last executing test programs: 12m49.59091579s ago: executing program 32 (id=1967): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000400)='./file1\x00', 0x200000, &(0x7f0000000740)={[{@jqfmt_vfsv1}, {@min_batch_time={'min_batch_time', 0x3d, 0xc0}}, {@delalloc}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nouid32}, {@resgid}, {@nomblk_io_submit}, {@sysvgroups}]}, 0xdc, 0x573, &(0x7f0000001140)="$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") chdir(&(0x7f0000000080)='./file0\x00') setxattr$incfs_metadata(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 12m41.125681108s ago: executing program 33 (id=2001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6efb010511000b0002000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 12m38.504380059s ago: executing program 34 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 10m39.852381241s ago: executing program 35 (id=2343): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x8, 0x5, 0x508, 0x0, 0x118, 0xffffffff, 0x0, 0x118, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xe8, 0x118, 0x0, {}, [@common=@unspec=@connlimit={{0x41}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@dev, @mcast1, [], [], 'veth0_macvtap\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@remote, @ipv4=@multicast2, @port, @icmp_id}}}, {{@ipv6={@mcast2, @mcast1, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@hl={{0x28}}, @common=@hl={{0x28}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv6=@local, @ipv4=@remote, @gre_key=0x3bd, @icmp_id=0x66}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private1, [], [], 'vlan0\x00', 'team0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 10m11.943153448s ago: executing program 36 (id=2386): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001580)={0x54, r1, 0x5d2346a9be0a0437, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x54}}, 0x0) 9m19.008416017s ago: executing program 37 (id=2538): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8m10.54029345s ago: executing program 38 (id=2732): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/98, 0x62}], 0x1}, 0x8}], 0x1, 0x10061, 0x0) 7m31.831842297s ago: executing program 39 (id=2820): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x4b, 0x1}}) 6m32.716876927s ago: executing program 40 (id=2938): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2000}) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) 5m39.317888102s ago: executing program 41 (id=3058): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = io_uring_setup(0x5bec, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[r0]}, 0x1) 5m32.971547313s ago: executing program 42 (id=3083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000002380)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20) 5m19.313240341s ago: executing program 43 (id=3121): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4bfb, &(0x7f0000000380)=""/149) r1 = socket(0xa, 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @value=r4}, 0x28) openat$sysfs(0xffffff9c, &(0x7f0000001480)='/sys/kernel/notes', 0x41069b67e620c8cc, 0x10f) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x0, 0x178, 0x394, 0x0, 0x178, 0x228, 0x258, 0x258, 0x228, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @remote, [0x0, 0xffffffff], [], 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@addrtype1={{0x28}, {0xa}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x10, 0x3}}}, {{@ipv6={@private1, @mcast1, [0xffffffff], [0xff, 0x0, 0x0, 0xff000000], 'wg2\x00', 'hsr0\x00', {}, {}, 0x3b}, 0x0, 0xd0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x453, 0x4, 0x70bd27, 0x25dfdbfe}, 0x10}}, 0x20060801) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5"], 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setgid(0x0) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 5m11.92227659s ago: executing program 44 (id=3144): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@quota}, {@delalloc}, {@i_version}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(0x0, 0x14113e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) write$binfmt_script(r1, 0x0, 0x0) 4m53.500582256s ago: executing program 45 (id=3176): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r2 = openat$cgroup_devices(r1, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000001c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) write$cgroup_devices(r2, 0x0, 0x9) 3m59.376033217s ago: executing program 46 (id=3306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)={0x2c, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4000) 3m56.062557673s ago: executing program 1 (id=3322): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@grpquota}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x0, @desc1}) 3m55.792237455s ago: executing program 1 (id=3323): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(0x0, 0x0, 0x100) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 3m55.588416417s ago: executing program 1 (id=3324): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") chdir(&(0x7f0000000380)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001a80)=""/4096, 0x1000) 3m54.888407163s ago: executing program 1 (id=3325): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) 3m54.086142359s ago: executing program 1 (id=3331): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xfffffffb}, 0x1c) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000000c0)=[0x33a5bf02, 0x9, 0x6, 0xf, 0xa, 0x1, 0x696, 0xd2f]) dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m53.759448232s ago: executing program 47 (id=3330): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x12318, 0x1040a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x635, 0x101}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c085}, 0x30040004) 3m48.049716827s ago: executing program 1 (id=3348): unshare(0x4040600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r2, 0x0, 0xee01) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) fcntl$dupfd(r1, 0x605, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x10b, @empty, 0x8}, 0x1c) memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) socket(0x15, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900a16d5921b70e910e"], 0xe) socketpair(0x1, 0x1, 0xffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x20, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000001440)=@ethtool_sset_info={0xa, 0x9, 0x803}}) 3m32.722226789s ago: executing program 48 (id=3348): unshare(0x4040600) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff"], 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000, 0x2}) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r2, 0x0, 0xee01) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) fcntl$dupfd(r1, 0x605, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x10b, @empty, 0x8}, 0x1c) memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) socket(0x15, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c900a16d5921b70e910e"], 0xe) socketpair(0x1, 0x1, 0xffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x20, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000001440)=@ethtool_sset_info={0xa, 0x9, 0x803}}) 3m3.808588829s ago: executing program 4 (id=3493): syz_mount_image$iso9660(&(0x7f0000000c00), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56a, &(0x7f0000000580)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x89901) 3m3.122521774s ago: executing program 4 (id=3494): syz_mount_image$erofs(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRESHEX, @ANYRES16], 0x1, 0x240, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x88040, 0x1) 3m2.522484489s ago: executing program 4 (id=3497): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) sched_setscheduler(r1, 0x2, &(0x7f0000001300)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000105000000000000010c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x8921, &(0x7f0000000580)={'sit0\x00', 0x0}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98) splice(r3, 0x0, r6, 0x0, 0x80, 0x6) 2m55.859719582s ago: executing program 4 (id=3523): socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300), 0x4) sendmsg$unix(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f0000000280)={[{@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@nolazytime}]}, 0x9, 0x4d4, &(0x7f0000000540)="$eJzs3ctvG9UaAPAzdvNs7u3jXl21vRKtVKTyUOM8hJoAG1bAohKiEhuQSkjcUOLEUeyUOuoihV0XLBAIJMSCPX8BG7qiQkKsYY9YoCIoQQIkJKMZ223ixK4Fqd1mfj9p4jMP+zsn1nc8czzjCUBqnYj/RCGMhBC+DiEcqM1u3eBE7WHj1pXZeIpCtXrupyjZLp5vbNp43v4QwnoIYTCE8OKzIbwWbY9bqqwtzBQK+ZX6fK68uJwrVdZOX1ycmc/P55fGp85MT0+NTU5M71pbr73zxrWznz3f/+lvb9+88e4Xn8fVGqmv29yO3VRrel84tGnZvhDC0/ciWA9k6+0Z6nVF+Fvi9+8/IYSTSf4fCNnk3QTSoFqtVv+sDrRavV4F9qxMsg8cZUZDCLVyJjM6WtuH/28YzhSKpfLjF4qrS3O1feWDoS9z4WIhP1Y/VjgY+qJ4fjwp35mfaJqfDCHZB34vO5TMj84WC3Pd7eqAJvub8v/XbC3/gZRwyA/pJf8hveQ/pJf8h/SS/5Be8h/Sq33+93WtHkD3+fyH9JL/kF7yH9JL/kMqvXD2bDxVG9e/z12qrC4UL52ey5cWRhdXZ0dniyvLo/PF4nxyzc7i3V6vUCwujz8RVi/nyvlSOVeqrJ1fLK4ulc8n1/WfzxtMhPvHoePXv41CCOtPDiVTrL++Tq7C3latRqHX1yADvZHtdQcE9IyhP0gvx/hA80/0Nu8XDLZ64vKd8ULgwZLpdQWAnjl11Pd/kFbG/yG9jP9DetnHB3a4Rd8W7cb/gQdTB+P/I92oB9B9Iy3u//Wv5N5dN6LGvb7+HUL4Jts30LjXF7AXZH6I6vv/pw48vO2zvj/6PfmKoD+E8OZH5z64PFMur4zHy3++vbz8YX35xKYntjxgAHqlkaeNPAYA0mvj1pXZxtTNuD8+UzsJYXv8ffWxycHkO8rhjWjLuQrRLp27sH41hHBkp/hR/X7ntQOZ4Y3stviH649R7SWS+u5L7pvenfhHN8V/aFP8Y//4vwLpcD3uf8Z2yr9MktPhdv5t7X9Gduncidb9X+Z2/5dt0f8d7zDG6x+/9X3L+FdDOLZj/Ea8wSRWc/y4bqc6jH/zlZf+12pd9ZPa6+wUvyEu5cqLy7lSZe108jty8/ml8akz09NTY5MT07lkjDrXGKne7qkjX91o1/7hFvHbtT9e9miH7f/j/1++fKJN/EdO7vz+H24TfyiE8FiH8X+Z+O7VVuvi+HMt2p9pEz9eNtlh/NL7zw10uCkA0AWlytrCTKGQX+lRYTD0MrrCg1NoHA/cL/XZvcLV+6MaTYW7dh3D97xzAu6pUmWg3qf2uiYAAAAAAAAAAABAp7pxOnGv2wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsBf8FQAA///AhNFc") pipe2(&(0x7f0000000340), 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000002640)={0x2, 0x16, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000100)={0x10, 0x7ff, 0x10, 0x40000575, 0x7ffffffb, 0x9, 0x7ff, 0xffffffff}, 0x0, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='proc\x00', 0x10004, 0x0) syz_open_procfs(r2, &(0x7f0000000380)='fdinfo/4\x00') 2m55.031524529s ago: executing program 4 (id=3527): r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@mblk_io_submit}, {@nodiscard}, {@quota}]}, 0x1, 0x569, &(0x7f0000000f80)="$eJzs3c9vHFcdAPDvjH82SesEeoAKSIBCQFHW8aaNql5aLiBUVUJUHBCH1Ngby2Q3G7zrUptIuH8DSCBxAv4DDkgckHriwI0jEgdAlANSgagoQeIwaMZjZ+OsySS72a29n480nh9vZr7v7WbmvX27mRfAxDoXETsRMRsRb0bEQrk9Kad4dXfK97tz+9bK3du3VpLIsjf+mRTp+bboOSZ3sjznfER8/SsR304ejNvZ2r6+3Gw2Nsr1xW7r5mJna/viemt5rbHWuFGvX1m6cumlyy/W+2f8F/OPXNazrV++/+X1177xm19/8r3f73zx+3m2TpVpveUYptni78x+nNx0RLz2JIKNwVQ5nx1zPng8aUR8JCI+U1z/CzFV/OsEAI6zLFuIbKF3HQA47tKiDyxJaxGRpmUjoLbbh/dsfJA1253uhWvtzRuru31lp2MmvbbebFw6M/fH7xY7zyT5+lKRVqQX6/UD65cj4kxE/GjuqWK9ttJuro6nyQMAE+9kb/0fEf+eS9NardKhfb7VAwCOjEf/KQ0AcNSp/wFg8qj/AWDyVKj/yy/7d554XgCA0fD5HwAmj/ofACaP+h8AJsrXXn89n7K75fOvV9/a2rzefuviaqNzvdbaXKmttDdu1tba7bXimT2th52v2W7fXHohNt9e7DY63cXO1vbVVnvzRvdq8Vzvq42ZkZQKAPh/zpx99w9JROy8/FQxRc9YDupqON7SIe4FHC1TgxysgQBHmtG+YHJVqsKLRsLvnnhegPHo+zDv+b6L9/vJIwTxOyP4UDn/8er9/8Z4huNFzz5Mrsfr/39l6PkARm/6cb/E+/OwcwKMWpYlB8f8n91PAgCOpQF+wpf9YFiNEGCsHjaY91C+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBj5lREfCeStFaMBZ7mf9NaLeLpiDgdM8m19WbjUkQ8E2cjYmYuX18ad6YBgAGlf0/K8b/OLzx/6mDqbPKfuWIeEd/76Rs/fnu5291Yyrf/a3/73N7wYfV7xw0wriAAUN1fq+xU1N/1ct7zQf7O7Vsre9MTzOMD3v/S/uCjK3dv3yqm3ZTpyLIsi5gv2hInPkhiujxmPiKei4ipIcTfeSciPtav/EnRN3K6HPm0N36UsZ8eafz0vvhpkbY7z1++jw4hLzBp3s3vP6/2u/7SOFfM+1//88UdanDF/W8+Yu/ed7cn/nQZaapP/PyaP1c1xgu//eoDG7OF3bR3Ip6b7hc/2Y+fHBL/+Yrx//SJT/3wlUPSsp9FnI/+8XtjLXZbNxc7W9sX11vLa421xo16/crSlUsvXX6xvlj0US/u9VQ/6B8vX3jmsLzl5T9xSPzdd/7kgfLP7h/7uYrl//l/3/zWp+8VZe5g/C98tv/7/2wx7//653Xi5yvGXz7xq0OH787jrx5S/oe9/xcqxn/vb9urFXcFAEags7V9fbnZbGwMtJB/Cq26c96KqHzmqLzzXnNxsOL8JYqFey9LEkkM/vrcv5A3xqrsPDNwcca1ML3fVhzumb+Zn3HExUmHXopHWNjr4tqI0+WWO6OKPp77ETA69y76cecEAAAAAAAAAAAAAAA4zCj+M9O4ywgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx9b8AAAD//9dsv4M=") mkdir(&(0x7f0000000ac0)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32], 0x1, 0x22a, &(0x7f00000005c0)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x90880, 0x100) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000201, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000700)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000fbec0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000fd0c0)={0x0, 0x0, "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", "2bcb094b6564f1f1ce3e60fccf5da938253d59d60f8d914ea0322736f199259a8e6ef36d874b59ef97d0b62c78b3d928f761f15cdf58b63843bd98b8e0198411ae9df88ce9ee20c08c5b6d22d5093329780e877c26d415bcc61eece16ae2ec64b3eb2288b320c44f966887314dbea69eaba38d1061f8550e53b24faa19b28e020adcc644b42d5f53774073041aa89155d0fd27789cf7435d54cd0eb76bf4b5170ac3ff802b7ef726ad2bd2296e9e811c15c09acca0d9d1a6bc15fe157469f695176d30bdb598b69f77890a369855102c515230e5c3778cdd29708a4555d3082ee9f228bf02f14253703cf59b8a13ce46a939ae943f7158ad32cd6901ce79e9124a318d0f15cb42715a3ca21ac37614af689a8326410d254643a14f511ed4d7453596d78309e6cdc0a9f24e7506a10c958cd6abe603aaa6233ad056cc6cb95584374925938df6e43e9eee552e9c8e7dd90528e6416af8771c7f194d88c770d923d2b38b117f95d0bf5866a0ef66e2a3a26f50a9957dcbafe901781c701595de3e797e144523d675479bbf4c9d0c687da4bfe4ef703ff0da78c85652841e9fb421d25225290760694d5055eab8c0374a9f3347e16ad12cf7fa11f9e44e2bd7ba28efa2a333d355c15cd304659a02ad635d33589f28ed15e576455cc57b677cf0ec5f858a820056519ac5f71931303f7638bc87fb757b775521829290efdf1bf2af953dd242914e4c984580457623e8dc8849d73bdacd93b18524aacb2da8ff2b8875191a1c52b60de5251e6b4e53169d60f453c8bb1c35248c7f4d45f8ead8759a596482324a7700bf3347ad6cad0b53673fff35c8f5c1779e86e66d102f12e3a9a50e734ca65be9465bdf161ce671a8ff602c8a9a9e10e471f27f9d92898c7d321063bd31e0d7ba47b9b8a49423eebed59f6adbf39ed90fb80533772cb791792c42b771d95f60b066d33678288d51c82d305acf4bfe1c1d306b3d37559aad9bfd8a55d0948b967b8d62982a310dd27666cb7db3042c2964150e23af7e4c91af6e3af99c53564d695db7b861df24f9d1c0ea86fe267a43b4a568d3ae8426e65780fbbc0727f3739e034c54bcfe8d613707702f0a731b62f408ae4395b9e0197df3f57a95f1738433290f2fe16383b82b7ddaa6ffdd93df933656b064c0225b4487531c13cbad5e8895c974e9d00bb91f1fd307f9c2a3a325338c9c497ce6971e9d99cc0e4a933732d2da2900308643c24c442834b559cca12de7aa3135f0bdb6de9637b094806bd08e6341f5a33396210a09bc49c0db87faf5170f84104e7972f51ec5fe69e98318aea75a6114bb356b7e5429f9dbd1d77c308020be3f9867759be0bb6b4ee1cfdc75970c2d9d373e4f0a4d34eb4d5f3a7f7d057f0940c7eb10f0e5dfc3d6dba170ffd45ac1bce6c9356f522a6adc4330c532b3093c7f7fd91ba4120fb00586e49005fb528b6ebb70858bc8dc26d953ea6daffc31a3e8d6488927aa1363ddc9ddbfc80d14dd98674377b04c94a2820758fa7886d4ab49df73a58a036529ff34e579592d70e194009893010e4f918f4302800b285963c8ebfd69b55da6498b11ef3b6bb3d1136c64c21f6875d5a7dcde45bd577da657a930b2cc37655e45876b66b2c74c53f9854b8e1eaa325ef3ccc9a5f850dba839df7ca9317a6e8cee9338dc462e3cc47b321ca1e0b2f5548df32a60229f94146a91279ede108dc8759f36bb1dd810973da5b04167d5c86b550a5ec540cef5349eb629b470606d0b65cc241a823935a9142d2e85c0b05ac1d262b0eb5a75334c87784d60f57826c303ca3cf49799682c32cad147064bffe15bae22a314fc4232a8261c576e10e09870b26fcf78d0482763b0ba4cae54a45d188f062df2cdecbd93292917b2b1aae8e8f8d070b5b231e7b4cf42b1339011018ba343e88be22cdbf4087b58198fbd16768502e106cd60e458f12a2305d9e4671a65ee05f8eaae498af385e2b614e30bc61a60116ecc875e09da625b2fa7dd643cd967ff9d0878b0141be1901571c6462aa02a523ac1c4c47845999cc80581684e92375e10d2cb854062c93b3f797f049f202b5d33fdc99545f1d5e9ea2338c27dce6bd8e9058342cc2d626720fd0d78ffd5762f53a30fead8d24d4bbf791cb7cc41531f109948baba62a6a17bdf75582abce5c89902d0956142aeb8df4aa11f9fd4a1b92418ba276cca3246e3e7066b2f3c7efe19ab086fd0df646b61bc44cbe6d0edef4d7d4f52672a9ccb3c94346834f431772cc728ad7979f35f8605db14c52b2995a269bc6d6633a95e56469fc1071287d3ee8735b84ab07801e3e16be4efca70709102fe03cc2e39b34aafec4844e442adce06fe8ce1f137fc9302a9858ecd735b89f4a132a7e94e07e6320c066470bee058ca785a4515b4749124c158d56da2aa5d621b288d6443025126abcbf45f8273c9c3a3def2a524e8a3b54f26e07d65e8b5b0a3203e75a4a12150827e4ae9351da035587cc718bc8011535c0044c87b6e7f2e4c49ca557b7fc62e050a4b051e994d4d5ec4ecd60486547134024c551d08672e173b2688e08cc86c1316bfd590bf9235aff7cc1c0c9a1cab525b758e01becc0fdfa626fa94d4cbcfc7aa970bea6f288227647f96b05d7b975507cae4df8cec5f13af25c6dae9d7acc8dede021fc12f0b95ee38387bb0a95527fb7029b69bd031b9ddde6607e712c47adb965f99e840da2a62b4877be808ef0c05d84b11347abac391b60b09e9ae3deb917e5e3e290dbbdb5502ea9b8197f83497a9a75949c385a66d62c16dcd044f3a37ddd74fa877bd47731ab78748db368dc630e2657a5d780c2ed17788dbfd86c01541418ed3b53c0fadfba1d1d448feb5be57b1e9d22618e66d98a8a9d1f2d79986a06e1bb53044f3c58e63f144844796549c82632e6c18d39f26b5124300d375d32377b2500530c35d2dfc72cbb0012e91e52bae79c415787c252f842d9729235131ecbd5561dcfab8787445544ee88794ebeb2afb09713ce2c625382c3df1f080c3b0ac788fbdf574f2d47eb93379cc68b380bc44d9ea3201b96b7e5f97afc05737ee27cf46d8a18abd42d269a3568f60ac834ee666902c928d5152b77d3c5741f909c23efba3683c0ba96a8fef8952b1bda8f4e192c9294289ab48f1c837ba3ba9317b48d1f83df01ddac251af6f342a014e47e0ab76c114a2536bd1f7c87ed2aa728f34815b04ee2009741bdea70c4ee3b49d18c7566eb69649a9b8075505192e1692429c9f722c824c1d3bf6b4306ef4431978184b6d8029d265436a2f138ab41ff52df10ff7c5454b9eb5f84ff9565088606701a85102d3d19e931c327f797a1a494eae1d913f95e1b09580f42a681aac5a3d83ae26c40df4f30b8254f2d29909847848683629b8caac8c9d71f33dd5e1b814a7a6f91bfcd2604626468f8b3d433f4e7a89e2ff1ec5059a0aea0b36e539acf4df267fc88452179e396b01276c97f376698df5ab293eaece4fd3442125d896af9e0f538e02e692423cb86831b3dc6923ec28b8617a045cf147ef322a655fcc4b798ad51b5725c2d415294bca899b3688bad6d9769b1d3c73c004cd561dbba70aef44edbaf929f32259c9398bac21ddabd3a3ac71a132cb40b03becafc1886055c7420cd4edf019218b31eb0d4643ec91365fbe8738b11a4179f8f6436d1a9a52a5fe3ec93ccd279c3cb9653a98df5c16a310554da4a4a5e791d1f0d72a64ec6f66958a29e83eb3a36d197bcad735628a817673b428fe39775319a88f55fd38f1911b075ddfca0eac60134517b58731bd456b0326186f9e114755d775b7ebbc0463f205072ea2f29dc42e3c3d22a38f0ed0d9def83ccaa66586c000ed139792fce8a670bbd0626aecbf3f5307d1d251256d93834562809fc6bc08201cb26f21430e1e2971ccf963f4a107466a198c2f13231a15935e298e652ba58af74ed7829c19e66966c7eed5b9b01745c760e0faa3ad5780f86364b8e2acac7af634a0027075fde5361ce92393786a7796e03cd0314d043329afb041c891bf5bed5c8e249808f87460dba3821209f8caa0b6fc4e1baeaaed5ed2b1e90543480748ef36f8246c12c7ec964d5dad3c96eb1fedbca6890ed9c10c76067aa9579d886f0ef0ae7ad6eef79d878e42a4a767a35cae4b2a2a0088e04ca87e8007fc5a6a95a015ef3265976dd6f8b602ba43c7ce528f00396b21f5329ae9de387391ee9657e97de012bdf69decec30d628ba799399f7980fda641ecf29867dee085db37d28e889e7f9cc66af8018c3c7c60c4c945d5ff1be9bccf01e4837d1936edead3d2ca4c6800e39a3e29ae575c8c8d12ccdf68e414eeb2a0f9292a476bc248cf4396ba0f78f98b201e583def6a7f59a14de2ed39dc4ee982d5e603b79db6b83ab95dcf5ac8749bc23208b4e718457f2dd89e4899217de6ee16f0f7e17174316d74fe85c5e063e5f9c64e788c6d342cf7dd4b469cce1ccc71983681e628e0ee82846aca74d116ecc1badaffc8f2805da42abceb3fa82e5da94762f4ea1cfbb9c9dab1177489ed0283f521d19d01abcc061950275fc2b9343bae4127b9e9d938b339ef8b67b70a000ab1f1ad99c81a58c0db96d8c4c08628931abc6ea26a82a416209e8972f89a1f66c7baef4952a4f1ca2ca32b01a472d64d08dc7efb6d40f1be4c14b491cf5218ed1f84ceb296f589d1bea60cf33d551e7189b1f648bdb4e88d119e08d213e36919aca63f40f627b64e0fb0b3df21cfc2c354647047ebc63fdba31909ef4e1d30dc29e2b599f6d7d72ca16af6925c0ab64d1b67eb4ddd7b0fd7cd4d8bc0b2f31c5d74737fd53d1c75b5c9eb0c85701b496e094c84b41a87fef4a7308546b3d57c9ad50a05242f6067960bf26e8777f5f72ff445d5f3e58b9c43530075cd7928bde4ef551d3d1b3d9b4663e610dc6644c7a169e25ce02d55e05c8a984386d2098a60aa77b5fd94bd92a77528bb45d047f79c2b795215346d842147cc75e3bc6de5181ce32542cca4f91e5bfb833c2598a2ad7b8242d749c26a986386a479f4dacc4d2a6857df17017d6e937504c83881617c06ce12b239d00473372d4ddaf4692488504884f3bb395c81c6b10789cfca35561c451e0e318c02ee109e49424ebe963dbb65e0acc44c9af911891815c90adc32b0ad5fded0d4b2bb0f6ba75ea33f94e476b9bf37da6a9dccb72631a0af75a40576aecadba785ebb94c73fa758efb3b57c6473bef3364394cd7847a6195ad584270d8b192ead79b20f3db4d270c13b82938a93cee3964a964e1aba9a73b6016c4d5e7468ea14cab1044e9bbf1404c4e8dffd26eba245a4dbda7c13511a3ae8b22973c5ddede834027023fad9c6cbd09a2771b4254959201beee32fc2e021a173c7b11dd424e866ed3c"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000fe0c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000ff0c0)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "050358db599925"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00001000c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00001002c0)={0xfffffffffffffff9, [{0x0, 0x0}], 0xb4, "5b47103a1ffb69"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00001012c0)={{0x0, 0x7b, 0x61f, 0x100, 0x1, 0x3ed, 0x9, 0x1000, 0x8, 0x80000001, 0x5, 0x7, 0x6, 0x1, 0x4}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00001022c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00001024c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00001026c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00001038c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000103ac0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000103f80)={0x3ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {0x0, r6}, {r7, r8}, {r9}, {0x0, r10}, {r11, r12}, {}, {r13, r14}, {0x0, r15}, {0x0, r16}], 0x5, "bae2d86a1d35a3"}) rename(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000000c0)='./file0\x00') 2m48.862558487s ago: executing program 4 (id=3547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) 2m48.105443703s ago: executing program 49 (id=3547): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) 2m45.302000146s ago: executing program 9 (id=3555): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x48, r0, 0x801, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "01959e56da"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4091}, 0x0) 2m42.610008488s ago: executing program 9 (id=3560): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1011, &(0x7f00000016c0)=""/4113, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m42.134118111s ago: executing program 9 (id=3562): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xfffffffb}, 0x1c) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000000c0)=[0x33a5bf02, 0x9, 0x6, 0xf, 0xa, 0x1, 0x696, 0xd2f]) dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m39.930234578s ago: executing program 9 (id=3564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x7, 0x10012, 0x9, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) 2m36.442463996s ago: executing program 9 (id=3574): syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback, 0xfffffffb}, 0x1c) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000000c0)=[0x33a5bf02, 0x9, 0x6, 0xf, 0xa, 0x1, 0x696, 0xd2f]) dup(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m35.269554935s ago: executing program 9 (id=3577): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xf, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m30.679289022s ago: executing program 3 (id=3587): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0xf80e, 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=0000000000000000000\x00\x00\x00\x00,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0086c43, &(0x7f0000000080)=0x700) 2m29.593673811s ago: executing program 3 (id=3591): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x1, 0x0, 0x40208f4, 0x515f3153, 0x13, "78e114100985a79874342a55e1133439bbd01f"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x18044) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m28.43870503s ago: executing program 3 (id=3592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r1, 0x80079a0) r2 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) poll(&(0x7f0000000000), 0x49, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) syz_open_dev$loop(0x0, 0x4, 0x84003) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) mprotect(&(0x7f00003cf000/0x3000)=nil, 0x3000, 0xc) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x1804011, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x1507, &(0x7f0000000700)="$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") 2m24.068305245s ago: executing program 3 (id=3598): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001300)={[{@nodiscard}, {@errors_continue}, {@barrier}, {@norecovery}, {@bh}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@block_validity}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000400), 0x0) write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x1}}}, 0x78) open(&(0x7f0000000000)='./file1\x00', 0x202400, 0x4) 2m22.508949897s ago: executing program 3 (id=3603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) getpid() syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$fuse(0x0, &(0x7f0000005340)='./file0\x00', 0x3200013, 0x0, 0x1, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2m19.984537117s ago: executing program 50 (id=3577): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xf, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m16.946342921s ago: executing program 3 (id=3612): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x1, 0x0, 0x40208f4, 0x515f3153, 0x13, "78e114100985a79874342a55e1133439bbd01f"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x18044) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m16.267426366s ago: executing program 51 (id=3612): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x1, 0x0, 0x40208f4, 0x515f3153, 0x13, "78e114100985a79874342a55e1133439bbd01f"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x18044) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m17.504007854s ago: executing program 2 (id=3745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x36, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000015c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0x840000000002, 0x3, 0x100) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m16.462288522s ago: executing program 2 (id=3746): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_spirange={0x2, 0x10, 0x4d2}]}, 0x50}}, 0x0) 1m16.298765744s ago: executing program 2 (id=3747): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)) 1m15.289361371s ago: executing program 2 (id=3754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x990}]}]}, 0x24}}, 0x0) 1m15.093858293s ago: executing program 2 (id=3757): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 1m14.828612825s ago: executing program 2 (id=3758): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@empty}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x200000, 0x3) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x143042, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'osx.', 'com.apple.FinderInfo\x00'}, 0x0, 0x30) 59.301461619s ago: executing program 52 (id=3758): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@empty}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x200000, 0x3) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x143042, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@random={'osx.', 'com.apple.FinderInfo\x00'}, 0x0, 0x30) 7.58259481s ago: executing program 8 (id=3992): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000005c0)=ANY=[@ANYBLOB="080c0406"], 0x68) 7.47847185s ago: executing program 8 (id=3993): unshare(0x400) socket$inet_mptcp(0x2, 0x1, 0x106) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) shutdown(r0, 0x1) poll(&(0x7f00000006c0)=[{r0, 0x8100}], 0x1, 0x4) 7.368424151s ago: executing program 6 (id=3994): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002140)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3}}]}, 0x0, 0x46b, &(0x7f00000014c0)="$eJzs289vFFUcAPDvzLaUX7UV8Qc/1FU0Nv5oaUHlYGI0mnAxMdEDHmspBCnU0JoIaaQag0fDX6AeTfwLPOnFqCeNV70bE2J6AT2YNbM7099buttut7CfTzLw3s6bfd83bx7zZh4bQMcqZ38kEXsj4veI6KtllxYo1/66NTcz9s/czFgSlcpbfyfVcjfnZsaKosVxe/LMQBqRfprEoVXqnbp85fzoxMT4pTw/NH3h/aGpy1eeO3dh9Oz42fGLIydOHD82/OILI89vSjt7s1gPfjR5+MDJd66/MXbq+rs/fZPFuzfff3NuZsfSI/o3XGc5ykvP5SJPbvjbt5feRemkq42B0JBSRGTd1V0d/31RioXO64vXP2lrcEBLVSqVSk8tWVr4dD45WwHuYkm0OwKgPYobffYcX2xbPAVpqxuv1B6Asnbfyrfanq5Is2f4/tqzUW+L6i9HxKnZf7/Itlj2PgUAoBW+y+Y/z642/0vjgUXl7snXhvoj4t6I2BcR90XE/oi4P6Ja9sGIeKjB+svL8ivnP7/uaqph65TN/17K17aWzv/Sokh/Kc/1VtvfnZw5NzF+ND8nA9Hdk+WH16jj+9d++7zevsXzv2zL6i/mgnkcf3X1LD3m9Oj0pq2w3Pg44mDXau1P5lcCkog4EBEHm/j+7Jyde/rrw/X23779a9iEs1D5KuKpWv/PxrL2F5K11yeHdsbE+NGh4qpY6edfrr1Zr/4NtX8TZP2/e9Xrf779/cni9dqpxuu49sdndZ9pmrz+R3ckb1fTxaLth6PT05eGI3Yksys/H1k4tsgX5bP2DxxZffzvi/jvy/y4QxGRXcQPR8QjEfFoHvtjEfF4RBxZo/0/vvrEe823v7Wy9p9uqP8bT5TO//BtvfrL+Xrx2v1/vJoayD/J+v927apVvjPP1Q+w2fMGAAAAd5K0+n/gk3RwPr1gf+xOJyanpp85M/nBxdO1ff3RnRZvuvoWvQ8dzt8NF/mRZflj1ffGlUqlsquaHxybnGjVmjqwPntWjP80HRys7fuztLTsy22JEGiphtbR6v2iDbgj+b0mdK51jH93fbhLNX3/n93cOICtZ/4PnWu18X814lYbQgG2mPs/dC7jHzqX8Q+dy/iHjrSR3/Wvldh3slXffLclStsjjIYTkW6LMJpLpNsjjFqiJyLWW/hqbFVg7f6XCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHP8HwAA//+/OuLi") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 5.913107503s ago: executing program 6 (id=4001): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x778, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x0, 0x100000001}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 5.854551524s ago: executing program 8 (id=4002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.818783144s ago: executing program 7 (id=4003): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, 0x0, &(0x7f0000000200)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1fffffffffffffcc, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) 4.843678201s ago: executing program 8 (id=4004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x8, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0xeeee0000, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.794613982s ago: executing program 7 (id=4006): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) unshare(0x2040400) 4.721344833s ago: executing program 6 (id=4007): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000200)={[{@file_umask={'file_umask', 0x3d, 0x200}}, {@part={'part', 0x3d, 0x5}}, {@file_umask={'file_umask', 0x3d, 0x3fd}}, {@dir_umask={'dir_umask', 0x3d, 0x401}}, {@type={'type', 0x3d, "64ff15a8"}}]}, 0x5, 0x304, &(0x7f0000000780)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3.594740821s ago: executing program 8 (id=4009): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000040)='stat\x00') r6 = signalfd(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) sendmmsg$unix(r3, &(0x7f0000005040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@cred={{0x18, 0x1, 0x2, {r4}}}, @cred={{0x18, 0x1, 0x2, {r4}}}, @rights={{0x20, 0x1, 0x1, [r1, r5, 0xffffffffffffffff, r6, r5]}}], 0x50, 0x20000015}}], 0x2, 0x0) 3.537473382s ago: executing program 7 (id=4010): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) 3.143514236s ago: executing program 7 (id=4013): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c5, 0x3000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.668283559s ago: executing program 6 (id=4014): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x3, 0x498, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000079108a0000000000070000000000000095000000000086005e40e291fda145c7c67e92ac6ad4b6c5dfe2bed13b8652e95f49eb5b7c265a605d3854b407aa6b0695f7afc9f23c884601"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x243, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300"], 0x34}, 0x1, 0x0, 0x0, 0x20004814}, 0x400c810) unshare(0x22020600) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsync(r1) 2.668072279s ago: executing program 7 (id=4017): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x25, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) 2.4965879s ago: executing program 0 (id=4018): inotify_init() r0 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 2.438095451s ago: executing program 8 (id=4019): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x20, 0x13, 0x2, "73a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.390498761s ago: executing program 0 (id=4020): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400), 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r2, 0x0, 0x0) 2.319270912s ago: executing program 7 (id=4021): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "bc06bbf4"}]}}, 0x0}, 0x0) 2.202263213s ago: executing program 6 (id=4023): mount(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$hiddev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0xa041, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xc0) lseek(r3, 0x3, 0x0) 2.164741903s ago: executing program 5 (id=4024): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) close_range(r0, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000002900), 0x200000, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10037909, 0x0) 1.986614874s ago: executing program 5 (id=4025): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000001480)=""/4096) 1.923275375s ago: executing program 5 (id=4026): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 569.294456ms ago: executing program 6 (id=4027): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x6, 0xc) 486.609646ms ago: executing program 0 (id=4028): r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 486.453557ms ago: executing program 5 (id=4029): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000063010000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 369.562747ms ago: executing program 0 (id=4030): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c5, 0x3000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 298.959718ms ago: executing program 5 (id=4031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff0055e5c0d48bd63ffdb93bd43a847a1597c8ef039a5be422", 0x38}, 0x60) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400), 0x1, 0x0, 0x14}}], 0x40000000000013c, 0x2c000811) close(r4) bind$nfc_llcp(r3, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e0000000000000006eeab91e8ff0055e564a08bcd3ffdb93bd43a847a1597c8ef03da5be62200", 0x10}, 0x60) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff32, &(0x7f0000000240)={&(0x7f0000000300)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 126.612799ms ago: executing program 0 (id=4032): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x2a2, &(0x7f0000000b00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a430, &(0x7f0000000100)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 94.255829ms ago: executing program 5 (id=4033): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x3, 0x498, &(0x7f00000004c0)="$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") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000079108a0000000000070000000000000095000000000086005e40e291fda145c7c67e92ac6ad4b6c5dfe2bed13b8652e95f49eb5b7c265a605d3854b407aa6b0695f7afc9f23c884601"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000740)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x243, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) unshare(0x22020600) r0 = socket$inet_udp(0x2, 0x2, 0x0) fsync(r0) 0s ago: executing program 0 (id=4034): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f1010301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xeb}}) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): 43576][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 994.981538][T11338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.989946][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 995.011647][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.025333][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.040231][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 995.050457][T15667] device veth0_macvtap entered promiscuous mode [ 995.147190][T15667] device veth1_macvtap entered promiscuous mode [ 995.191971][T10822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.211775][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.227978][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 995.239160][T10822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.263916][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 995.298249][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.334061][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.359798][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.389990][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.400885][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.411820][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.431447][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.443465][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.483391][T15667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 995.506866][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 995.528820][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 995.592365][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.618025][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.658872][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.712953][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.737885][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.769167][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.804992][T15667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.832531][T15667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.890908][T15667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.919012][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 995.945973][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 995.976203][T15667] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.991797][T15667] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.023753][T15667] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.043146][T15667] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.464670][ T4264] Bluetooth: hci5: command 0x040f tx timeout [ 996.490352][T15871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 996.515886][T15871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 996.579080][T15871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 996.597402][ T4394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.615817][ T4394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.641389][T15871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 996.703413][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 996.763399][T10822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 996.848938][T10822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 996.942143][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 997.196067][T15871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.365078][T15871] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.387713][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 997.406141][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 997.505344][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 997.534926][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 997.567030][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.574233][T10822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.628800][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 997.678801][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 997.709342][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.716661][T10822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.810087][T16019] netlink: 996 bytes leftover after parsing attributes in process `syz.2.3426'. [ 997.910795][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 997.940750][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 998.014362][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 998.063904][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 998.136399][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 998.233377][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 998.253352][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 998.281597][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 998.312924][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 998.353286][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 998.375374][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 998.393364][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 998.444468][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 998.545907][ T4264] Bluetooth: hci5: command 0x0419 tx timeout [ 1000.933506][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1000.984088][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1000.992376][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x4 [ 1001.044092][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1001.051562][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1001.144317][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1001.188407][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1001.237014][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1001.281847][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1001.344071][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1001.351532][T12016] hid-generic 00A0:0006:0003.0012: unknown main item tag 0x0 [ 1001.385055][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1001.393054][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1001.439585][T12016] hid-generic 00A0:0006:0003.0012: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1001.461981][T15871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.615240][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1001.638343][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1001.891862][T16086] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3447'. [ 1002.563298][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1002.617320][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1002.677434][T15871] device veth0_vlan entered promiscuous mode [ 1002.708210][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1002.758750][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1002.803589][T15871] device veth1_vlan entered promiscuous mode [ 1002.911947][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1002.975189][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1003.056502][T15871] device veth0_macvtap entered promiscuous mode [ 1003.081397][T15871] device veth1_macvtap entered promiscuous mode [ 1004.024221][T16101] loop4: detected capacity change from 0 to 1024 [ 1004.507686][ T4394] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1004.524423][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1004.656354][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1004.690095][T13674] hfsplus: b-tree write err: -5, ino 4 [ 1004.771935][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.814018][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.854208][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.909444][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.944251][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.979146][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.007537][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.055653][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.105323][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.153049][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.206189][T15871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.242761][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1005.255029][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1005.295143][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.331947][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.381866][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.412951][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.438567][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.469546][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.633331][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.650058][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.660357][T15871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1005.682936][T15871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.695034][T15489] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1005.719949][T15871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.028189][T16130] syz.9.3461 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1006.070937][T15871] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.527984][T15871] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.554059][ T4256] Bluetooth: hci2: command 0x0406 tx timeout [ 1006.594560][T15871] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.718609][T15871] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.793581][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1006.818602][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1006.862104][T16138] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3464'. [ 1006.895464][T16138] device gretap0 entered promiscuous mode [ 1007.418245][T15489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.253090][T15489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.380987][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1008.427649][T13674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.450493][T13674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.563887][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1011.666293][T16183] loop4: detected capacity change from 0 to 512 [ 1011.707361][T16183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1011.802288][T16183] EXT4-fs (loop4): 1 truncate cleaned up [ 1011.831111][T16183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1013.755892][T15667] EXT4-fs (loop4): unmounting filesystem. [ 1014.089833][T16205] loop4: detected capacity change from 0 to 1024 [ 1014.173382][T16205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1014.257103][T16205] UDF-fs: error (device loop4): udf_read_inode: (ino 832) failed !bh [ 1014.323514][T16205] UDF-fs: error (device loop4): udf_fill_super: Error in udf_iget, block=48, partition=0 [ 1014.372910][ T27] audit: type=1326 audit(1742081692.850:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed7f8d169 code=0x7ffc0000 [ 1014.493155][ T27] audit: type=1326 audit(1742081692.880:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7efed7f8d169 code=0x7ffc0000 [ 1014.623406][ T27] audit: type=1326 audit(1742081692.880:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed7f8d169 code=0x7ffc0000 [ 1015.580591][ T27] audit: type=1326 audit(1742081692.880:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16213 comm="syz.2.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed7f8d169 code=0x7ffc0000 [ 1016.170170][T16242] loop3: detected capacity change from 0 to 512 [ 1016.251374][T16242] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1016.273120][T16242] EXT4-fs error (device loop3): ext4_quota_enable:6982: comm syz.3.3491: Bad quota inum: 11, type: 1 [ 1016.311168][T16248] loop4: detected capacity change from 0 to 164 [ 1016.330400][T16242] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 1016.442741][T16248] ISOFS: unable to read i-node block [ 1016.462047][T16248] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1016.471670][T16242] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1016.574054][T16242] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1016.764190][T16254] loop9: detected capacity change from 0 to 256 [ 1016.773014][T16254] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1016.785175][T16254] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=512, location=512 [ 1016.795831][T16254] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 1016.803607][T16254] UDF-fs: Scanning with blocksize 512 failed [ 1016.811899][T16254] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1016.830596][T16254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1017.047827][T16257] loop4: detected capacity change from 0 to 16 [ 1017.110018][T16257] erofs: (device loop4): mounted with root inode @ nid 36. [ 1017.169210][T16257] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1017.231255][T16257] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -57 in[61, 4035] out[1851] [ 1017.324398][T16257] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 1017.951989][T16274] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 3: comm syz.3.3491: lblock 0 mapped to illegal pblock 3 (length 1) [ 1018.029830][T16279] EXT4-fs (loop3): shut down requested (2) [ 1018.071228][T16274] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1018.185946][T16274] EXT4-fs warning (device loop3): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 1018.830429][T16293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1019.188822][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1019.497333][T15871] EXT4-fs (loop3): unmounting filesystem. [ 1022.121647][T16336] 9pnet: p9_errstr2errno: server reported unknown error PsM36A5R7b@;-qD~aIoB5[LJ [ 1022.203183][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1022.410586][T16343] loop9: detected capacity change from 0 to 512 [ 1022.530128][T16343] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1022.555186][T16343] EXT4-fs error (device loop9): ext4_quota_enable:6982: comm syz.9.3514: Bad quota inum: 11, type: 1 [ 1022.707908][T16343] EXT4-fs warning (device loop9): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=11). Please run e2fsck to fix. [ 1022.785056][T16343] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1022.834390][T16343] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1023.173152][T16359] "syz.0.3520" (16359) uses obsolete ecb(arc4) skcipher [ 1023.397930][T16364] EXT4-fs error (device loop9): ext4_map_blocks:634: inode #2: block 3: comm syz.9.3514: lblock 0 mapped to illegal pblock 3 (length 1) [ 1023.486884][T16366] EXT4-fs (loop9): shut down requested (2) [ 1023.499565][T16366] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 1024.008733][T16366] EXT4-fs warning (device loop9): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop9. [ 1024.202143][T15577] EXT4-fs (loop9): unmounting filesystem. [ 1024.454778][T16374] loop4: detected capacity change from 0 to 512 [ 1024.512479][T16374] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1024.669134][T16374] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1024.678287][T16374] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.982913][T15667] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 31: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1025.160502][T15667] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #12: block 31: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1025.263576][T15667] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 31: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1025.390861][T15667] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #12: block 31: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1025.501573][T15667] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 31: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1025.810522][T16406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1025.826546][T15667] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #12: block 31: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1026.000600][T15667] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 31: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1026.099117][T15667] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #12: block 31: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1026.186954][T16424] loop9: detected capacity change from 0 to 16 [ 1026.215131][T16418] loop3: detected capacity change from 0 to 1764 [ 1026.226145][T16424] erofs: (device loop9): mounted with root inode @ nid 36. [ 1026.241414][T15667] EXT4-fs error (device loop4): ext4_readdir:260: inode #12: block 31: comm syz-executor: path /16/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1026.278881][T16424] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1026.326686][T16424] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -57 in[61, 4035] out[1851] [ 1026.487237][T15667] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #12: block 31: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=24, inode=13, rec_len=16, size=1024 fake=0 [ 1026.519442][T16424] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 1029.131241][T16441] loop3: detected capacity change from 0 to 512 [ 1029.334154][T16441] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1030.389762][T16441] EXT4-fs warning (device loop3): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop3. [ 1030.864147][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 1030.980909][T15667] EXT4-fs (loop4): unmounting filesystem. [ 1031.362111][ T4336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.581074][ T4336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.832700][ T4336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.712738][ T4336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.739587][ T4256] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1037.752582][ T4256] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1037.762328][ T4256] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1037.770427][ T4256] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1037.778055][ T4256] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1037.785549][ T4256] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1038.979735][ T4345] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1039.854132][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 1040.370950][T16537] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3565'. [ 1041.920948][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 1042.038386][T16517] chnl_net:caif_netlink_parms(): no params data found [ 1043.626300][T16517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.644620][T16517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.674165][T16517] device bridge_slave_0 entered promiscuous mode [ 1043.703388][T16517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.731617][T16517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.780721][T16517] device bridge_slave_1 entered promiscuous mode [ 1043.984099][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 1044.853771][T16584] loop3: detected capacity change from 0 to 128 [ 1044.864307][ T4336] device hsr_slave_0 left promiscuous mode [ 1044.875220][ T4336] device hsr_slave_1 left promiscuous mode [ 1046.064243][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 1046.238654][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.275750][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.316993][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.337830][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.409562][ T4336] device bridge_slave_1 left promiscuous mode [ 1046.433485][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.495061][ T4336] device bridge_slave_0 left promiscuous mode [ 1046.501290][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.560339][T16599] loop3: detected capacity change from 0 to 512 [ 1046.643842][T16599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1046.690775][T16599] EXT4-fs (loop3): filesystem is read-only [ 1046.705257][ T4336] device veth1_macvtap left promiscuous mode [ 1046.721669][ T4336] device veth0_macvtap left promiscuous mode [ 1046.742048][ T4336] device veth1_vlan left promiscuous mode [ 1046.772387][ T4336] device veth0_vlan left promiscuous mode [ 1046.928422][T16599] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (28015!=33349) [ 1046.968016][T16599] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 1050.186774][T16627] loop3: detected capacity change from 0 to 2048 [ 1050.207742][T16627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1051.913840][T16650] loop3: detected capacity change from 0 to 256 [ 1052.013618][T16650] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d) [ 1052.125347][T16650] exFAT-fs (loop3): IO charset iso8859cJP[=00000000000000000&00000000000000000004 not found [ 1053.712086][T16666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3596'. [ 1054.388399][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.394843][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.581030][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 1055.678653][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 1055.771457][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.877992][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.992213][T16678] loop3: detected capacity change from 0 to 1024 [ 1056.009768][T16678] EXT4-fs: Ignoring removed bh option [ 1056.072572][T16678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1056.143245][T16678] EXT4-fs error (device loop3): ext4_get_max_inline_size:116: inode #18: comm syz.3.3598: can't get inode location 18 [ 1056.202599][T16678] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 1056.235966][T16682] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.3598: bad entry in directory: inode out of bounds - offset=60, inode=15, rec_len=16, size=1024 fake=0 [ 1056.263555][T16678] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #18: comm syz.3.3598: mark_inode_dirty error [ 1056.287242][T16678] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.3598: bg 0: bad block bitmap checksum [ 1056.309192][T16678] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 1056.320384][T16678] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #18: comm syz.3.3598: mark_inode_dirty error [ 1056.511743][T16678] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 1056.553625][T16678] EXT4-fs error (device loop3): ext4_ext_truncate:4453: inode #18: comm syz.3.3598: mark_inode_dirty error [ 1056.599265][T16678] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 1058.579896][T15871] EXT4-fs (loop3): unmounting filesystem. [ 1062.155401][ T4260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1062.165670][ T4260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1062.175269][ T4260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1062.185381][ T4260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1062.192868][ T4260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1062.200510][ T4260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1062.240966][T16721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3610'. [ 1062.524887][ T4336] bond0 (unregistering): Released all slaves [ 1062.675464][T16633] netlink: 'syz.9.3577': attribute type 4 has an invalid length. [ 1062.877813][T16517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.918618][T16517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.055512][T16517] team0: Port device team_slave_0 added [ 1063.102309][T16517] team0: Port device team_slave_1 added [ 1063.283272][T16517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.292904][T16517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.484007][T16517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.552217][T16517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.572283][T16517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.657370][T16517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.696574][T16716] chnl_net:caif_netlink_parms(): no params data found [ 1064.125911][ T4260] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1064.155430][ T4260] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1064.165247][ T4260] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1064.175959][ T4260] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1064.185441][ T4260] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1064.192737][ T4260] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1064.224202][ T4264] Bluetooth: hci5: command 0x0409 tx timeout [ 1066.224143][ T4264] Bluetooth: hci6: command 0x0409 tx timeout [ 1066.314151][ T4264] Bluetooth: hci5: command 0x041b tx timeout [ 1066.567823][T16517] device hsr_slave_0 entered promiscuous mode [ 1066.585749][T16517] device hsr_slave_1 entered promiscuous mode [ 1066.602191][T16517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1066.614491][T16517] Cannot create hsr debugfs directory [ 1066.991012][T16716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.008789][T16716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.040209][T16716] device bridge_slave_0 entered promiscuous mode [ 1067.227643][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3623'. [ 1067.272224][T16716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.288151][T16716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.390930][T16716] device bridge_slave_1 entered promiscuous mode [ 1067.407080][T16791] netlink: 'syz.2.3624': attribute type 3 has an invalid length. [ 1067.578403][T13674] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.872292][T13674] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.893413][T16716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.304425][ T4260] Bluetooth: hci6: command 0x041b tx timeout [ 1069.334221][ T4260] Bluetooth: hci5: command 0x040f tx timeout [ 1069.630412][T16716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.688642][ T4297] usb 2-1: USB disconnect, device number 24 [ 1069.709749][ T4297] option 2-1:7.0: device disconnected [ 1070.034633][T13674] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.070078][T16716] team0: Port device team_slave_0 added [ 1070.203616][T16716] team0: Port device team_slave_1 added [ 1070.310692][T13674] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.384986][ T4260] Bluetooth: hci6: command 0x040f tx timeout [ 1070.443424][T16716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.460116][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.588664][T16716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.601482][T16716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.608916][T16716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.638859][T16716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1072.018791][T16740] chnl_net:caif_netlink_parms(): no params data found [ 1072.098188][T16716] device hsr_slave_0 entered promiscuous mode [ 1072.138885][T16716] device hsr_slave_1 entered promiscuous mode [ 1072.187543][T16716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1072.217802][T16716] Cannot create hsr debugfs directory [ 1072.549308][T16517] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1072.758246][T16517] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1072.955204][ T4260] Bluetooth: hci5: command 0x0419 tx timeout [ 1072.962559][ T4260] Bluetooth: hci6: command 0x0419 tx timeout [ 1072.963535][ T9] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1073.016519][T13674] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.068954][T16517] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1073.135359][T16517] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1073.198372][T13674] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.253789][T16740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.270750][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.295615][T16740] device bridge_slave_0 entered promiscuous mode [ 1073.306183][T16740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.313296][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.328988][T16740] device bridge_slave_1 entered promiscuous mode [ 1073.415978][T13674] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.563716][T16740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.690203][T13674] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.736160][T16740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.909969][T16740] team0: Port device team_slave_0 added [ 1073.936867][T16740] team0: Port device team_slave_1 added [ 1074.180687][T16740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.192265][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.264156][T16740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.679979][T16517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.786705][T16517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.668450][T16740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.710914][T16740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.737447][T16740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.753751][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1077.796586][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1077.809998][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1077.835170][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1077.848798][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.856008][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.868605][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1077.879749][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1077.888906][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.896083][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.924520][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1078.021230][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1078.035519][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1078.055352][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1078.077804][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1078.097907][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1078.112949][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1078.257105][T16517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1078.278496][T16517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1078.301863][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1078.322833][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1078.333074][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1078.352529][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1078.374931][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1078.391330][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1078.422518][T16740] device hsr_slave_0 entered promiscuous mode [ 1078.433486][T16740] device hsr_slave_1 entered promiscuous mode [ 1078.466867][T16740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1078.491796][T16740] Cannot create hsr debugfs directory [ 1081.854692][T16716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1081.885277][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.892781][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1082.657006][T16716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1082.671833][T16716] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1082.709534][T16716] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1082.950155][T16517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.799208][T16716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.741585][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1085.751203][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1085.982711][T16716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.023531][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1086.061407][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1086.234513][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1086.246974][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1086.275695][T11092] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.282841][T11092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.459154][T16517] device veth0_vlan entered promiscuous mode [ 1086.485325][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1086.494601][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1086.517784][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1086.536577][T11092] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.543753][T11092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.553615][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1086.563573][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1086.582885][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1086.601061][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1086.610926][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1086.619425][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1086.638434][T16517] device veth1_vlan entered promiscuous mode [ 1086.684152][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1086.692860][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1086.709644][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1086.719853][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1086.730353][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1086.743376][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1086.762065][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1086.773469][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1086.917448][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1086.937623][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1086.988693][T16716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1087.077526][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1087.158231][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 1087.294671][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1087.317391][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1087.346015][T16740] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1087.401978][T16517] device veth0_macvtap entered promiscuous mode [ 1087.551716][T16740] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1087.562276][T16740] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1087.574174][T16740] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1087.596213][T16517] device veth1_macvtap entered promiscuous mode [ 1087.672972][T16716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.725501][T13674] device hsr_slave_0 left promiscuous mode [ 1087.736843][T13674] device hsr_slave_1 left promiscuous mode [ 1087.763209][T13674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1087.794426][T13674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1087.833549][T13674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1087.874234][T13674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.987923][T13674] device bridge_slave_1 left promiscuous mode [ 1088.003458][T13674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.054952][T13674] device bridge_slave_0 left promiscuous mode [ 1088.097731][T13674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.186206][T13674] device hsr_slave_0 left promiscuous mode [ 1088.219355][T13674] device hsr_slave_1 left promiscuous mode [ 1088.255317][T13674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.278787][T13674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.795302][T13674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.820240][T13674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.884924][T13674] device bridge_slave_1 left promiscuous mode [ 1088.904865][T13674] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.926107][T13674] device bridge_slave_0 left promiscuous mode [ 1088.932396][T13674] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.191434][T13674] device veth1_macvtap left promiscuous mode [ 1089.204333][T13674] device veth0_macvtap left promiscuous mode [ 1089.230824][T13674] device veth1_vlan left promiscuous mode [ 1089.251007][T13674] device veth0_vlan left promiscuous mode [ 1089.272376][T13674] device veth1_macvtap left promiscuous mode [ 1089.293518][T13674] device veth0_macvtap left promiscuous mode [ 1089.313828][T13674] device veth1_vlan left promiscuous mode [ 1089.338191][T13674] device veth0_vlan left promiscuous mode [ 1090.139255][T17097] futex_wake_op: syz.0.3678 tries to shift op by -1; fix this program [ 1091.680662][T13674] team0 (unregistering): Port device team_slave_1 removed [ 1091.741073][T13674] team0 (unregistering): Port device team_slave_0 removed [ 1091.799328][T13674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.856904][T13674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.642658][ T4264] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1092.672185][ T4264] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1092.687201][ T4264] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1092.712685][ T4256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1092.720660][ T4256] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1092.729804][ T4256] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1092.756041][T13674] bond0 (unregistering): Released all slaves [ 1093.393043][T13674] team0 (unregistering): Port device team_slave_1 removed [ 1093.455994][T13674] team0 (unregistering): Port device team_slave_0 removed [ 1093.517541][T13674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.577181][T13674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.244198][T13674] bond0 (unregistering): Released all slaves [ 1094.335661][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1094.344181][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1094.353293][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1094.360887][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1094.885169][ T4260] Bluetooth: hci0: command 0x0409 tx timeout [ 1096.954268][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 1097.132687][T16740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.213738][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1097.241352][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1097.299717][T16740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.892728][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1098.922178][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1098.964658][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.971817][T13453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1099.024873][ T4256] Bluetooth: hci0: command 0x040f tx timeout [ 1099.028862][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1099.085131][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1099.148948][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1099.168967][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.176210][T13453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1099.223803][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1099.317002][T17109] chnl_net:caif_netlink_parms(): no params data found [ 1099.347984][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1099.372517][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1099.415067][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1099.437558][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1099.456338][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1099.482083][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1099.515327][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1099.545538][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1099.609214][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1099.634857][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1099.681956][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1099.735680][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1099.838181][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1099.855196][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1100.077838][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1100.115077][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1100.169911][T16740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1101.115621][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 1101.679121][T16716] device veth0_vlan entered promiscuous mode [ 1101.793816][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1101.827719][T16716] device veth1_vlan entered promiscuous mode [ 1101.881374][T17109] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.914124][T17109] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.930512][T17109] device bridge_slave_0 entered promiscuous mode [ 1101.970285][T17109] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.987343][T17109] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.011345][T17109] device bridge_slave_1 entered promiscuous mode [ 1102.077620][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1102.095155][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1102.155684][T16716] device veth0_macvtap entered promiscuous mode [ 1102.182446][T17109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.212699][T16716] device veth1_macvtap entered promiscuous mode [ 1102.245668][T17109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.339464][T16716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.374293][T16716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.395608][T16716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.437117][T16716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.469790][T16716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.500859][T16716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.546146][T16716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1102.644383][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1102.658552][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1102.691440][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1102.739365][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1102.759962][T16716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.791415][T16716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.813574][T16716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.834002][T16716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.861615][T16716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1102.883353][T16716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.943576][T16716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1102.982704][T17109] team0: Port device team_slave_0 added [ 1103.037786][T17109] team0: Port device team_slave_1 added [ 1103.043838][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1103.082974][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1103.109939][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1103.123052][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1103.736713][T16716] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.774158][T16716] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.802434][T16716] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1103.847051][T16716] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.356392][ T29] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1104.495139][T17109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.502484][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.682147][T17109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.716287][T17109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.723284][T17109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.837140][T17109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.970027][T16740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.169840][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3698'. [ 1105.393853][T17109] device hsr_slave_0 entered promiscuous mode [ 1105.454638][T17109] device hsr_slave_1 entered promiscuous mode [ 1105.467911][T17109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.500223][T17109] Cannot create hsr debugfs directory [ 1105.781150][T13674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.828701][T13674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.970386][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1106.116213][T13453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1106.170979][T13453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1106.241282][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1106.417500][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1106.428910][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1106.648785][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3709'. [ 1107.723799][T16740] device veth0_vlan entered promiscuous mode [ 1107.776254][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.804877][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1108.160085][ T29] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.254768][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1108.265700][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1108.347672][T16740] device veth1_vlan entered promiscuous mode [ 1109.506657][ T29] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.815882][ T29] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.909256][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1110.944933][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1111.111213][ T29] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.165330][T16740] device veth0_macvtap entered promiscuous mode [ 1111.199175][T16740] device veth1_macvtap entered promiscuous mode [ 1111.339216][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.413964][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.444004][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.495009][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.535448][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.640103][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.683028][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1111.704049][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.733408][ T27] audit: type=1326 audit(1742081790.210:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1111.795115][T16740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.831948][ T27] audit: type=1326 audit(1742081790.210:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1111.873624][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1111.893078][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1111.937774][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1111.967918][ T27] audit: type=1326 audit(1742081790.210:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1112.052753][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.085566][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.116076][ T27] audit: type=1326 audit(1742081790.210:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1112.136275][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.196546][ T27] audit: type=1326 audit(1742081790.220:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1112.203966][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.279056][ T27] audit: type=1326 audit(1742081790.220:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1112.302823][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.351963][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.393251][ T27] audit: type=1326 audit(1742081790.220:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1112.417528][T16740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.453553][T16740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.499570][ T27] audit: type=1326 audit(1742081790.220:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1112.523084][T16740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.557054][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1112.568931][ T27] audit: type=1326 audit(1742081790.220:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1112.599549][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1112.649554][ T27] audit: type=1326 audit(1742081790.220:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17277 comm="syz.2.3716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed7f29359 code=0x7ffc0000 [ 1112.720027][T16740] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.742272][T16740] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.778326][T16740] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.838087][T16740] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.033548][T17109] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1113.141326][T17109] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1113.167329][T17293] loop5: detected capacity change from 0 to 256 [ 1113.244914][T17293] exfat: Deprecated parameter 'namecase' [ 1113.281818][T17293] exfat: Deprecated parameter 'namecase' [ 1113.360530][T17293] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x8ed793fa, utbl_chksum : 0xe619d30d) [ 1113.432988][T17109] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1113.501150][T17109] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1113.703220][T13674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.714340][T13674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.818925][T17302] xt_socket: unknown flags 0x58 [ 1114.431071][T17309] loop5: detected capacity change from 0 to 512 [ 1114.483190][T17309] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1114.497760][T17309] EXT4-fs (loop5): invalid journal inode [ 1114.503723][T17309] EXT4-fs (loop5): can't get journal size [ 1114.540085][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1114.555282][T17309] EXT4-fs (loop5): 1 truncate cleaned up [ 1114.571591][T13453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.593281][T13453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.644245][T17309] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1114.746289][T17309] EXT4-fs warning (device loop5): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 1114.834506][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1115.123770][T12016] kernel write not supported for file /snd/seq (pid: 12016 comm: kworker/1:1) [ 1115.688058][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1115.829574][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.836680][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.911420][T17109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.137914][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1116.166914][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1116.234902][T17109] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.490670][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1116.572866][T17351] loop6: detected capacity change from 0 to 2048 [ 1116.582466][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1116.667408][T17351] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1116.708776][T13674] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.715985][T13674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.381913][T17351] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1119.120000][T17357] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 1119.132256][T17357] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1119.132256][T17357] [ 1119.141974][T17357] EXT4-fs (loop6): Total free blocks count 0 [ 1119.148486][T17357] EXT4-fs (loop6): Free/Dirty block details [ 1119.154399][T17357] EXT4-fs (loop6): free_blocks=66060288 [ 1119.159937][T17357] EXT4-fs (loop6): dirty_blocks=39552 [ 1119.165341][T17357] EXT4-fs (loop6): Block reservation details [ 1119.171310][T17357] EXT4-fs (loop6): i_reserved_data_blocks=2472 [ 1119.203896][T17360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3734'. [ 1119.277546][T17360] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3734'. [ 1120.342951][ T4389] EXT4-fs (loop6): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 1120.394429][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1120.454609][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1120.490354][T13674] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.497536][T13674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.547484][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1120.613402][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1120.662965][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1120.900296][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1120.918790][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1120.942109][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1120.967253][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1120.986762][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1121.005675][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1121.021520][T13674] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1121.036071][T17373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1121.293397][T17109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1121.332658][T17109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1121.341263][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1121.359479][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1121.441546][T17380] loop5: detected capacity change from 0 to 512 [ 1121.599655][T17380] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1121.682540][T17380] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1121.740607][T17380] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1121.827283][T17380] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.3743: attempt to clear invalid blocks 2 len 1 [ 1121.956470][T17380] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3743: invalid indirect mapped block 1819239214 (level 0) [ 1122.066673][T17380] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.3743: invalid indirect mapped block 1819239214 (level 1) [ 1122.159705][T17380] EXT4-fs (loop5): 1 truncate cleaned up [ 1122.209004][T17380] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1122.293708][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3743'. [ 1123.514159][ T4297] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1123.724065][ T4297] usb 6-1: Using ep0 maxpacket: 32 [ 1123.731579][ T4297] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1123.776374][ T4297] usb 6-1: config 3 has an invalid interface number: 17 but max is 0 [ 1123.825493][ T4297] usb 6-1: config 3 has no interface number 0 [ 1123.831909][ T4297] usb 6-1: config 3 interface 17 altsetting 10 endpoint 0xC has invalid maxpacket 9212, setting to 1024 [ 1123.873900][ T4297] usb 6-1: config 3 interface 17 has no altsetting 0 [ 1123.906421][ T4297] usb 6-1: New USB device found, idVendor=174f, idProduct=8a12, bcdDevice=17.48 [ 1123.934038][ T4297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.962462][ T4297] usb 6-1: Product: syz [ 1123.982695][ T4297] usb 6-1: Manufacturer: syz [ 1123.988904][ T4297] usb 6-1: SerialNumber: syz [ 1124.275814][ T29] device hsr_slave_0 left promiscuous mode [ 1124.308371][ T29] device hsr_slave_1 left promiscuous mode [ 1124.327078][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.353500][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.385645][ T29] device bridge_slave_1 left promiscuous mode [ 1124.404325][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.438331][ T29] device bridge_slave_0 left promiscuous mode [ 1124.456060][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.495420][ T29] device hsr_slave_0 left promiscuous mode [ 1124.516261][ T29] device hsr_slave_1 left promiscuous mode [ 1124.554556][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.562082][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.612822][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.645315][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.681737][ T29] device bridge_slave_1 left promiscuous mode [ 1124.704926][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.732288][ T29] device bridge_slave_0 left promiscuous mode [ 1124.774363][ T4297] usb 6-1: Found UVC 0.00 device syz (174f:8a12) [ 1124.780982][ T4297] usb 6-1: No valid video chain found. [ 1124.789580][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.832439][ T4297] usb 6-1: USB disconnect, device number 5 [ 1124.906740][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1125.054219][T17443] loop5: detected capacity change from 0 to 1024 [ 1125.081853][T17443] EXT4-fs: Ignoring removed orlov option [ 1125.095703][T17443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1125.168584][ T29] device veth1_macvtap left promiscuous mode [ 1125.204270][ T29] device veth0_macvtap left promiscuous mode [ 1125.225912][T17443] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1125.245293][ T29] device veth1_vlan left promiscuous mode [ 1125.251166][ T29] device veth0_vlan left promiscuous mode [ 1125.323516][ T29] device veth1_macvtap left promiscuous mode [ 1125.333547][ T29] device veth0_macvtap left promiscuous mode [ 1125.341910][ T29] device veth1_vlan left promiscuous mode [ 1125.350190][ T29] device veth0_vlan left promiscuous mode [ 1125.517851][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1125.893881][T16740] EXT4-fs: 15 callbacks suppressed [ 1125.893903][T16740] EXT4-fs (loop6): unmounting filesystem. [ 1125.914125][ T4297] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1126.089642][T17462] loop6: detected capacity change from 0 to 764 [ 1126.106504][ T4297] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1126.125041][ T4297] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1126.151660][ T4297] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1126.163462][T17462] rock: directory entry would overflow storage [ 1126.164200][ T4297] usb 6-1: New USB device strings: Mfr=23, Product=2, SerialNumber=3 [ 1126.184120][T17462] rock: sig=0x4654, size=5, remaining=4 [ 1126.187280][ T4297] usb 6-1: Product: syz [ 1126.198787][ T4297] usb 6-1: Manufacturer: syz [ 1126.203445][ T4297] usb 6-1: SerialNumber: syz [ 1126.229089][ T4297] usb 6-1: config 0 descriptor?? [ 1126.282437][ T4297] usb 6-1: selecting invalid altsetting 0 [ 1126.503429][ T4297] usb 6-1: USB disconnect, device number 6 [ 1126.537549][T17468] loop6: detected capacity change from 0 to 1024 [ 1126.582810][T17468] ext4: Unknown parameter 'obj_user' [ 1126.664026][T17206] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1129.330360][T17484] loop6: detected capacity change from 0 to 512 [ 1129.424218][T17484] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1129.533339][ T27] kauditd_printk_skb: 523 callbacks suppressed [ 1129.533359][ T27] audit: type=1800 audit(1742081808.010:1755): pid=17484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3768" name="file1" dev="loop6" ino=26 res=0 errno=0 [ 1129.901169][T17492] loop5: detected capacity change from 0 to 164 [ 1129.938756][T17492] rock: directory entry would overflow storage [ 1129.952754][T17492] rock: sig=0x66, size=4, remaining=3 [ 1129.998209][T17494] loop6: detected capacity change from 0 to 128 [ 1130.034342][T17494] FAT-fs (loop6): bogus number of reserved sectors [ 1130.041034][T17494] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1130.074033][T17494] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1130.209338][ T29] team0 (unregistering): Port device team_slave_1 removed [ 1130.705795][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3765'. [ 1130.727520][ T29] team0 (unregistering): Port device team_slave_0 removed [ 1131.064384][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.544512][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.592737][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3785'. [ 1131.721509][T17507] loop5: detected capacity change from 0 to 2048 [ 1131.885479][T17507] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1135.522262][T17527] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1135.538421][T17527] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 3 with error 28 [ 1135.550612][T17527] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1135.550612][T17527] [ 1135.560338][T17527] EXT4-fs (loop5): Total free blocks count 0 [ 1135.566334][T17527] EXT4-fs (loop5): Free/Dirty block details [ 1135.572218][T17527] EXT4-fs (loop5): free_blocks=66060288 [ 1135.577770][T17527] EXT4-fs (loop5): dirty_blocks=39520 [ 1135.583128][T17527] EXT4-fs (loop5): Block reservation details [ 1135.589115][T17527] EXT4-fs (loop5): i_reserved_data_blocks=2470 [ 1135.744548][T16176] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1136.893524][ T4335] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 4 with max blocks 2048 with error 28 [ 1136.948848][ T4335] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1136.948848][ T4335] [ 1136.967231][ T4335] EXT4-fs (loop5): Total free blocks count 0 [ 1136.973289][ T4335] EXT4-fs (loop5): Free/Dirty block details [ 1136.988629][ T4335] EXT4-fs (loop5): free_blocks=66060288 [ 1136.996780][ T4335] EXT4-fs (loop5): dirty_blocks=39520 [ 1137.002288][ T4335] EXT4-fs (loop5): Block reservation details [ 1137.016159][T17533] loop6: detected capacity change from 0 to 2048 [ 1137.017754][ T4335] EXT4-fs (loop5): i_reserved_data_blocks=2470 [ 1137.062749][T17533] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1137.153209][ T4335] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 2054 with max blocks 2048 with error 28 [ 1137.168120][T13453] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1137.212716][ T4335] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1137.212716][ T4335] [ 1137.222560][ T4335] EXT4-fs (loop5): Total free blocks count 0 [ 1137.641520][ T29] bond0 (unregistering): Released all slaves [ 1137.704048][T13729] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1137.910291][T13729] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.951686][T13729] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.974072][T13729] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1137.993987][T13729] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1138.003100][T13729] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.043819][T13729] usb 7-1: config 0 descriptor?? [ 1138.461466][T13729] plantronics 0003:047F:FFFF.0013: unknown main item tag 0xd [ 1138.482412][T13729] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 1138.509630][T13729] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1138.771778][T16930] usb 7-1: USB disconnect, device number 8 [ 1139.340249][ T29] team0 (unregistering): Port device team_slave_1 removed [ 1139.557029][ T29] team0 (unregistering): Port device team_slave_0 removed [ 1139.683714][T17546] loop6: detected capacity change from 0 to 2048 [ 1139.697104][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.791422][T17546] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1140.619714][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.774304][T16740] EXT4-fs (loop6): unmounting filesystem. [ 1140.859037][T17556] loop5: detected capacity change from 0 to 256 [ 1140.881190][T17556] exfat: Deprecated parameter 'utf8' [ 1140.915172][T17556] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1141.120641][ T4256] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1141.154025][ T4256] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1141.164995][ T4256] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1141.175459][ T4256] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1141.198989][ T4264] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1141.207919][ T4264] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1141.783220][ T29] bond0 (unregistering): Released all slaves [ 1141.889882][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1141.898054][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1141.909778][T17558] netlink: 'syz.6.3790': attribute type 8 has an invalid length. [ 1141.943602][T17558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1142.036280][T17109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1142.340466][T17571] loop6: detected capacity change from 0 to 512 [ 1142.389531][T17568] loop5: detected capacity change from 0 to 2048 [ 1142.424975][T17571] ext4: Unknown parameter 'nouser_xattr' [ 1142.459870][T17568] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1142.471690][T17531] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1142.711615][T17579] loop6: detected capacity change from 0 to 1024 [ 1142.787936][T17579] EXT4-fs: Ignoring removed orlov option [ 1142.793703][T17579] EXT4-fs: Ignoring removed mblk_io_submit option [ 1142.878102][T17579] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1142.892804][T17559] chnl_net:caif_netlink_parms(): no params data found [ 1142.977121][T17579] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1143.067391][T17579] EXT4-fs (loop6): unmounting filesystem. [ 1143.264122][ T4264] Bluetooth: hci1: command 0x0409 tx timeout [ 1143.540190][T17559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.547610][T17559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1143.557010][T17559] device bridge_slave_0 entered promiscuous mode [ 1143.593780][T17559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.687970][T17559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.727075][T17559] device bridge_slave_1 entered promiscuous mode [ 1144.731005][T17559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.549962][ T4264] Bluetooth: hci1: command 0x041b tx timeout [ 1145.557296][T17559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.432704][T17559] team0: Port device team_slave_0 added [ 1146.448777][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1146.468517][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1146.531526][T17559] team0: Port device team_slave_1 added [ 1146.712081][T17559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.735300][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1146.848115][T17559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.896461][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1146.916665][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1146.947744][T17109] device veth0_vlan entered promiscuous mode [ 1146.957973][T17634] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3806'. [ 1146.977454][T17634] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3806'. [ 1147.021574][T17634] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3806'. [ 1147.065355][T17559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.092799][T17559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1147.261323][T17559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.328327][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1147.344704][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1147.460367][T17109] device veth1_vlan entered promiscuous mode [ 1147.584064][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 1147.647164][T17559] device hsr_slave_0 entered promiscuous mode [ 1147.715312][T17559] device hsr_slave_1 entered promiscuous mode [ 1147.752627][T17559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1147.804176][T17559] Cannot create hsr debugfs directory [ 1147.918493][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1148.157077][T10822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1148.209332][T17109] device veth0_macvtap entered promiscuous mode [ 1148.533553][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1148.600299][T17109] device veth1_macvtap entered promiscuous mode [ 1149.664100][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 1149.664440][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.808110][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1149.874230][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1149.915707][T17655] loop5: detected capacity change from 0 to 16 [ 1149.968092][T17655] erofs: (device loop5): mounted with root inode @ nid 36. [ 1149.975440][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.014083][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.091550][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.197037][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1150.243781][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.324424][T17109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.335631][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1150.374825][T11092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1150.458846][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.510330][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.531816][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.557806][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.598447][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.654823][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1150.693987][T17109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1150.734030][T17109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1152.035326][ T4264] Bluetooth: hci1: command 0x0405 tx timeout [ 1152.055257][T17109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.324438][ T29] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.414264][T17677] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3818'. [ 1152.463982][T17677] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3818'. [ 1152.473562][T17677] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3818'. [ 1152.533027][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1152.561571][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1152.620503][T17109] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.673067][T17109] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.704061][T17109] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.712834][T17109] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.972076][ T29] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1153.454915][ T29] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.277388][ T29] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.536630][ T4260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1155.548982][ T4256] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1155.558013][ T4256] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1155.578054][ T4256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1155.590316][ T4256] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1155.599911][ T4256] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1157.595550][T17559] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1157.650727][T17559] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1157.670327][ T4256] Bluetooth: hci0: command 0x0409 tx timeout [ 1157.712929][T17559] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1157.827021][T17559] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1158.067387][T17714] chnl_net:caif_netlink_parms(): no params data found [ 1158.671909][T17714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.685170][T17714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.696852][T17714] device bridge_slave_0 entered promiscuous mode [ 1158.707340][T17714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.714963][T17714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.724332][T17714] device bridge_slave_1 entered promiscuous mode [ 1158.935776][T17714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.160873][T17714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.171161][T17778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3833'. [ 1159.198681][T17559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1159.350585][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1159.368524][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1159.754029][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 1160.486332][T17714] team0: Port device team_slave_0 added [ 1160.496496][T17559] 8021q: adding VLAN 0 to HW filter on device team0 [ 1160.566135][T17714] team0: Port device team_slave_1 added [ 1160.874638][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1160.892707][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1160.917403][T12938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.924593][T12938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1160.969605][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1161.003699][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1161.051214][T12938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.058438][T12938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.082774][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1161.102463][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1161.165717][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.185216][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.196373][T17803] loop6: detected capacity change from 0 to 1024 [ 1161.219756][T17803] ext4: Unknown parameter 'obj_user' [ 1161.230079][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1161.265936][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1161.316605][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1161.371865][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1161.416309][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.489309][T17714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.513193][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.609149][T17714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.632894][T17714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.644159][T17714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.771151][T17714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.834062][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 1162.190733][T17820] loop6: detected capacity change from 0 to 2048 [ 1162.285060][T17820] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1162.414611][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1162.423533][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1162.483461][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1162.627527][T17559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1162.701564][T17714] device hsr_slave_0 entered promiscuous mode [ 1162.744605][T17714] device hsr_slave_1 entered promiscuous mode [ 1162.764805][T17714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1162.841072][T17714] Cannot create hsr debugfs directory [ 1162.939955][T17833] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1163.019787][T17833] FAT-fs (loop11): unable to read boot sector [ 1163.520146][T17841] loop5: detected capacity change from 0 to 256 [ 1163.526632][ T29] device hsr_slave_0 left promiscuous mode [ 1163.542260][ T29] device hsr_slave_1 left promiscuous mode [ 1163.572585][T17841] exfat: Deprecated parameter 'utf8' [ 1163.587203][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.612978][T17841] exfat: Deprecated parameter 'namecase' [ 1163.621358][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.636530][T17841] exfat: Deprecated parameter 'utf8' [ 1163.646167][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.676382][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.677513][T17841] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1163.701483][ T29] device bridge_slave_1 left promiscuous mode [ 1163.734619][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.745525][ T29] device bridge_slave_0 left promiscuous mode [ 1163.774326][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.904304][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 1164.029167][ T29] device veth1_macvtap left promiscuous mode [ 1164.054080][ T29] device veth0_macvtap left promiscuous mode [ 1164.068637][ T29] device veth1_vlan left promiscuous mode [ 1164.096200][ T29] device veth0_vlan left promiscuous mode [ 1165.504056][ T127] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1165.697962][ T127] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1165.724237][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.732446][ T127] usb 6-1: Product: syz [ 1165.752464][ T127] usb 6-1: Manufacturer: syz [ 1165.764126][ T127] usb 6-1: SerialNumber: syz [ 1165.779839][ T127] usb 6-1: config 0 descriptor?? [ 1165.803388][ T127] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1166.491987][ T3638] usb 6-1: USB disconnect, device number 7 [ 1167.418158][ T29] team0 (unregistering): Port device team_slave_1 removed [ 1167.626239][ T29] team0 (unregistering): Port device team_slave_0 removed [ 1167.790090][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.745616][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.076570][T17902] loop5: detected capacity change from 0 to 512 [ 1169.119309][T17902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1169.188320][T17902] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1169.202897][T17902] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.461333][T17912] loop6: detected capacity change from 0 to 2048 [ 1169.473052][T17912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1169.959600][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1169.963445][T17914] loop6: detected capacity change from 0 to 512 [ 1169.985939][T17914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1170.080918][T17914] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1170.090680][T17914] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1170.142462][ T29] bond0 (unregistering): Released all slaves [ 1170.281307][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1170.289259][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1170.362469][T17559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.582045][T17926] loop5: detected capacity change from 0 to 1024 [ 1170.602503][T17926] EXT4-fs: Ignoring removed orlov option [ 1170.622838][T17714] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.642263][T17926] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1170.677964][T17926] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1170.857435][T17714] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.881381][T16740] EXT4-fs (loop6): unmounting filesystem. [ 1170.922704][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1171.239880][T17714] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.467757][T17714] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.650682][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1171.676084][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1171.717339][T17559] device veth0_vlan entered promiscuous mode [ 1171.738794][T17559] device veth1_vlan entered promiscuous mode [ 1171.753268][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1171.774599][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1171.832241][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1171.895003][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1171.918901][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1171.934552][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1171.985074][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1172.010849][T17970] loop5: detected capacity change from 0 to 512 [ 1172.018593][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1172.031594][T17970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1172.042033][T17559] device veth0_macvtap entered promiscuous mode [ 1172.098121][T17559] device veth1_macvtap entered promiscuous mode [ 1172.139183][T17970] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1172.151797][T17970] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1172.262700][T17559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.354090][T17559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.364223][T17559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.374781][T17559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.384984][T17559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1172.724404][T17559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1172.900266][T17559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1173.009143][T17559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.055308][T17559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1173.121744][T17714] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1173.187460][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1173.222011][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1173.267870][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1173.315540][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1173.366551][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1173.413672][T17990] loop5: detected capacity change from 0 to 512 [ 1173.416119][T17559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.447163][T17559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.462884][T17559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.475428][T17990] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.3889: inode #1: comm syz.5.3889: iget: illegal inode # [ 1173.498697][T17990] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.3889: error while reading EA inode 1 err=-117 [ 1173.514135][T17559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.524354][T17559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.532146][T17990] EXT4-fs (loop5): 1 orphan inode deleted [ 1173.535131][T17559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.550775][T17559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1173.561578][T17559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1173.573443][T17559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1173.586841][T17714] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1173.608060][T17990] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1173.773424][T17559] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.786008][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1173.809054][T17559] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.832837][T17559] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.903770][T17559] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.945715][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1173.966053][T16176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1173.999243][T17714] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1174.194106][T17714] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1174.255927][T18009] loop6: detected capacity change from 0 to 1024 [ 1174.266024][T18002] loop5: detected capacity change from 0 to 8192 [ 1174.288365][T18002] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1174.385729][T18009] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1174.701836][T16740] EXT4-fs (loop6): unmounting filesystem. [ 1174.739192][T16176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1174.789811][T16176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1174.865494][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1174.926415][T18022] loop6: detected capacity change from 0 to 512 [ 1174.964864][T18022] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1174.977788][T18022] EXT4-fs (loop6): invalid journal inode [ 1174.983708][T18022] EXT4-fs (loop6): can't get journal size [ 1175.017136][T18022] EXT4-fs (loop6): 1 truncate cleaned up [ 1175.022925][T18022] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1175.046693][T13674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1175.112496][T13674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1175.140367][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1175.266837][T16740] EXT4-fs (loop6): unmounting filesystem. [ 1175.465599][T17714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.763642][T17714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1176.119723][T18031] loop8: detected capacity change from 0 to 512 [ 1176.221081][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1176.242301][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1176.242707][T18031] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1176.256487][T18031] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 1176.266733][T18031] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1176.309751][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1176.318839][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1176.327499][T12938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.334674][T12938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1176.342631][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1176.343185][T18042] loop5: detected capacity change from 0 to 512 [ 1176.352912][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1176.365979][T12938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.367841][T18031] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.3788: attempt to clear invalid blocks 2 len 1 [ 1176.373094][T12938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1176.440093][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1176.457232][T18042] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #17: comm syz.5.3900: iget: bogus i_mode (0) [ 1176.457590][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1176.500916][T18031] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3788: invalid indirect mapped block 1819239214 (level 0) [ 1176.507556][T18042] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3900: couldn't read orphan inode 17 (err -117) [ 1176.535825][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1176.539903][T18042] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1176.570326][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1176.578607][T18031] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3788: invalid indirect mapped block 1819239214 (level 1) [ 1176.578986][T18042] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.3900: bg 0: block 7: invalid block bitmap [ 1176.613771][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1176.624239][T18031] EXT4-fs (loop8): 1 truncate cleaned up [ 1176.632836][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1176.658892][T18031] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1176.684065][T12016] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1176.698843][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3788'. [ 1176.711789][ T29] device hsr_slave_0 left promiscuous mode [ 1176.729021][ T29] device hsr_slave_1 left promiscuous mode [ 1176.742038][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1176.749542][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.774502][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.798736][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.810556][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.841214][T17559] EXT4-fs (loop8): unmounting filesystem. [ 1176.854750][ T29] device bridge_slave_1 left promiscuous mode [ 1176.881188][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.904225][T12016] usb 7-1: Using ep0 maxpacket: 32 [ 1176.911317][T12016] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1176.938825][T18056] loop5: detected capacity change from 0 to 64 [ 1176.952363][T12016] usb 7-1: config 0 has no interface number 0 [ 1176.995108][ T29] device bridge_slave_0 left promiscuous mode [ 1176.997900][T12016] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1177.023028][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.025258][T12016] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.064554][T18056] hfs: small file entry [ 1177.114825][T12016] usb 7-1: Product: syz [ 1177.124613][T12016] usb 7-1: Manufacturer: syz [ 1177.129266][T12016] usb 7-1: SerialNumber: syz [ 1177.162973][T12016] usb 7-1: config 0 descriptor?? [ 1177.192744][T12016] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1177.267631][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.274356][ T29] device veth1_macvtap left promiscuous mode [ 1177.280722][ T29] device veth0_macvtap left promiscuous mode [ 1177.282178][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.296306][ T29] device veth1_vlan left promiscuous mode [ 1177.304186][ T29] device veth0_vlan left promiscuous mode [ 1177.351009][T18065] loop5: detected capacity change from 0 to 1024 [ 1177.398684][T12016] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1177.422657][T12016] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1177.490392][T18065] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1177.571242][T18065] syz.5.3906[18065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1177.571353][T18065] syz.5.3906[18065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1177.605191][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1177.625001][T12016] usb 7-1: USB disconnect, device number 9 [ 1177.645235][T12016] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1177.668511][T12016] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1177.679906][ T27] audit: type=1800 audit(1742081856.150:1756): pid=18073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3906" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 1177.705140][T12016] quatech2 7-1:0.51: device disconnected [ 1177.825148][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1179.212936][T18100] loop8: detected capacity change from 0 to 512 [ 1179.260372][T18100] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1179.309870][T18100] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 1179.409784][T18100] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1179.471014][T18100] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.3914: attempt to clear invalid blocks 2 len 1 [ 1179.510325][T18100] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3914: invalid indirect mapped block 1819239214 (level 0) [ 1179.579903][T18100] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3914: invalid indirect mapped block 1819239214 (level 1) [ 1179.631332][T18100] EXT4-fs (loop8): 1 truncate cleaned up [ 1179.654422][T18100] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1179.703518][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3914'. [ 1179.845436][T17559] EXT4-fs (loop8): unmounting filesystem. [ 1180.457566][ T29] team0 (unregistering): Port device team_slave_1 removed [ 1180.572582][ T29] team0 (unregistering): Port device team_slave_0 removed [ 1180.669833][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.753094][T18154] loop6: detected capacity change from 0 to 8192 [ 1180.786716][T18154] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1180.808733][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1181.025458][T18158] nvme_fabrics: unknown parameter or missing value '[R !)CEVOېvUOgY\"}3FrFLHl U"/)}a랛YHJY?wo&|Q' in ctrl creation request [ 1181.774766][ T29] bond0 (unregistering): Released all slaves [ 1181.897705][T18175] loop8: detected capacity change from 0 to 1024 [ 1181.921080][T17714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1181.940622][T17714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1181.962542][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1181.964966][T18175] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1182.007139][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1182.015809][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1182.025044][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1182.033764][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1182.043066][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1182.071095][T18156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3931'. [ 1182.183423][T18175] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3841: comm syz.8.3939: Allocating blocks 497-513 which overlap fs metadata [ 1182.230647][T12938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1182.260824][T18175] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3841: comm syz.8.3939: Allocating blocks 497-513 which overlap fs metadata [ 1182.368948][T18174] EXT4-fs (loop8): pa ffff888025fa4540: logic 16, phys. 225, len 18 [ 1182.377375][T18174] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 1182.472749][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1182.527930][T13453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1182.563293][T17714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.595486][T18184] loop5: detected capacity change from 0 to 4096 [ 1182.605518][T18184] ntfs3: Unknown parameter 'hide_dot_files' [ 1182.651378][T17738] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1182.687227][T18195] loop6: detected capacity change from 0 to 512 [ 1182.723426][T18195] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1182.725445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1182.791221][T17559] EXT4-fs (loop8): unmounting filesystem. [ 1182.844236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1182.865849][T18195] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1182.884052][T18195] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1182.915694][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1182.971038][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1182.982225][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1183.012111][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1183.046343][T17714] device veth0_vlan entered promiscuous mode [ 1183.079547][T17714] device veth1_vlan entered promiscuous mode [ 1183.242997][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1183.271673][T11338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1183.341990][T17714] device veth0_macvtap entered promiscuous mode [ 1183.370097][T17714] device veth1_macvtap entered promiscuous mode [ 1183.515718][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.565271][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.592821][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.631079][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.741055][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.802044][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.860249][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1183.939328][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.010704][T17714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.090331][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.143746][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.205021][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.258870][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.268941][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.281009][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.290932][T17714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1184.301448][T17714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1184.317061][T16740] EXT4-fs (loop6): unmounting filesystem. [ 1184.323739][T17714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.351823][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1184.434976][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1184.456378][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1184.476118][ T4264] Bluetooth: hci5: command 0x0406 tx timeout [ 1184.513657][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1184.523769][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1184.537101][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1184.559523][T17714] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.578173][T17714] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.588144][T17714] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.597112][T17714] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.622658][T18224] netlink: 'syz.0.3950': attribute type 4 has an invalid length. [ 1184.757542][T18229] loop6: detected capacity change from 0 to 64 [ 1184.793180][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.810766][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.836694][T18229] hfs: small file entry [ 1185.028552][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1185.066231][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1185.075527][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.363548][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1186.513839][T18244] loop8: detected capacity change from 0 to 512 [ 1186.709554][T18251] loop5: detected capacity change from 0 to 512 [ 1186.755438][T18244] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1186.783635][T18251] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1186.805277][T18244] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1186.876510][T18251] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1186.890377][T18244] EXT4-fs (loop8): shut down requested (0) [ 1186.921270][T18251] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1187.652757][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1187.839125][T17559] EXT4-fs (loop8): unmounting filesystem. [ 1189.668852][ T4256] Bluetooth: hci6: command 0x0406 tx timeout [ 1191.227254][T18317] loop6: detected capacity change from 0 to 16 [ 1191.253547][T18317] erofs: (device loop6): mounted with root inode @ nid 36. [ 1191.278591][ T27] audit: type=1800 audit(1742081869.760:1757): pid=18317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3968" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1191.974590][ T27] audit: type=1800 audit(1742081869.790:1758): pid=18317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3968" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1192.910723][T18340] loop6: detected capacity change from 0 to 512 [ 1193.066559][T18340] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.3994: attempt to clear invalid blocks 2 len 1 [ 1193.154528][T18340] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1193.278439][T18340] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.3994: invalid indirect mapped block 1819239214 (level 0) [ 1193.367608][T18349] loop5: detected capacity change from 0 to 128 [ 1193.394611][T18340] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.3994: invalid indirect mapped block 1819239214 (level 1) [ 1193.461627][T18349] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1193.553573][T18349] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1193.622673][T18340] EXT4-fs (loop6): 1 truncate cleaned up [ 1193.684766][T18340] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1193.777359][T18340] EXT4-fs warning (device loop6): dx_probe:833: inode #2: comm syz.6.3994: Unrecognised inode hash code 20 [ 1193.858934][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1193.943942][T18340] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.3994: Corrupt directory, running e2fsck is recommended [ 1194.078069][T16740] EXT4-fs (loop6): unmounting filesystem. [ 1196.480410][T18380] loop6: detected capacity change from 0 to 64 [ 1196.578351][T18380] hfs: small file entry [ 1196.801705][T18390] loop5: detected capacity change from 0 to 2048 [ 1196.911279][T18390] EXT4-fs: Ignoring removed bh option [ 1197.012894][T18390] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1197.152400][T18400] loop6: detected capacity change from 0 to 512 [ 1197.246464][T18400] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1197.268797][T16716] EXT4-fs (loop5): unmounting filesystem. [ 1197.343976][T18400] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 1197.414267][T18400] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1197.504181][T18400] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.4014: attempt to clear invalid blocks 2 len 1 [ 1197.536084][T18400] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.4014: invalid indirect mapped block 1819239214 (level 0) [ 1197.562571][T18400] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.4014: invalid indirect mapped block 1819239214 (level 1) [ 1197.633345][T18400] EXT4-fs (loop6): 1 truncate cleaned up [ 1197.653838][T18400] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1197.692230][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4014'. [ 1197.774306][T16740] EXT4-fs (loop6): unmounting filesystem. [ 1197.894044][ T3638] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1198.091598][ T3638] usb 9-1: Using ep0 maxpacket: 32 [ 1198.129708][ T3638] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1198.244494][ T3638] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.515613][ T3638] usb 9-1: config 0 descriptor?? [ 1198.615779][ T3638] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1199.374144][T16930] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1199.594157][T16930] usb 8-1: Using ep0 maxpacket: 32 [ 1199.609105][T16930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.652578][T16930] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1199.713533][T16930] usb 8-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1199.736362][T16930] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.767396][T16930] usb 8-1: config 0 descriptor?? [ 1199.817152][T14451] usb 9-1: USB disconnect, device number 5 [ 1200.011320][T18440] loop5: detected capacity change from 0 to 512 [ 1200.034620][T18440] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1200.042039][T18440] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1200.058105][T18440] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1200.073920][T18440] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.4033: attempt to clear invalid blocks 2 len 1 [ 1200.101993][T18440] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.4033: invalid indirect mapped block 1819239214 (level 0) [ 1200.117847][T18440] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.4033: invalid indirect mapped block 1819239214 (level 1) [ 1200.140587][T18440] EXT4-fs (loop5): 1 truncate cleaned up [ 1200.148191][T18440] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1200.201103][T16930] hid-u2fzero 0003:10C4:8ACF.0014: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.7-1/input0 [ 1200.228776][T16930] hid-u2fzero 0003:10C4:8ACF.0014: U2F Zero LED initialised [ 1200.248847][T16930] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 1200.260614][T16930] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 1200.269055][T16930] CPU: 0 PID: 16930 Comm: kworker/0:10 Not tainted 6.1.131-syzkaller #0 [ 1200.277402][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1200.287483][T16930] Workqueue: usb_hub_wq hub_event [ 1200.292542][T16930] RIP: 0010:u2fzero_rng_read+0x27d/0x750 [ 1200.298206][T16930] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 b2 a0 bb f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 14 a1 bb f9 48 8d 84 24 80 00 00 [ 1200.317843][T16930] RSP: 0018:ffffc90003676720 EFLAGS: 00010202 [ 1200.323957][T16930] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 1200.331944][T16930] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888027237e69 [ 1200.339922][T16930] RBP: ffffc900036768d0 R08: dffffc0000000000 R09: ffff888027237e2e [ 1200.347893][T16930] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888024ab63e0 [ 1200.355866][T16930] R13: 1ffff11004956c06 R14: ffff888024ab6030 R15: dffffc0000000000 [ 1200.363842][T16930] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1200.372783][T16930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1200.379369][T16930] CR2: 000000110c25ace6 CR3: 000000004b399000 CR4: 00000000003506f0 [ 1200.387344][T16930] Call Trace: [ 1200.390625][T16930] [ 1200.393555][T16930] ? __die_body+0x5e/0xa0 [ 1200.397898][T16930] ? die_addr+0x95/0xc0 [ 1200.402061][T16930] ? exc_general_protection+0x3ae/0x590 [ 1200.407618][T16930] ? asm_exc_general_protection+0x22/0x30 [ 1200.413350][T16930] ? u2fzero_rng_read+0x27d/0x750 [ 1200.418402][T16930] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1200.423977][T16930] ? mutex_lock_nested+0x10/0x10 [ 1200.428949][T16930] ? u2fzero_brightness_set+0x2a0/0x2a0 [ 1200.434501][T16930] add_early_randomness+0x78/0x140 [ 1200.439631][T16930] hwrng_register+0x3a0/0x440 [ 1200.444330][T16930] devm_hwrng_register+0x43/0xb0 [ 1200.449279][T16930] u2fzero_probe+0x31a/0x410 [ 1200.453883][T16930] ? hid_map_usage_clear+0x180/0x180 [ 1200.459195][T16930] hid_device_probe+0x298/0x3a0 [ 1200.464057][T16930] ? hid_uevent+0x310/0x310 [ 1200.468589][T16930] really_probe+0x2ab/0xcb0 [ 1200.473152][T16930] __driver_probe_device+0x1a2/0x3d0 [ 1200.478463][T16930] driver_probe_device+0x50/0x420 [ 1200.483619][T16930] __device_attach_driver+0x2cf/0x510 [ 1200.489013][T16930] ? coredump_store+0x90/0x90 [ 1200.493697][T16930] bus_for_each_drv+0x183/0x200 [ 1200.498574][T16930] ? subsys_find_device_by_id+0x310/0x310 [ 1200.504302][T16930] __device_attach+0x359/0x570 [ 1200.509065][T16930] ? device_attach+0x20/0x20 [ 1200.513656][T16930] ? kobject_uevent_env+0x54a/0x8c0 [ 1200.518860][T16930] ? kobject_uevent_env+0x54a/0x8c0 [ 1200.524060][T16930] bus_probe_device+0xba/0x1e0 [ 1200.528830][T16930] ? device_add+0xab9/0xfd0 [ 1200.533348][T16930] device_add+0xb48/0xfd0 [ 1200.537692][T16930] hid_add_device+0x3a5/0x510 [ 1200.542381][T16930] usbhid_probe+0xc09/0xfc0 [ 1200.546897][T16930] usb_probe_interface+0x5c0/0xaf0 [ 1200.552018][T16930] ? usb_register_driver+0x3d0/0x3d0 [ 1200.557321][T16930] really_probe+0x2ab/0xcb0 [ 1200.561861][T16930] __driver_probe_device+0x1a2/0x3d0 [ 1200.567178][T16930] driver_probe_device+0x50/0x420 [ 1200.572220][T16930] __device_attach_driver+0x2cf/0x510 [ 1200.577605][T16930] ? coredump_store+0x90/0x90 [ 1200.582284][T16930] bus_for_each_drv+0x183/0x200 [ 1200.587145][T16930] ? subsys_find_device_by_id+0x310/0x310 [ 1200.592877][T16930] __device_attach+0x359/0x570 [ 1200.597653][T16930] ? device_attach+0x20/0x20 [ 1200.602254][T16930] ? kobject_uevent_env+0x54a/0x8c0 [ 1200.607463][T16930] ? kobject_uevent_env+0x54a/0x8c0 [ 1200.612668][T16930] bus_probe_device+0xba/0x1e0 [ 1200.617464][T16930] ? device_add+0xab9/0xfd0 [ 1200.621983][T16930] device_add+0xb48/0xfd0 [ 1200.626321][T16930] usb_set_configuration+0x19dd/0x2020 [ 1200.631814][T16930] usb_generic_driver_probe+0x84/0x140 [ 1200.637302][T16930] usb_probe_device+0x130/0x260 [ 1200.642170][T16930] ? usb_register_device_driver+0x240/0x240 [ 1200.648131][T16930] really_probe+0x2ab/0xcb0 [ 1200.652636][T16930] __driver_probe_device+0x1a2/0x3d0 [ 1200.657919][T16930] driver_probe_device+0x50/0x420 [ 1200.662939][T16930] __device_attach_driver+0x2cf/0x510 [ 1200.668310][T16930] ? coredump_store+0x90/0x90 [ 1200.672984][T16930] bus_for_each_drv+0x183/0x200 [ 1200.677863][T16930] ? subsys_find_device_by_id+0x310/0x310 [ 1200.683611][T16930] __device_attach+0x359/0x570 [ 1200.688389][T16930] ? device_attach+0x20/0x20 [ 1200.692981][T16930] ? kobject_uevent_env+0x54a/0x8c0 [ 1200.698191][T16930] ? kobject_uevent_env+0x54a/0x8c0 [ 1200.703399][T16930] bus_probe_device+0xba/0x1e0 [ 1200.708172][T16930] ? device_add+0xab9/0xfd0 [ 1200.712698][T16930] device_add+0xb48/0xfd0 [ 1200.717037][T16930] usb_new_device+0xbdd/0x1900 [ 1200.721816][T16930] ? usb_disconnect+0x8c0/0x8c0 [ 1200.726668][T16930] ? do_raw_spin_unlock+0x137/0x8a0 [ 1200.731872][T16930] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1200.737072][T16930] ? lockdep_hardirqs_on+0x94/0x130 [ 1200.742274][T16930] hub_event+0x2efe/0x5730 [ 1200.746715][T16930] ? led_work+0x700/0x700 [ 1200.751049][T16930] ? read_lock_is_recursive+0x10/0x10 [ 1200.756435][T16930] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1200.762427][T16930] ? print_irqtrace_events+0x210/0x210 [ 1200.767896][T16930] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1200.773789][T16930] ? do_raw_spin_unlock+0x137/0x8a0 [ 1200.779003][T16930] ? process_one_work+0x806/0x1260 [ 1200.784120][T16930] process_one_work+0x917/0x1260 [ 1200.789067][T16930] ? worker_detach_from_pool+0x260/0x260 [ 1200.794709][T16930] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1200.800260][T16930] ? kthread_data+0x4e/0xc0 [ 1200.804790][T16930] ? wq_worker_running+0x97/0x190 [ 1200.809818][T16930] worker_thread+0xa47/0x1200 [ 1200.814503][T16930] ? _raw_spin_unlock+0x40/0x40 [ 1200.819365][T16930] kthread+0x28d/0x320 [ 1200.823435][T16930] ? worker_clr_flags+0x190/0x190 [ 1200.828464][T16930] ? kthread_blkcg+0xd0/0xd0 [ 1200.833052][T16930] ret_from_fork+0x1f/0x30 [ 1200.837476][T16930] [ 1200.840488][T16930] Modules linked in: [ 1200.851030][T16930] ---[ end trace 0000000000000000 ]--- [ 1200.864020][T16930] RIP: 0010:u2fzero_rng_read+0x27d/0x750 [ 1200.872672][T16930] Code: 68 fd ff ff 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 b2 a0 bb f9 bb a8 00 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 14 a1 bb f9 48 8d 84 24 80 00 00 [ 1200.892651][T16930] RSP: 0018:ffffc90003676720 EFLAGS: 00010202 [ 1200.898882][T16930] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: 0000000000000000 [ 1200.906894][T16930] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888027237e69 [ 1200.914916][T16930] RBP: ffffc900036768d0 R08: dffffc0000000000 R09: ffff888027237e2e [ 1200.922914][T16930] R10: ffffffffffffffff R11: dffffc0000000001 R12: ffff888024ab63e0 [ 1200.931788][T16930] R13: 1ffff11004956c06 R14: ffff888024ab6030 R15: dffffc0000000000 [ 1200.939859][T16930] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1200.949948][T16930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1200.957489][T16930] CR2: 000000110c3f8f42 CR3: 000000001a7f6000 CR4: 00000000003506f0 [ 1200.966694][T16930] Kernel panic - not syncing: Fatal exception [ 1200.973091][T16930] Kernel Offset: disabled [ 1200.977416][T16930] Rebooting in 86400 seconds..