T9695] ? get_device_parent+0x128/0x400 [ 1011.906970][ T9695] device_add+0x476/0xfd0 [ 1011.911320][ T9695] hci_conn_add_sysfs+0xe4/0x1f0 [ 1011.916263][ T9695] le_conn_complete_evt+0xc15/0x1500 [ 1011.921571][ T9695] ? cs_le_create_conn+0x5f0/0x5f0 [ 1011.926682][ T9695] ? preempt_schedule+0xd9/0xe0 [ 1011.931565][ T9695] ? preempt_schedule_common+0xa6/0xd0 [ 1011.937151][ T9695] hci_le_meta_evt+0xd86/0x3f50 [ 1011.942007][ T9695] ? __lock_acquire+0x1ff0/0x1ff0 [ 1011.947034][ T9695] ? __mutex_lock_common+0x45a/0x25a0 [ 1011.952416][ T9695] ? release_firmware_map_entry+0x190/0x190 [ 1011.958316][ T9695] ? hci_remote_host_features_evt+0x280/0x280 [ 1011.964379][ T9695] ? __mutex_unlock_slowpath+0x218/0x750 [ 1011.970003][ T9695] ? hci_event_packet+0x3b4/0x1550 [ 1011.975115][ T9695] ? mutex_unlock+0x10/0x10 [ 1011.979606][ T9695] ? preempt_schedule+0xd9/0xe0 [ 1011.984441][ T9695] ? schedule_preempt_disabled+0x20/0x20 [ 1011.990060][ T9695] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1011.995674][ T9695] ? lockdep_hardirqs_on+0x94/0x130 [ 1012.000853][ T9695] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1012.006473][ T9695] hci_event_packet+0xc41/0x1550 [ 1012.011399][ T9695] ? rcu_lock_release+0x20/0x20 [ 1012.016241][ T9695] ? hci_send_to_monitor+0x99/0x4d0 [ 1012.021430][ T9695] hci_rx_work+0x232/0x990 [ 1012.025924][ T9695] process_one_work+0x8a1/0x10c0 [ 1012.030857][ T9695] ? worker_detach_from_pool+0x260/0x260 [ 1012.036474][ T9695] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1012.042001][ T9695] ? kthread_data+0x4e/0xc0 [ 1012.046488][ T9695] ? wq_worker_running+0x97/0x170 [ 1012.052016][ T9695] worker_thread+0xaca/0x1280 [ 1012.056696][ T9695] kthread+0x3f6/0x4f0 [ 1012.060744][ T9695] ? rcu_lock_release+0x20/0x20 [ 1012.065607][ T9695] ? kthread_blkcg+0xd0/0xd0 [ 1012.070180][ T9695] ret_from_fork+0x1f/0x30 [ 1012.074587][ T9695] [ 1012.077682][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.088717][ T9695] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1012.102824][ T9695] Bluetooth: hci2: failed to register connection device [ 1012.112833][ T9695] Bluetooth: hci2: link tx timeout [ 1012.146113][T13589] vcan0 speed is unknown, defaulting to 1000 [ 1012.212062][ T9695] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1012.233286][ T9695] Bluetooth: hci2: link tx timeout [ 1012.238497][ T9695] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00 [ 1012.246824][ T9695] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00 [ 1012.256969][ T9695] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1012.350975][T13580] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 7727 vs 220 free clusters [ 1012.629602][T12876] Bluetooth: hci1: command 0x0406 tx timeout [ 1012.739823][T13597] loop4: detected capacity change from 0 to 256 [ 1012.868602][T13597] exFAT-fs (loop4): invalid fs_name [ 1012.873909][T13597] exFAT-fs (loop4): failed to read boot sector [ 1012.880298][T13597] exFAT-fs (loop4): failed to recognize exfat type [ 1012.911416][T13595] netlink: 'syz.0.2287': attribute type 10 has an invalid length. [ 1013.190735][T13595] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.199431][T13595] bond0: (slave team0): Enslaving as an active interface with an up link [ 1013.681139][T12875] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1014.061054][T12875] usb 5-1: device descriptor read/64, error -71 [ 1015.186374][T12875] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1015.478863][T12875] usb 5-1: device descriptor read/64, error -71 [ 1015.634664][T12875] usb usb5-port1: attempt power cycle [ 1015.831383][T13636] loop4: detected capacity change from 0 to 2048 [ 1015.890503][ T8148] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1015.986799][T13649] vcan0 speed is unknown, defaulting to 1000 [ 1016.120842][T13650] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1016.226771][ T8148] usb 1-1: Using ep0 maxpacket: 32 [ 1016.248898][T13636] trusted_key: encrypted_key: insufficient parameters specified [ 1016.985083][T13648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1017.122865][T13655] loop2: detected capacity change from 0 to 1024 [ 1017.169341][ T8148] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1017.205666][ T8148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.243987][ T8148] usb 1-1: Product: syz [ 1017.252859][ T8148] usb 1-1: Manufacturer: syz [ 1017.274583][ T8148] usb 1-1: SerialNumber: syz [ 1017.313169][T13655] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 1017.327776][T13655] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 1017.351120][ T8148] usb 1-1: config 0 descriptor?? [ 1018.750823][ T8148] f81534a_ctrl 1-1:0.0: failed to set register 0x116: -5 [ 1018.757906][ T8148] f81534a_ctrl 1-1:0.0: failed to enable ports: -5 [ 1018.797056][ T8148] f81534a_ctrl: probe of 1-1:0.0 failed with error -5 [ 1018.855261][ T8148] usb 1-1: USB disconnect, device number 25 [ 1019.130176][ T25] audit: type=1804 audit(1727541599.838:440): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2307" name="/newroot/60/bus/file0" dev="overlay" ino=357 res=1 errno=0 [ 1022.236904][T13701] loop4: detected capacity change from 0 to 2048 [ 1023.481097][T13704] loop0: detected capacity change from 0 to 1024 [ 1024.058080][T13713] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1024.312467][T13716] loop0: detected capacity change from 0 to 256 [ 1024.422571][T13701] trusted_key: encrypted_key: insufficient parameters specified [ 1024.425523][T13716] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1024.792005][T13728] loop0: detected capacity change from 0 to 512 [ 1024.992544][T13731] ptrace attach of "./syz-executor exec"[12939] was attempted by "./syz-executor exec"[13731] [ 1025.187132][T13728] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1025.449349][T13728] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.2321: invalid indirect mapped block 83886080 (level 1) [ 1025.588076][T13728] EXT4-fs (loop0): Remounting filesystem read-only [ 1025.594882][T13728] EXT4-fs (loop0): 1 orphan inode deleted [ 1025.609461][T13728] EXT4-fs (loop0): 1 truncate cleaned up [ 1025.615134][T13728] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,nodelalloc,block_validity,noblock_validity,. Quota mode: none. [ 1026.558490][T13744] loop3: detected capacity change from 0 to 1024 [ 1026.737655][T13744] hfsplus: unable to parse mount options [ 1026.863817][T13750] loop4: detected capacity change from 0 to 2048 [ 1026.970357][T13750] EXT4-fs (loop4): Ignoring removed orlov option [ 1027.127790][T13750] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,errors=remount-ro,. Quota mode: none. [ 1027.159690][T13756] loop1: detected capacity change from 0 to 1024 [ 1027.418735][T13756] EXT4-fs (loop1): Mount option "nojournal_checksum" incompatible with ext2 [ 1028.014569][T13765] program syz.2.2330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1028.257325][T13773] loop3: detected capacity change from 0 to 256 [ 1028.515893][T13779] syz.1.2328[13779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1028.516391][T13779] syz.1.2328[13779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.761935][T13779] [ 1029.775628][T13779] ====================================================== [ 1029.782634][T13779] WARNING: possible circular locking dependency detected [ 1029.789643][T13779] 5.15.167-syzkaller #0 Not tainted [ 1029.794827][T13779] ------------------------------------------------------ [ 1029.801833][T13779] syz.1.2328/13779 is trying to acquire lock: [ 1029.807894][T13779] ffff88814bc6c170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2aa/0x370 [ 1029.818349][T13779] [ 1029.818349][T13779] but task is already holding lock: [ 1029.825702][T13779] ffff88814bc6abd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 1029.837048][T13779] [ 1029.837048][T13779] which lock already depends on the new lock. [ 1029.837048][T13779] [ 1029.847440][T13779] [ 1029.847440][T13779] the existing dependency chain (in reverse order) is: [ 1029.856529][T13779] [ 1029.856529][T13779] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1029.864958][T13779] lock_acquire+0x1db/0x4f0 [ 1029.870016][T13779] percpu_down_read+0x46/0x1b0 [ 1029.875299][T13779] ext4_writepages+0x1f6/0x3d10 [ 1029.880666][T13779] do_writepages+0x481/0x730 [ 1029.885772][T13779] filemap_fdatawrite_wbc+0x1d6/0x230 [ 1029.891663][T13779] filemap_write_and_wait_range+0x19e/0x280 [ 1029.898081][T13779] __iomap_dio_rw+0x897/0x1f40 [ 1029.903363][T13779] iomap_dio_rw+0x38/0x80 [ 1029.908210][T13779] ext4_file_read_iter+0x530/0x6c0 [ 1029.913848][T13779] generic_file_splice_read+0x4ad/0x790 [ 1029.919920][T13779] splice_direct_to_actor+0x448/0xc10 [ 1029.925814][T13779] do_splice_direct+0x285/0x3d0 [ 1029.931183][T13779] do_sendfile+0x622/0x1000 [ 1029.936208][T13779] __se_sys_sendfile64+0x178/0x1e0 [ 1029.941854][T13779] do_syscall_64+0x3b/0xb0 [ 1029.946968][T13779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1029.953387][T13779] [ 1029.953387][T13779] -> #2 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 1029.961996][T13779] lock_acquire+0x1db/0x4f0 [ 1029.967016][T13779] down_read+0x45/0x2e0 [ 1029.971690][T13779] ext4_bmap+0x4b/0x410 [ 1029.976372][T13779] bmap+0xa1/0xd0 [ 1029.980524][T13779] jbd2_journal_flush+0x7a2/0xc90 [ 1029.986065][T13779] ext4_ioctl+0x3249/0x5b80 [ 1029.991086][T13779] __se_sys_ioctl+0xf1/0x160 [ 1029.996194][T13779] do_syscall_64+0x3b/0xb0 [ 1030.001353][T13779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1030.007772][T13779] [ 1030.007772][T13779] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 1030.016546][T13779] lock_acquire+0x1db/0x4f0 [ 1030.021568][T13779] __mutex_lock_common+0x1da/0x25a0 [ 1030.027374][T13779] mutex_lock_io_nested+0x45/0x60 [ 1030.032914][T13779] jbd2_journal_flush+0x290/0xc90 [ 1030.038459][T13779] ext4_ioctl+0x3249/0x5b80 [ 1030.043486][T13779] __se_sys_ioctl+0xf1/0x160 [ 1030.048607][T13779] do_syscall_64+0x3b/0xb0 [ 1030.053547][T13779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1030.059977][T13779] [ 1030.059977][T13779] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 1030.067971][T13779] validate_chain+0x1649/0x5930 [ 1030.073369][T13779] __lock_acquire+0x1295/0x1ff0 [ 1030.078739][T13779] lock_acquire+0x1db/0x4f0 [ 1030.083764][T13779] __mutex_lock_common+0x1da/0x25a0 [ 1030.089484][T13779] mutex_lock_nested+0x17/0x20 [ 1030.094765][T13779] jbd2_journal_lock_updates+0x2aa/0x370 [ 1030.100924][T13779] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 1030.107513][T13779] ext4_fileattr_set+0xdf4/0x1750 [ 1030.113062][T13779] vfs_fileattr_set+0x8f3/0xd30 [ 1030.118435][T13779] do_vfs_ioctl+0x1d85/0x2b70 [ 1030.123632][T13779] __se_sys_ioctl+0x81/0x160 [ 1030.128744][T13779] do_syscall_64+0x3b/0xb0 [ 1030.133687][T13779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1030.140111][T13779] [ 1030.140111][T13779] other info that might help us debug this: [ 1030.140111][T13779] [ 1030.150334][T13779] Chain exists of: [ 1030.150334][T13779] &journal->j_barrier --> &sb->s_type->i_mutex_key#9 --> &sbi->s_writepages_rwsem [ 1030.150334][T13779] [ 1030.165463][T13779] Possible unsafe locking scenario: [ 1030.165463][T13779] [ 1030.173008][T13779] CPU0 CPU1 [ 1030.178351][T13779] ---- ---- [ 1030.183688][T13779] lock(&sbi->s_writepages_rwsem); [ 1030.188882][T13779] lock(&sb->s_type->i_mutex_key#9); [ 1030.196773][T13779] lock(&sbi->s_writepages_rwsem); [ 1030.204470][T13779] lock(&journal->j_barrier); [ 1030.209226][T13779] [ 1030.209226][T13779] *** DEADLOCK *** [ 1030.209226][T13779] [ 1030.217346][T13779] 4 locks held by syz.1.2328/13779: [ 1030.222515][T13779] #0: ffff88814bc68460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 1030.232145][T13779] #1: ffff88807633bfc0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_fileattr_set+0x135/0xd30 [ 1030.242818][T13779] #2: ffff88807633c160 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x115/0x6e0 [ 1030.254474][T13779] #3: ffff88814bc6abd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 1030.267525][T13779] [ 1030.267525][T13779] stack backtrace: [ 1030.273395][T13779] CPU: 0 PID: 13779 Comm: syz.1.2328 Not tainted 5.15.167-syzkaller #0 [ 1030.281702][T13779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1030.291735][T13779] Call Trace: [ 1030.294999][T13779] [ 1030.297908][T13779] dump_stack_lvl+0x1e3/0x2d0 [ 1030.302566][T13779] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1030.308183][T13779] ? print_circular_bug+0x12b/0x1a0 [ 1030.313360][T13779] check_noncircular+0x2f8/0x3b0 [ 1030.318275][T13779] ? add_chain_block+0x850/0x850 [ 1030.323185][T13779] ? lockdep_lock+0x11f/0x2a0 [ 1030.327855][T13779] ? validate_chain+0x112/0x5930 [ 1030.332790][T13779] validate_chain+0x1649/0x5930 [ 1030.337729][T13779] ? reacquire_held_locks+0x660/0x660 [ 1030.343080][T13779] ? lockdep_unlock+0x166/0x300 [ 1030.347904][T13779] ? lockdep_lock+0x2a0/0x2a0 [ 1030.352554][T13779] ? lockdep_unlock+0x166/0x300 [ 1030.357378][T13779] ? reacquire_held_locks+0x660/0x660 [ 1030.362726][T13779] ? validate_chain+0x13bd/0x5930 [ 1030.367730][T13779] ? mark_lock+0x98/0x340 [ 1030.372044][T13779] ? mark_lock+0x98/0x340 [ 1030.376358][T13779] __lock_acquire+0x1295/0x1ff0 [ 1030.381199][T13779] lock_acquire+0x1db/0x4f0 [ 1030.385680][T13779] ? jbd2_journal_lock_updates+0x2aa/0x370 [ 1030.391482][T13779] ? read_lock_is_recursive+0x10/0x10 [ 1030.396851][T13779] ? __might_sleep+0xc0/0xc0 [ 1030.401428][T13779] ? print_irqtrace_events+0x210/0x210 [ 1030.406870][T13779] ? lockdep_hardirqs_off+0x70/0x100 [ 1030.412142][T13779] ? do_raw_spin_unlock+0x137/0x8b0 [ 1030.417781][T13779] __mutex_lock_common+0x1da/0x25a0 [ 1030.422960][T13779] ? jbd2_journal_lock_updates+0x2aa/0x370 [ 1030.428747][T13779] ? jbd2_journal_lock_updates+0x2aa/0x370 [ 1030.434533][T13779] ? jbd2_journal_lock_updates+0x299/0x370 [ 1030.440326][T13779] ? jbd2_journal_wait_updates+0x268/0x2d0 [ 1030.446120][T13779] ? mutex_lock_io_nested+0x60/0x60 [ 1030.451302][T13779] ? do_raw_read_unlock+0x70/0x70 [ 1030.456309][T13779] ? rcu_sync_func+0xaa/0x210 [ 1030.461016][T13779] mutex_lock_nested+0x17/0x20 [ 1030.465765][T13779] jbd2_journal_lock_updates+0x2aa/0x370 [ 1030.471400][T13779] ? jbd2_journal_wait_updates+0x2d0/0x2d0 [ 1030.477186][T13779] ? cpumask_next+0xc3/0xf0 [ 1030.481780][T13779] ? percpu_down_write+0x1ea/0x2d0 [ 1030.486877][T13779] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 1030.492950][T13779] ext4_fileattr_set+0xdf4/0x1750 [ 1030.497991][T13779] ? mark_lock+0x98/0x340 [ 1030.502333][T13779] ? ext4_fileattr_get+0x200/0x200 [ 1030.507421][T13779] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1030.513029][T13779] ? lockdep_hardirqs_on+0x94/0x130 [ 1030.518209][T13779] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1030.523830][T13779] ? vfs_fileattr_set+0x81e/0xd30 [ 1030.528834][T13779] vfs_fileattr_set+0x8f3/0xd30 [ 1030.533669][T13779] ? copy_fsxattr_to_user+0x3a0/0x3a0 [ 1030.539038][T13779] do_vfs_ioctl+0x1d85/0x2b70 [ 1030.543711][T13779] ? __x64_compat_sys_ioctl+0x80/0x80 [ 1030.549059][T13779] ? __lock_acquire+0x1ff0/0x1ff0 [ 1030.554075][T13779] ? slab_free_freelist_hook+0xdd/0x160 [ 1030.559613][T13779] ? tomoyo_path_number_perm+0x648/0x810 [ 1030.565273][T13779] ? kfree+0xf1/0x270 [ 1030.569238][T13779] ? tomoyo_path_number_perm+0x6ab/0x810 [ 1030.574869][T13779] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1030.580326][T13779] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1030.585947][T13779] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1030.590885][T13779] ? security_file_ioctl+0x7d/0xa0 [ 1030.595980][T13779] __se_sys_ioctl+0x81/0x160 [ 1030.600555][T13779] do_syscall_64+0x3b/0xb0 [ 1030.604952][T13779] ? clear_bhb_loop+0x15/0x70 [ 1030.609813][T13779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1030.615705][T13779] RIP: 0033:0x7f0591542ff9 [ 1030.620102][T13779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.639685][T13779] RSP: 002b:00007f058f979038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.648081][T13779] RAX: ffffffffffffffda RBX: 00007f05916fb130 RCX: 00007f0591542ff9 [ 1030.656052][T13779] RDX: 0000000020000380 RSI: 0000000040086602 RDI: 0000000000000009 [ 1030.664006][T13779] RBP: 00007f05915b5296 R08: 0000000000000000 R09: 0000000000000000 [ 1030.671964][T13779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1030.679918][T13779] R13: 0000000000000000 R14: 00007f05916fb130 R15: 00007ffe3735d348 [ 1030.687875][T13779] [ 1030.894893][T13792] vcan0 speed is unknown, defaulting to 1000 [ 1031.877801][ T1103] device hsr_slave_0 left promiscuous mode [ 1031.884302][ T1103] device hsr_slave_1 left promiscuous mode [ 1031.890426][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.898147][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.906681][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.914087][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.921694][ T1103] device bridge_slave_1 left promiscuous mode [ 1031.928250][ T1103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.938333][ T1103] device bridge_slave_0 left promiscuous mode [ 1031.944497][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.954233][ T1103] device veth1_macvtap left promiscuous mode [ 1031.961554][ T1103] device veth0_macvtap left promiscuous mode [ 1031.967574][ T1103] device veth1_vlan left promiscuous mode [ 1031.973440][ T1103] device veth0_vlan left promiscuous mode [ 1032.031440][ T1103] bond1 (unregistering): Released all slaves [ 1032.127214][ T1103] team0 (unregistering): Port device team_slave_1 removed [ 1032.139584][ T1103] team0 (unregistering): Port device team_slave_0 removed [ 1032.152665][ T1103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.164440][ T1103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.215188][ T1103] bond0 (unregistering): Released all slaves