last executing test programs: 34.137695091s ago: executing program 2 (id=64): syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80, 0x0) r1 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 26.277639798s ago: executing program 2 (id=73): r0 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 24.538963902s ago: executing program 2 (id=74): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x41000, 0xc}, 0x94) r4 = msgget$private(0x0, 0x0) msgsnd(r4, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x80, 0x1, 0xc8, 0xa, 0x2}) syz_usb_connect(0x5, 0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="12011001d4f86540d804830047da000003010902380001020840b3090400b201020201e6022406"], 0x0) 19.938701364s ago: executing program 0 (id=82): r0 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 18.683903609s ago: executing program 3 (id=84): fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, r0, r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000440)={{0x2, 0x0, 0x1ff, 0x3, 0x9}, 0x1, 0x4}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000040)={{0x1, 0xdfaa}, 0x100, './file0\x00'}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "6c5b1acb23471e53a309d5202bdba2d8", 0x8}}}, 0x1a) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x2000090, &(0x7f0000000280)=ANY=[@ANYBLOB="dd"], 0x1, 0x1cd, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPXUlkcWk0vtMXKTXMwjwcwQmnpkUXFlVXZiTk5qUfFChopbyUkVp08wsFy3v6bSLAEyjcMhSdNBh+mIj0fWjMYSzklSmmJsbJkKZ898kF/HpnGE4dEK5o11nnmNdYWpU/PS2JKqsqqy5k2cuHFmY2dj48qJdVFpfqsYW1JcNjV1MjI5bFET2MxsqD7JRnvCu/ZVD5McWHs8/JpPGSu9TmW+ZLywSOrUiqqZE74ozWY0/M5wh6dshYSGhpPEFQmLBhOGI3W2Da4gJ6Y0MKQphDEmqbGJtW05MyeEmZ/NbYFCS/IJptCjHEtnSlgcEKo6+dNS861DotuMbU8d2M7wHD7Os6agT9DouASD00LB/zIgYxIaGso01jIttV3wpUjjr4TXamOnDAZ3e6ZlsABlaQCRK6E8WbCehOQVHjqamkYpyQkNmyQSktwKDJUZtu7hXC3QwIAUbSoMDAzbGWFxCwHXYIxRMApGwSgYBaNgFIyCUTAKRsEoGAUjAgACAAD//8dJlv8=") 16.968229853s ago: executing program 3 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0xb, 0x0, @val=@netfilter={0x0, 0x1, 0x5, 0x1}}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) 16.794257647s ago: executing program 2 (id=86): syz_open_dev$tty1(0xc, 0x4, 0x1) symlink(0x0, &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c040, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "4bad897e0716799a64be03008b78a3cddf00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) mlockall(0x1) write(r0, &(0x7f0000000640)='u', 0x1) r1 = syz_open_pts(r0, 0xc0840) r2 = dup(r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x6a280) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000340)=@x86={0x2, 0x92, 0xf8, 0x0, 0x400, 0x10, 0x5, 0x7, 0x9, 0x4, 0x6, 0xb, 0x0, 0x9, 0x4, 0xff, 0x0, 0x7, 0x6a, '\x00', 0x40, 0x2000000020000}) io_setup(0x202, &(0x7f0000000200)) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180)) 14.774355077s ago: executing program 0 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x104) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003"], 0xdc}}, 0x0) 13.514296021s ago: executing program 1 (id=88): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) write$UHID_INPUT(r1, &(0x7f0000001040)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d39101b080d29428f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae11a973735b36d5b1b63e91c00305d9be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c580263093ca9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6fa94fc488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c766000a5e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1386abdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060fb30e900caab415db6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3c901cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ffffff7f000000007f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca405d8c5f64fdb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb40800000077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e5e2c664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53dc10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fa6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf475bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c02b5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadbb25c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d060000008926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 13.004026772s ago: executing program 1 (id=89): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nobarrier}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 13.003828212s ago: executing program 2 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xffffffffffffffcd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xfffffffffffffdcd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) fchmod(0xffffffffffffffff, 0x4a) socket(0xa, 0x801, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x33, &(0x7f0000000180)={0x0, 0x58000005, 0x0, {[0xfffbfffffffffffc]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xfffffffa, 0xc3, 0x6}, 0x3c) 11.276743476s ago: executing program 2 (id=91): syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x80, 0x0) r1 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 9.423399293s ago: executing program 0 (id=92): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e88a8", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.224066437s ago: executing program 3 (id=93): fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fstat(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, r0, r2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000440)={{0x2, 0x0, 0x1ff, 0x3, 0x9}, 0x1, 0x4}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000040)={{0x1, 0xdfaa}, 0x100, './file0\x00'}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "6c5b1acb23471e53a309d5202bdba2d8", 0x8}}}, 0x1a) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x2000090, &(0x7f0000000280)=ANY=[@ANYBLOB="dd"], 0x1, 0x1cd, &(0x7f0000000000)="$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") 9.223887567s ago: executing program 1 (id=94): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x6}, 0x76e0}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x2000000) close(0x3) 7.902880573s ago: executing program 1 (id=95): r0 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 7.758862106s ago: executing program 3 (id=96): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 6.003336951s ago: executing program 1 (id=97): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$eJzsmb2LE0EYxp+Z3eydhyg2FjYWHniit9ndqFxzxQmWgnCKWgZvPU73LpKskAQEg42NpYVga2NpYWFl4V9gq4UKgoUp7YSR+djdyWYT4gdG9P3BzT7z9c68L9yzsAFBEP8tHz98ff/w3NqlUwD2YxkLZvyzo5/i4Oj6d4/vnHy0fv7J87dPX+8duPuyHI/JPWL28z0ArzYcpGCuOXFk93IRNtO4DI4TRl8Bg6/lN6HQnRgM18yam5Zu7TMiif3rrWTrxk4SB7IJZRPJpmGfLy81HDBsAVhUtxOCWfOdXv9WM0nidlnURHbO2NSPimn1U/fb4FhHVj0hOICrD+4PZN/UBgF4Xr8QHKHRDTBsGr2GBfi+X5TEyv+IW8R3Zsl/vuKZEodW/9Sh4Locf0Pu/7Co/ZY4rDwi/6HzkcPDzAPtNZ/mnvvPC2VcAMam3iwlyYVfiOxVFCoXhT9JZz9u+ZMLN/ePerp7u97p9Vd3dpvb8Xa8F0WNs8HpIDgT1ZUR6XaK/y0qf1qy4tcmrPWYh24zTdthF0jbYd6PdGs57uaL1he1hyv/41g5pmMw887KX5QlmPnj6inVilO98t7EnAiCIAiCIAiCIAiCIAiCIKo5Cgb9S5hg5oNoFdFF9YXyewAAAP//L0Rm/Q==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fadvise64(r0, 0xe0ffff, 0x9, 0x3) truncate(&(0x7f0000000000)='./file2\x00', 0x9) 5.071964539s ago: executing program 0 (id=98): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x1}]}}, 0x0, 0x26}, 0x28) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x8c80, &(0x7f0000000440)={[{@fmask={'fmask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x7}}, {@errors_continue}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x3, 0x1510, &(0x7f0000000540)="$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") chdir(&(0x7f00000003c0)='./bus\x00') add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000240)={0x0, "28d7b07d54891881fe02c12037e49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) truncate(&(0x7f0000000100)='./file0\x00', 0x7) 3.758037365s ago: executing program 0 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xffffffffffffffcd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xfffffffffffffdcd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) fchmod(0xffffffffffffffff, 0x4a) socket(0xa, 0x801, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x33, &(0x7f0000000180)={0x0, 0x58000005, 0x0, {[0xfffbfffffffffffc]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xfffffffa, 0xc3, 0x6}, 0x3c) 3.624395358s ago: executing program 3 (id=100): syz_emit_vhci(&(0x7f0000000380)=ANY=[], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) msgrcv(0x0, 0x0, 0xffffffd4, 0x3, 0x1000) msgsnd(0x0, &(0x7f00000008c0)={0x3}, 0x8, 0x800) 595.793159ms ago: executing program 3 (id=101): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) mkdir(0x0, 0x100) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001800)=""/250, 0xfa}], 0x1, 0x40000004, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') 152.375407ms ago: executing program 0 (id=102): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 0s ago: executing program 1 (id=103): signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x7]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000001000000000800040001000000", 0x24) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.206' (ED25519) to the list of known hosts. [ 81.145861][ T5780] cgroup: Unknown subsys name 'net' [ 81.313316][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.030850][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.696555][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.713433][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.721422][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.730027][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.740998][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.748593][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.776533][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.785477][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.797209][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.827846][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.860381][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.891675][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.903923][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.911486][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.920034][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.926927][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.935358][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.935596][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.956353][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.967691][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.975409][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.983006][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.992943][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.002207][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.217949][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.465106][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.472416][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.480132][ T5789] bridge_slave_0: entered allmulticast mode [ 85.487329][ T5789] bridge_slave_0: entered promiscuous mode [ 85.496969][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.504303][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.511540][ T5789] bridge_slave_1: entered allmulticast mode [ 85.518924][ T5789] bridge_slave_1: entered promiscuous mode [ 85.597233][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.607379][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 85.635692][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.677592][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 85.750136][ T5789] team0: Port device team_slave_0 added [ 85.802053][ T5789] team0: Port device team_slave_1 added [ 85.884346][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 85.897707][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.904875][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.930976][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.945641][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.952686][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.978835][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.991208][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.998951][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.006332][ T5798] bridge_slave_0: entered allmulticast mode [ 86.013510][ T5798] bridge_slave_0: entered promiscuous mode [ 86.057926][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.065439][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.072655][ T5798] bridge_slave_1: entered allmulticast mode [ 86.079981][ T5798] bridge_slave_1: entered promiscuous mode [ 86.095663][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.102811][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.110399][ T5793] bridge_slave_0: entered allmulticast mode [ 86.118432][ T5793] bridge_slave_0: entered promiscuous mode [ 86.151104][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.158896][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.166520][ T5793] bridge_slave_1: entered allmulticast mode [ 86.174029][ T5793] bridge_slave_1: entered promiscuous mode [ 86.265028][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.283542][ T5789] hsr_slave_0: entered promiscuous mode [ 86.290626][ T5789] hsr_slave_1: entered promiscuous mode [ 86.299920][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.312924][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.325429][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.375704][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.382958][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.390490][ T5794] bridge_slave_0: entered allmulticast mode [ 86.397656][ T5794] bridge_slave_0: entered promiscuous mode [ 86.445075][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.452232][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.460429][ T5794] bridge_slave_1: entered allmulticast mode [ 86.468642][ T5794] bridge_slave_1: entered promiscuous mode [ 86.491353][ T5798] team0: Port device team_slave_0 added [ 86.532740][ T5793] team0: Port device team_slave_0 added [ 86.541577][ T5798] team0: Port device team_slave_1 added [ 86.582922][ T5793] team0: Port device team_slave_1 added [ 86.621762][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.629745][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.656551][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.671369][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.685200][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.712686][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.720047][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.746184][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.759616][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.767024][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.793913][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.841254][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.848759][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.854380][ T5797] Bluetooth: hci0: command tx timeout [ 86.875368][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.922512][ T5794] team0: Port device team_slave_0 added [ 86.932174][ T5794] team0: Port device team_slave_1 added [ 87.003898][ T5797] Bluetooth: hci3: command tx timeout [ 87.018646][ T5798] hsr_slave_0: entered promiscuous mode [ 87.025535][ T5798] hsr_slave_1: entered promiscuous mode [ 87.032181][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.040186][ T5798] Cannot create hsr debugfs directory [ 87.073979][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.080991][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.107757][ T5797] Bluetooth: hci2: command tx timeout [ 87.113679][ T5107] Bluetooth: hci1: command tx timeout [ 87.118849][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.132249][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.139642][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.166013][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.208938][ T5793] hsr_slave_0: entered promiscuous mode [ 87.233800][ T5793] hsr_slave_1: entered promiscuous mode [ 87.249254][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.257020][ T5793] Cannot create hsr debugfs directory [ 87.544750][ T5794] hsr_slave_0: entered promiscuous mode [ 87.554194][ T5794] hsr_slave_1: entered promiscuous mode [ 87.569077][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.578003][ T5794] Cannot create hsr debugfs directory [ 87.615320][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.664523][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.696442][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.747813][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.971086][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.996021][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.009313][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.025949][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.134523][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.152007][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.170391][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.184189][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.297439][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.309322][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.331115][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.342488][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.378015][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.429758][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.452843][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.480892][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.488350][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.509596][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.517205][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.548695][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.588574][ T2946] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.595834][ T2946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.625160][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.632353][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.754153][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.790339][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.882027][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.922356][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.929283][ T5107] Bluetooth: hci0: command tx timeout [ 88.940847][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.948110][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.971864][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.979201][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.017965][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.025245][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.047777][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.055055][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.087589][ T5107] Bluetooth: hci3: command tx timeout [ 89.164334][ T5107] Bluetooth: hci1: command tx timeout [ 89.169840][ T5107] Bluetooth: hci2: command tx timeout [ 89.201045][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.409294][ T5789] veth0_vlan: entered promiscuous mode [ 89.431301][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.461225][ T5789] veth1_vlan: entered promiscuous mode [ 89.576205][ T5789] veth0_macvtap: entered promiscuous mode [ 89.596948][ T5798] veth0_vlan: entered promiscuous mode [ 89.612528][ T5789] veth1_macvtap: entered promiscuous mode [ 89.629741][ T5798] veth1_vlan: entered promiscuous mode [ 89.681032][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.695696][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.730610][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.742875][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.753593][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.762362][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.821335][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.872817][ T5798] veth0_macvtap: entered promiscuous mode [ 89.910068][ T5798] veth1_macvtap: entered promiscuous mode [ 89.920155][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.982707][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.002793][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.010141][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.010242][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.012095][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.075061][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.086975][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.099599][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.112502][ T5793] veth0_vlan: entered promiscuous mode [ 90.155954][ T5794] veth0_vlan: entered promiscuous mode [ 90.164957][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.172885][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.178298][ T5798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.190979][ T5798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.201505][ T5798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.211078][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.247699][ T5793] veth1_vlan: entered promiscuous mode [ 90.267295][ T5794] veth1_vlan: entered promiscuous mode [ 90.406422][ T5794] veth0_macvtap: entered promiscuous mode [ 90.486401][ T5793] veth0_macvtap: entered promiscuous mode [ 90.501275][ T5793] veth1_macvtap: entered promiscuous mode [ 90.552663][ T5794] veth1_macvtap: entered promiscuous mode [ 90.592848][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.606223][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.626307][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.638058][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.656451][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.680100][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.700881][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.712604][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.723476][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.734527][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.751757][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.849542][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.003442][ T5107] Bluetooth: hci0: command tx timeout [ 91.164173][ T5107] Bluetooth: hci3: command tx timeout [ 91.244139][ T5797] Bluetooth: hci1: command tx timeout [ 91.249767][ T5107] Bluetooth: hci2: command tx timeout [ 91.338002][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.351829][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.363386][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.372474][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.414310][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.427336][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.441509][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.453546][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.477382][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.489086][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.499487][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.511078][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.524363][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.561929][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.586830][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.591794][ T5886] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.601795][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.631546][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.642129][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.657777][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.675080][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.706577][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.721199][ T5794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.747658][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.761394][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.949538][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.968276][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.082324][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.126130][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.297901][ T27] cfg80211: failed to load regulatory.db [ 92.340570][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.359475][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.429441][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 93.076756][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.093326][ T5107] Bluetooth: hci0: command tx timeout [ 93.143715][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.177497][ T5902] syz.1.8[5902]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.753531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 94.163130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.443063][ C0] sched: RT throttling activated [ 94.630202][ T5797] Bluetooth: hci2: command tx timeout [ 94.630541][ T5107] Bluetooth: hci3: command tx timeout [ 94.635726][ T5802] Bluetooth: hci1: command tx timeout [ 94.681479][ T5902] loop1: detected capacity change from 0 to 512 [ 95.106440][ T5902] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.8: Bad quota inum: 2820, type: 1 [ 95.209702][ T5902] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=2820). Please run e2fsck to fix. [ 95.272983][ T5902] EXT4-fs (loop1): mount failed [ 95.307605][ T5914] loop2: detected capacity change from 0 to 128 [ 95.371124][ T5914] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 95.430742][ T5914] System zones: 1-3, 19-19, 35-36 [ 95.479665][ T5914] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 95.555709][ T5914] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.496208][ T5789] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.594691][ T5925] loop0: detected capacity change from 0 to 8 [ 96.722011][ T5925] SQUASHFS error: Failed to read block 0x260685: -5 [ 96.732844][ T5925] SQUASHFS error: Unable to read metadata cache entry [260685] [ 96.745830][ T5925] SQUASHFS error: Unable to read directory block [260685:0] [ 96.889672][ T5929] loop2: detected capacity change from 0 to 512 [ 97.074391][ T5933] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 97.338624][ T5936] loop1: detected capacity change from 0 to 2048 [ 97.347733][ T5936] UDF-fs: bad mount option "00000000000000000000" or missing value [ 97.538199][ T5932] loop0: detected capacity change from 0 to 8 [ 97.686201][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.721217][ T5929] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.779989][ T5932] SQUASHFS error: Unable to read inode 0x11f [ 97.919061][ T5941] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.008117][ T5929] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 98.078413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.141480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.150259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.159773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.873474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 99.283128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 99.692531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.103148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.727265][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.007811][ T5974] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 109.681307][ T5980] loop0: detected capacity change from 0 to 1024 [ 109.725762][ T5980] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 109.752883][ T5980] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 109.766401][ T5980] EXT4-fs (loop0): invalid journal inode [ 109.772278][ T5980] EXT4-fs (loop0): can't get journal size [ 109.795573][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.823755][ T785] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.922195][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.082683][ T785] usb 2-1: config 0 has an invalid interface number: 72 but max is 0 [ 110.103124][ T785] usb 2-1: config 0 has no interface number 0 [ 110.117298][ T785] usb 2-1: New USB device found, idVendor=ce9e, idProduct=d4fc, bcdDevice=7c.43 [ 111.864341][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.872737][ T785] usb 2-1: Product: syz [ 111.878385][ T785] usb 2-1: Manufacturer: syz [ 111.883819][ T785] usb 2-1: SerialNumber: syz [ 111.919244][ T785] usb 2-1: config 0 descriptor?? [ 111.959111][ T785] usb 2-1: bad CDC descriptors [ 112.180549][ T785] usb 2-1: USB disconnect, device number 2 [ 115.430629][ T6007] loop1: detected capacity change from 0 to 1024 [ 115.487169][ T6007] ======================================================= [ 115.487169][ T6007] WARNING: The mand mount option has been deprecated and [ 115.487169][ T6007] and is ignored by this kernel. Remove the mand [ 115.487169][ T6007] option from the mount to silence this warning. [ 115.487169][ T6007] ======================================================= [ 115.650201][ T6007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.491928][ T6022] syz_tun: entered allmulticast mode [ 118.740073][ T6016] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.38: Allocating blocks 497-513 which overlap fs metadata [ 120.966205][ T6016] EXT4-fs (loop1): pa ffff888078a20cb0: logic 256, phys. 385, len 8 [ 120.974490][ T6016] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 1 [ 123.778230][ T6039] loop2: detected capacity change from 0 to 256 [ 123.820377][ T6039] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 124.075780][ T28] audit: type=1800 audit(1759033098.467:2): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.37" name="file1" dev="loop2" ino=1048592 res=0 errno=0 [ 126.232071][ T6049] loop0: detected capacity change from 0 to 1024 [ 126.642706][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.482574][ T6061] loop3: detected capacity change from 0 to 16 [ 130.530620][ T6061] erofs: (device loop3): mounted with root inode @ nid 36. [ 130.638309][ T6061] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 130.652443][ T6061] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 130.664928][ T6061] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 130.716515][ T6061] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 130.729485][ T6061] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 130.740260][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 130.749720][ T6061] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 130.760531][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 130.769953][ T6061] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 130.780727][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 130.790420][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 130.799750][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 130.811590][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 130.821291][ T6061] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 130.833087][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 130.842595][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 130.852143][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 130.862176][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 130.872618][ T6061] syz.3.44: attempt to access beyond end of device [ 130.872618][ T6061] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 130.886872][ T6061] syz.3.44: attempt to access beyond end of device [ 130.886872][ T6061] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 130.901248][ T6061] syz.3.44: attempt to access beyond end of device [ 130.901248][ T6061] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 130.915994][ T6061] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 130.928647][ T6061] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 130.939395][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 130.948648][ T6061] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 130.959423][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 130.968747][ T6061] erofs: (device loop3): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 130.978945][ T6061] syz.3.44: attempt to access beyond end of device [ 130.978945][ T6061] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 130.996146][ T6061] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 132.991902][ T6068] loop3: detected capacity change from 0 to 1024 [ 133.171511][ T6068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.248789][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.259170][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.700401][ T6085] loop3: detected capacity change from 0 to 1024 [ 136.803894][ T6085] ext4: Unknown parameter 'nouser_xattr' [ 136.833687][ T6090] capability: warning: `syz.0.57' uses deprecated v2 capabilities in a way that may be insecure [ 137.680877][ T5941] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.030336][ T28] audit: type=1326 audit(1759033114.607:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9669d8eec9 code=0x7ffc0000 [ 140.108451][ T28] audit: type=1326 audit(1759033114.607:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9669d8eec9 code=0x7ffc0000 [ 140.203214][ T28] audit: type=1326 audit(1759033114.647:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9669d8eec9 code=0x7ffc0000 [ 140.449521][ T6106] input: syz0 as /devices/virtual/input/input6 [ 140.772921][ T28] audit: type=1326 audit(1759033114.647:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9669d8eec9 code=0x7ffc0000 [ 141.043422][ T28] audit: type=1326 audit(1759033114.647:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9669d8eec9 code=0x7ffc0000 [ 141.213356][ T28] audit: type=1326 audit(1759033114.647:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9669d8eec9 code=0x7ffc0000 [ 141.311673][ T6112] loop1: detected capacity change from 0 to 1024 [ 141.373498][ T28] audit: type=1326 audit(1759033114.647:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9669d8eec9 code=0x7ffc0000 [ 141.580362][ T28] audit: type=1326 audit(1759033114.647:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f9669d8eec9 code=0x7ffc0000 [ 142.021796][ T28] audit: type=1326 audit(1759033114.647:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6101 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9669d8eec9 code=0x7ffc0000 [ 143.607914][ T28] audit: type=1800 audit(1759033118.187:12): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.55" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 143.645066][ T6112] hfsplus: request for non-existent node 16777216 in B*Tree [ 143.652725][ T6112] hfsplus: request for non-existent node 16777216 in B*Tree [ 145.050413][ T6123] loop0: detected capacity change from 0 to 1024 [ 145.820662][ T28] audit: type=1326 audit(1759033119.147:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.0.59" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed1f58eec9 code=0x0 [ 145.937991][ T6123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.040629][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.655332][ T6139] loop1: detected capacity change from 0 to 8 [ 148.662236][ T6139] squashfs: Unknown parameter 'Ý' [ 149.643646][ T5941] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.281444][ T6151] loop0: detected capacity change from 0 to 164 [ 151.349356][ T6151] Unable to read rock-ridge attributes [ 153.212883][ T6151] Unable to read rock-ridge attributes [ 153.222677][ T6151] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 153.286188][ T6151] Unable to read rock-ridge attributes [ 153.386995][ T6159] loop1: detected capacity change from 0 to 128 [ 153.393680][ T6151] Unable to read rock-ridge attributes [ 153.401026][ T6151] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 153.427832][ T6159] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.455275][ T6151] Unable to read rock-ridge attributes [ 153.510244][ T6159] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.892263][ T58] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.865130][ T6169] netlink: 88 bytes leftover after parsing attributes in process `syz.1.77'. [ 158.596070][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 159.006953][ T27] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 159.029544][ T27] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.063081][ T27] usb 3-1: config 2 interface 0 has no altsetting 0 [ 159.071596][ T27] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 159.093153][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 159.101240][ T27] usb 3-1: SerialNumber: syz [ 159.410535][ T6188] loop3: detected capacity change from 0 to 8 [ 159.417728][ T6188] squashfs: Unknown parameter 'Ý' [ 160.923308][ T27] ims_pcu 3-1:2.0: Union descriptor too short (2 vs 5) [ 160.931544][ T27] ims_pcu: probe of 3-1:2.0 failed with error -22 [ 161.004132][ T27] usb 3-1: USB disconnect, device number 2 [ 164.737581][ T6204] loop1: detected capacity change from 0 to 128 [ 166.380376][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 166.455891][ T6204] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.173619][ T6213] netlink: 88 bytes leftover after parsing attributes in process `syz.0.87'. [ 168.254176][ T6204] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.414417][ T5798] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.808199][ T6218] loop3: detected capacity change from 0 to 8 [ 168.815663][ T6218] squashfs: Unknown parameter 'Ý' [ 169.863277][ T5943] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.690596][ T6233] loop0: detected capacity change from 0 to 512 [ 172.753984][ T6233] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 172.803361][ T6233] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.868276][ T6233] EXT4-fs (loop0): 1 truncate cleaned up [ 172.884512][ T6233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.974900][ T6233] syz.0.98 (pid 6233) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 173.200070][ T6241] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 13: comm syz.0.98: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 173.716888][ T6242] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 173.909897][ T6244] loop1: detected capacity change from 0 to 16 [ 173.949767][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.979503][ T6244] erofs: (device loop1): mounted with root inode @ nid 36. [ 174.046506][ T6244] syz.1.97: attempt to access beyond end of device [ 174.046506][ T6244] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 174.115012][ T6245] syz.1.97: attempt to access beyond end of device [ 174.115012][ T6245] loop1: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 174.300208][ T6245] syz.1.97: attempt to access beyond end of device [ 174.300208][ T6245] loop1: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 175.384740][ T6244] syz.1.97: attempt to access beyond end of device [ 175.384740][ T6244] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 177.613505][ T5798] BUG: Bad page state in process syz-executor pfn:5f28a [ 177.622075][ T5798] page:ffffea00017ca280 refcount:0 mapcount:0 mapping:ffff8880576c87c8 index:0x2 pfn:0x5f28a [ 177.632502][ T5798] aops:z_erofs_cache_aops ino:0 [ 177.637468][ T5798] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 177.645363][ T5798] page_type: 0xffffffff() [ 177.649826][ T5798] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880576c87c8 [ 177.658503][ T5798] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 177.667435][ T5798] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 177.674811][ T5798] page_owner tracks the page as allocated [ 177.681448][ T5798] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6244, tgid 6238 (syz.1.97), ts 174046376771, free_ts 174028111069 [ 177.703371][ T5798] post_alloc_hook+0x1cd/0x210 [ 177.708283][ T5798] get_page_from_freelist+0x195c/0x19f0 [ 177.714109][ T5798] __alloc_pages+0x1e3/0x460 [ 177.718768][ T5798] z_erofs_do_read_page+0x20c0/0x3680 [ 177.725165][ T5798] z_erofs_pcluster_readmore+0x2cf/0x450 [ 177.730863][ T5798] z_erofs_read_folio+0x208/0x540 [ 177.736279][ T5798] filemap_read_folio+0x167/0x760 [ 177.741365][ T5798] do_read_cache_folio+0x470/0x7e0 [ 177.746750][ T5798] erofs_bread+0x16f/0x630 [ 177.751321][ T5798] erofs_namei+0x28c/0xf00 [ 177.755965][ T5798] erofs_lookup+0x135/0x310 [ 177.760534][ T5798] lookup_one_qstr_excl+0x112/0x250 [ 177.765897][ T5798] filename_create+0x222/0x460 [ 177.770725][ T5798] do_symlinkat+0xbd/0x3f0 [ 177.775247][ T5798] __x64_sys_symlinkat+0x99/0xb0 [ 177.780227][ T5798] do_syscall_64+0x55/0xb0 [ 177.784752][ T5798] page last free stack trace: [ 177.789465][ T5798] free_unref_page_prepare+0x7ce/0x8e0 [ 177.795034][ T5798] free_unref_page_list+0xbe/0x860 [ 177.800214][ T5798] release_pages+0x1fa0/0x2220 [ 177.805153][ T5798] __folio_batch_release+0x71/0xe0 [ 177.810325][ T5798] mapping_try_invalidate+0x438/0x4f0 [ 177.815895][ T5798] ext4_put_super+0x5f9/0xa40 [ 177.820629][ T5798] generic_shutdown_super+0x134/0x2b0 [ 177.826994][ T5798] kill_block_super+0x44/0x90 [ 177.831745][ T5798] ext4_kill_sb+0x68/0xa0 [ 177.836295][ T5798] deactivate_locked_super+0x97/0x100 [ 177.841768][ T5798] cleanup_mnt+0x429/0x4c0 [ 177.846300][ T5798] task_work_run+0x1ce/0x250 [ 177.850958][ T5798] exit_to_user_mode_loop+0xe6/0x110 [ 177.856362][ T5798] exit_to_user_mode_prepare+0xf6/0x180 [ 177.861969][ T5798] syscall_exit_to_user_mode+0x1a/0x50 [ 177.867596][ T5798] do_syscall_64+0x61/0xb0 [ 177.872187][ T5798] Modules linked in: [ 177.876446][ T5798] CPU: 0 PID: 5798 Comm: syz-executor Not tainted syzkaller #0 [ 177.884124][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.894323][ T5798] Call Trace: [ 177.898047][ T5798] [ 177.901015][ T5798] dump_stack_lvl+0x16c/0x230 [ 177.905822][ T5798] ? show_regs_print_info+0x20/0x20 [ 177.911058][ T5798] ? swiotlb_print_info+0x70/0x70 [ 177.916114][ T5798] bad_page+0x14b/0x170 [ 177.920467][ T5798] free_unref_page_prepare+0x887/0x8e0 [ 177.925973][ T5798] free_unref_page+0x32/0x2e0 [ 177.930689][ T5798] ? __folio_put+0xef/0x210 [ 177.935299][ T5798] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 177.941744][ T5798] erofs_shrink_workstation+0x118/0x290 [ 177.947343][ T5798] ? erofs_shrinker_unregister+0x170/0x170 [ 177.953206][ T5798] ? io_schedule+0xd0/0xd0 [ 177.957655][ T5798] ? kobject_put+0x43c/0x470 [ 177.962550][ T5798] erofs_shrinker_unregister+0x5d/0x170 [ 177.968139][ T5798] erofs_put_super+0x4e/0x150 [ 177.972845][ T5798] ? erofs_free_inode+0xb0/0xb0 [ 177.977718][ T5798] generic_shutdown_super+0x134/0x2b0 [ 177.983130][ T5798] kill_block_super+0x44/0x90 [ 177.987835][ T5798] erofs_kill_sb+0x4c/0x140 [ 177.992535][ T5798] deactivate_locked_super+0x97/0x100 [ 177.998058][ T5798] cleanup_mnt+0x429/0x4c0 [ 178.002496][ T5798] task_work_run+0x1ce/0x250 [ 178.007111][ T5798] ? task_work_cancel+0x240/0x240 [ 178.012255][ T5798] ? exit_to_user_mode_loop+0x3b/0x110 [ 178.017768][ T5798] exit_to_user_mode_loop+0xe6/0x110 [ 178.023896][ T5798] exit_to_user_mode_prepare+0xf6/0x180 [ 178.031426][ T5798] syscall_exit_to_user_mode+0x1a/0x50 [ 178.038521][ T5798] do_syscall_64+0x61/0xb0 [ 178.042975][ T5798] ? clear_bhb_loop+0x40/0x90 [ 178.047779][ T5798] ? clear_bhb_loop+0x40/0x90 [ 178.052483][ T5798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.058408][ T5798] RIP: 0033:0x7f2b01d901f7 [ 178.062855][ T5798] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 178.082577][ T5798] RSP: 002b:00007ffd02095f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 178.091042][ T5798] RAX: 0000000000000000 RBX: 00007f2b01e11d7d RCX: 00007f2b01d901f7 [ 178.099053][ T5798] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd02095fe0 [ 178.107263][ T5798] RBP: 00007ffd02095fe0 R08: 0000000000000000 R09: 0000000000000000 [ 178.115258][ T5798] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd02097070 [ 178.123247][ T5798] R13: 00007f2b01e11d7d R14: 000000000002a8bf R15: 00007ffd020970b0 [ 178.131516][ T5798] [ 178.135841][ T5798] Disabling lock debugging due to kernel taint