last executing test programs: 4m28.591970726s ago: executing program 32 (id=20): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce11480949455bc37f5f30c92774dcb201629979039d7c8943b21be5bdf9ab8eed9ace110469c51f4f211dd9fad8", 0x44, 0x6d91fb6126dcc988, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4085, 0xff5, 0x40010020, 0x0, 0x0) 3m31.099244666s ago: executing program 33 (id=200): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x18, 0x841}, 0x84) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r3}, 0x18) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 3m17.425338865s ago: executing program 0 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = syz_clone(0x40000000, &(0x7f00000002c0)="40da2872905667e79d30c94d41cf827ee34085374c8b585a801f95346b46a7ff957dac66fe2f941cb3f701a22b1397d189924c4a389c980fe862c5f753655e9aafcc25951a76bbd5634b649a0f03c1523d8e8cd1a7fd11ac186f31341d5909fb62a88dc539053776836bd5b98fac04be7aab162482092019cfea5c01c6faadc83cc2aff531e02bbdf7c6a96574a7ca36e3e57034db1aef37b7dace17f70eb64b3460a3b3c58f03790777a39041db807ab81348824ff389e3bde0cf50b787fb925ad707", 0xc3, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="1821c8c3fb40f9de38cae3aada5784b17d34a93260ad9d636e9679091835") r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=@nat={'nat\x00', 0x1b, 0x5, 0x390, 0x180, 0x250, 0xffffffff, 0x0, 0x250, 0x2f8, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x5, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0xfffffff2]}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0xa, @empty, @broadcast, @gre_key=0x3ff, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @multicast2, @multicast2, @port=0x4e21, @gre_key=0x1}}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010101, 0xff, 0x0, 'wg1\x00', 'batadv0\x00', {}, {}, 0x84, 0x3, 0x1c}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x12, "92ed", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x9, @local, @multicast2, @gre_key=0x8000, @icmp_id=0x65}}}}, {{@ip={@multicast2, @multicast2, 0x7fffffff, 0xff000000, 'netdevsim0\x00', 'nr0\x00', {0xff}, {}, 0x84, 0x1, 0x21}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @port=0x4e22, @gre_key=0xfff0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) ioprio_set$pid(0x1, r1, 0x2004) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 3m15.905470353s ago: executing program 0 (id=248): r0 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x14, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1c6d}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2m58.768099915s ago: executing program 34 (id=248): r0 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x14, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1c6d}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2m5.901068646s ago: executing program 7 (id=376): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, 0x0, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, '\x00', "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/98, 0x62}], 0x1}, 0x4}], 0x2, 0x40000042, 0x0) 2m4.641143588s ago: executing program 7 (id=378): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000010000009500000000000010bfa000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x94) 2m4.435904261s ago: executing program 35 (id=349): r0 = socket$inet6(0xa, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0xffffffff0000, 0x0, 0x113b, 0xffffffffffffffff, 0x8000000) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) socket(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000004) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = open(0x0, 0x0, 0x28) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m3.490493955s ago: executing program 36 (id=353): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x7, 0x575940) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x3, &(0x7f0000000100)) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x21, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x40001, &(0x7f0000000180)={0xa, 0x4e20, 0x8, @local}, 0x1c) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0xff, 0x9, 0x9}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_RATE64={0xc, 0x4, 0x1896060a28d2e208}]}}]}, 0x64}}, 0x44080) r8 = syz_pidfd_open(r2, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) setns(r8, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000200), &(0x7f0000000280)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m3.452178298s ago: executing program 7 (id=382): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 2m2.692396177s ago: executing program 7 (id=384): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x13, 0xffffffffffffffff, 0xbac44000) socket(0x10, 0x3, 0x0) 2m1.166012209s ago: executing program 7 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, r4, 0xd529b000) r5 = getpid() quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000300)=@sg0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r6}}, 0x20) 1m59.890591379s ago: executing program 37 (id=359): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001540)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @private1, [], [], 'syzkaller1\x00', 'caif0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000740)=0x10, 0x12) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b00)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) fanotify_mark(r4, 0x101, 0x10, r5, 0x0) 1m56.003524733s ago: executing program 7 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r0, 0x0) getdents64(r2, &(0x7f0000003f80)=""/4098, 0x1002) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 1m40.520729951s ago: executing program 38 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(r0, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r0, 0x0) getdents64(r2, &(0x7f0000003f80)=""/4098, 0x1002) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) r4 = dup2(r3, r3) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 1m35.885699184s ago: executing program 1 (id=401): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x46f, &(0x7f0000000940)="$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") mount$bind(0x0, &(0x7f0000000080)='.\x02\x00', 0x0, 0x1101880, 0x0) 1m34.500399886s ago: executing program 1 (id=402): socket$inet(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x5c, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000008004500002c00000000001f9078"], 0x0) 1m32.648731289s ago: executing program 1 (id=403): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) 1m31.162357345s ago: executing program 1 (id=404): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80040c, &(0x7f0000000440)=ANY=[], 0x1, 0x710, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m29.775810386s ago: executing program 1 (id=405): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x3, 0x2, 0xdddd1000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x20000, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x2004cb, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2a5, 0x2000000000003ff, 0x2], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m29.17738019s ago: executing program 1 (id=406): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x8, 0xa3db, 0x1, 0x0, 0x7d}) 1m25.372588097s ago: executing program 39 (id=406): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x8, 0xa3db, 0x1, 0x0, 0x7d}) 1m15.810803417s ago: executing program 3 (id=419): unshare(0x6060600) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85322, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000d00)=0x4002, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r6}, 0x10) syz_emit_ethernet(0x5a, 0x0, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0xf7, r3, 0x1, 0x20, 0x6, @local}, 0x14) 1m14.837594681s ago: executing program 3 (id=421): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) lseek(r0, 0xc6c3, 0x0) 1m13.847807565s ago: executing program 3 (id=422): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2058) pipe2$9p(&(0x7f0000008440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RRENAME(r2, &(0x7f0000000140)={0x7, 0x15, 0x2}, 0x7) mount$9p_fd(0x0, &(0x7f0000008380)='./file0\x00', &(0x7f0000008400), 0x4, &(0x7f0000008480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m12.268541825s ago: executing program 3 (id=425): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x10, 0x0, &(0x7f00000004c0)=[@clear_death], 0x0, 0x0, 0x0}) 1m11.457397307s ago: executing program 3 (id=426): r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x8, @mcast1}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1m10.596737588s ago: executing program 3 (id=429): modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) syz_open_dev$MSR(&(0x7f0000000040), 0x8001, 0x0) modify_ldt$write(0x1, &(0x7f0000001700), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 1m6.683031891s ago: executing program 9 (id=434): setgroups(0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) getgroups(0x1, &(0x7f0000000080)=[0xee00]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c) setregid(r2, r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 1m5.265874763s ago: executing program 9 (id=435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x660f, 0xc9a1, 0x7, 0x40, r1, 0x6, '\x00', 0x0, r2, 0x3, 0x3, 0x3, 0x2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r3}, 0x38) 1m3.669098401s ago: executing program 9 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2004}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xde3}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd7b463f9eab17a7e}, 0x4044824) 1m3.061893582s ago: executing program 9 (id=440): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x6, 0x4cd, &(0x7f0000000c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000480)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m1.596836855s ago: executing program 9 (id=442): syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x1, 0x1df, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) write$binfmt_script(r0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 1m0.916434153s ago: executing program 9 (id=444): r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000001}) 57.999691334s ago: executing program 40 (id=444): r0 = epoll_create1(0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x10000001}) 56.930142864s ago: executing program 0 (id=407): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x446102) dup(0xffffffffffffffff) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r5, 0xffffffffffffffff, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 54.524031616s ago: executing program 41 (id=429): modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) syz_open_dev$MSR(&(0x7f0000000040), 0x8001, 0x0) modify_ldt$write(0x1, &(0x7f0000001700), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x90) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x1, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 52.085831367s ago: executing program 0 (id=455): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) execve(0x0, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) chdir(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000020000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='contention_end\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r1, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x3b, r2}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4008, &(0x7f00000002c0)=ANY=[], 0x1, 0x678, &(0x7f00000010c0)="$eJzs3c1vHGcdB/DvrteON5TUTZM2RZUSNeJFtUjsWC6YCwEh5EOFqnLgbCUOsbJJi+0it0LU5fXaQ/6AcvCNExL3SOXCBW69+lgJgYR6wYjDop2dXW/sXb/EitduP59o9nlmnpnn+T2/ndnZXSvaAF9Y85OpPUol85Ovr7XWNzdmGpsbM/c79SRnklSTWrtI5T/NZvPj5GbaS15qbSy7qwwa5+HS3JuffLb5aXutVi7F/tW9jjuY9XLJlSQjZfnkXT3e3639+hvfr89Kd4athF3tJA6GbTRJs/DPh+0tP/vrM92WHvV+R+975gOnQKV939xlIjlbXuit9wHtu2L7nn2qrQ87AAAAADgGz25lK2s5N+w4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DQpf/+/Ui7VdjmaK6l0fv9/rGxLWT9ZLh9u90dPKw4AAAAAAAAAOKozB9/18la2spZz3Q3/Lv7m3+7hQvH4pbyTlSxmOdeyloWsZjXLmU4y0dPR2NrC6urydF7Z98gbfY+8ccA51Q8+NwAAAAAAAAD4AvlV5nv+/g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdAJRlpF8VyoVOfSLWWZDzJWGu/9eTvnfpp9mjYAQAAAMAxeHYrW1nLuc56s1J85n+h+Nw/nnfyIKtZymoaWczt4ruA9qf+6ubGTGNzY+Z+a9nd7/f+dagwih7T/u6h/8iXij3quZOlYsu13MpbaeR2qsWRLZc68fSP64NWTJXvlg4Y2e2ybM38w7Lc5f1DTXaQwV+mvN1v40SRkdFuRqZ6Yntu70wc8tnZOdJ0qt1gL+wYaccknijnZ8uyNZ/fDcr5setE35uJyz2hvbB3zpOv//mPP7nbeHDv7p2VyZMxpf2tl+VIWTaLx/ruc2Km5zp88fOYiYGmikxc7K7P54f5cSZzJW9kOUv5eRaymsVcyQ+K2kJ5Pld6LvkBmbr52Nob+0UyVl6r7SfrcDG9Uhx7Lkv5Ud7K7SzmteLfjUznW5nNbOZ6nuGLB3ilrQ646ptf7hv81W+UlXqS35flydDK63M9ee19zZ0o2nq3bGfp/NHuR7U+odS+UlZaY/y6LE+GnZmY7snE83tn4g/Fy8pK48G95bsL2ze70b2GO/9hWWldR789MXeJlOfL+e4T+PjZ0Wp7vm/bdNF2odtW3dV2sdvWvlLXB16pY+V7uN093SjaXuzbNlO0Xepp6/d+C4AT7+yrZ8fq/6j/rf5R/Tf1u/XXx79/5ttnXh7L6F9Gv1ObGvla9eXKn/JRfrn9+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhyK+++d2+h0Vhc3lFpNpvvD2g6zZXOz5kd46AvPZMMa8pjSdpb/tdsG1bm/9tsNsstlRNxJuxZKVJ1Js2nPlYtSb+my71bPhjK+TPkFybgqbu+ev/t6yvvvvfNpfvNkcWfLj6Ym52dm5qbfW3m+p2lxuJU+3HYUQJPw/ZNf9iRAAAAAAAAAAAAAAd1kP8P8NVXy50n2sXufepJBvczePTxY5kjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLrNT6b2KJVMT12baq1vbsw0Wkunvr1nLUk1SeUXSeXj5GbaSyZ6uqsMGufh0tybn3y2+el2X7XO/tW9jjuY9XLJlSQjZdlRP2J/t3b0d3iV7gxbCbvaSVwyfqRu4aj+HwAA//8sFQQa") rmdir(&(0x7f0000000080)='./file0\x00') 49.320482545s ago: executing program 0 (id=461): r0 = userfaultfd(0x80001) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8000000000000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[], 0x8) 47.756553681s ago: executing program 0 (id=464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) futex(&(0x7f0000000000)=0x1, 0x5, 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x1) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x1a) sendfile(r2, r2, 0x0, 0x102) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) 44.543272461s ago: executing program 42 (id=464): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) futex(&(0x7f0000000000)=0x1, 0x5, 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x1) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x1a) sendfile(r2, r2, 0x0, 0x102) sched_setscheduler(0x0, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000440)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) 18.56002151s ago: executing program 8 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x258, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x258, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r11, @ANYBLOB="29c7a21b8ef872ee376c124dde67ee059c186189134fd2bf5521fd91ddc8248b39287abb33261280787e92cec28f6490d45b09104ff98ea57ea1ed5ccc9f0b9c1247a94299b248bfb9660ca192f8188b42c5fe8760c60c68592043"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYRES64=r2, @ANYRES64=r8, @ANYRES16=r2, @ANYRES8, @ANYRESOCT=r9, @ANYBLOB="68afffcdfac12a89846869fae2c570f47fb60e055c7ce2f1554a2ceba39a6a3526d3c29f1143792c6d4e99a103701876573b1a50117604000655044c2f179818edbfecb5d38bbaad8ab9abdd8e85358c8ccc56c74a457117ecaf9d1c3d05ceb1bf20485a4793c4901c851107fbffc28933740d34a306b5bca7fe85ccec4dadd79ee7fb1009ff95a23f9412db975f44994b44393c9f6267236720d608f76a977e653821", @ANYRESOCT=r9, @ANYRES8], 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x70bd2b, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 18.228724292s ago: executing program 5 (id=465): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 17.558217785s ago: executing program 5 (id=523): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0xb, 0x0, &(0x7f00000000c0)) 13.239017911s ago: executing program 5 (id=536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r4}, 0x20) recvmmsg(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) 6.953568775s ago: executing program 5 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xfff) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000000400000007"], 0x48) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) lsetxattr(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000280)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000340)='sched_switch\x00', 0xd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) mount$overlay(0x0, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unshare(0x64000600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) 5.351838359s ago: executing program 6 (id=546): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 4.730829223s ago: executing program 4 (id=547): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) 4.518529394s ago: executing program 8 (id=548): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x200, 0x6, 0x9, 0xe}, 0x31, [0x6, 0xbd9ccdb, 0x2, 0x8, 0x5, 0x0, 0x8, 0x1, 0x9, 0x9c, 0xd, 0xaf3b, 0x0, 0x3ff, 0x7fff, 0x1, 0x7, 0x9de, 0xab, 0x2, 0x3, 0x7, 0x7, 0x0, 0x4a1f, 0x10001, 0x6, 0x1, 0xe, 0xfffffff8, 0x75, 0xf9, 0x401, 0x6, 0x1, 0x382, 0x6, 0xffff8000, 0x5, 0x0, 0xfffffff8, 0x2, 0xfff, 0x9b, 0xd, 0x9, 0x7ff, 0x7fff, 0x67b, 0xaea1, 0x24, 0xc, 0x10, 0x4, 0x5, 0x8, 0x847, 0x9, 0x4d, 0x2, 0x5, 0x8, 0x8001, 0x8], [0x5, 0xfffffffe, 0x8, 0xeb6, 0xffff, 0x2, 0x3, 0x0, 0x3889, 0x7, 0x0, 0x2, 0xe33a, 0x8f7, 0x2, 0x5, 0xfffffff8, 0x1, 0x7ff, 0x8, 0x5, 0x40, 0xfef3, 0x3, 0x0, 0x4, 0x6, 0xfffffff9, 0x0, 0x850, 0x4, 0x3, 0x5, 0xffffffff, 0xe6, 0x9, 0x7, 0x2abd, 0x0, 0x3, 0xfffffffb, 0xbe63, 0x800, 0x1, 0xb9b, 0x743d9649, 0x9c, 0x6, 0x3f12, 0x10000, 0xfff, 0x6, 0xfff00000, 0x2, 0x800, 0x0, 0x1, 0xffff, 0xff, 0x2, 0xfffffffa, 0x928, 0xb, 0xa], [0x6, 0x400, 0x2, 0x80, 0x3, 0x2, 0x400, 0xd, 0xc6a, 0x4, 0x1000, 0x7, 0x1, 0x8, 0x1, 0x8, 0x4, 0x0, 0x3, 0x5, 0x7ae, 0x2, 0xffffffff, 0x3, 0xfff, 0x2, 0xffffffff, 0x7fffffff, 0x7, 0x9, 0x9, 0x0, 0x53, 0xd, 0x10e, 0xfff, 0x401, 0x2, 0x5, 0x3cfe, 0x8, 0x6, 0x2, 0x1, 0x200, 0x693, 0x0, 0x10000, 0x5, 0x8, 0xc55a, 0x5, 0x1, 0x7, 0x0, 0x9, 0x6, 0x2e, 0x8, 0x100000, 0x9f, 0x1, 0x6, 0x7], [0x2, 0x34c, 0xa35, 0x7f, 0x8, 0x100, 0x2, 0x6, 0xffffff00, 0xa1f6, 0x8, 0x7f, 0x2, 0x4, 0xee9, 0x7fff, 0x1, 0x92, 0x0, 0xf04a, 0x2, 0x81, 0x4, 0xa28, 0x0, 0x8, 0x5, 0xd55, 0x5, 0x5, 0x3, 0x8000, 0x626c0a2, 0x81, 0x3, 0x8001, 0x5, 0x5, 0x2, 0xf9e8, 0x101, 0x9, 0x2, 0x905, 0xfffffff9, 0x1ff, 0x1a400000, 0xb, 0x71, 0x9, 0x916a, 0x23, 0xd295, 0x3, 0x8000, 0x0, 0x6, 0x20000000, 0x2, 0x9, 0x0, 0x8, 0x101, 0x3]}, 0x45c) 4.331883351s ago: executing program 6 (id=549): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001fb40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="cf0400000000ffdbdf251300000008000300", @ANYRES32=r2, @ANYBLOB="040013000a000600ffffffffffff0000060010008005000006001200000000000500c2007b00000005000a0002000000"], 0x4c}}, 0x0) 4.080745482s ago: executing program 4 (id=550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f614d2a6093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x102004, 0x0, 0x1, 0x0, &(0x7f0000000040)) 4.058706772s ago: executing program 8 (id=551): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nonumtail=0,iocharset=cp950,umask=00000000000000000000000,uni_xlate=1,uni_xlate=1,shortname=win95,utf8=0,shortname=win95,utf8=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c696f636861727365743d6d616363726f617469616e2c696f636861727365743d63703433372c757365667265652c726f6469722c7569643e74353a7bd912f41b207e4bc4478b479f5a21373fd412d72f65702b57308921a665e19ef4cc41aac5e7c09d211fd4c1fbf43833c769c6b16297c14d0d92df4f0371acd1b184d6", @ANYRES16=0x0, @ANYRES16], 0x6, 0x2aa, &(0x7f0000000500)="$eJzs3T1re1UYAPDnpulN1CEZnETwgg5Ope3qkiItFDMpGdRBi21BmiC0UPAFYydXF0c/gSC4+SVc/AQKrqKbHQpX7s29Jq1paqSx/5ffb+nTc89zznNODy0d7sn7L45ODrM4vvjsl2i3k2j0oheXSXSjEbUv4preVwEAPM4u8zz+yCeWyUsior26sgCAFVr67//3Ky8JAFixt95+542dfn/3zSxrx97oy/NB8Z998XXyfOc4PoxhHMVmdOIqIv/bJN7L83zczArdeGU0Ph8UmaP3fqzG3/ktoszfik50y6br+fv93a1sYiZ/XNTxbDV/r8jfjk48P2f+/f7u9pz8GKTx6ssz9W9EJ376ID6KYRyWRUzzP9/Kstfzr//89N2ivCI/GZ8PWmW/qXzt5t61Vv/jAQAAAAAAAAAAAAAAAAAAAADgCbVR3Z3TivL+nqKpun9n7ar4Zj2yWvf6/TyT/KQeaOZ+oDTyfJzHN/X9OptZluVVx2l+M15oRvNhVg0AAAAAAAAAAAAAAAAAAACPlrOPPzk5GA6PTu8lqG8DqF/r/6/j9GZaXorFnVvTuRpVuGDkWKv7JBG3lZEU21Is4p625a7gmdtq/va7ZQds391nfdH+3E9Qn66Tg2T+HraibmnXh+SH2T5plMHPv981V3rbo3yp45fOfdRZeu3pc2UwXtAnkkWFvfbrZOeqluTmKtJyV+emr1fBTPqNs7HUef7n74rEbR0AAAAAAAAAAAAAAAAAALBS05d+5zy8WJjayFsrKwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lfTz/9fIhhXyf+icxqnZw+8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4CfwUAAP//UZdgPQ==") r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 3.748379825s ago: executing program 6 (id=552): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRES16], 0xfd, 0x296, &(0x7f0000001080)="$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") r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = socket$unix(0x1, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) 3.72448883s ago: executing program 2 (id=553): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 2.921461158s ago: executing program 2 (id=554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x14080, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) 2.667715931s ago: executing program 8 (id=555): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001980)="d527cf11805d55533beee663b219fc6742ceda12c4ba069e5d711c602617720ced4aeef3c627ec8ad698db10e3f3dbd3712fbe8eb20ba74f94971ff02659784db4600a1b79ec37b13575abaf52a8afe4"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 2.454011878s ago: executing program 6 (id=556): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000040)='./file1\x00', 0x2000008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x43, 0xc37, &(0x7f0000000c80)="$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") r0 = creat(&(0x7f0000003180)='./file1\x00', 0x51) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r0, 0x81fd) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0xa00}]) 2.133091111s ago: executing program 2 (id=557): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r2, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0xfff8, 0x3, 0x2, 0x7fffffff}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000140)=0xfffffdfb) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, "dce4f0020100000000001b347d5c00010200"}) 2.109752421s ago: executing program 8 (id=558): gettid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000008780)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000003380)=ANY=[], 0x18c6) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000380)={&(0x7f00000002c0)=""/130, 0x1, 0x82}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@nojournal_checksum}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$eJzs3MtvG0UYAPBv105LXyRU5dEHECiIikfSpKX0wAUEEgeQkOBQjiFJq1K3QU2QaFVBQKgcUSXuiCMSfwEnuCDghMQV7qhShXJp4WS09m5iO3aauE5c8O8nrTuzO9bM592xZ3a6CWBgjWYvScTuiPg9Iobr2eYCo/V/bi1dmf576cp0EtXqW38ltXI3l65MF0WL9+0qMuWI9LMkDrapd/7S5XNTlcrsxTw/vnD+/fH5S5efO3t+6szsmdkLkydPHj828cKJyed7EmcW180DH80d2v/aO9femD517d2fv02K+Fvi6JHRtQ4+Wa32uLr+2tOQTsp9bAgbUqp30xiq9f/hKMXKyRuOVz/ta+OATVWtVqsPdD68WAX+x5LodwuA/ih+6LP5b7Ft0dDjrnDjpfoEKIv7Vr7Vj5QjzcsMtcxve2k0Ik4t/vNVtsXm3IcAAGjyfTb+ebbd+C+NxvtC9+ZrKCMRcV9E7I2IExGxLyLuj6iVfTAiHtpg/a2LJKvHP+n1rgJbp2z892K+ttU8/itGfzFSynN7avEPJafPVmaP5p/JkRjanuUn1qjjh1d++6LTscbxX7Zl9Rdjwbwd18vbm98zM7UwdScxN7rxScSBcrv4k+WVgCQi9kfEgS7rOPv0N4c6Hbt9/GvowTpT9euIp+rnfzFa4i8ka69Pjt8Tldmj48VVsdovv159s1P9dxR/D2Tnf2fb6385/pGkcb12fuN1XP3j845zmm6v/23J2037PpxaWLg4EbEteb3e6JX9pYuTLeUmV8pn8R853L7/742VT+JgRGQX8cMR8UhEPJq3/bGIeDwiDq8R/08vP/Fe9/Fvriz+mQ2d/5XEtmjd0z5ROvfjd02Vjmwk/uz8H6+ljuR71vP9t552dXc1AwAAwH9PGhG7I0nHltNpOjZW/z/8+2JnWpmbX3jm9NwHF2bqzwiMxFBa3OkabrgfOpFP64v8ZEv+WH7f+MvSjlp+bHquMtPv4GHA7erQ/zN/lvrdOmDTdbeOlva8HcDW87wmDC79HwaX/g+Dq03/39GPdgBbr93v/8d9aAew9coNr/nfBAMGhPk/DC79HwaX/g8DaX5H3P4heQmJVYlI74pmSGxSot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xbwAAAP//1Xjmag==") chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') 1.873437879s ago: executing program 4 (id=559): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 1.753031373s ago: executing program 5 (id=560): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) 1.364171582s ago: executing program 2 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000202010200000000000000000a0000003c0002802c0001"], 0x50}}, 0x0) 1.217837004s ago: executing program 4 (id=562): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x7, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x2401, 0x2, 0x1, 0x0, 0xff, 0x63, 0x4, 0x3, 0x0, 0xfffffffe, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x93de, 0x6, 0xfffffffe, 0x8001, 0x0, 0x10003, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfa, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x2, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0x0, 0x6, 0x8, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0xfffffffe, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x401, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x0, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x1, 0x5, 0x2, 0x0, 0x1, 0x2, 0x3, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0xc, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x3, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0x7, 0x34ea, 0xc, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x5, 0x73, 0x1, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x2, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x4, 0x4, 0x101, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x3, 0x9, 0x5, 0xffffffff, 0xbe, 0x4fe, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x7, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x9, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x9, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc90, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0x100fff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x100, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x0, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfbf, 0xfe, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x8, 0x4000001, 0xd, 0x9, 0x8, 0xfffffe01, 0x1, 0x6, 0x0, 0x7, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x6, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8, 0xe, 0x0, 0x402, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x0, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x902, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x3, 0xb, 0x382d, 0x9, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x4000009, 0x3, 0x7, 0x80000008, 0x8, 0x4000, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x5, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xf90, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbf8, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x6, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x9, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x2, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x7, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0x1000000e, 0x40000005, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xa2ab, 0xf28c, 0x30, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x2, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x3, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0xab, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x99, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x811a, 0x3, 0x72, 0x80, 0x1000, 0x5, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x5, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x9, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x5, 0x10, 0x5, 0x200, 0x7fff, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x3, 0x200, 0xe9ab, 0xfffffff8, 0x51, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x3, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) socket$nl_route(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000002300), 0x800, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.129336981s ago: executing program 5 (id=563): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) syz_usbip_server_init(0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x20, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) umount2(0x0, 0x7) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 1.120877972s ago: executing program 6 (id=564): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 717.175771ms ago: executing program 4 (id=565): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x1, 0x4d7, &(0x7f0000002f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x101042, 0x100) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ftruncate(r0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0x22, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c5}, 0x40080) 701.755795ms ago: executing program 2 (id=566): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2009, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x800, 0x0, 'syz1\x00'}, 0x0, [0xfffffffffffffe00, 0xfffffffffffffffd, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x77d, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffff6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2000000000, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8]}) bind$alg(r0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000700)={0x60000010}) syz_genetlink_get_family_id$nl80211(0x0, r2) 627.562292ms ago: executing program 8 (id=567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7ffff004) 457.003757ms ago: executing program 6 (id=568): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./file1\x00', 0x4d06, &(0x7f0000000180)=ANY=[], 0x1, 0x688, &(0x7f0000001340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fadvise64(r0, 0x9, 0x0, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 240.695829ms ago: executing program 2 (id=569): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x102004, 0x0, 0x1, 0x0, &(0x7f0000000040)) 0s ago: executing program 4 (id=570): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r3}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000200)=0x400a45) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x3], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Quota mode: none. [ 320.609396][ T6574] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.612662][ T4176] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.689524][ T6574] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 320.742644][ T6574] EXT4-fs (loop1): Remounting filesystem read-only [ 320.995678][ T4176] bridge_slave_1: left allmulticast mode [ 321.002272][ T4176] bridge_slave_1: left promiscuous mode [ 321.008879][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.042970][ T4176] bridge_slave_0: left allmulticast mode [ 321.048837][ T4176] bridge_slave_0: left promiscuous mode [ 321.055930][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.109963][ T5884] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 321.263741][ T5884] usb 2-1: device descriptor read/64, error -71 [ 321.510800][ T5884] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 321.552972][ T4176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.607645][ T4176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.632821][ T4176] bond0 (unregistering): Released all slaves [ 321.679942][ T5884] usb 2-1: device descriptor read/64, error -71 [ 321.801036][ T5884] usb usb2-port1: attempt power cycle [ 322.097971][ T4176] hsr_slave_0: left promiscuous mode [ 322.130485][ T4176] hsr_slave_1: left promiscuous mode [ 322.138518][ T4176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.147034][ T4176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.190209][ T5884] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 322.204323][ T4176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.212146][ T4176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.255540][ T5884] usb 2-1: device descriptor read/8, error -71 [ 322.310573][ T4176] veth1_macvtap: left promiscuous mode [ 322.316330][ T4176] veth0_macvtap: left promiscuous mode [ 322.328132][ T4176] veth1_vlan: left promiscuous mode [ 322.333873][ T4176] veth0_vlan: left promiscuous mode [ 322.521600][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 322.571883][ T5884] usb 2-1: device descriptor read/8, error -71 [ 322.697750][ T5884] usb usb2-port1: unable to enumerate USB device [ 322.923394][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.118876][ T4176] team0 (unregistering): Port device team_slave_1 removed [ 323.263249][ T4176] team0 (unregistering): Port device team_slave_0 removed [ 323.574356][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.577866][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.205'. [ 323.603374][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.621074][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.652330][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.696239][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.792873][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.191176][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 325.693636][ T6590] chnl_net:caif_netlink_parms(): no params data found [ 325.881938][ T5811] Bluetooth: hci1: command tx timeout [ 325.952240][ T6612] loop2: detected capacity change from 0 to 128 [ 326.506527][ T6617] loop1: detected capacity change from 0 to 512 [ 326.567671][ T6617] EXT4-fs: Ignoring removed oldalloc option [ 326.588816][ T6617] EXT4-fs (loop1): blocks per group (4096) and clusters per group (2304) inconsistent [ 326.832539][ T6590] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.840256][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.847857][ T6590] bridge_slave_0: entered allmulticast mode [ 326.857243][ T6590] bridge_slave_0: entered promiscuous mode [ 326.871967][ T6621] loop0: detected capacity change from 0 to 2048 [ 326.938114][ T6621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.942578][ T6590] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.954850][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.962567][ T6590] bridge_slave_1: entered allmulticast mode [ 326.971841][ T6590] bridge_slave_1: entered promiscuous mode [ 327.209708][ T6590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.262142][ T6590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.505949][ T6590] team0: Port device team_slave_0 added [ 327.581300][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 327.720142][ T6630] hsr_slave_1 (unregistering): left promiscuous mode [ 327.788030][ T6590] team0: Port device team_slave_1 added [ 327.926972][ T5884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 327.955938][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.963553][ T5811] Bluetooth: hci1: command tx timeout [ 327.970939][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.997406][ T6590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.054856][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.062277][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.089859][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 328.100962][ T5884] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 328.101101][ T5884] usb 1-1: config 0 has no interface number 0 [ 328.114491][ T5884] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 328.121108][ T6590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.130074][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.149045][ T5884] usb 1-1: Product: syz [ 328.153570][ T5884] usb 1-1: Manufacturer: syz [ 328.161553][ T5884] usb 1-1: SerialNumber: syz [ 328.190297][ T5884] usb 1-1: config 0 descriptor?? [ 328.242849][ T5884] smsc95xx v2.0.0 [ 328.421725][ T6590] hsr_slave_0: entered promiscuous mode [ 328.432679][ T6590] hsr_slave_1: entered promiscuous mode [ 328.441370][ T6590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.449249][ T6590] Cannot create hsr debugfs directory [ 328.671936][ T5884] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 328.683243][ T5884] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 328.902399][ T5884] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 328.914535][ T5884] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 328.967556][ T5884] usb 1-1: USB disconnect, device number 2 [ 329.087310][ T6645] input: syz0 as /devices/virtual/input/input6 [ 329.123438][ T6646] loop2: detected capacity change from 0 to 128 [ 329.786645][ T6590] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 329.841774][ T6590] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 329.961241][ T6590] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 330.031367][ T6590] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 330.040141][ T5811] Bluetooth: hci1: command tx timeout [ 330.237854][ T6657] loop2: detected capacity change from 0 to 2048 [ 330.349352][ T6657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.547560][ T6657] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 330.606603][ T6657] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 330.621847][ T6657] EXT4-fs (loop2): This should not happen!! Data will be lost [ 330.621847][ T6657] [ 330.632504][ T6657] EXT4-fs (loop2): Total free blocks count 0 [ 330.638813][ T6657] EXT4-fs (loop2): Free/Dirty block details [ 330.645127][ T6657] EXT4-fs (loop2): free_blocks=66060288 [ 330.651234][ T6657] EXT4-fs (loop2): dirty_blocks=64 [ 330.656565][ T6657] EXT4-fs (loop2): Block reservation details [ 330.662978][ T6657] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 330.740074][ T6590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.802109][ T6590] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.875445][ T4899] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.882931][ T4899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.975971][ T4899] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.983543][ T4899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.437615][ T4270] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 332.140095][ T5811] Bluetooth: hci1: command tx timeout [ 332.740940][ T6590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.171166][ T5884] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 333.361881][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 333.425811][ T5884] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 333.435379][ T5884] usb 3-1: config 1 has no interface number 1 [ 333.441874][ T5884] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 333.451234][ T5884] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.546349][ T5884] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.555904][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.564376][ T5884] usb 3-1: Product: syz [ 333.568793][ T5884] usb 3-1: Manufacturer: syz [ 333.573709][ T5884] usb 3-1: SerialNumber: syz [ 333.869448][ T5884] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 333.936215][ T5884] usb 3-1: USB disconnect, device number 3 [ 334.291240][ T6705] loop5: detected capacity change from 0 to 8 [ 334.756005][ T6590] veth0_vlan: entered promiscuous mode [ 334.873528][ T6590] veth1_vlan: entered promiscuous mode [ 335.128782][ T6590] veth0_macvtap: entered promiscuous mode [ 335.183561][ T6590] veth1_macvtap: entered promiscuous mode [ 335.304258][ T6715] loop2: detected capacity change from 0 to 512 [ 335.344167][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.413345][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.489517][ T6715] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.241: attempt to clear invalid blocks 1 len 1 [ 335.557892][ T6590] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.569145][ T6590] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.579476][ T6590] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.589109][ T6590] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.626378][ T6715] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.241: bg 0: block 343: padding at end of block bitmap is not set [ 335.690101][ T6715] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 335.753219][ T6715] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.241: invalid indirect mapped block 1819239214 (level 0) [ 335.846061][ T6715] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.241: invalid indirect mapped block 1819239214 (level 1) [ 335.971825][ T6715] EXT4-fs (loop2): 1 truncate cleaned up [ 335.980021][ T6715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.615494][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.365313][ T6752] syz_tun: entered allmulticast mode [ 338.796399][ T6750] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 338.814341][ T6749] syz_tun: left allmulticast mode [ 342.350542][ T6745] Set syz1 is full, maxelem 65536 reached [ 343.727320][ T6767] binder: BINDER_SET_CONTEXT_MGR already set [ 343.734889][ T6767] binder: 6766:6767 ioctl 4018620d 80000040 returned -16 [ 344.606248][ T6777] ALSA: seq fatal error: cannot create timer (-19) [ 344.996984][ T30] audit: type=1326 audit(1751011004.643:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.1.257" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7fc00000 [ 345.088921][ T6785] loop5: detected capacity change from 0 to 512 [ 345.202975][ T6785] EXT4-fs: Ignoring removed oldalloc option [ 345.406974][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.415259][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.467977][ T6785] EXT4-fs (loop5): 1 truncate cleaned up [ 345.475621][ T6785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.569295][ T6785] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz.5.258: invalid fast symlink length 39 [ 345.582769][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.591024][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.650517][ T6785] EXT4-fs (loop5): Remounting filesystem read-only [ 345.876777][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.270891][ T5783] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 347.356159][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.362978][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.599991][ T5783] usb 7-1: Using ep0 maxpacket: 32 [ 348.121135][ T5783] usb 7-1: config 0 has no interfaces? [ 348.207171][ T5783] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 348.216936][ T5783] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 348.227997][ T5783] usb 7-1: Product: syz [ 348.233175][ T5783] usb 7-1: Manufacturer: syz [ 348.238007][ T5783] usb 7-1: SerialNumber: syz [ 348.845592][ T5783] usb 7-1: config 0 descriptor?? [ 354.450032][ T5808] Bluetooth: hci4: command 0x0406 tx timeout [ 354.456324][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 354.560883][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 355.232522][ T6802] Set syz1 is full, maxelem 65536 reached [ 355.312406][ T5884] usb 7-1: USB disconnect, device number 2 [ 357.937939][ T6794] Set syz1 is full, maxelem 65536 reached [ 358.404598][ T5884] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 358.439887][ T6818] loop6: detected capacity change from 0 to 1024 [ 358.458683][ T6818] EXT4-fs: Ignoring removed nomblk_io_submit option [ 358.480602][ T5884] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.500333][ T6818] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 358.573923][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.591689][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.625827][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.667654][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.720620][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.891109][ T6818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.924517][ T6590] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.109452][ T6836] loop2: detected capacity change from 0 to 2048 [ 360.240012][ T6836] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.480828][ T6821] chnl_net:caif_netlink_parms(): no params data found [ 360.593680][ T6842] loop6: detected capacity change from 0 to 8 [ 360.725721][ T6842] SQUASHFS error: lzo decompression failed, data probably corrupt [ 360.734289][ T6842] SQUASHFS error: Failed to read block 0x28d: -5 [ 360.741001][ T6842] SQUASHFS error: Unable to read metadata cache entry [28b] [ 360.748582][ T6842] SQUASHFS error: Unable to read inode 0x11f [ 360.843861][ T5090] Bluetooth: hci5: command tx timeout [ 360.938824][ T6842] loop6: detected capacity change from 0 to 256 [ 361.083083][ T6842] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 361.145766][ T6842] exFAT-fs (loop6): start_clu is invalid cluster(0x0) [ 361.201606][ T6847] loop1: detected capacity change from 0 to 2048 [ 361.480948][ T6847] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.761287][ T5090] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 361.787381][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.795709][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.803343][ T6821] bridge_slave_0: entered allmulticast mode [ 361.811642][ T6821] bridge_slave_0: entered promiscuous mode [ 361.836014][ T6854] loop5: detected capacity change from 0 to 256 [ 361.971886][ T6854] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.983051][ T6854] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 362.343212][ T6854] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 362.523024][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.530988][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.538737][ T6821] bridge_slave_1: entered allmulticast mode [ 362.548168][ T6821] bridge_slave_1: entered promiscuous mode [ 363.399983][ T5090] Bluetooth: hci5: command tx timeout [ 363.449892][ T5783] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 363.501902][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.528339][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.010103][ T5783] usb 3-1: Using ep0 maxpacket: 32 [ 364.132682][ T5783] usb 3-1: config 0 has no interfaces? [ 364.169937][ T6860] loop1: detected capacity change from 0 to 512 [ 364.192488][ T5783] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 364.204362][ T5783] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 364.213939][ T5783] usb 3-1: Product: syz [ 364.218376][ T5783] usb 3-1: Manufacturer: syz [ 364.223279][ T5783] usb 3-1: SerialNumber: syz [ 364.299249][ T6821] team0: Port device team_slave_0 added [ 364.682532][ T5783] usb 3-1: config 0 descriptor?? [ 364.973306][ T6821] team0: Port device team_slave_1 added [ 366.101183][ T5090] Bluetooth: hci5: command tx timeout [ 366.112406][ T5090] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 366.121217][ T5090] Bluetooth: hci2: Injecting HCI hardware error event [ 366.136593][ T5090] Bluetooth: hci2: hardware error 0x00 [ 366.169457][ T6868] loop5: detected capacity change from 0 to 128 [ 366.239007][ T6860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.256716][ T6860] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 366.287265][ T6868] loop5: detected capacity change from 0 to 8 [ 366.550194][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.562188][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.590141][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.718040][ T6866] SQUASHFS error: zstd decompression error: 10 [ 366.724701][ T6866] SQUASHFS error: zstd decompression failed, data probably corrupt [ 366.733075][ T6866] SQUASHFS error: Failed to read block 0x62b: -5 [ 366.739894][ T6866] SQUASHFS error: Unable to read metadata cache entry [629] [ 366.747381][ T6866] SQUASHFS error: Unable to read directory block [629:ff26] [ 366.778734][ T30] audit: type=1326 audit(1751011026.313:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 366.801238][ T30] audit: type=1326 audit(1751011026.423:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 367.112126][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.119294][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.145925][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.241013][ T30] audit: type=1326 audit(1751011026.683:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 367.263378][ T30] audit: type=1326 audit(1751011026.693:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 367.289158][ T30] audit: type=1326 audit(1751011026.743:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 367.312763][ T30] audit: type=1326 audit(1751011026.743:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 367.335173][ T30] audit: type=1326 audit(1751011026.763:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 367.357489][ T30] audit: type=1326 audit(1751011026.823:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 367.383667][ T30] audit: type=1326 audit(1751011026.823:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 367.407140][ T30] audit: type=1326 audit(1751011026.853:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6859 comm="syz.1.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa6539 code=0x7ffc0000 [ 367.567401][ T6860] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.283: iget: bad i_size value: 2533274857506816 [ 367.733735][ T6870] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.283: iget: bad i_size value: 2533274857506816 [ 368.161684][ T6850] Set syz1 is full, maxelem 65536 reached [ 368.272815][ T5811] Bluetooth: hci5: command tx timeout [ 368.522876][ T6821] hsr_slave_0: entered promiscuous mode [ 368.535627][ T6821] hsr_slave_1: entered promiscuous mode [ 368.546200][ T6821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.554337][ T6821] Cannot create hsr debugfs directory [ 368.695311][ T5090] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 368.784490][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.323909][ T5783] usb 3-1: can't set config #0, error -71 [ 369.336774][ T5783] usb 3-1: USB disconnect, device number 4 [ 369.687073][ T6877] loop1: detected capacity change from 0 to 1024 [ 369.868057][ T6883] loop2: detected capacity change from 0 to 128 [ 370.050141][ T6821] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 370.090426][ T6821] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 370.111373][ T6821] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 370.112447][ T6883] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 370.218295][ T6883] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 370.239813][ T6821] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 370.586088][ T6889] fuse: Bad value for 'fd' [ 370.669423][ T6889] loop5: detected capacity change from 0 to 512 [ 370.787659][ T5800] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.934656][ T6889] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.292: invalid indirect mapped block 1024 (level 0) [ 371.010298][ T6889] EXT4-fs (loop5): Remounting filesystem read-only [ 371.048152][ T6889] EXT4-fs (loop5): 1 truncate cleaned up [ 371.056652][ T6889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.087730][ T5090] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 371.571533][ T6055] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.649374][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.889532][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.967229][ T4106] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.975214][ T4106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.153831][ T4106] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.161248][ T4106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.614070][ T6901] loop2: detected capacity change from 0 to 512 [ 372.765869][ T6901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.780095][ T6901] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.821334][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 372.821412][ T30] audit: type=1326 audit(1751011032.463:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 372.853502][ T30] audit: type=1326 audit(1751011032.463:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 373.204743][ T6901] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.297: iget: bad i_size value: 2533274857506816 [ 373.250144][ T30] audit: type=1326 audit(1751011032.663:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 373.272448][ T30] audit: type=1326 audit(1751011032.723:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 373.294739][ T30] audit: type=1326 audit(1751011032.723:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 373.318868][ T30] audit: type=1326 audit(1751011032.723:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 373.341637][ T30] audit: type=1326 audit(1751011032.723:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 373.363641][ T30] audit: type=1326 audit(1751011032.723:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 373.385739][ T30] audit: type=1326 audit(1751011032.723:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 373.407753][ T30] audit: type=1326 audit(1751011032.723:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.2.297" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 373.625559][ T6901] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.297: iget: bad i_size value: 2533274857506816 [ 374.265053][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.590915][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.160965][ T5090] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 375.169502][ T5090] Bluetooth: hci1: Injecting HCI hardware error event [ 375.177669][ T5090] Bluetooth: hci1: hardware error 0x00 [ 375.216623][ T6921] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.271828][ T5422] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 375.443532][ T5422] usb 3-1: Using ep0 maxpacket: 32 [ 375.449256][ T6921] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.513264][ T5422] usb 3-1: config 0 has no interfaces? [ 375.552693][ T5422] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 375.562692][ T5422] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 375.574244][ T5422] usb 3-1: Product: syz [ 375.578553][ T5422] usb 3-1: Manufacturer: syz [ 375.584242][ T5422] usb 3-1: SerialNumber: syz [ 375.687962][ T6921] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.700507][ T5422] usb 3-1: config 0 descriptor?? [ 375.903086][ T6921] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.917647][ T5422] usb 3-1: USB disconnect, device number 5 [ 375.931827][ T6923] netlink: 152 bytes leftover after parsing attributes in process `syz.2.300'. [ 376.253729][ T6921] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.287021][ T6921] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.317724][ T6921] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.347631][ T6921] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.249545][ T5090] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 377.300302][ T6821] veth0_vlan: entered promiscuous mode [ 377.362824][ T6821] veth1_vlan: entered promiscuous mode [ 377.629712][ T6821] veth0_macvtap: entered promiscuous mode [ 377.649113][ T6937] loop2: detected capacity change from 0 to 2048 [ 377.692143][ T6821] veth1_macvtap: entered promiscuous mode [ 377.862163][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.898384][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.928317][ T6821] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.937355][ T6821] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.946311][ T6821] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.955339][ T6821] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.997980][ T6937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.010706][ T6937] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.560242][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.490046][ T5422] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 379.686504][ T5422] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.734510][ T5422] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 379.744236][ T5422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.752633][ T5422] usb 3-1: Product: syz [ 379.756920][ T5422] usb 3-1: Manufacturer: syz [ 379.761826][ T5422] usb 3-1: SerialNumber: syz [ 381.041714][ T5422] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 381.048607][ T5422] cdc_ncm 3-1:1.0: setting tx_max = 52 [ 381.071012][ T5422] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 381.341171][ T5859] usb 3-1: USB disconnect, device number 6 [ 381.348872][ T5859] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 382.774357][ T6972] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.936499][ T6972] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.057903][ T6972] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.239157][ T6972] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.615457][ T6972] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.638505][ T6972] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.667737][ T6972] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.691594][ T6972] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.813912][ T3598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.822230][ T3598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.959837][ T5884] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 385.025285][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.033516][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.166305][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 385.189799][ T5884] usb 3-1: config 0 has no interfaces? [ 385.280875][ T5884] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 385.290421][ T5884] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 385.302940][ T5884] usb 3-1: Product: syz [ 385.307333][ T5884] usb 3-1: Manufacturer: syz [ 385.313743][ T5884] usb 3-1: SerialNumber: syz [ 385.416608][ T5884] usb 3-1: config 0 descriptor?? [ 385.535983][ T4051] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.639074][ T4051] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.719282][ T5859] usb 3-1: USB disconnect, device number 7 [ 385.757454][ T6980] netlink: 152 bytes leftover after parsing attributes in process `syz.2.315'. [ 385.884117][ T4051] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.067167][ T4051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.344055][ T6985] loop6: detected capacity change from 0 to 8192 [ 386.458046][ T6985] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 386.509777][ T4051] bridge_slave_1: left allmulticast mode [ 386.515669][ T4051] bridge_slave_1: left promiscuous mode [ 386.522501][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.588110][ T4051] bridge_slave_0: left allmulticast mode [ 386.594824][ T4051] bridge_slave_0: left promiscuous mode [ 386.601993][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.122774][ T4051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.200780][ T4051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.226063][ T4051] bond0 (unregistering): Released all slaves [ 387.611833][ T6996] loop5: detected capacity change from 0 to 8192 [ 387.829897][ T7001] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.120843][ T7001] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.286987][ T4051] hsr_slave_0: left promiscuous mode [ 388.295103][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.303015][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.332029][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.339950][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.448815][ T4051] veth1_macvtap: left promiscuous mode [ 388.454914][ T4051] veth0_macvtap: left promiscuous mode [ 388.460926][ T4051] veth1_vlan: left promiscuous mode [ 388.466476][ T4051] veth0_vlan: left promiscuous mode [ 388.951630][ T7017] loop2: detected capacity change from 0 to 512 [ 389.116623][ T7017] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 190 vs 220 free clusters [ 389.230934][ T7017] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.330: invalid indirect mapped block 1 (level 1) [ 389.265800][ T4051] team0 (unregistering): Port device team_slave_1 removed [ 389.323722][ T4051] team0 (unregistering): Port device team_slave_0 removed [ 389.571165][ T7017] EXT4-fs (loop2): 1 truncate cleaned up [ 389.579003][ T7017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.717673][ T7001] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.826179][ T7026] loop5: detected capacity change from 0 to 1024 [ 389.885007][ T7001] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.970264][ T5859] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 389.989898][ T5422] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 390.134083][ T5859] usb 2-1: Using ep0 maxpacket: 8 [ 390.168828][ T7001] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.195743][ T7001] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.225836][ T7001] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.252897][ T7001] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.287959][ T5859] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.300306][ T5422] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 390.311458][ T5422] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 390.361641][ T5422] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 390.371393][ T5422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 390.380090][ T5422] usb 3-1: SerialNumber: syz [ 390.389973][ T5859] usb 2-1: config 7 has an invalid interface number: 143 but max is 0 [ 390.398626][ T5859] usb 2-1: config 7 has no interface number 0 [ 390.405065][ T5859] usb 2-1: config 7 interface 143 has no altsetting 0 [ 390.477583][ T5859] usb 2-1: string descriptor 0 read error: -22 [ 390.484927][ T5859] usb 2-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=92.22 [ 390.494502][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.546019][ T5859] sierra 2-1:7.143: Sierra USB modem converter detected [ 390.640800][ T5422] usb 3-1: 0:2 : does not exist [ 390.726261][ T5422] usb 3-1: USB disconnect, device number 8 [ 390.750685][ T5859] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 390.838123][ T5859] usb 2-1: USB disconnect, device number 7 [ 390.901476][ T5859] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 390.913550][ T5859] sierra 2-1:7.143: device disconnected [ 391.353061][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.263926][ T7039] loop2: detected capacity change from 0 to 8192 [ 392.509856][ T7054] loop7: detected capacity change from 0 to 1024 [ 393.493770][ T4051] hfsplus: b-tree write err: -5, ino 4 [ 393.908789][ T7069] loop1: detected capacity change from 0 to 512 [ 394.011434][ T7069] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.350: corrupted in-inode xattr: invalid ea_ino [ 394.074320][ T7069] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.350: couldn't read orphan inode 15 (err -117) [ 394.158152][ T7069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.360973][ T5090] Bluetooth: hci0: command 0x0406 tx timeout [ 394.367410][ T7050] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 394.580836][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.784005][ T7079] sch_tbf: peakrate 5120 is lower than or equals to rate 1771610144121217544 ! [ 395.094922][ T3598] hfsplus: b-tree write err: -5, ino 4 [ 396.176540][ T7084] loop5: detected capacity change from 0 to 8192 [ 397.262909][ T7098] loop7: detected capacity change from 0 to 128 [ 397.298730][ T7098] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 397.347470][ T7098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 399.522851][ T7113] loop7: detected capacity change from 0 to 16 [ 399.582981][ T7113] erofs (device loop7): mounted with root inode @ nid 36. [ 399.646227][ T5090] erofs (device loop7): failed to decompress -26 in[46, 0] out[9000] [ 399.662388][ T7113] erofs (device loop7): failed to decompress -26 in[46, 4050] out[8192] [ 399.671652][ T7113] erofs (device loop7): read error -117 @ 0 of nid 89 [ 399.695768][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 399.695835][ T30] audit: type=1800 audit(1751011059.343:145): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.362" name="file2" dev="loop7" ino=89 res=0 errno=0 [ 401.519116][ T7117] loop7: detected capacity change from 0 to 8192 [ 402.903381][ T7124] warning: `syz.7.364' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 403.450625][ T7127] syz.7.366 uses obsolete (PF_INET,SOCK_PACKET) [ 404.706910][ T7133] loop1: detected capacity change from 0 to 2048 [ 404.810581][ T7133] EXT4-fs (loop1): failed to initialize system zone (-117) [ 404.834135][ T7133] EXT4-fs (loop1): mount failed [ 405.222977][ T7138] loop7: detected capacity change from 0 to 128 [ 405.261228][ T7138] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 405.335716][ T7138] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.878559][ T7150] loop1: detected capacity change from 0 to 8192 [ 408.700032][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.706821][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.777697][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 409.795579][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 409.822235][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 409.853081][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 409.888114][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.734788][ T7162] chnl_net:caif_netlink_parms(): no params data found [ 411.958696][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 411.966687][ T5811] Bluetooth: hci4: command tx timeout [ 411.973917][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 411.998088][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.011940][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 412.040982][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 413.232221][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.240362][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.247811][ T7162] bridge_slave_0: entered allmulticast mode [ 413.261784][ T7162] bridge_slave_0: entered promiscuous mode [ 413.276425][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.284048][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.292001][ T7162] bridge_slave_1: entered allmulticast mode [ 413.300717][ T7162] bridge_slave_1: entered promiscuous mode [ 413.714172][ T7162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.817605][ T7162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.039900][ T5811] Bluetooth: hci4: command tx timeout [ 414.120048][ T5811] Bluetooth: hci6: command tx timeout [ 414.267008][ T7162] team0: Port device team_slave_0 added [ 414.332766][ T7162] team0: Port device team_slave_1 added [ 414.561618][ T7177] chnl_net:caif_netlink_parms(): no params data found [ 414.592908][ T5090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 414.607482][ T5090] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 414.617216][ T5090] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 414.634768][ T5090] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 414.651159][ T5090] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 414.835276][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.842624][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.870097][ T7162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.218554][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.225801][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.252357][ T7162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.876627][ T7162] hsr_slave_0: entered promiscuous mode [ 415.885512][ T7162] hsr_slave_1: entered promiscuous mode [ 416.123302][ T5811] Bluetooth: hci4: command tx timeout [ 416.199876][ T5811] Bluetooth: hci6: command tx timeout [ 416.760598][ T5811] Bluetooth: hci7: command tx timeout [ 416.950990][ T7188] chnl_net:caif_netlink_parms(): no params data found [ 416.968320][ T7162] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 417.028846][ T7162] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 417.067449][ T7162] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 417.095251][ T7162] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 418.103278][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.115015][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.122618][ T7177] bridge_slave_0: entered allmulticast mode [ 418.131913][ T7177] bridge_slave_0: entered promiscuous mode [ 418.210584][ T5811] Bluetooth: hci4: command tx timeout [ 418.280895][ T5811] Bluetooth: hci6: command tx timeout [ 418.296074][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.303843][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.311529][ T7177] bridge_slave_1: entered allmulticast mode [ 418.320079][ T7177] bridge_slave_1: entered promiscuous mode [ 418.708960][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.731484][ T7162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.812413][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.850159][ T5811] Bluetooth: hci7: command tx timeout [ 418.878882][ T7162] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.117834][ T4106] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.125342][ T4106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.387497][ T4106] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.395044][ T4106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.432739][ T7177] team0: Port device team_slave_0 added [ 419.495082][ T7177] team0: Port device team_slave_1 added [ 420.199239][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.207972][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.238033][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.411945][ T5811] Bluetooth: hci6: command tx timeout [ 420.455937][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.464894][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.492248][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.804529][ T7177] hsr_slave_0: entered promiscuous mode [ 420.813283][ T7177] hsr_slave_1: entered promiscuous mode [ 420.821113][ T7177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.832022][ T7177] Cannot create hsr debugfs directory [ 420.940448][ T5811] Bluetooth: hci7: command tx timeout [ 421.377666][ T7188] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.385187][ T7188] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.392884][ T7188] bridge_slave_0: entered allmulticast mode [ 421.401411][ T7188] bridge_slave_0: entered promiscuous mode [ 421.548291][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.556022][ T7188] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.564299][ T7188] bridge_slave_1: entered allmulticast mode [ 421.572656][ T7188] bridge_slave_1: entered promiscuous mode [ 421.823276][ T7188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.943640][ T7188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.308371][ T7188] team0: Port device team_slave_0 added [ 422.400554][ T7188] team0: Port device team_slave_1 added [ 422.816461][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.824059][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.851054][ T7188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.964036][ T7177] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 423.012420][ T5811] Bluetooth: hci7: command tx timeout [ 423.055281][ T7177] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 423.124864][ T7188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.132272][ T7188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.158632][ T7188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.178573][ T7177] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 423.248934][ T7177] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 423.267415][ T7215] Driver unsupported XDP return value 0 on prog (id 76) dev N/A, expect packet loss! [ 423.381826][ T7162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.831950][ T7188] hsr_slave_0: entered promiscuous mode [ 423.840712][ T7188] hsr_slave_1: entered promiscuous mode [ 423.848430][ T7188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.856330][ T7188] Cannot create hsr debugfs directory [ 425.514595][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.100011][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.546650][ T4106] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.554083][ T4106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.605342][ T7188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 426.744137][ T7188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 426.789221][ T4106] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.796648][ T4106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.883760][ T7162] veth0_vlan: entered promiscuous mode [ 426.902072][ T7188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.016385][ T7188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.114145][ T7162] veth1_vlan: entered promiscuous mode [ 427.667794][ T7162] veth0_macvtap: entered promiscuous mode [ 428.065242][ T7162] veth1_macvtap: entered promiscuous mode [ 428.197606][ T4270] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.371924][ T4270] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.549357][ T4270] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.684009][ T4270] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.776672][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.951924][ T7162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.235235][ T7162] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.244508][ T7162] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.253574][ T7162] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.262660][ T7162] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.405703][ T4270] bridge_slave_1: left allmulticast mode [ 429.411627][ T4270] bridge_slave_1: left promiscuous mode [ 429.417815][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.463958][ T4270] bridge_slave_0: left allmulticast mode [ 429.470067][ T4270] bridge_slave_0: left promiscuous mode [ 429.476256][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.815879][ T5811] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 430.061612][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.112912][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.136523][ T4270] bond0 (unregistering): Released all slaves [ 430.256428][ T7188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.488394][ T7188] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.696361][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.703838][ T4176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.888426][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.895912][ T4176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.109465][ T4270] hsr_slave_0: left promiscuous mode [ 431.156000][ T4270] hsr_slave_1: left promiscuous mode [ 431.163914][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.174628][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.277846][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.285865][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.394630][ T4270] veth1_macvtap: left promiscuous mode [ 431.400605][ T4270] veth0_macvtap: left promiscuous mode [ 431.406345][ T4270] veth1_vlan: left promiscuous mode [ 431.411982][ T4270] veth0_vlan: left promiscuous mode [ 432.286397][ T7240] loop1: detected capacity change from 0 to 1024 [ 432.329006][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 432.362454][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 433.052437][ T7242] hfsplus: invalid extended attribute record [ 433.812868][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.442161][ T76] hfsplus: b-tree write err: -5, ino 4 [ 434.868079][ T4270] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.123096][ T4270] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.311146][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 435.325524][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 435.341623][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 435.376905][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 435.415660][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 435.517991][ T4270] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.862785][ T4270] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.489077][ T7188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.922322][ T4270] bridge_slave_1: left allmulticast mode [ 436.928219][ T4270] bridge_slave_1: left promiscuous mode [ 436.934927][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.023832][ T4270] bridge_slave_0: left allmulticast mode [ 437.029838][ T4270] bridge_slave_0: left promiscuous mode [ 437.036364][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.488985][ T5090] Bluetooth: hci0: command tx timeout [ 437.638786][ T7271] loop1: detected capacity change from 0 to 512 [ 437.670516][ T7271] EXT4-fs: Ignoring removed nobh option [ 437.862639][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.895463][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.911146][ T4270] bond0 (unregistering): Released all slaves [ 437.937206][ T7271] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 437.950069][ T7271] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 437.982632][ T7271] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.401: casefold flag without casefold feature [ 438.001401][ T7271] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.401: couldn't read orphan inode 13 (err -117) [ 438.089228][ T7271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.219214][ T7271] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 438.758467][ T7255] chnl_net:caif_netlink_parms(): no params data found [ 438.783109][ T7188] veth0_vlan: entered promiscuous mode [ 438.816167][ T5809] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.962473][ T4270] hsr_slave_0: left promiscuous mode [ 438.991283][ T4270] hsr_slave_1: left promiscuous mode [ 438.999520][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.007712][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.113588][ T4270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.121411][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.219109][ T4270] veth1_macvtap: left promiscuous mode [ 439.225059][ T4270] veth0_macvtap: left promiscuous mode [ 439.230945][ T4270] veth1_vlan: left promiscuous mode [ 439.236359][ T4270] veth0_vlan: left promiscuous mode [ 439.560048][ T5090] Bluetooth: hci0: command tx timeout [ 439.866209][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 439.961990][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 440.239402][ T7188] veth1_vlan: entered promiscuous mode [ 440.875274][ T7188] veth0_macvtap: entered promiscuous mode [ 440.937674][ T7177] veth0_vlan: entered promiscuous mode [ 440.983026][ T7188] veth1_macvtap: entered promiscuous mode [ 441.257540][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.426455][ T7188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.490234][ T7177] veth1_vlan: entered promiscuous mode [ 441.566085][ T7188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.576097][ T7188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.585259][ T7188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.594404][ T7188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.726589][ T5090] Bluetooth: hci0: command tx timeout [ 442.320591][ T7177] veth0_macvtap: entered promiscuous mode [ 442.689028][ T7293] loop1: detected capacity change from 0 to 1024 [ 442.758365][ T7177] veth1_macvtap: entered promiscuous mode [ 442.788336][ T7255] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.795891][ T7255] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.803453][ T7255] bridge_slave_0: entered allmulticast mode [ 442.811835][ T7255] bridge_slave_0: entered promiscuous mode [ 442.826469][ T7293] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 443.092946][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.102750][ T7255] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.112239][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.120379][ T7255] bridge_slave_1: entered allmulticast mode [ 443.128787][ T7255] bridge_slave_1: entered promiscuous mode [ 443.276138][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.561373][ T7177] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.570846][ T7177] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.579799][ T7177] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.588651][ T7177] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.788774][ T7255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.821532][ T5090] Bluetooth: hci0: command tx timeout [ 444.030921][ T7255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.663026][ T7255] team0: Port device team_slave_0 added [ 444.837872][ T7255] team0: Port device team_slave_1 added [ 445.288129][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.295362][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.323386][ T7255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.388375][ T7255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.395653][ T7255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.423619][ T7255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.446940][ T4270] bridge_slave_1: left promiscuous mode [ 445.454179][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.504151][ T4270] bridge_slave_0: left promiscuous mode [ 445.514857][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.836009][ T4270] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.854724][ T4270] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.873038][ T4270] bond0 (unregistering): Released all slaves [ 446.307822][ T7255] hsr_slave_0: entered promiscuous mode [ 446.316454][ T7255] hsr_slave_1: entered promiscuous mode [ 446.326101][ T7255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.334286][ T7255] Cannot create hsr debugfs directory [ 446.537031][ T4270] hsr_slave_0: left promiscuous mode [ 446.566066][ T4270] hsr_slave_1: left promiscuous mode [ 446.573326][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.611577][ T4270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.105621][ T4270] team0 (unregistering): Port device team_slave_1 removed [ 447.130208][ T4270] team0 (unregistering): Port device team_slave_0 removed [ 447.691296][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.699364][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.183136][ T4899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.191270][ T4899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.145712][ T7324] loop8: detected capacity change from 0 to 512 [ 450.158185][ T7324] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 450.214280][ T7324] EXT4-fs (loop8): 1 truncate cleaned up [ 450.223255][ T7324] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.642048][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 450.651882][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 450.669443][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 450.821761][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 450.871704][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 451.087260][ T7162] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.103970][ T7255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 451.132723][ T7255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 451.262972][ T7255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 451.355235][ T7255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 451.922594][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.409'. [ 452.081681][ T7344] netlink: 277 bytes leftover after parsing attributes in process `syz.8.409'. [ 452.091164][ T7344] netlink: 277 bytes leftover after parsing attributes in process `syz.8.409'. [ 452.357069][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 452.395988][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.404242][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.792464][ T4051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.800788][ T4051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.920289][ T5811] Bluetooth: hci1: command tx timeout [ 453.039482][ T7255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.257707][ T7255] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.362914][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.370527][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.507439][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.515035][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.111453][ T7361] binder: 7360:7361 ioctl 4018620d 0 returned -22 [ 454.178230][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.189292][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.197083][ T7331] bridge_slave_0: entered allmulticast mode [ 454.206790][ T7331] bridge_slave_0: entered promiscuous mode [ 454.342232][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.350393][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.357963][ T7331] bridge_slave_1: entered allmulticast mode [ 454.366637][ T7331] bridge_slave_1: entered promiscuous mode [ 454.822850][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.899677][ T3732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.907645][ T3732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.945164][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.006710][ T5811] Bluetooth: hci1: command tx timeout [ 455.134860][ T7331] team0: Port device team_slave_0 added [ 455.151354][ T4106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.159424][ T4106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.266638][ T7331] team0: Port device team_slave_1 added [ 455.537520][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.549305][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.579906][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.777359][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.784948][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.811371][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.413747][ T7331] hsr_slave_0: entered promiscuous mode [ 456.423915][ T7331] hsr_slave_1: entered promiscuous mode [ 456.431740][ T7331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.439416][ T7331] Cannot create hsr debugfs directory [ 456.477902][ T7255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.691861][ T7375] loop9: detected capacity change from 0 to 2048 [ 456.902771][ T7375] EXT4-fs (loop9): failed to initialize system zone (-117) [ 456.932722][ T7375] EXT4-fs (loop9): mount failed [ 457.080993][ T5811] Bluetooth: hci1: command tx timeout [ 457.770081][ T11] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 458.012522][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.023756][ T11] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.033841][ T11] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 458.047148][ T11] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 458.056452][ T11] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.369178][ T11] usb 9-1: config 0 descriptor?? [ 458.904538][ T11] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 458.977817][ T11] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 459.175578][ T5859] usb 9-1: USB disconnect, device number 2 [ 459.180706][ T5811] Bluetooth: hci1: command tx timeout [ 459.225270][ T7331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 459.271393][ T7331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 459.299114][ T7331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 459.340576][ T7331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 459.926566][ T7255] veth0_vlan: entered promiscuous mode [ 460.296483][ T7255] veth1_vlan: entered promiscuous mode [ 460.426291][ T4051] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.568153][ T4051] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.646091][ T4051] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.826964][ T4051] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.009416][ T7255] veth0_macvtap: entered promiscuous mode [ 461.126731][ T7255] veth1_macvtap: entered promiscuous mode [ 461.192028][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.419027][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.450276][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.533073][ T4051] bridge_slave_1: left allmulticast mode [ 461.539273][ T4051] bridge_slave_1: left promiscuous mode [ 461.546035][ T4051] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.689804][ T4051] bridge_slave_0: left allmulticast mode [ 461.695730][ T4051] bridge_slave_0: left promiscuous mode [ 461.702505][ T4051] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.163850][ T4051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.247752][ T4051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.276922][ T4051] bond0 (unregistering): Released all slaves [ 462.320742][ T7255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.388143][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.395752][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.418280][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.425903][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.470894][ T7255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.480103][ T7255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.489090][ T7255] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.498164][ T7255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.975878][ T11] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 463.260681][ T11] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 463.272724][ T11] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 463.286207][ T11] usb 10-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 463.295770][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.306570][ T4051] hsr_slave_0: left promiscuous mode [ 463.440417][ T4051] hsr_slave_1: left promiscuous mode [ 463.448248][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.456098][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.485005][ T7423] loop8: detected capacity change from 0 to 2048 [ 463.502908][ T11] usb 10-1: config 0 descriptor?? [ 463.512844][ T7417] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 463.545782][ T4051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.554097][ T4051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.748433][ T4051] veth1_macvtap: left promiscuous mode [ 463.757323][ T4051] veth0_macvtap: left promiscuous mode [ 463.763605][ T4051] veth1_vlan: left promiscuous mode [ 463.769149][ T4051] veth0_vlan: left promiscuous mode [ 463.808914][ T7423] EXT4-fs (loop8): failed to initialize system zone (-117) [ 463.866113][ T7423] EXT4-fs (loop8): mount failed [ 464.140876][ T11] logitech 0003:046D:CA04.0004: unbalanced delimiter at end of report description [ 464.161967][ T11] logitech 0003:046D:CA04.0004: parse failed [ 464.168338][ T11] logitech 0003:046D:CA04.0004: probe with driver logitech failed with error -22 [ 464.315185][ T5783] usb 10-1: USB disconnect, device number 2 [ 464.575866][ T4051] team0 (unregistering): Port device team_slave_1 removed [ 464.626964][ T4051] team0 (unregistering): Port device team_slave_0 removed [ 465.214127][ T7433] loop8: detected capacity change from 0 to 512 [ 465.300252][ T7433] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 465.539724][ T7433] EXT4-fs (loop8): 1 truncate cleaned up [ 465.547554][ T7433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.095823][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.369099][ T7162] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.640425][ T7331] veth0_vlan: entered promiscuous mode [ 466.712569][ T7331] veth1_vlan: entered promiscuous mode [ 467.103645][ T7331] veth0_macvtap: entered promiscuous mode [ 467.221405][ T7331] veth1_macvtap: entered promiscuous mode [ 467.383798][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.513420][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.717091][ T7331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.730719][ T7331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.741523][ T7331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.750691][ T7331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.001936][ T7483] loop8: detected capacity change from 0 to 2048 [ 470.094685][ T7483] EXT4-fs (loop8): failed to initialize system zone (-117) [ 470.113124][ T7483] EXT4-fs (loop8): mount failed [ 470.160105][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.166853][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.610908][ T4176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.619005][ T4176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.728573][ T7494] loop9: detected capacity change from 0 to 512 [ 470.747643][ T7494] EXT4-fs: Ignoring removed nobh option [ 470.857351][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.866341][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.920647][ T7494] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.440: iget: bad i_size value: 38620345925642 [ 471.001634][ T7494] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.440: couldn't read orphan inode 15 (err -117) [ 471.087302][ T7494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.527329][ T7504] loop4: detected capacity change from 0 to 1024 [ 471.792596][ T7496] loop8: detected capacity change from 0 to 8192 [ 471.973281][ T7177] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.303202][ T76] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.492898][ T7508] loop4: detected capacity change from 0 to 128 [ 472.508468][ T76] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.559944][ T7508] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 472.623773][ T7508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.723203][ T76] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.767922][ T30] audit: type=1800 audit(1751011132.423:146): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.443" name="file1" dev="loop4" ino=104 res=0 errno=0 [ 472.964944][ T76] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.431036][ T76] bridge_slave_1: left allmulticast mode [ 473.436945][ T76] bridge_slave_1: left promiscuous mode [ 473.444493][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.514350][ T76] bridge_slave_0: left allmulticast mode [ 473.520476][ T76] bridge_slave_0: left promiscuous mode [ 473.526999][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.949459][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.968297][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.001523][ T76] bond0 (unregistering): Released all slaves [ 474.317167][ T4106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.325461][ T4106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.507547][ T3732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.516073][ T3732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.557033][ T76] hsr_slave_0: left promiscuous mode [ 474.574653][ T76] hsr_slave_1: left promiscuous mode [ 474.582500][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.595201][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.625011][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.635674][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.669981][ T76] veth1_macvtap: left promiscuous mode [ 474.675624][ T76] veth0_macvtap: left promiscuous mode [ 474.681522][ T76] veth1_vlan: left promiscuous mode [ 474.686936][ T76] veth0_vlan: left promiscuous mode [ 475.329106][ T76] team0 (unregistering): Port device team_slave_1 removed [ 475.437032][ T76] team0 (unregistering): Port device team_slave_0 removed [ 476.628101][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 476.651383][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.662546][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.683612][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.722079][ T7522] loop4: detected capacity change from 0 to 2048 [ 476.751338][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.838250][ T7522] EXT4-fs (loop4): failed to initialize system zone (-117) [ 476.874963][ T7522] EXT4-fs (loop4): mount failed [ 477.567945][ T7530] loop8: detected capacity change from 0 to 256 [ 477.678635][ T7530] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 477.689152][ T7530] FAT-fs (loop8): Filesystem has been set read-only [ 477.696081][ T7530] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 477.706790][ T7530] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 477.783516][ T30] audit: type=1800 audit(1751011137.383:147): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.450" name="file1" dev="loop8" ino=1048671 res=0 errno=0 [ 478.146499][ T7523] chnl_net:caif_netlink_parms(): no params data found [ 478.241179][ T7530] syz.8.450 (7530) used greatest stack depth: 3792 bytes left [ 478.840429][ T5090] Bluetooth: hci2: command tx timeout [ 479.049113][ T7541] loop8: detected capacity change from 0 to 128 [ 479.174865][ T7541] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 479.280904][ T7541] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 479.751624][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.769484][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.779862][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.806829][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.828545][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 479.909175][ T7523] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.927002][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.935333][ T7523] bridge_slave_0: entered allmulticast mode [ 479.944946][ T7523] bridge_slave_0: entered promiscuous mode [ 480.006320][ T7162] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.007145][ T7523] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.029157][ T7523] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.037125][ T7523] bridge_slave_1: entered allmulticast mode [ 480.046491][ T7523] bridge_slave_1: entered promiscuous mode [ 480.584677][ T7523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.710112][ T7523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.756500][ T7550] loop8: detected capacity change from 0 to 8 [ 480.920053][ T5090] Bluetooth: hci2: command tx timeout [ 481.133279][ T7523] team0: Port device team_slave_0 added [ 481.222880][ T7523] team0: Port device team_slave_1 added [ 481.533957][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.541358][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.573290][ T7523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.715965][ T7523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.723575][ T7523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.750396][ T7523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.880372][ T5090] Bluetooth: hci3: command tx timeout [ 481.880729][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 482.094103][ T7556] loop0: detected capacity change from 0 to 2048 [ 482.185264][ T7556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 482.346328][ T7523] hsr_slave_0: entered promiscuous mode [ 482.355038][ T7523] hsr_slave_1: entered promiscuous mode [ 482.363805][ T7523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.375167][ T7523] Cannot create hsr debugfs directory [ 482.999951][ T5090] Bluetooth: hci2: command tx timeout [ 483.474471][ T7567] loop8: detected capacity change from 0 to 512 [ 483.526867][ T7567] EXT4-fs: Ignoring removed mblk_io_submit option [ 483.534150][ T7567] EXT4-fs: Ignoring removed mblk_io_submit option [ 483.650247][ T7567] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 483.780353][ T7567] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 483.789015][ T7567] System zones: 1-12 [ 483.923559][ T7567] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.459: corrupted in-inode xattr: e_value size too large [ 483.957906][ T7569] loop4: detected capacity change from 0 to 2048 [ 483.976656][ T5090] Bluetooth: hci3: command tx timeout [ 483.985199][ T7567] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.459: couldn't read orphan inode 15 (err -117) [ 484.032922][ T7567] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 484.033939][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.053175][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.061102][ T7546] bridge_slave_0: entered allmulticast mode [ 484.070523][ T7546] bridge_slave_0: entered promiscuous mode [ 484.089334][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.099847][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.107549][ T7546] bridge_slave_1: entered allmulticast mode [ 484.126007][ T7546] bridge_slave_1: entered promiscuous mode [ 484.154579][ T7569] EXT4-fs (loop4): failed to initialize system zone (-117) [ 484.191614][ T7569] EXT4-fs (loop4): mount failed [ 484.474323][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.506346][ T7162] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.603948][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.882222][ T7546] team0: Port device team_slave_0 added [ 484.960766][ T7546] team0: Port device team_slave_1 added [ 485.079907][ T5090] Bluetooth: hci2: command tx timeout [ 485.130135][ T7523] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.310088][ T7523] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.345540][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.355871][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.382902][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.407566][ T7523] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.434715][ T7523] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.526479][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.534664][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.564875][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.676592][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.723633][ T7576] loop4: detected capacity change from 0 to 4096 [ 485.843537][ T7576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.924800][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.049955][ T5090] Bluetooth: hci3: command tx timeout [ 486.118929][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.133749][ T30] audit: type=1800 audit(1751011145.773:148): pid=7576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.463" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 486.449830][ T7577] loop8: detected capacity change from 0 to 8192 [ 486.555919][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.656110][ T7546] hsr_slave_0: entered promiscuous mode [ 486.666216][ T7546] hsr_slave_1: entered promiscuous mode [ 486.681210][ T7546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.688972][ T7546] Cannot create hsr debugfs directory [ 486.954073][ T7255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.376285][ T76] bridge_slave_1: left allmulticast mode [ 487.383727][ T76] bridge_slave_1: left promiscuous mode [ 487.396096][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.535168][ T76] bridge_slave_0: left allmulticast mode [ 487.541202][ T76] bridge_slave_0: left promiscuous mode [ 487.547726][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.055838][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.099488][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.130230][ T5090] Bluetooth: hci3: command tx timeout [ 488.142044][ T76] bond0 (unregistering): Released all slaves [ 488.980272][ T76] hsr_slave_0: left promiscuous mode [ 489.023499][ T76] hsr_slave_1: left promiscuous mode [ 489.035186][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.042934][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.152323][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.160231][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.288906][ T76] veth1_macvtap: left promiscuous mode [ 489.297159][ T76] veth0_macvtap: left promiscuous mode [ 489.303294][ T76] veth1_vlan: left promiscuous mode [ 489.308953][ T76] veth0_vlan: left promiscuous mode [ 489.922662][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.941218][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 490.137138][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 490.166116][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 490.187704][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 490.481796][ T76] team0 (unregistering): Port device team_slave_1 removed [ 490.522976][ T76] team0 (unregistering): Port device team_slave_0 removed [ 491.236862][ T7523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.638680][ T7601] loop8: detected capacity change from 0 to 2048 [ 491.746339][ T7601] EXT4-fs (loop8): failed to initialize system zone (-117) [ 491.767467][ T7601] EXT4-fs (loop8): mount failed [ 492.028517][ T7523] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.280567][ T5811] Bluetooth: hci1: command tx timeout [ 492.292610][ T76] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.400700][ T7546] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.491338][ T7546] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 492.552896][ T76] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.597729][ T4051] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.605491][ T4051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.630650][ T7546] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 492.692921][ T7607] veth0: entered promiscuous mode [ 492.702256][ T7546] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 492.754469][ T76] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.789419][ T4051] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.797182][ T4051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.811357][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.472'. [ 492.991409][ T7607] batadv_slave_1: entered promiscuous mode [ 493.010448][ T7591] chnl_net:caif_netlink_parms(): no params data found [ 493.065895][ T76] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.243422][ T7606] batadv_slave_1: left promiscuous mode [ 493.852301][ T76] bridge_slave_1: left allmulticast mode [ 493.858201][ T76] bridge_slave_1: left promiscuous mode [ 493.865174][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.888108][ T76] bridge_slave_0: left allmulticast mode [ 493.895729][ T76] bridge_slave_0: left promiscuous mode [ 493.902339][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.360697][ T5811] Bluetooth: hci1: command tx timeout [ 494.368163][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.407602][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.426279][ T76] bond0 (unregistering): Released all slaves [ 494.643845][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.234803][ T76] hsr_slave_0: left promiscuous mode [ 495.251903][ T76] hsr_slave_1: left promiscuous mode [ 495.260195][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.267866][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.313667][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.321571][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.370254][ T76] veth1_macvtap: left promiscuous mode [ 495.378782][ T76] veth0_macvtap: left promiscuous mode [ 495.384995][ T76] veth1_vlan: left promiscuous mode [ 495.390623][ T76] veth0_vlan: left promiscuous mode [ 495.680371][ T7622] loop8: detected capacity change from 0 to 8192 [ 496.107258][ T76] team0 (unregistering): Port device team_slave_1 removed [ 496.152830][ T76] team0 (unregistering): Port device team_slave_0 removed [ 496.440961][ T5811] Bluetooth: hci1: command tx timeout [ 496.588558][ T7546] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.597582][ T7591] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.609005][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.616806][ T7591] bridge_slave_0: entered allmulticast mode [ 496.626104][ T7591] bridge_slave_0: entered promiscuous mode [ 496.690843][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.698395][ T4176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.761920][ T7523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.773644][ T7591] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.782337][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.790250][ T7591] bridge_slave_1: entered allmulticast mode [ 496.799771][ T7591] bridge_slave_1: entered promiscuous mode [ 496.838689][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.846295][ T4176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.053746][ T7625] loop8: detected capacity change from 0 to 2048 [ 497.167900][ T7625] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 497.251656][ T7591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.278378][ T7591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.503428][ T7591] team0: Port device team_slave_0 added [ 497.571075][ T7591] team0: Port device team_slave_1 added [ 497.887038][ T7591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.895507][ T7591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.922073][ T7591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.955320][ T7523] veth0_vlan: entered promiscuous mode [ 498.014032][ T7591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.021468][ T7591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.052180][ T7591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.115267][ T7523] veth1_vlan: entered promiscuous mode [ 498.471545][ T7591] hsr_slave_0: entered promiscuous mode [ 498.484490][ T7591] hsr_slave_1: entered promiscuous mode [ 498.493596][ T7591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.501558][ T7591] Cannot create hsr debugfs directory [ 498.554976][ T5090] Bluetooth: hci1: command tx timeout [ 498.633135][ T7523] veth0_macvtap: entered promiscuous mode [ 498.825927][ T7523] veth1_macvtap: entered promiscuous mode [ 499.079245][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.186519][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.243828][ T7523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.328988][ T7523] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.338315][ T7523] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.349044][ T7523] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.359308][ T7523] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.679437][ T7591] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.804943][ T7591] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.915693][ T7641] loop8: detected capacity change from 0 to 2048 [ 499.961602][ T7591] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.028701][ T7641] EXT4-fs (loop8): failed to initialize system zone (-117) [ 500.045881][ T7641] EXT4-fs (loop8): mount failed [ 500.077360][ T7591] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.151322][ T7648] 9pnet_fd: Insufficient options for proto=fd [ 500.650313][ T7591] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 500.751394][ T7591] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 500.821122][ T7591] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 500.891553][ T7591] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 501.501814][ T7546] veth0_vlan: entered promiscuous mode [ 501.658161][ T7546] veth1_vlan: entered promiscuous mode [ 501.976096][ T7591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.988667][ T7546] veth0_macvtap: entered promiscuous mode [ 502.012280][ T7665] loop4: detected capacity change from 0 to 256 [ 502.038271][ T7546] veth1_macvtap: entered promiscuous mode [ 502.162653][ T7591] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.261680][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.294470][ T3732] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.302101][ T3732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.375873][ T7546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.421223][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.428904][ T3732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.497262][ T7546] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.506722][ T7546] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.515853][ T7546] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.524943][ T7546] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.137071][ T7674] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.484' sets config #8 [ 504.408950][ T7591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.751802][ T3732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.760988][ T3732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.884682][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.892848][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.655834][ T7709] loop4: detected capacity change from 0 to 2048 [ 506.800196][ T7709] EXT4-fs (loop4): failed to initialize system zone (-117) [ 506.807737][ T7709] EXT4-fs (loop4): mount failed [ 506.903586][ T5884] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 506.915522][ T7591] veth0_vlan: entered promiscuous mode [ 506.995827][ T7591] veth1_vlan: entered promiscuous mode [ 507.099014][ T5884] usb 3-1: config 3 has an invalid interface number: 235 but max is 2 [ 507.107663][ T5884] usb 3-1: config 3 has an invalid descriptor of length 157, skipping remainder of the config [ 507.118427][ T5884] usb 3-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 507.127736][ T5884] usb 3-1: config 3 has no interface number 0 [ 507.134191][ T5884] usb 3-1: config 3 interface 235 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.148547][ T5884] usb 3-1: config 3 interface 235 has no altsetting 0 [ 507.269202][ T7591] veth0_macvtap: entered promiscuous mode [ 507.305059][ T5884] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice= 4.72 [ 507.314604][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.323407][ T5884] usb 3-1: Product: 伊ꦎꚵ⮞뻸꽥փ彰溦衆楧잧ꎻ曕џ熁鼄뚳ͮ䮘췋㳗ﯘ詗菀풳뗎ᢥ꣪숰≺擏ಹ푻ꩅၡ떈鴰ƣꁋ㕬骣༢걆蛖螫ۡ橝좼渔⠦縵 [ 507.342726][ T5884] usb 3-1: Manufacturer: Г [ 507.347459][ T5884] usb 3-1: SerialNumber: syz [ 507.352030][ T7591] veth1_macvtap: entered promiscuous mode [ 507.527876][ T7591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.648235][ T7591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.738724][ T7591] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.748110][ T7591] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.758004][ T7591] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.771304][ T7591] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.192824][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.198749][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.205635][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.211700][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.217563][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.223501][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.229356][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.236808][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.242905][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.248839][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.254873][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.260827][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.266684][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.272645][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.283141][ T5884] rndis_host 3-1:3.235: skipping garbage [ 508.289027][ T5884] usb 3-1: bad CDC descriptors [ 508.323474][ T5884] usb 3-1: USB disconnect, device number 9 [ 508.440877][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.8.492'. [ 509.578382][ T3732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.586615][ T3732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.829991][ T3598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.838155][ T3598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.960556][ T7749] usb usb8: usbfs: process 7749 (syz.2.499) did not claim interface 0 before use [ 510.165034][ T7752] loop4: detected capacity change from 0 to 1024 [ 510.277659][ T7754] netem: change failed [ 513.206106][ T7793] loop6: detected capacity change from 0 to 16 [ 513.318044][ T7793] erofs (device loop6): mounted with root inode @ nid 36. [ 513.408249][ T30] audit: type=1800 audit(1751011173.063:149): pid=7793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.514" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 513.589675][ T7798] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 513.596519][ T7798] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 513.607583][ T7798] vhci_hcd vhci_hcd.0: Device attached [ 513.635391][ T7798] loop4: detected capacity change from 0 to 512 [ 513.819463][ T7798] EXT4-fs (loop4): 1 orphan inode deleted [ 513.827739][ T7798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.871834][ T3598] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 513.880945][ T7798] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.882580][ T3598] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 513.970055][ T24] usb 42-1: SetAddress Request (2) to port 0 [ 513.976413][ T24] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 514.158936][ T7798] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 514.210608][ T7808] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 514.367551][ T3732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.375961][ T3732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.461499][ T7808] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 514.520269][ T7799] vhci_hcd: connection reset by peer [ 514.577683][ T76] vhci_hcd: stop threads [ 514.582279][ T76] vhci_hcd: release socket [ 514.586908][ T76] vhci_hcd: disconnect device [ 514.647246][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.655645][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.229067][ T7255] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.333630][ T7833] loop6: detected capacity change from 0 to 164 [ 516.893660][ T7835] loop2: detected capacity change from 0 to 512 [ 516.946447][ T7835] EXT4-fs (loop2): orphan cleanup on readonly fs [ 517.012264][ T7835] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.527: bad orphan inode 13 [ 517.108666][ T7835] ext4_test_bit(bit=12, block=18) = 1 [ 517.114392][ T7835] is_bad_inode(inode)=0 [ 517.118836][ T7835] NEXT_ORPHAN(inode)=2130706432 [ 517.124301][ T7835] max_ino=32 [ 517.127637][ T7835] i_nlink=1 [ 517.133227][ T7835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 517.240518][ T7835] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 517.326895][ T7835] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 517.612464][ T7523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.706331][ T30] audit: type=1326 audit(1751011177.343:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 517.806061][ T30] audit: type=1326 audit(1751011177.403:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 517.828870][ T30] audit: type=1326 audit(1751011177.413:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 517.851318][ T30] audit: type=1326 audit(1751011177.413:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 517.874020][ T30] audit: type=1326 audit(1751011177.413:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 517.897149][ T30] audit: type=1326 audit(1751011177.433:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 517.923934][ T30] audit: type=1326 audit(1751011177.433:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 518.002660][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.8.519'. [ 518.207604][ T30] audit: type=1326 audit(1751011177.863:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 518.305702][ T7851] loop2: detected capacity change from 0 to 512 [ 518.427720][ T7848] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 518.434511][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 518.442941][ T7848] vhci_hcd vhci_hcd.0: Device attached [ 518.465003][ T30] audit: type=1326 audit(1751011178.063:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 518.487419][ T30] audit: type=1326 audit(1751011178.063:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 518.510089][ T30] audit: type=1326 audit(1751011178.063:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.6.530" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 518.659168][ T7851] EXT4-fs (loop2): 1 orphan inode deleted [ 518.667982][ T7851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.694035][ T1142] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 518.704599][ T1142] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 518.723324][ T7851] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.831614][ T5859] usb 38-1: SetAddress Request (6) to port 0 [ 518.838064][ T5859] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 518.873384][ T7848] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 518.917228][ T7851] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 519.003464][ T7851] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 519.041409][ T7849] vhci_hcd: connection reset by peer [ 519.051456][ T4899] vhci_hcd: stop threads [ 519.056074][ T4899] vhci_hcd: release socket [ 519.060882][ T4899] vhci_hcd: disconnect device [ 519.080005][ T24] usb 42-1: device descriptor read/8, error -110 [ 519.128739][ T5090] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 519.144376][ T5090] CPU: 0 UID: 0 PID: 5090 Comm: kworker/u9:1 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 519.144523][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.144651][ T5090] Workqueue: hci3 hci_rx_work [ 519.144790][ T5090] Call Trace: [ 519.144842][ T5090] [ 519.144889][ T5090] __dump_stack+0x26/0x30 [ 519.145055][ T5090] dump_stack_lvl+0x1df/0x270 [ 519.145222][ T5090] dump_stack+0x1e/0x25 [ 519.145373][ T5090] sysfs_create_dir_ns+0x46c/0x540 [ 519.145530][ T5090] kobject_add_internal+0xeed/0x1840 [ 519.145724][ T5090] kobject_add+0x2c1/0x410 [ 519.145900][ T5090] ? kmsan_get_metadata+0xfb/0x160 [ 519.146081][ T5090] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 519.146280][ T5090] device_add+0xa70/0x1c10 [ 519.146471][ T5090] hci_conn_add_sysfs+0x15f/0x2f0 [ 519.146650][ T5090] le_conn_complete_evt+0x1b35/0x21b0 [ 519.146838][ T5090] hci_le_conn_complete_evt+0x157/0x260 [ 519.146998][ T5090] hci_le_meta_evt+0x6eb/0x960 [ 519.147133][ T5090] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 519.147302][ T5090] hci_event_packet+0xce2/0x1e40 [ 519.147477][ T5090] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 519.147654][ T5090] hci_rx_work+0x9a8/0x12b0 [ 519.147796][ T5090] ? __pfx_hci_rx_work+0x10/0x10 [ 519.147925][ T5090] process_scheduled_works+0xb91/0x1d80 [ 519.148159][ T5090] worker_thread+0xedf/0x1590 [ 519.148380][ T5090] kthread+0xd5c/0xf00 [ 519.148504][ T5090] ? __pfx_worker_thread+0x10/0x10 [ 519.148703][ T5090] ? __pfx_kthread+0x10/0x10 [ 519.148837][ T5090] ret_from_fork+0x1e3/0x310 [ 519.148968][ T5090] ? __pfx_kthread+0x10/0x10 [ 519.149101][ T5090] ret_from_fork_asm+0x1a/0x30 [ 519.149301][ T5090] [ 519.149408][ T5090] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 519.347101][ T5090] Bluetooth: hci3: failed to register connection device [ 519.490049][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 519.491927][ T24] usb usb42-port1: attempt power cycle [ 519.680174][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 519.708354][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.719150][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 519.728570][ T11] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 519.760627][ T5783] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 519.798143][ T7523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.845562][ T11] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.860742][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.869002][ T11] usb 5-1: Product: syz [ 519.875089][ T11] usb 5-1: Manufacturer: syz [ 519.880023][ T11] usb 5-1: SerialNumber: syz [ 519.981807][ T5783] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.992252][ T5783] usb 7-1: config 0 interface 0 has no altsetting 0 [ 519.999168][ T5783] usb 7-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 520.008698][ T5783] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.073823][ T24] usb usb42-port1: unable to enumerate USB device [ 520.099495][ T5783] usb 7-1: config 0 descriptor?? [ 520.345678][ T11] usb 5-1: 0:2 : does not exist [ 520.426488][ T11] usb 5-1: USB disconnect, device number 4 [ 520.607691][ T5783] apple 0003:05AC:029F.0005: reserved main item tag 0xd [ 520.615305][ T5783] apple 0003:05AC:029F.0005: ignoring exceeding usage max [ 520.730322][ T5783] apple 0003:05AC:029F.0005: hidraw0: USB HID v0.00 Device [HID 05ac:029f] on usb-dummy_hcd.6-1/input0 [ 520.762895][ T5783] usb 7-1: USB disconnect, device number 3 [ 521.439808][ T5783] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 521.648836][ T5783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.659304][ T5783] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 521.670164][ T5783] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.771076][ T5783] usb 3-1: config 0 descriptor?? [ 522.354101][ T5783] hid (null): usage index exceeded [ 522.387205][ T5783] itetech 0003:258A:6A88.0006: ignoring exceeding usage max [ 522.404170][ T5783] itetech 0003:258A:6A88.0006: ignoring exceeding usage max [ 522.417544][ T5783] itetech 0003:258A:6A88.0006: usage index exceeded [ 522.425839][ T5783] itetech 0003:258A:6A88.0006: item 0 0 2 2 parsing failed [ 522.496908][ T5783] itetech 0003:258A:6A88.0006: probe with driver itetech failed with error -22 [ 522.594456][ T5783] usb 3-1: USB disconnect, device number 10 [ 522.948085][ T7882] loop4: detected capacity change from 0 to 1024 [ 522.997305][ T7882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.010661][ T7882] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 523.893881][ T5859] usb 38-1: device descriptor read/8, error -110 [ 524.343807][ T5859] usb usb38-port1: attempt power cycle [ 524.719221][ T7881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.040455][ T5859] usb usb38-port1: unable to enumerate USB device [ 526.524042][ T7892] loop6: detected capacity change from 0 to 1024 [ 527.378976][ T7892] hfsplus: bad catalog entry type [ 527.698993][ T7894] loop5: detected capacity change from 0 to 1024 [ 527.745933][ T7894] EXT4-fs: Ignoring removed nobh option [ 527.751961][ T7894] EXT4-fs: Ignoring removed bh option [ 527.857007][ T7896] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 527.863805][ T7896] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 527.872151][ T7896] vhci_hcd vhci_hcd.0: Device attached [ 527.918445][ T4106] hfsplus: b-tree write err: -5, ino 4 [ 527.987898][ T7894] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.092895][ T7902] loop2: detected capacity change from 0 to 512 [ 528.149969][ T5859] usb 38-1: SetAddress Request (10) to port 0 [ 528.156430][ T5859] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 528.280795][ T7902] EXT4-fs (loop2): 1 orphan inode deleted [ 528.289081][ T7902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.307781][ T4106] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 528.318671][ T4106] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 528.358578][ T7902] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.593188][ T7896] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 528.622019][ T7896] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 528.733367][ T7896] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 528.769874][ T7898] vhci_hcd: connection reset by peer [ 528.790082][ T4106] vhci_hcd: stop threads [ 528.794563][ T4106] vhci_hcd: release socket [ 528.799258][ T4106] vhci_hcd: disconnect device [ 529.551084][ T7523] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.588088][ T7919] loop8: detected capacity change from 0 to 256 [ 529.700568][ T7919] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 529.711369][ T7919] FAT-fs (loop8): Filesystem has been set read-only [ 529.718219][ T7919] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 529.729224][ T7919] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 529.750037][ T30] audit: type=1800 audit(1751011189.403:161): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.551" name="file1" dev="loop8" ino=1048686 res=0 errno=0 [ 529.772253][ T7919] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 529.800421][ T7922] loop6: detected capacity change from 0 to 128 [ 529.835764][ T30] audit: type=1800 audit(1751011189.443:162): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.551" name="file1" dev="loop8" ino=1048686 res=0 errno=0 [ 529.858582][ T7919] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 529.891278][ T7918] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 529.902319][ T7918] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 529.913110][ T7918] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 529.954804][ T7919] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 529.999698][ T7919] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 530.558991][ T7919] syz.8.551 (7919) used greatest stack depth: 3712 bytes left [ 530.732073][ T7927] binder_alloc: 7926: binder_alloc_buf, no vma [ 530.770905][ T7927] binder: 7926:7927 ioctl c0306201 0 returned -14 [ 530.952003][ T7929] binder: 7928:7929 ioctl c0306201 0 returned -14 [ 530.988353][ T7929] binder: 7928:7929 ioctl c0306201 80001a80 returned -11 [ 531.370799][ T7932] loop6: detected capacity change from 0 to 2048 [ 531.457885][ T7932] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 531.493871][ T7591] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.587788][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.594677][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 531.778837][ T7941] loop8: detected capacity change from 0 to 512 [ 531.790188][ T7941] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 531.886546][ T7941] EXT4-fs (loop8): 1 truncate cleaned up [ 531.894591][ T7941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.193560][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'. [ 532.204478][ T7947] netlink: 40 bytes leftover after parsing attributes in process `syz.2.561'. [ 532.630355][ T7951] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 532.637161][ T7951] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 532.645648][ T7951] vhci_hcd vhci_hcd.0: Device attached [ 532.703907][ T7162] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.796990][ T7956] loop5: detected capacity change from 0 to 512 [ 532.941715][ T11] usb 44-1: SetAddress Request (2) to port 0 [ 532.948067][ T11] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 533.021240][ T7956] EXT4-fs (loop5): 1 orphan inode deleted [ 533.029165][ T7956] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.091755][ T4106] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 533.102280][ T4106] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 1 [ 533.141052][ T7956] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.209005][ T7966] loop6: detected capacity change from 0 to 1024 [ 533.247021][ T5859] usb 38-1: device descriptor read/8, error -110 [ 533.258356][ T7951] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 533.301886][ T7956] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 533.394161][ T7956] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 533.427760][ T7966] ===================================================== [ 533.435375][ T7966] BUG: KMSAN: uninit-value in __hfsplus_ext_cache_extent+0x7cb/0x990 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 533.443838][ T7966] __hfsplus_ext_cache_extent+0x7cb/0x990 [ 533.450131][ T7966] hfsplus_file_extend+0x7b5/0x1df0 [ 533.455543][ T7966] hfsplus_get_block+0xfc3/0x1a20 [ 533.461294][ T7966] __block_write_begin_int+0xa73/0x3030 [ 533.471319][ T7966] cont_write_begin+0x10e1/0x1bc0 [ 533.476529][ T7966] hfsplus_write_begin+0x85/0x130 [ 533.485951][ T7966] generic_perform_write+0x3f7/0x10c0 [ 533.495004][ T7966] __generic_file_write_iter+0x213/0x460 [ 533.500998][ T7966] generic_file_write_iter+0x131/0x980 [ 533.506666][ T7966] vfs_write+0xb4b/0x1580 [ 533.512767][ T7966] __ia32_sys_write+0x1f9/0x4d0 [ 533.517857][ T7966] ia32_sys_call+0x30f2/0x42c0 [ 533.523051][ T7966] __do_fast_syscall_32+0xb0/0x150 [ 533.528372][ T7966] do_fast_syscall_32+0x38/0x80 [ 533.533540][ T7966] do_SYSENTER_32+0x1f/0x30 [ 533.538230][ T7966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.544926][ T7966] [ 533.547355][ T7966] Uninit was created at: [ 533.552064][ T7966] __kmalloc_noprof+0x95f/0x1310 [ 533.557225][ T7966] hfsplus_find_init+0x90/0x1d0 [ 533.562407][ T7966] hfsplus_file_extend+0x72f/0x1df0 [ 533.567818][ T7966] hfsplus_get_block+0xfc3/0x1a20 [ 533.577801][ T7966] __block_write_begin_int+0xa73/0x3030 [ 533.584718][ T7966] cont_write_begin+0x10e1/0x1bc0 [ 533.590057][ T7966] hfsplus_write_begin+0x85/0x130 [ 533.595288][ T7966] generic_perform_write+0x3f7/0x10c0 [ 533.600964][ T7966] __generic_file_write_iter+0x213/0x460 [ 533.606815][ T7966] generic_file_write_iter+0x131/0x980 [ 533.612611][ T7966] vfs_write+0xb4b/0x1580 [ 533.617169][ T7966] __ia32_sys_write+0x1f9/0x4d0 [ 533.622402][ T7966] ia32_sys_call+0x30f2/0x42c0 [ 533.627351][ T7966] __do_fast_syscall_32+0xb0/0x150 [ 533.633169][ T7966] do_fast_syscall_32+0x38/0x80 [ 533.636834][ T7954] vhci_hcd: connection reset by peer [ 533.638155][ T7966] do_SYSENTER_32+0x1f/0x30 [ 533.648249][ T7966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.654974][ T7966] [ 533.657448][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: syz.6.568 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 533.667389][ T5090] Bluetooth: hci4: command 0x0406 tx timeout [ 533.671110][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.675799][ T7966] ===================================================== [ 533.675843][ T7966] Disabling lock debugging due to kernel taint [ 533.675890][ T7966] Kernel panic - not syncing: kmsan.panic set ... [ 533.675968][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: syz.6.568 Tainted: G B 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(undef) [ 533.676123][ T7966] Tainted: [B]=BAD_PAGE [ 533.676162][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.676227][ T7966] Call Trace: [ 533.676264][ T7966] [ 533.676301][ T7966] __dump_stack+0x26/0x30 [ 533.676435][ T7966] dump_stack_lvl+0x53/0x270 [ 533.676567][ T7966] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.676737][ T7966] dump_stack+0x1e/0x25 [ 533.676860][ T7966] panic+0x4bd/0xd50 [ 533.677042][ T7966] kmsan_report+0x31c/0x320 [ 533.677199][ T7966] ? __msan_warning+0x1b/0x30 [ 533.677329][ T7966] ? __hfsplus_ext_cache_extent+0x7cb/0x990 [ 533.677469][ T7966] ? hfsplus_file_extend+0x7b5/0x1df0 [ 533.677594][ T7966] ? hfsplus_get_block+0xfc3/0x1a20 [ 533.677716][ T7966] ? __block_write_begin_int+0xa73/0x3030 [ 533.677879][ T7966] ? cont_write_begin+0x10e1/0x1bc0 [ 533.677979][ T7966] ? hfsplus_write_begin+0x85/0x130 [ 533.678100][ T7966] ? generic_perform_write+0x3f7/0x10c0 [ 533.678227][ T7966] ? __generic_file_write_iter+0x213/0x460 [ 533.678352][ T7966] ? generic_file_write_iter+0x131/0x980 [ 533.678480][ T7966] ? vfs_write+0xb4b/0x1580 [ 533.678618][ T7966] ? __ia32_sys_write+0x1f9/0x4d0 [ 533.678767][ T7966] ? ia32_sys_call+0x30f2/0x42c0 [ 533.678864][ T7966] ? __do_fast_syscall_32+0xb0/0x150 [ 533.678980][ T7966] ? do_fast_syscall_32+0x38/0x80 [ 533.679096][ T7966] ? do_SYSENTER_32+0x1f/0x30 [ 533.679204][ T7966] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 533.679345][ T7966] ? stack_depot_save_flags+0x35/0x7b0 [ 533.679475][ T7966] ? kmsan_get_metadata+0xfb/0x160 [ 533.679636][ T7966] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 533.679801][ T7966] ? kmsan_get_metadata+0xfb/0x160 [ 533.679958][ T7966] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.891417][ T7966] ? hfsplus_brec_find+0x216/0x9f0 [ 533.896834][ T7966] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 533.902767][ T7966] ? __hfsplus_ext_write_extent+0x535/0x620 [ 533.908894][ T7966] ? kmsan_get_metadata+0xfb/0x160 [ 533.914249][ T7966] __msan_warning+0x1b/0x30 [ 533.918968][ T7966] __hfsplus_ext_cache_extent+0x7cb/0x990 [ 533.924948][ T7966] hfsplus_file_extend+0x7b5/0x1df0 [ 533.930412][ T7966] hfsplus_get_block+0xfc3/0x1a20 [ 533.935637][ T7966] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 533.942221][ T7966] __block_write_begin_int+0xa73/0x3030 [ 533.948016][ T7966] ? kmsan_get_metadata+0xfb/0x160 [ 533.953359][ T7966] ? __pfx_hfsplus_get_block+0x10/0x10 [ 533.959050][ T7966] cont_write_begin+0x10e1/0x1bc0 [ 533.964237][ T7966] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.970257][ T7966] ? kmsan_get_metadata+0xfb/0x160 [ 533.975579][ T7966] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 533.981631][ T7966] hfsplus_write_begin+0x85/0x130 [ 533.986853][ T7966] ? __pfx_hfsplus_get_block+0x10/0x10 [ 533.992510][ T7966] ? __pfx_hfsplus_write_begin+0x10/0x10 [ 533.998314][ T7966] generic_perform_write+0x3f7/0x10c0 [ 534.003918][ T7966] __generic_file_write_iter+0x213/0x460 [ 534.009752][ T7966] generic_file_write_iter+0x131/0x980 [ 534.015389][ T7966] ? futex_unqueue+0x22d/0x2c0 [ 534.020340][ T7966] ? kmsan_get_metadata+0xfb/0x160 [ 534.025654][ T7966] ? kmsan_get_metadata+0xfb/0x160 [ 534.030972][ T7966] ? __ia32_sys_write+0x1f9/0x4d0 [ 534.036201][ T7966] ? __msan_warning+0x1b/0x30 [ 534.041064][ T7966] ? filter_irq_stacks+0x13f/0x190 [ 534.046341][ T7966] ? stack_depot_save_flags+0x35/0x7b0 [ 534.051977][ T7966] ? kmsan_get_metadata+0xfb/0x160 [ 534.057288][ T7966] ? kmsan_get_metadata+0xfb/0x160 [ 534.062617][ T7966] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 534.069162][ T7966] vfs_write+0xb4b/0x1580 [ 534.073705][ T7966] ? __pfx_generic_file_write_iter+0x10/0x10 [ 534.079905][ T7966] __ia32_sys_write+0x1f9/0x4d0 [ 534.084988][ T7966] ia32_sys_call+0x30f2/0x42c0 [ 534.089946][ T7966] __do_fast_syscall_32+0xb0/0x150 [ 534.095251][ T7966] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 534.101141][ T7966] do_fast_syscall_32+0x38/0x80 [ 534.106156][ T7966] do_SYSENTER_32+0x1f/0x30 [ 534.110823][ T7966] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 534.117344][ T7966] RIP: 0023:0xf7f92539 [ 534.121542][ T7966] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 534.141335][ T7966] RSP: 002b:00000000f50b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 534.149923][ T7966] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 534.158031][ T7966] RDX: 000000000208e24b RSI: 0000000000000000 RDI: 0000000000000000 [ 534.166136][ T7966] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 534.174236][ T7966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.182334][ T7966] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 534.190476][ T7966] [ 534.193981][ T7966] Kernel Offset: disabled [ 534.198397][ T7966] Rebooting in 86400 seconds..