last executing test programs: 1m55.487409055s ago: executing program 32 (id=86): syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x10290c8, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) close(0x3) 1m53.293848612s ago: executing program 33 (id=108): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000003c0)={[{0x3, 0x8000, 0x74, 0x55, 0x6, 0x1, 0x4, 0x7, 0x8, 0x1, 0x9, 0x8, 0x8001}, {0x6, 0xff62, 0x7, 0x6, 0xaf, 0x3, 0x2, 0x1, 0x8, 0xf8, 0x86, 0x1, 0x7}, {0x2, 0x8, 0x7, 0x0, 0x3, 0x5, 0xcb, 0x5, 0x2, 0x7, 0x6, 0x3, 0x2000000000000001}], 0x10000}) 1m39.406358709s ago: executing program 34 (id=201): mkdir(&(0x7f0000000040)='./file0\x00', 0xa8) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) dup(r0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1m34.954804098s ago: executing program 35 (id=234): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) 1m18.688270288s ago: executing program 36 (id=312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x118) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 1m3.804200034s ago: executing program 7 (id=426): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x30144d0, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0xc5, 0x7ce, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f", 0x15, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r0, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x0, 0x0) 1m3.223979926s ago: executing program 9 (id=313): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0xb676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 1m2.794166644s ago: executing program 9 (id=433): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0xf1cad196b66050dc, 0x84) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) socket(0x15, 0x5, 0x0) close(0x3) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 1m2.024677094s ago: executing program 7 (id=435): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) listen(r0, 0x2) 1m1.770573436s ago: executing program 7 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x891}, 0x0) 1m1.122738614s ago: executing program 7 (id=443): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0xb676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 1m1.032228092s ago: executing program 9 (id=445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003904000000000400000000000000", @ANYRES32=r3, @ANYBLOB="030000007f0000002000128008000100736974001400028008000100", @ANYRES32=r2], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100039040000000000000000000003e4", @ANYRES32=r2, @ANYBLOB="00000000000000001800128008000100736974000c0002"], 0x38}}, 0x0) 1m0.909149424s ago: executing program 37 (id=445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003904000000000400000000000000", @ANYRES32=r3, @ANYBLOB="030000007f0000002000128008000100736974001400028008000100", @ANYRES32=r2], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100039040000000000000000000003e4", @ANYRES32=r2, @ANYBLOB="00000000000000001800128008000100736974000c0002"], 0x38}}, 0x0) 1m0.219899936s ago: executing program 7 (id=457): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 1m0.152224452s ago: executing program 2 (id=458): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x4, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 59.552219745s ago: executing program 2 (id=462): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvfrom$inet(r0, &(0x7f0000000000)=""/21, 0x15, 0x100, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 59.5026499s ago: executing program 2 (id=463): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 59.49589928s ago: executing program 8 (id=464): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x200000006c832, 0xffffffffffffffff, 0x0) 59.441448935s ago: executing program 7 (id=465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='afs_call_state\x00', r0}, 0x18) 59.440776106s ago: executing program 2 (id=466): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0xb676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 59.237055634s ago: executing program 38 (id=465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='afs_call_state\x00', r0}, 0x18) 59.117089964s ago: executing program 2 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0xa8, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4, {0x0, 0x4, 0x9, 0x6}}, @val={0x2d, 0x1a, {0x10, 0x0, 0x5, 0x0, {0x6, 0x8, 0x0, 0x9, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x375, 0x40}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x40, 0x6, 0x957d, 0x4, 0x7a, 0x1, 0x5]}}]}]}]}, 0xa8}}, 0x0) 58.60966403s ago: executing program 8 (id=469): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f00000001c0)=0x0) io_pgetevents(r2, 0x3, 0x0, 0x0, 0x0, 0x0) io_destroy(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6c404, &(0x7f0000000e80)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d005deaf1a2b42097a8629a2d943efbf716398c064ce407bba6af717b247da6651fa9e0e865068c52ded90fd0da649a2014dd589ba9e8785dd7a1f9ced312b0dba0b6f3719f6aa27d9e8bbd8765c46391d583cb8ecad921ed581bb4a10b4900eb7931622f2600e52b379a5d8adfa8b4352ef8512ae187f0c90bfc46f21b493dfafd9a22f010c6ff7f0000ae5a2b9697f0f283c5bc8f91dd975549e4e679a35ed1ebe7dfe9e3", @ANYRESHEX, @ANYBLOB="2c766f6c756d650cb431b87aa96fa83150b93d3138343436373434303733dd551d1bc0f73d675757c49e4f2800801796450f8e0c1e837242f9ae79f1d397f45549baae942d8562dade8b57c01fed5907f2a6bf13b14942196e3a454622b1fa32bbe3b08b89c12d1313b0d6f2ae4319ab318c51d77d2f7b7268fd2a5ce3a22511d049857ce50f66a21e4f8648fa598bf85a845391f4b010d0b871c4ac63bfea84dca04e3cd927cf5038c20166f7bf6a0c7471504d81dd5d874f1384a68b0720d139439a349dbd2e49255b163dc9a342b0bf2601cd768a5c420446451464"], 0x1, 0xa1b, &(0x7f0000001f80)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) rename(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001c40)='./file1\x00') recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff}, {0x0, 0x5}]}) 57.839445299s ago: executing program 2 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="140023c006000d000300009b05000e000000004b"], 0x30}}, 0x0) 57.61136558s ago: executing program 39 (id=471): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="140023c006000d000300009b05000e000000004b"], 0x30}}, 0x0) 57.48933013s ago: executing program 8 (id=474): r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'syzkaller0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x7, [{0xffffffff, 0x7}, {0x1e7}, {0x6, 0x6}, {0x2, 0x2}, {0x1, 0xfff}, {0x0, 0xff}, {0x7f, 0x7}]}}) r2 = socket$inet6(0xa, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="880401100000000000000000000000000000000000000001fe880000006cced6562cec9cef000001"], 0x28) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000600)=[{{&(0x7f00000003c0)=@generic={0x25, "d11cdc350648902d0f4b065e3c3a383f1c8180f5fc42367e3f2f4f9369b5251aa477b6393e1d6d84386a55947ef5deb8dabf42095fc60caeaa71c4d6be9f1d0cf7c41e7c36383f16265706358bc6c13adebf070d8aa2aae24e2058fff5ccb29a91b4450e3b4df3bde9cd11aa8cae779b760228ec4209d05ca5dd70e586ae"}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000440)="a3ca2fd8e1c0f467e0f4720fc8b91393d7a1b2e302aab18a340d3fe3e24c71a62d127d8f3bd1a85ea508cf758b3b2389f09a0325c9c0d9c4a6743626ee0b3859bf7da3b3da63e406d2e4e42af4766b9bd29c99d86c699bab6a606e8f1eeb039889d1489b82c59b59c430d6c2cd4345a7b032e82ff90a7f2112dc039efa788387031d01b60f04f2571eef6845416d46160fdd523e76b8f7660b9c8a82f7bcc33e3af47457b97c085f9c0f6df1ab7eb3bc36c49498fbdf6c4066111bdbd39b4c1f695527149df5bef8dd0a569fefc991ff50eab3b7ecdd2248b01166cae0219d55543e4449a157693e7baa35c7a376bce1e025", 0xf2}], 0x1}}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000c80)="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", 0x1000}], 0x1, &(0x7f0000001c80)=[{0xa8, 0x114, 0x6, "1dd99fff53b2690e1dc8d56a027c2da5cae41a697033a29d8a5670d745f0795899b7fcf0f18a68931792ded6ed86046269dd80a2b01179575f1e63501dbe6e568fa27c4bf0a7086174202aac6792541c5b30762779b79824a9ecb7d063252c5c8d834561efbeffb0633edf6b0c7616d5b5d1136f8226312b61128ffe1724d80122434572d049cce281dc8dcf62f0123f128f"}, {0x108, 0x6, 0xffffffff, "73b49f99b2160bba99fe448815520a0263c56fce0ef182ce65c5d20a91a7964c71e5cfec4f7ee02fc2ff5687f290f0efc327548df940b23c7f3719484a25b9561fb5e91185be4d535b53ab1760c1cbe79803f41bdd1f69c8e934e81f9c89a9dd8d6d89b1e2a3b803c0fc6cd052805f862f7461b60d0c8d09a3389f4a16a59bb1a19c1409d38271ca0442e856b9df34f003f2dca3e534d9c8040d8a47abf72a06e4e1cb0536474320c597db810801ff2035f575da4f2c6c5abd6e4855f8f19d1fc8e2451abd7577a496dcdccfe51317cfd9c7884a095972127927eed43854d9d4f02679f737a4a7689eda369ce6e7cf1efc0b974102"}, {0xc8, 0x0, 0x8001, "a966b3ae1c546c1f335d2294b455ed7265f5172432e9257ca3974b1f33ba763fe27e7965cca2fbdb2863a85df6e34a145cbaa8c1bd6ab26d904f6dcf1e43a2ddb9b11d65f7db8146816eff3b4a7c0593eef0571326953663d2455754959fcf15e4a1114d06d278813c433eac5f7052321b90a1f611dc8d49670892a1da2ededb47332e892df43f6606c541c4ed9f4ff14819442da84fd88561fd08226a058d90837c87e88570ad4dc7f7d5aa6230806a4fd5095f"}, {0xc0, 0x13a, 0x0, "fcaf8bf018152fec4cb414d58d6f6891c3783b93c1062a0c05c4c2bf583c3dcea71ba8491efec7bc3d86b9a55626ae9f88e232aacc37f30040898bfe77d105962ad6960c0444dd4ada65177b1acef2795d8622a7242d06d52a8a40318d1598508cd44fc82c078975375b0d0722167efeed338eb37e50122bfa9f8033b51ccc41e8ffbd4cfc5a75af99fcec4efb06a390f0c63ca1f0fcd18adf6ae7aad179a910df5bf85446e70215493e0706"}, {0x20, 0x118, 0x3, "665f1a936b1ecd9e6e88bb"}], 0x358}}], 0x2, 0x801) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, 0x0, 0x4084) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000100)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 57.26518751s ago: executing program 8 (id=476): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0xb676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 56.748476247s ago: executing program 8 (id=477): r0 = socket$inet_dccp(0x2, 0x6, 0x0) writev(r0, &(0x7f0000001b80)=[{&(0x7f0000000880)="8abab3108b712f207cc1f977ef262071ba226188e0402f35ca", 0x19}, {&(0x7f00000008c0)="2717eedad87f3fafa0e096a67aaced73b801a765ccc3b9c910f13d85aa394e06330e9af2ac089fdeb37f824b772ce521e799d8d602e67d8a735bf7b06a52c4e839f06a6954c6467d075638d429a113c771712157ea14b22dba9f6082afc5e713c5bca780a134f05a3b4b15df215297a7738c3c5bdd596346e1e1168478efef57bcb751d728d2e570e4e02bb145cb015ba40172cf20433fcfb4d3a7bb25df5f29ee2f7f195a70456c3d1c5ccdb9164fe1b4ea9a82ead98a95cdcfebef64fae990fe9ec857346f0e37240cba4817679473d284a45b925ed241fd3b7270701e370ef57a", 0xe2}, {&(0x7f00000009c0)="0d26cc3c7b26cd7d23", 0x9}, {&(0x7f0000000a00)="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", 0x115}], 0x4) 55.955881758s ago: executing program 8 (id=479): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 55.831632659s ago: executing program 40 (id=479): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) 55.563110874s ago: executing program 3 (id=481): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0xffffffdf) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0x0, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) shutdown(r1, 0x1) 54.649358385s ago: executing program 3 (id=482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000480)=0x29b, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 54.553910124s ago: executing program 3 (id=483): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000000000000", @ANYRES64=0x0, @ANYBLOB="a13ef052"], 0x20) 54.48416264s ago: executing program 3 (id=484): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800000, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0xb676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$eJzs20tvG1UbAOB3xknv/ZKvlEsvQKAgIi5Jkxbogg0IpG6QkGBRliFJq9K0QU2QaFXRgFBZov4CYInEL2AFGwSsQGxhj5Aq1A2FBRo09kzrJnaIL6mT+nkkt+d4jn3e1zMnPjNnHEDfGsn/SSJ2RcQvETFUq97eYKT2343rl6b/un5pOokse/2PpNruz+uXpsum5et2FpXRNCL9KIkDDfpduHDxzNTc3Oz5oj6+ePad8YULF585fXbq1Oyp2XOTx44dPTLx/HOTz3Ylz915rPvfnz+47/ibV1+dPnH1re+/zOPdVWyvz6NmuOM+R2Lk9s+yzuMdv/vGsruunAz0MBBaUomIfHcNVsf/UFTi1s4bilc+7GlwwLrKsizbuuLZSllYyoC7WBK9jgDojfKLPj//LR93cPrRc9derJ0A5XnfKB61LQORFm0Gl53fdtNIRJxY+vvT/BENr0MAAHTX1/n85+lG87807qtr979ibWg4Iv4fEXsi4p6I2BsR90ZU294fEQ+02P/IsvrK+c9P29tKbI3y+d8LxdrW7fO/cvYXw5Witrua/2By8vTc7OHiMxmNwa15fWKVPr55+edPmm2rn//lj7z/ci5YxPH7wLILdDNTi1Od5Fzv2gcR+wca5Z/cXAlIImJfROxv4/23RcTpJ7842Gz7f+e/ii6sM2WfRzxR2/9LsSz/UrL6+uT4tpibPTxeHhUr/fDjldea9d9R/l2Q7/8dDY//m/kPJ/XrtQut93Hl14+bntO0e/xvSd6olrcUz703tbh4fiJiS7K08vnJW68t62X7PP/RQ43H/56Ifz4rXncgIvKD+MGIeCgiHi5ifyQiHo2IQ6vk/91Lj73dfv7rK89/pqX933qhcubbr5r1v7b9f7RaGi2emZnKsuzy6nmtNcDOPj0AAADYHNLqPfBJOnaznKZjY7V7+PfGjnRufmHxqZPz756bqd0rPxyDaXmla6jueuhEcW24rE8uqx+pXjfOsizbXq2PTc/PrdeaOrA2O5uM/9xvlV5HB6y7ltbRmv2iDdiU/F4T+pfxD/3L+If+ZfxD/2o0/i9H3OhBKMAd5vsf+pfxD/3L+If+1f74dzMQbGKd/K5/tcKe4+v1zndbobIxwmi5EOmGCKO9QroxwqgVtkbEWhtfjjsVWK//MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTHvwEAAP//H0rrgQ==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 54.346941942s ago: executing program 3 (id=485): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6gre0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c00128009000100766c616e000000003c00028006000100000000000600050081000000280003800c00010000008004000000000c00010000000000000000000c000100000001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x7c}, 0x1, 0xba01}, 0x0) 53.59430457s ago: executing program 3 (id=486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8814}, 0x808) recvmmsg$unix(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}}], 0x1, 0x40010024, 0x0) 53.513482367s ago: executing program 41 (id=486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8814}, 0x808) recvmmsg$unix(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/30, 0x1e}], 0x1}}], 0x1, 0x40010024, 0x0) 11.14227882s ago: executing program 6 (id=749): r0 = io_uring_setup(0x324d, &(0x7f00000000c0)={0x0, 0x84b2, 0x1, 0x402, 0x2}) io_uring_enter(r0, 0x0, 0x2, 0xf, 0x0, 0x0) 11.090040454s ago: executing program 6 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc7) 10.905667961s ago: executing program 6 (id=751): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000340)='./file1\x00', 0x208844, &(0x7f0000000bc0)=ANY=[], 0x4, 0x272, &(0x7f0000000580)="$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") 10.676176742s ago: executing program 6 (id=754): creat(0x0, 0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0xca942, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) pwrite64(r1, &(0x7f0000000300)='_', 0x1, 0x10000000005) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x10010001, 0x8001, 0x0, 0x0, 0x21, 0x4, "baea3df51c4977243c955fae6dddfbd1ce5d29c2ee5e5c9d0019f8ee09e737ff0edf110f80007639c2eb4b78c6060077e0701905b9aafab4afaaf755a3f6a004", "cba3d62578038259ca171ce1a311ef97e401060017e92996005303f56f0000000002000000000000000000252b7ad59bdf6e4b00", "d300e6d6ae9ef30bea2a004000", [0x0, 0x1]}) ftruncate(r0, 0x8002007ffb) 10.095471904s ago: executing program 6 (id=758): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f00000001c0), 0x1, 0x4ff, &(0x7f0000001100)="$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") r0 = open(&(0x7f0000000340)='./file1\x00', 0x8800, 0x19c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xe, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8d}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0x2, 0xf, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.068106116s ago: executing program 6 (id=764): r0 = socket(0x2, 0x3, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x800714, &(0x7f0000000740), 0xfe, 0x449, &(0x7f00000002c0)="$eJzs3M9rHFUcAPDvzCat/ZlYa7Wx1WgVgz+SJq1awYui4EUQ9FCPMUlL7LaRJoItQaNIPUrBu3gU/As86UXUk+BV71IoGoS2niKzO5PubrNpk+xmY/fzgem+N/N23/vuzNt5M6+TALrWYPZPErE7In6PiL5qtr7AYPXl+uL8xI3F+Ykklpbe+iuplLu2OD9RFC3etyvPDKUR6WdJXkm92QsXz4yXy1Pn8/zI3Nn3R2YvXHx2+uz46anTU+fGTpw4fmz0hefHnmtJnFlc1wY+mjl08PV3Lr8xcfLyuz9/m7X3wOHq9to4WmUwC/zvpYrGbU+0urIO21OTTno62BDWpBQR2e7qrfT/vijFzZ3XF6992tHGAW2VnZu2N9+8sATcxZLodAuAzihO9Nn1b7Fs0tBjS7j6cvUCKIv7er5Ut/REmpfpbWP9gxFxcuHfr7Il2nQfAgCg1vfZ+OeZlcZ/aRyoKbc3n0Ppj4h7I2JfRNwXEfsj4v6IStkHIuLBNdbfODV06/gnvbKuwO5QNv57KZ/bqh//FaO/6C/luT2V+HuTU9PlqaP5dzIUvduz/Ogqdfzw6m9fNNtWO/7Llqz+YiyYt+NKT8MNusnxufFWDUqvfhIx0LNS/MnyTEASEQcjYmBtH723SEw/9c2hZoVuH/8qWjDPtPR1xJPV/b8QDfEXktXnJ0fuifLU0ZHiqLjVL79eerNZ/RuKvwWy/b+z/vhvKNH3T1I7Xzu79jou/fF502ua9R7/25K3K3PW2/J1H47PzZ2/kV3R7qhc1NatH7v53iJfeR2txj90ZOX+vy9/Txb/QxGRHcSHI+LhiHgkb/ujEfFYRBxZJf6fXnn8vfXH315Z/JMr/v4tH//99ft/7YnSmR+/a1b/ne3/45XUUL6m8vt3G02a8+Jkw5qNfHcAAADwf5FGxO5I0uHldJoOD1f/D//+2JmWZ2bnnj4188G5yeozAv3RmxZ3uvpq7oeOJgv5J1bzY/m94mL7sfy+8ZelHZX88MRMebLDsUO329Wk/2f+LHW6dUDbeV4Luldj/0871A5g8zn/Q/fS/6F76f/QvVbq/x835M0FwN3J+R+6l/4P3Uv/h+6l/0NX2shz/RLdnIh0SzSjXYkk/xMYW6U9m57o9C8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD///sP8V8=") socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x10e, 0x8, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r5 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r5}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 8.924601999s ago: executing program 42 (id=764): r0 = socket(0x2, 0x3, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x800714, &(0x7f0000000740), 0xfe, 0x449, &(0x7f00000002c0)="$eJzs3M9rHFUcAPDvzCat/ZlYa7Wx1WgVgz+SJq1awYui4EUQ9FCPMUlL7LaRJoItQaNIPUrBu3gU/As86UXUk+BV71IoGoS2niKzO5PubrNpk+xmY/fzgem+N/N23/vuzNt5M6+TALrWYPZPErE7In6PiL5qtr7AYPXl+uL8xI3F+Ykklpbe+iuplLu2OD9RFC3etyvPDKUR6WdJXkm92QsXz4yXy1Pn8/zI3Nn3R2YvXHx2+uz46anTU+fGTpw4fmz0hefHnmtJnFlc1wY+mjl08PV3Lr8xcfLyuz9/m7X3wOHq9to4WmUwC/zvpYrGbU+0urIO21OTTno62BDWpBQR2e7qrfT/vijFzZ3XF6992tHGAW2VnZu2N9+8sATcxZLodAuAzihO9Nn1b7Fs0tBjS7j6cvUCKIv7er5Ut/REmpfpbWP9gxFxcuHfr7Il2nQfAgCg1vfZ+OeZlcZ/aRyoKbc3n0Ppj4h7I2JfRNwXEfsj4v6IStkHIuLBNdbfODV06/gnvbKuwO5QNv57KZ/bqh//FaO/6C/luT2V+HuTU9PlqaP5dzIUvduz/Ogqdfzw6m9fNNtWO/7Llqz+YiyYt+NKT8MNusnxufFWDUqvfhIx0LNS/MnyTEASEQcjYmBtH723SEw/9c2hZoVuH/8qWjDPtPR1xJPV/b8QDfEXktXnJ0fuifLU0ZHiqLjVL79eerNZ/RuKvwWy/b+z/vhvKNH3T1I7Xzu79jou/fF502ua9R7/25K3K3PW2/J1H47PzZ2/kV3R7qhc1NatH7v53iJfeR2txj90ZOX+vy9/Txb/QxGRHcSHI+LhiHgkb/ujEfFYRBxZJf6fXnn8vfXH315Z/JMr/v4tH//99ft/7YnSmR+/a1b/ne3/45XUUL6m8vt3G02a8+Jkw5qNfHcAAADwf5FGxO5I0uHldJoOD1f/D//+2JmWZ2bnnj4188G5yeozAv3RmxZ3uvpq7oeOJgv5J1bzY/m94mL7sfy+8ZelHZX88MRMebLDsUO329Wk/2f+LHW6dUDbeV4Luldj/0871A5g8zn/Q/fS/6F76f/QvVbq/x835M0FwN3J+R+6l/4P3Uv/h+6l/0NX2shz/RLdnIh0SzSjXYkk/xMYW6U9m57o9C8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD///sP8V8=") socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x10e, 0x8, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r5 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r5}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6.428992803s ago: executing program 5 (id=781): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x47}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.200059533s ago: executing program 5 (id=782): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x162) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xf, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000125, 0x2000010) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lremovexattr(0x0, &(0x7f0000000900)=@known='security.selinux\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001bc0)={0x2020}, 0x2020) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0xfffffffc, 0x0, 0x0, 0x5f7, 0x0, "10120dfe0ef7f0200000ff490a0080002a00"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) 5.352955479s ago: executing program 5 (id=785): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x30144d0, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0xc5, 0x7ce, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSRS485(r2, 0x542f, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f", 0x15, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r0, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x0, 0x0) 4.429019423s ago: executing program 5 (id=790): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000480, &(0x7f0000001900), 0x1, 0x769, &(0x7f0000000380)="$eJzs3c1rHGUYAPBnNknTptVEELSeAoIGSjemxlbBQ8WDCBYKerYum22o2WRLdlOaEFARwYug4kHQS89+1Js38eOq/4UHaamaFiseJDKb2XTb7DbZNMlS9/eDaZ93ZjbvPPvOx7s7LzsB9KzR9J9cxOGI+DCJGM7mJxExUI/6I06urXdzZbmYTkmsrr76R1Jf58bKcjGaXpM6mBUejYgf34s4kttYb3VxaaZQLpfms/J4bfb8eHVx6ei52cJ0abo0d3xicvLYiWdOHN+5XP/6ZenQ1Y9eevLrk/+8+8jlD35K4mQcypY157FTRmM0e08G0rfwNi/udGVdlnR7A9iW9NDsWzvK43AMR189AgD+z96KiFUAoMckrv8A0GMa3wPcWFkuNqbufiOxt669EBH71/Jv3N9cW9Kf3bPbX78POnQjue3OSBIRIztQ/2hEfP7t61+mU+zSfUiAVt7+Lgs2nP+TDWMWOvXUFtYZvaPs/Ad75/u0//Nsq/5fbr3/Ey36P4Mtjt3t2Pz4z13ZgWraSvt/zzeNbbvZlH9mpC8rPVDv8w0kZ8+VS+m57cGIGIuBwbQ8cZc6xq7/e73dsub+358fv/lFWn/6/601clf6BxvxajY8r1a4x7TXXXsn4rH+Vvkn6+2ftOn/nt5iHS8/9/5n7Zal+af5NqaN+e+u1UsRT7Rs/1sj2pK7jk8cr+8O442dooVvfv10qF39ze2fTmn9jc8CeyFt/6G75z+SNI/XrHZex8+Xhn9ot2zz/Jv3/zVThVphX/JaPd6XzbtYqNXmJyL2Ja9snH/s1msb5cb6af5jj9fzP5CtsuH812r/Tz8TvrFZ4tlG9F/9/avt57+70vynOmr/zoPLN2f62tW/tfafrEdj2Zy0/TfLa6sbeC/vHQAAAAAAAAAAAAAAAAAAAAAAAABsVS4iDkWSy6/HuVw+v/YM74djKFeuVGtHzlYW5qai/qzskRjINX7qcrjp91Anst/Db5SP3VF+OiIeiohPBg/Uy/lipTzV7eQBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHOwzfP/U78NdnvrAIBds7/bGwAA7DnXfwDoPZ1e//UXAOD+53oOAL3H9R8Aeo/rPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvs9KlT6bT698pyMS1PXVhcmKlcODpVqs7kZxeK+WJl/nx+ulKZLpfyxcrsZn+vXKmcn4y5hYvjtVK1Nl5dXDozW1mYq505N1uYLp0pDexJVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmeri0kyhXC7NCwQCwXrQ7TMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP3hvwAAAP//wcgjvQ==") r0 = open(&(0x7f0000000340)='./bus\x00', 0x64842, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) write$P9_RREADDIR(r0, &(0x7f0000000b00)={0xb, 0x29, 0x2, {0x2}}, 0xb) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 4.311364753s ago: executing program 4 (id=793): r0 = open(&(0x7f0000000000)='./bus\x00', 0x40541, 0x0) r1 = syz_io_uring_setup(0x1f8a, &(0x7f0000000080)={0x0, 0x403, 0x800}, &(0x7f0000000100), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000440)=r0, 0x1) 4.278268206s ago: executing program 0 (id=794): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x162) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xf, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000125, 0x2000010) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lremovexattr(0x0, &(0x7f0000000900)=@known='security.selinux\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001bc0)={0x2020}, 0x2020) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0xfffffffc, 0x0, 0x0, 0x5f7, 0x0, "10120dfe0ef7f0200000ff490a0080002a00"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) 3.984255602s ago: executing program 4 (id=795): socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) io_setup(0x6, &(0x7f00000001c0)=0x0) io_pgetevents(r2, 0x3, 0x0, 0x0, 0x0, 0x0) io_destroy(r2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6c404, &(0x7f0000000e80)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d005deaf1a2b42097a8629a2d943efbf716398c064ce407bba6af717b247da6651fa9e0e865068c52ded90fd0da649a2014dd589ba9e8785dd7a1f9ced312b0dba0b6f3719f6aa27d9e8bbd8765c46391d583cb8ecad921ed581bb4a10b4900eb7931622f2600e52b379a5d8adfa8b4352ef8512ae187f0c90bfc46f21b493dfafd9a22f010c6ff7f0000ae5a2b9697f0f283c5bc8f91dd975549e4e679a35ed1ebe7dfe9e3", @ANYRESHEX, @ANYBLOB="2c766f6c756d650cb431b87aa96fa83150b93d3138343436373434303733dd551d1bc0f73d675757c49e4f2800801796450f8e0c1e837242f9ae79f1d397f45549baae942d8562dade8b57c01fed5907f2a6bf13b14942196e3a454622b1fa32bbe3b08b89c12d1313b0d6f2ae4319ab318c51d77d2f7b7268fd2a5ce3a22511d049857ce50f66a21e4f8648fa598bf85a845391f4b010d0b871c4ac63bfea84dca04e3cd927cf5038c20166f7bf6a0c7471504d81dd5d874f1384a68b0720d139439a349dbd2e49255b163dc9a342b0bf2601cd768a5c420446451464"], 0x1, 0xa1b, &(0x7f0000001f80)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWY7VOLZk+/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAuJ9eGvvG0GHv/wDwSDnn8z8AAAAAAAAAAAAAAOx0KYr4s0jx6k/a6UJ1vaN+pjV75er4yOjmu+1JkaIWRVVf/q0fPHT4yNFjx4e7+cH7f9SejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nb/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/9KPf4nZneOyKIn4WKerfezc1I6IWdz8Wd3ju3Gt7qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0b3YS7uSiPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+M7tqd2DPm5BX9m3IuJmPABztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFj6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVB/794X7a4a9N9ShionrFb6cPf7ADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MHe6nrH0uIm7E1s7J7c+nDqda+eej7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/ekM3e05x63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDQ2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfQ3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234v1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNOwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnH/w5Y9q/gd6tl3L8/rjPP8H7zD/fx8p/uSnT+W6ztgfyrc/Xv27Nv+/Eyn+61fX1x7LtfvWag9utVvbrZz/L0WKEz/60Wqf8/znkV2bod75/2zf+lx9lmzT/D/es20gt+vwLzkWj6LF17/9WnN6emrBBRdccGH1wna/MnE/lO///xwpXjhTS93jmPz+/7HOtbXjv/e/s/b+/8KGXLVN7//7era9kI9a+vsi6ksz8/37I+qLr3/7y62Z5uWpy1Ozw8eOHnl++Nix5/t3dY/t1i5teegeCuX8n4kUr/z0X1Y/x6w//tv8+H/vhly1TfP/yd4+rTuu2fJQPJLK+b8eKb779rurnzc/6Pi/+/n/wBfW5+r/v22a/0/1bKt+4//xiOd7th34dMSprT4WAAAAPGT25nXyP/31f1g953395//4Yre29/uf29kJ5/8DAAAAAMCjbm8q4q8ixf8MfSl1zyHbyu8/Jzfkqm36/d/+nm2T9+m8li0PMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADpSiiKcjxas/aaflorzeUT/Tmr1ydXxkdPPd9qRIUYuiqi//1g8eOnzk6LHjw9384P0/ak/Gy2PnTjVOz83ML0wtLk5NNsZnWxfnJqe2fA93u/9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/R/60W+RbrN9VxRxKVLUv/du+o8iohZ3PxZ3eO7ca3uqTgxWnRgfGa06Mt1qzi6VN6ZarqpFDPTsdLI7RvdhLu5KI+Ja2fyywYNl98bmmwvNiempxtnmwlJrqTU3m2qd1pb9GYhaDKeI+YhoF7feXX8UMREpvv9+O71dRBTdcXj2pbFvDB2+c3tq96CPvVa+u+nmvrJvRcTNeADmbAfbHUV8LFL84PxQ/KzojGs1bM9EfL3MpyO+WeZyxPV8PZVPkKci3tvk+cSDpS+KOBsp5lI7/WeR5756XTnzSuNrs5fmemq7rysP/PvD/bTDX5vqUcTPq1f8dvq5/88AAAAAAA+RIn4zUtyYOZCq9cHVNcXW7OXGuebEdOdr/e53/42818rKyspA6mQj51DOkznP5ryQcz7ntZzXc76Z80bOt3LezLmcs50zavnxczZyDuU8mfNszgs553Ney3k955s5b+R8K+fNnMs52znD9+QAAAAAAADADlSLIp6IFD98o51Wis4C74Xo5LJ1zofe/wcAAP//Vsw/Lg==") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$cgroup_subtree(r3, 0x0, 0x30) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) write(r4, &(0x7f0000000280)="1c0000001a009b8a140000003b9b301f00"/28, 0x32) rename(&(0x7f0000000f40)='./file0\x00', &(0x7f0000001c40)='./file1\x00') recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0xff}, {0x0, 0x5}]}) 3.33901898s ago: executing program 5 (id=796): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8") r0 = creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x162) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getresuid(&(0x7f00000001c0), 0x0, &(0x7f0000000680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000060000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000200)=""/229) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$LOOP_CLR_FD(r0, 0x4c01) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f00000006c0)={0x2, 0xf7}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x2, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16}]}) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.292599954s ago: executing program 0 (id=797): unshare(0x4020400) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 3.124277509s ago: executing program 0 (id=798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r2) 3.024819238s ago: executing program 0 (id=799): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) 2.515946024s ago: executing program 0 (id=800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x2, 0x56d, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) close(0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000005c0), 0x1000, r0}, 0x38) 2.284172705s ago: executing program 5 (id=801): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x30144d0, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0xc5, 0x7ce, &(0x7f0000000500)="$eJzs3c9rHNcdAPDvrFY/7VYqlLYuFBYKrcF4Vbmq3UKhKj2UQg2G5JRDbLFaC0crrdGujCVEYhMCuQSSkFty8Tk/LyHX/IDkkvwfwcZJZBOHHILC7A9pJe/aK0faje3PB8Z6b+fNvPfdN/P2STOeDeCxlUv/yUQciYiXk4jxxutJRAzWUtmImXq5OxvrhXRJYnPzia+TWpnbG+uFaNkmdaiR+V1EfPxCxLHM3fVWVtcWZkul4vKObVfXjl9YnJ0vzheXTk5NT5849bdTJ/cv1m+/WDt845X//vmdme+f/+27L32SxEwcTuOr2Y5jv+Qi14hrMH0Ld/jPflfWN+8/20WhTMTmZj2ZPegGsQfpqTnQ6JUjMR4D9+qf0V62DAA4KM9FOjPrYKDjGgDgoZbUP///1e92AAC90vw7wO2N9UJz6e9fJHrr5r8jYqQef/P6Zn1NtnHNbqR2HXTsdrLjykgSERP7UH8uIt744Om30iV2XU8FOEhXrkbEuYncjvF/IGoj3O57FvbqL+1fnm/N5HatNP5B73yYzn/+3m7+l9ma/0Sb+c9wm3P3Qdz//M9c34dqOkrnf/9subftTkv8DRMDjdwvanO+weT8hVIxHdt+GRFHY3A4zU/Vy7a9Q+borR9udaq/df73zavPvJnWn/7cLpG5nh3euc3cbHX2p8bddPNqxO+z7eJPx//hWv8nHea/Z7qs43//ePH1TuvS+NN4m8vd8R+szWsRf2rb/8lWmTQ1WV28OFlpd3/iZO1wmGweFG28NxNjnerPZbf7P13S+pu/C/RC2v9j945/Imm9X7PS9a63zoXPr41/1KlQ6/HfPv72x/9Q8mQtPdR47fJstbo8FTGU/P/u109sb9vMN8un8R/9Y/vzvzn+tTn+n0r3f67LNyJ746u3Hzz+g5XGP7en/t9zIkbuLAx0qr+7/p/esU0341+3DXzQ9w0AAAAAAAAAAAAAAAAAAAAAAAAA9iITEYcjyeS30plMPl//Du9fx1imVK5Uj50vryzNpetqzz/NNB91Od7yPNSpxvPwm/kTu/J/jYhfRcRrw6O1fL5QLs31O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaDjU4fv/U18O7yo80I8WAgAHYsQHOwA8bpJstt9NAAB6baTrkrmIGD3QtgAAvdH95z8A8Kjo/PnvwgAAPKru8/v/7v8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHt15vTpdNn8bmO9kObnLq2uLJQvHZ8rVhbyiyuFfKG8fDE/Xy7Pl4r5Qnkxsh12dKX+o1QuX5yOpZXLk9VipTpZWV07u1heWaqevbA4O188WxzsYWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0K3K6trC5nipuJwmZksSPU4sfFbvh59LeyT2logr9f7b1z1/evIPv0l32tcAY2h7lBjty9gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DD4MQAA//+KvR+l") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSRS485(r4, 0x542f, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f", 0x15, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg(r0, &(0x7f00000010c0), 0x1cf13bc0890a0d1, 0x0, 0x0) 1.909456338s ago: executing program 1 (id=802): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) setregid(0x0, 0x0) 1.798118829s ago: executing program 1 (id=803): r0 = io_uring_setup(0x324d, &(0x7f00000000c0)={0x0, 0x84b2, 0x1, 0x402, 0x2}) io_uring_enter(r0, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) 1.77975412s ago: executing program 0 (id=804): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x14552, &(0x7f0000000240)=ANY=[], 0x1, 0x11f3, &(0x7f0000001b80)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x77359400}}, 0x0) unshare(0x62040200) pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'raw\x00', 0x0, [0x0, 0x0, 0x0, 0x3f]}, &(0x7f0000000140)=0x54) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'nat\x00', 0x7003}, &(0x7f0000000100)=0x54) 1.656312661s ago: executing program 1 (id=805): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") creat(&(0x7f0000000180)='./file0\x00', 0x18) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000040)) 1.388429455s ago: executing program 1 (id=806): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x162) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0xf, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000125, 0x2000010) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lremovexattr(0x0, &(0x7f0000000900)=@known='security.selinux\x00') r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000001bc0)={0x2020}, 0x2020) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0xfffffffc, 0x0, 0x0, 0x5f7, 0x0, "10120dfe0ef7f0200000ff490a0080002a00"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, 0x0) 1.289608414s ago: executing program 4 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x200008, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x5, 0x7fffffff}}, 0x30) 1.00831607s ago: executing program 4 (id=808): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x400, 0x2) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000040)=0x6) 289.032364ms ago: executing program 4 (id=809): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) 271.361835ms ago: executing program 1 (id=810): syz_mount_image$hfsplus(&(0x7f00000004c0), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6004400, &(0x7f0000000a80)=ANY=[], 0x2, 0x65e, &(0x7f0000000f80)="$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") prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x0, 0x2db, &(0x7f0000001040)="$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") init_module(0x0, 0x82a, 0x0) 289.58µs ago: executing program 4 (id=811): unlink(&(0x7f0000000040)='./file0\x00') syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 0s ago: executing program 1 (id=812): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) setregid(0x0, 0x0) kernel console output (not intermixed with test programs): without journal. Opts: ,errors=continue. Quota mode: none. [ 115.628300][ T26] audit: type=1800 audit(1731125497.374:7): pid=5716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.373" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 115.782576][ T4218] usbhid 8-1:0.0: can't add hid device: -71 [ 115.789627][ T4218] usbhid: probe of 8-1:0.0 failed with error -71 [ 115.847062][ T4218] usb 8-1: USB disconnect, device number 2 [ 115.893749][ T3106] device hsr_slave_0 left promiscuous mode [ 115.919327][ T3106] device hsr_slave_1 left promiscuous mode [ 115.945264][ T5736] loop8: detected capacity change from 0 to 1764 [ 115.958728][ T3106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.977808][ T3106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.978004][ T5738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.995724][ T4850] Bluetooth: hci3: command 0x0419 tx timeout [ 116.012226][ T3106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.019666][ T3106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.029701][ T3106] device bridge_slave_1 left promiscuous mode [ 116.035985][ T3106] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.044905][ T3106] device bridge_slave_0 left promiscuous mode [ 116.052809][ T3106] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.077667][ T3106] device veth1_macvtap left promiscuous mode [ 116.086160][ T3106] device veth0_macvtap left promiscuous mode [ 116.093415][ T3106] device veth1_vlan left promiscuous mode [ 116.099644][ T3106] device veth0_vlan left promiscuous mode [ 116.277954][ T3106] team0 (unregistering): Port device team_slave_1 removed [ 116.298941][ T3106] team0 (unregistering): Port device team_slave_0 removed [ 116.319972][ T3106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.358713][ T3106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.476344][ T3106] bond0 (unregistering): Released all slaves [ 116.487142][ T5746] loop7: detected capacity change from 0 to 512 [ 116.538136][ T5750] loop3: detected capacity change from 0 to 512 [ 116.640845][ T5746] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.379: corrupted in-inode xattr [ 116.663283][ T5750] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.381: corrupted in-inode xattr [ 116.675521][ T5746] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.379: couldn't read orphan inode 15 (err -117) [ 116.694758][ T5750] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.381: couldn't read orphan inode 15 (err -117) [ 116.701644][ T5746] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.721460][ T5750] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 116.765607][ T5756] EXT4-fs error (device loop7): ext4_add_entry:2486: inode #2: comm syz.7.379: Directory hole found for htree leaf block 0 [ 116.804211][ T5454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.819864][ T5759] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.381: Directory hole found for htree leaf block 0 [ 116.821699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.121634][ T5760] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 117.330705][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.389874][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.7.383'. [ 117.461911][ T5769] loop3: detected capacity change from 0 to 512 [ 117.575620][ T5769] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.384: corrupted in-inode xattr [ 117.621664][ T5769] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.384: couldn't read orphan inode 15 (err -117) [ 117.680665][ T5769] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.842759][ T5798] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.384: Directory hole found for htree leaf block 0 [ 117.935916][ T5800] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.028725][ T5795] loop7: detected capacity change from 0 to 1764 [ 118.035417][ T5801] loop8: detected capacity change from 0 to 512 [ 118.104193][ T5801] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2219: inode #15: comm syz.8.392: corrupted in-inode xattr [ 118.125178][ T5801] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.392: couldn't read orphan inode 15 (err -117) [ 118.320530][ T5807] device syzkaller0 entered promiscuous mode [ 118.321374][ T5801] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.389467][ T5810] EXT4-fs error (device loop8): ext4_add_entry:2486: inode #2: comm syz.8.392: Directory hole found for htree leaf block 0 [ 118.462057][ T5811] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 118.575257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.618106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.864687][ T5818] loop7: detected capacity change from 0 to 512 [ 119.004829][ T5818] EXT4-fs (loop7): Unrecognized mount option "subj_type=*\[" or missing value [ 119.022914][ T5825] netlink: 'syz.3.400': attribute type 22 has an invalid length. [ 119.041949][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 119.064792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.092057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.120378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.157237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.176820][ T5454] device veth0_vlan entered promiscuous mode [ 119.224718][ T5818] loop7: detected capacity change from 0 to 256 [ 119.235832][ T5831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.402'. [ 119.267622][ T5818] exfat: Bad value for 'uid' [ 119.382843][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 119.398586][ T5454] device veth1_vlan entered promiscuous mode [ 119.413815][ T5833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'. [ 119.445725][ T5838] loop3: detected capacity change from 0 to 512 [ 119.460005][ T5833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'. [ 119.502978][ T5454] device veth0_macvtap entered promiscuous mode [ 119.510882][ T5840] loop7: detected capacity change from 0 to 1764 [ 119.527681][ T5833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'. [ 119.585263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.605923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.637989][ T5838] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.404: corrupted in-inode xattr [ 119.657628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.666906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.693277][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.717592][ T5454] device veth1_macvtap entered promiscuous mode [ 119.732358][ T5838] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.404: couldn't read orphan inode 15 (err -117) [ 119.746192][ T5838] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.757368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.812514][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.826796][ T5858] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.404: Directory hole found for htree leaf block 0 [ 119.881436][ T5854] loop2: detected capacity change from 0 to 512 [ 119.883466][ T5859] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 120.028411][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.102406][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.202389][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.250859][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.311633][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.336716][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.377095][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.455779][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.487878][ T5854] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.407: corrupted in-inode xattr [ 120.531892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.555879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.579900][ T5854] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.407: couldn't read orphan inode 15 (err -117) [ 120.625076][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.668614][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.689105][ T5854] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 120.726810][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.772046][ T5889] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.407: Directory hole found for htree leaf block 0 [ 120.860997][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.976804][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.064700][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.102069][ T5895] loop7: detected capacity change from 0 to 1024 [ 121.166374][ T5454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.245736][ T5454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.269662][ T5454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.301117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.310370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.357727][ T5454] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.388443][ T5454] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.424057][ T5454] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.461073][ T5454] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.519446][ T5902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 121.552450][ T5902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 121.599070][ T5907] loop8: detected capacity change from 0 to 1764 [ 121.659273][ T5910] loop3: detected capacity change from 0 to 512 [ 121.661650][ T5902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.416'. [ 121.728148][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.742958][ T5910] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.419: corrupted in-inode xattr [ 121.744732][ T5918] netlink: 76 bytes leftover after parsing attributes in process `syz.7.420'. [ 121.815061][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.899362][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.909273][ T5910] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.419: couldn't read orphan inode 15 (err -117) [ 121.931387][ T5910] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 121.956927][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.978125][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.015316][ T5936] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.419: Directory hole found for htree leaf block 0 [ 122.116698][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 122.124918][ T5939] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 122.529268][ T5943] loop7: detected capacity change from 0 to 2048 [ 122.643856][ T5943] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 122.659692][ T5956] loop9: detected capacity change from 0 to 512 [ 122.722874][ T5953] loop3: detected capacity change from 0 to 1024 [ 122.763085][ T5956] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 122.771147][ T5943] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 122.773743][ T5956] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.313: invalid indirect mapped block 8 (level 2) [ 122.806859][ T5956] EXT4-fs (loop9): Remounting filesystem read-only [ 122.814748][ T5956] EXT4-fs (loop9): 1 truncate cleaned up [ 122.820420][ T5956] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x000000000000b676,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 122.854056][ T5967] loop2: detected capacity change from 0 to 1764 [ 123.002253][ T5454] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 123.697041][ T5973] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 123.772743][ T5454] EXT4-fs (loop9): Remounting filesystem read-only [ 123.898996][ T5454] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 123.984818][ T5454] EXT4-fs (loop9): Remounting filesystem read-only [ 124.032870][ T5454] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 124.118602][ T5454] EXT4-fs (loop9): Remounting filesystem read-only [ 124.151302][ T4850] Bluetooth: hci3: command 0x0405 tx timeout [ 124.151629][ T5454] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 124.225283][ T5987] __nla_validate_parse: 3 callbacks suppressed [ 124.225300][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.7.437'. [ 124.254684][ T5454] EXT4-fs (loop9): Remounting filesystem read-only [ 124.360940][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 124.764223][ T6015] loop7: detected capacity change from 0 to 512 [ 124.775317][ T4284] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.786461][ T6017] loop2: detected capacity change from 0 to 1764 [ 124.887464][ T4284] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.910464][ T6015] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 124.961922][ T6015] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #13: comm syz.7.443: invalid indirect mapped block 8 (level 2) [ 125.070756][ T4284] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.121171][ T6015] EXT4-fs (loop7): Remounting filesystem read-only [ 125.144329][ T6032] netlink: 'syz.2.452': attribute type 22 has an invalid length. [ 125.175915][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.452'. [ 125.196601][ T6022] loop3: detected capacity change from 0 to 1024 [ 125.202200][ T6015] EXT4-fs (loop7): 1 truncate cleaned up [ 125.215904][ T4284] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.216569][ T6015] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x000000000000b676,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 125.425614][ T6041] syz.8.454[6041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.425730][ T6041] syz.8.454[6041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.480605][ T6040] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 125.605069][ T4957] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 125.651394][ T6050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.670603][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz.8.456'. [ 125.687959][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.8.456'. [ 125.697957][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.8.456'. [ 125.719236][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.8.456'. [ 125.754851][ T4957] EXT4-fs (loop7): Remounting filesystem read-only [ 125.768013][ T4957] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 125.784663][ T4957] EXT4-fs (loop7): Remounting filesystem read-only [ 125.800054][ T4957] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 125.831092][ T4957] EXT4-fs (loop7): Remounting filesystem read-only [ 125.841859][ T4957] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 125.871783][ T4957] EXT4-fs (loop7): Remounting filesystem read-only [ 126.010863][ T6053] loop8: detected capacity change from 0 to 1764 [ 126.166351][ T6039] chnl_net:caif_netlink_parms(): no params data found [ 126.353826][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.369652][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.387966][ T6069] loop2: detected capacity change from 0 to 512 [ 126.395901][ T6039] device bridge_slave_0 entered promiscuous mode [ 126.402464][ T4219] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.438384][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.456449][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.471819][ T6039] device bridge_slave_1 entered promiscuous mode [ 126.516501][ T6069] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 126.565259][ T6069] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.466: invalid indirect mapped block 8 (level 2) [ 126.602190][ T6039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.618604][ T6069] EXT4-fs (loop2): Remounting filesystem read-only [ 126.625579][ T6069] EXT4-fs (loop2): 1 truncate cleaned up [ 126.631976][ T6069] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x000000000000b676,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 126.639095][ T6039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.700306][ T4171] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 126.763146][ T4171] EXT4-fs (loop2): Remounting filesystem read-only [ 126.779160][ T4171] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 126.808598][ T6039] team0: Port device team_slave_0 added [ 126.819807][ T6039] team0: Port device team_slave_1 added [ 126.826482][ T4171] EXT4-fs (loop2): Remounting filesystem read-only [ 126.840289][ T4171] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 126.842097][ T4219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.864280][ T4219] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.882489][ T4219] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 126.891751][ T4219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.905099][ T4171] EXT4-fs (loop2): Remounting filesystem read-only [ 126.911306][ T4219] usb 4-1: config 0 descriptor?? [ 126.918036][ T4171] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 126.940197][ T4171] EXT4-fs (loop2): Remounting filesystem read-only [ 126.966143][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.977817][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.011735][ T6039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.070260][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.077995][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.105157][ T6039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.139241][ T4284] device hsr_slave_0 left promiscuous mode [ 127.146884][ T4284] device hsr_slave_1 left promiscuous mode [ 127.157849][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.167717][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.176022][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.183974][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.200331][ T4284] device bridge_slave_1 left promiscuous mode [ 127.208728][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.230667][ T4284] device bridge_slave_0 left promiscuous mode [ 127.238788][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.259927][ T4284] device veth1_macvtap left promiscuous mode [ 127.269102][ T4284] device veth0_macvtap left promiscuous mode [ 127.276059][ T4284] device veth1_vlan left promiscuous mode [ 127.282010][ T4284] device veth0_vlan left promiscuous mode [ 127.308548][ T6077] loop8: detected capacity change from 0 to 1024 [ 127.451335][ T4219] usbhid 4-1:0.0: can't add hid device: -71 [ 127.458448][ T4219] usbhid: probe of 4-1:0.0 failed with error -71 [ 127.543359][ T4219] usb 4-1: USB disconnect, device number 3 [ 127.555726][ T4218] Bluetooth: hci3: command 0x0409 tx timeout [ 127.595401][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 127.608970][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 127.630038][ T6082] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 127.643201][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.670887][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.808370][ T4284] bond0 (unregistering): Released all slaves [ 128.056303][ T6084] loop3: detected capacity change from 0 to 1764 [ 128.118490][ T6039] device hsr_slave_0 entered promiscuous mode [ 128.143759][ T6039] device hsr_slave_1 entered promiscuous mode [ 128.447277][ T6094] loop3: detected capacity change from 0 to 512 [ 128.603738][ T6074] chnl_net:caif_netlink_parms(): no params data found [ 128.614795][ T6094] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.475: corrupted inode contents [ 128.633582][ T6094] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #3: comm syz.3.475: mark_inode_dirty error [ 128.664596][ T6094] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #3: comm syz.3.475: corrupted inode contents [ 128.679942][ T6099] loop8: detected capacity change from 0 to 512 [ 128.686465][ T6094] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #3: comm syz.3.475: mark_inode_dirty error [ 128.705703][ T6094] Quota error (device loop3): write_blk: dquota write failed [ 128.713666][ T6094] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 128.734616][ T6094] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.475: Failed to acquire dquot type 0 [ 128.754599][ T6094] EXT4-fs (loop3): 1 orphan inode deleted [ 128.771705][ T6094] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 128.783250][ T6094] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.790999][ T6099] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 128.816778][ T6099] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.476: invalid indirect mapped block 8 (level 2) [ 128.834668][ T6099] EXT4-fs (loop8): Remounting filesystem read-only [ 128.853337][ T6099] EXT4-fs (loop8): 1 truncate cleaned up [ 128.859020][ T6099] EXT4-fs (loop8): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x000000000000b676,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 128.880790][ T4218] Bluetooth: hci2: command 0x0409 tx timeout [ 129.070586][ T5089] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 129.241532][ T5089] EXT4-fs (loop8): Remounting filesystem read-only [ 129.285336][ T5089] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 129.330831][ T5089] EXT4-fs (loop8): Remounting filesystem read-only [ 129.356260][ T5089] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 129.388353][ T5089] EXT4-fs (loop8): Remounting filesystem read-only [ 129.408410][ T5089] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 129.441081][ T5089] EXT4-fs (loop8): Remounting filesystem read-only [ 129.506952][ T6074] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.514825][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.523573][ T6074] device bridge_slave_0 entered promiscuous mode [ 129.591127][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 129.599913][ T6074] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.617759][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.627506][ T6074] device bridge_slave_1 entered promiscuous mode [ 129.790567][ T6074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.969571][ T6089] chnl_net:caif_netlink_parms(): no params data found [ 130.015054][ T6074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.040876][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 130.090976][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.478'. [ 130.100097][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.478'. [ 130.121123][ T6110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.478'. [ 130.142977][ T6074] team0: Port device team_slave_0 added [ 130.193806][ T6074] team0: Port device team_slave_1 added [ 130.230934][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.406752][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.418250][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.456937][ T6074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.489885][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.498279][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.514044][ T6089] device bridge_slave_0 entered promiscuous mode [ 130.541650][ T6074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.548604][ T6074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.575339][ T4219] Bluetooth: hci1: command 0x0409 tx timeout [ 130.593194][ T6074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.624258][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.632060][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.640539][ T6089] device bridge_slave_1 entered promiscuous mode [ 130.682786][ T6039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.712926][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 130.760267][ T6039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.781283][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.794142][ T6074] device hsr_slave_0 entered promiscuous mode [ 130.800974][ T6074] device hsr_slave_1 entered promiscuous mode [ 130.815266][ T6074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.823111][ T6074] Cannot create hsr debugfs directory [ 130.830314][ T6039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.845242][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.882794][ T6039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.927899][ T6089] team0: Port device team_slave_0 added [ 130.951805][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 130.962222][ T6089] team0: Port device team_slave_1 added [ 131.084959][ T6115] chnl_net:caif_netlink_parms(): no params data found [ 131.116058][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.130481][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.157331][ T6089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.193831][ T6039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.227051][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.239199][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.301426][ T6089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.302459][ T6128] loop3: detected capacity change from 0 to 512 [ 131.360683][ T6128] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 131.377079][ T6128] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.484: invalid indirect mapped block 8 (level 2) [ 131.395889][ T6128] EXT4-fs (loop3): Remounting filesystem read-only [ 131.403144][ T6128] EXT4-fs (loop3): 1 truncate cleaned up [ 131.416652][ T6128] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000008001,journal_dev=0x000000000000b676,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 131.429007][ T6039] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.472085][ T4185] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 131.497109][ T4284] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.505624][ T4185] EXT4-fs (loop3): Remounting filesystem read-only [ 131.525556][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.526131][ T4185] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 131.534206][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.559442][ T4185] EXT4-fs (loop3): Remounting filesystem read-only [ 131.570921][ T4185] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 131.592063][ T4185] EXT4-fs (loop3): Remounting filesystem read-only [ 131.599239][ T4185] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz-executor: corrupted in-inode xattr [ 131.619925][ T4185] EXT4-fs (loop3): Remounting filesystem read-only [ 131.661185][ T6089] device hsr_slave_0 entered promiscuous mode [ 131.668783][ T6089] device hsr_slave_1 entered promiscuous mode [ 131.675128][ T4869] Bluetooth: hci3: command 0x040f tx timeout [ 131.684195][ T6089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.692340][ T6089] Cannot create hsr debugfs directory [ 131.709433][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.718326][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.727595][ T3106] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.734688][ T3106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.769175][ T4284] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.791288][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.799343][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.808461][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.817366][ T3106] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.824443][ T3106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.836383][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.907283][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.916223][ T6115] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.926964][ T6115] device bridge_slave_0 entered promiscuous mode [ 131.938139][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.968417][ T4284] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.082943][ T6115] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.090037][ T6115] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.106133][ T6115] device bridge_slave_1 entered promiscuous mode [ 132.154737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.166950][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.185205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.220800][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.229818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.252412][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.261205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.270640][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.295663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.336967][ T4284] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.391229][ T4869] Bluetooth: hci0: command 0x0409 tx timeout [ 132.420070][ T6115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.462551][ T6115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.548811][ T6115] team0: Port device team_slave_0 added [ 132.602298][ T6115] team0: Port device team_slave_1 added [ 132.635697][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.642039][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.650486][ T4869] Bluetooth: hci1: command 0x041b tx timeout [ 132.705035][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.716432][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.749601][ T6115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.771927][ T6115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.778885][ T6115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.806192][ T6115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.864475][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.872439][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.904109][ T4284] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.927808][ T6039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.993050][ T4284] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.009572][ T6115] device hsr_slave_0 entered promiscuous mode [ 133.017890][ T6115] device hsr_slave_1 entered promiscuous mode [ 133.025016][ T6115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.033178][ T4869] Bluetooth: hci2: command 0x040f tx timeout [ 133.039782][ T6115] Cannot create hsr debugfs directory [ 133.085445][ T4284] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.182459][ T4284] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.258412][ T6154] chnl_net:caif_netlink_parms(): no params data found [ 133.330004][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.338960][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.395053][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.409547][ T6154] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.417925][ T6154] device bridge_slave_0 entered promiscuous mode [ 133.426735][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.434685][ T6154] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.442844][ T6154] device bridge_slave_1 entered promiscuous mode [ 133.473825][ T6074] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.523953][ T6154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.535031][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.546474][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.557335][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.565310][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.595738][ T4284] tipc: Left network mode [ 133.598035][ T6074] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.623218][ T6154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.637848][ T6039] device veth0_vlan entered promiscuous mode [ 133.674710][ T6074] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.684183][ T6074] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.720691][ T6154] team0: Port device team_slave_0 added [ 133.751256][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 133.758753][ T6154] team0: Port device team_slave_1 added [ 133.785645][ T6039] device veth1_vlan entered promiscuous mode [ 133.844476][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.853706][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.881604][ T6154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.897416][ T6154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.904849][ T6154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.932942][ T6154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.012083][ T6039] device veth0_macvtap entered promiscuous mode [ 134.046564][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 134.057000][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 134.069452][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 134.078590][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 134.087476][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 134.133410][ T6039] device veth1_macvtap entered promiscuous mode [ 134.154517][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.168439][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.179780][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.190389][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.200321][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.210973][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.220850][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.232447][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.243894][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.255512][ T6154] device hsr_slave_0 entered promiscuous mode [ 134.262902][ T6154] device hsr_slave_1 entered promiscuous mode [ 134.269389][ T6154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.277344][ T6154] Cannot create hsr debugfs directory [ 134.338643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 134.350029][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 134.359062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 134.372359][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.385234][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.395317][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.406349][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.416269][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.426737][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.437358][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.447868][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.458724][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.471534][ T4850] Bluetooth: hci0: command 0x041b tx timeout [ 134.496986][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 134.505968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.521830][ T6039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.530772][ T6039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.539826][ T6039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.548615][ T6039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.561539][ T4176] Bluetooth: hci4: command 0x0409 tx timeout [ 134.608947][ T6074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.711486][ T4176] Bluetooth: hci1: command 0x040f tx timeout [ 134.719697][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 134.729692][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 134.751428][ T6074] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.814093][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 134.823142][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 134.834167][ T4868] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.841257][ T4868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.856632][ T3106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.868023][ T3106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.886272][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 134.895372][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 134.908184][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 134.917832][ T4868] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.924934][ T4868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.934360][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 134.945516][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 134.956224][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 135.007612][ T6074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.018326][ T6074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.040763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.063644][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.076276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.085302][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.093987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 135.102594][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.110868][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 135.119936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.121486][ T4202] Bluetooth: hci2: command 0x0419 tx timeout [ 135.165690][ T3106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.175182][ T3106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.186033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.197730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.206738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.293894][ T6089] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.309874][ T6089] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.373060][ T6089] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.392203][ T6089] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.446175][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 135.455425][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.478347][ T6074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.591146][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.617922][ T3106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.760265][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.775616][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.786755][ T6074] device veth0_vlan entered promiscuous mode [ 135.840654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.849538][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.862154][ T6074] device veth1_vlan entered promiscuous mode [ 135.903565][ T4284] device hsr_slave_0 left promiscuous mode [ 135.929262][ T4284] device hsr_slave_1 left promiscuous mode [ 135.939137][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.947549][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.956158][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.964982][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.973852][ T4284] device bridge_slave_1 left promiscuous mode [ 135.980051][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.988722][ T4284] device bridge_slave_0 left promiscuous mode [ 135.995346][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.008334][ T4284] device hsr_slave_0 left promiscuous mode [ 136.016073][ T4284] device hsr_slave_1 left promiscuous mode [ 136.022574][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.029980][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.037772][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.046126][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.053881][ T4284] device bridge_slave_1 left promiscuous mode [ 136.060009][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.069709][ T4284] device bridge_slave_0 left promiscuous mode [ 136.076832][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.089115][ T4284] device veth1_macvtap left promiscuous mode [ 136.096130][ T4284] device veth0_macvtap left promiscuous mode [ 136.102410][ T4284] device veth1_vlan left promiscuous mode [ 136.108206][ T4284] device veth0_vlan left promiscuous mode [ 136.115400][ T4284] device veth1_macvtap left promiscuous mode [ 136.121912][ T4284] device veth0_macvtap left promiscuous mode [ 136.128138][ T4284] device veth1_vlan left promiscuous mode [ 136.134107][ T4284] device veth0_vlan left promiscuous mode [ 136.386172][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 136.400510][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 136.414484][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.429712][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.494753][ T4284] bond0 (unregistering): Released all slaves [ 136.551457][ T5321] Bluetooth: hci0: command 0x040f tx timeout [ 136.627937][ T4284] team0 (unregistering): Port device team_slave_1 removed [ 136.635632][ T1106] Bluetooth: hci4: command 0x041b tx timeout [ 136.654809][ T4284] team0 (unregistering): Port device team_slave_0 removed [ 136.667077][ T4284] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.681439][ T4284] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.744436][ T4284] bond0 (unregistering): Released all slaves [ 136.791447][ T1106] Bluetooth: hci1: command 0x0419 tx timeout [ 136.808487][ T6115] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 136.841927][ T6224] netlink: 'syz.4.493': attribute type 4 has an invalid length. [ 136.864736][ T6225] netlink: 'syz.4.493': attribute type 4 has an invalid length. [ 136.875195][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.884336][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.909040][ T6115] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 136.935528][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.959840][ T6074] device veth0_macvtap entered promiscuous mode [ 137.000685][ T6115] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.025853][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 137.034954][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 137.047544][ T6231] device hsr_slave_0 left promiscuous mode [ 137.056842][ T6231] device hsr_slave_1 left promiscuous mode [ 137.086883][ T6074] device veth1_macvtap entered promiscuous mode [ 137.095500][ T6115] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.109448][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.118217][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.147975][ T6089] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.175285][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.190438][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.224071][ T6154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.242059][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.252156][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.260485][ T4286] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.267556][ T4286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.284618][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.293421][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.302804][ T4286] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.309865][ T4286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.317957][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.341679][ T6154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 137.374150][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.384072][ T6154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 137.422673][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.441503][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.461074][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.476558][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.486740][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.501149][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.512649][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.533863][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.562332][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.580811][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.596666][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.607283][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.619120][ T6154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.634324][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.656139][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.666497][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.680351][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.690453][ T6074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.701068][ T6074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.713663][ T6074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.732142][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.739965][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.749681][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.776906][ T6074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.791164][ T6074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.799872][ T6074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.838213][ T6074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.862938][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.882642][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.900696][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.911274][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.919647][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.939691][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.958763][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.497'. [ 138.029066][ T6115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.086699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.111923][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.169277][ T6115] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.260012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.271512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.294651][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.302009][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.350342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.369619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.386105][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.393220][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.402812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.411752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.426836][ T6154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.453144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.465205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.477870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.488073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.496321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.510527][ T4286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.534163][ T4286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.551764][ T6154] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.563755][ T6089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.578873][ T6115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 138.614824][ T6115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.632032][ T4174] Bluetooth: hci0: command 0x0419 tx timeout [ 138.636424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.652000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 138.668476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.668493][ T6250] 9pnet: p9_errstr2errno: server reported unknown error [ 138.678586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.707635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.715609][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 138.743510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.759972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.770692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.801450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.821260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.872903][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.910244][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.928618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.980161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.988657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.015425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.059866][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.066992][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.076389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.087171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.119767][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.119833][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.120305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.132415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.133269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.299588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.321880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.359242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.387272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.396379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.405692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.422440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.441429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.454566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.481836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.498170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.516338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.535814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.562597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.570502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.609213][ T6089] device veth0_vlan entered promiscuous mode [ 139.625149][ T6154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.679075][ T6115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.704281][ T6089] device veth1_vlan entered promiscuous mode [ 139.730403][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.743962][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.774068][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.895863][ T6089] device veth0_macvtap entered promiscuous mode [ 139.942835][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.023308][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.079654][ T6310] 9pnet: p9_errstr2errno: server reported unknown error [ 140.088051][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.129015][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.166087][ T6089] device veth1_macvtap entered promiscuous mode [ 140.205504][ T6311] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 140.238861][ T6318] IPVS: length: 33 != 24 [ 140.253300][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.261952][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.387360][ T6311] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.394566][ T6311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.403212][ T6311] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.410372][ T6311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.449011][ T6311] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 140.489092][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 140.541875][ T6314] device bridge_slave_1 left promiscuous mode [ 140.548058][ T6314] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.564449][ T6314] device bridge_slave_0 left promiscuous mode [ 140.583600][ T6314] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.647166][ T6314] bond0: (slave bridge0): Releasing backup interface [ 140.717863][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.754871][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.786862][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.797643][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 140.834870][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.866683][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.910145][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.929871][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.949478][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.970938][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.002495][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.017147][ T6154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.072636][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.102732][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.142736][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.160172][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.187720][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 141.224883][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.244024][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.265608][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.307165][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.337140][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.384697][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.436898][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.475871][ T6089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.536569][ T6089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.576381][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.619006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.656163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.705836][ T6089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.731143][ T6089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.759233][ T6089] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.792528][ T6089] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.833418][ T6115] device veth0_vlan entered promiscuous mode [ 141.859855][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.878193][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.923497][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.965108][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.000638][ T6115] device veth1_vlan entered promiscuous mode [ 142.102499][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 142.131986][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.184594][ T6115] device veth0_macvtap entered promiscuous mode [ 142.231412][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.239486][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.254396][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 142.282809][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 142.306984][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 142.343174][ T6115] device veth1_macvtap entered promiscuous mode [ 142.383449][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 142.418076][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.439022][ T4286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.450246][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.469207][ T4286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.507715][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.527950][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.548710][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.559262][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.569867][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.581131][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.600248][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.624826][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.638421][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.658023][ T6115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.683910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.722500][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.734954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.743982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 142.752848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 142.772137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 142.794178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 142.885439][ T6154] device veth0_vlan entered promiscuous mode [ 142.894797][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.938398][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.975631][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.007371][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.028809][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.049636][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.060005][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.080007][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.101294][ T6115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.127071][ T6115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.150973][ T6115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.166872][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.196794][ T4286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.306024][ T6115] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.325061][ T6115] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.365567][ T6115] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.395924][ T6115] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.424700][ T6154] device veth1_vlan entered promiscuous mode [ 143.578264][ T6154] device veth0_macvtap entered promiscuous mode [ 143.619806][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.641825][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 143.682098][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 143.763538][ T6154] device veth1_macvtap entered promiscuous mode [ 143.800958][ T6453] loop1: detected capacity change from 0 to 512 [ 143.819796][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.854144][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.861383][ T6456] loop0: detected capacity change from 0 to 512 [ 143.884956][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.887516][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.916666][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.943945][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.961117][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.975879][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.985878][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.006759][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.018080][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.035451][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.067418][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.081304][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.098831][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.131218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.139281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.160463][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.183147][ T6456] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.530: corrupted in-inode xattr [ 144.185747][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.201838][ T6453] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.529: corrupted in-inode xattr [ 144.220998][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.235480][ T6456] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.530: couldn't read orphan inode 15 (err -117) [ 144.247266][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.247292][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.247308][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.247324][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.247336][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.247353][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.247365][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.247387][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.247398][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.247413][ T6154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.247424][ T6154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.248774][ T6154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.280037][ T6453] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.529: couldn't read orphan inode 15 (err -117) [ 144.294097][ T6154] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.390964][ T6154] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.400741][ T6154] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.409539][ T6456] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.412595][ T6453] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.425768][ T6154] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.465150][ T6485] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.530: Directory hole found for htree leaf block 0 [ 144.489103][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.527704][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.528622][ T6488] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 144.658920][ T6491] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.529: Directory hole found for htree leaf block 0 [ 144.872126][ T6492] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.036318][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.040750][ T6490] device vlan2 entered promiscuous mode [ 145.059831][ T6490] device xfrm0 entered promiscuous mode [ 145.084611][ T6490] team0: Device vlan2 is up. Set it down before adding it as a team port [ 145.095498][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.105615][ T6490] device xfrm0 left promiscuous mode [ 145.207719][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.469277][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.500330][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.560286][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.571229][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.583967][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.627167][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.679816][ T6523] loop1: detected capacity change from 0 to 512 [ 145.699600][ T6527] loop6: detected capacity change from 0 to 512 [ 145.735567][ T6523] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.546: corrupted in-inode xattr [ 145.748787][ T6523] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.546: couldn't read orphan inode 15 (err -117) [ 145.778533][ T6523] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.798364][ T6536] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.546: Directory hole found for htree leaf block 0 [ 145.857612][ T6527] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.547: corrupted in-inode xattr [ 145.865904][ T6537] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.949479][ T6527] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.547: couldn't read orphan inode 15 (err -117) [ 146.051386][ T6527] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 146.312939][ T6545] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.547: Directory hole found for htree leaf block 0 [ 146.386678][ T6550] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 146.391478][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 146.912688][ T6574] loop6: detected capacity change from 0 to 512 [ 147.026954][ T6574] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.556: corrupted in-inode xattr [ 147.061778][ T6574] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.556: couldn't read orphan inode 15 (err -117) [ 147.099465][ T6574] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.122545][ T6588] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.556: Directory hole found for htree leaf block 0 [ 147.188595][ T6589] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 147.598594][ T6595] loop4: detected capacity change from 0 to 512 [ 147.612752][ T6597] loop1: detected capacity change from 0 to 512 [ 147.657186][ T6597] EXT4-fs (loop1): Unrecognized mount option "subj_type=*\[" or missing value [ 147.707159][ T6595] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.565: corrupted inode contents [ 147.779646][ T6595] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #3: comm syz.4.565: mark_inode_dirty error [ 147.832302][ T6595] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.565: corrupted inode contents [ 147.865585][ T6597] loop1: detected capacity change from 0 to 256 [ 147.901993][ T6597] exfat: Bad value for 'uid' [ 147.990594][ T6595] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.565: mark_inode_dirty error [ 148.026613][ T6619] loop0: detected capacity change from 0 to 1024 [ 148.047910][ T6595] Quota error (device loop4): write_blk: dquota write failed [ 148.062167][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 148.076344][ T6628] loop6: detected capacity change from 0 to 512 [ 148.084621][ T6595] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 148.099754][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 148.111111][ T6595] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.565: Failed to acquire dquot type 0 [ 148.131624][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 148.143120][ T6595] EXT4-fs (loop4): 1 orphan inode deleted [ 148.150284][ T6595] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 148.175750][ T6623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 148.186479][ T6595] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.204353][ T6628] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.574: corrupted in-inode xattr [ 148.246791][ T6628] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.574: couldn't read orphan inode 15 (err -117) [ 148.323022][ T6628] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.389704][ T6640] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.574: Directory hole found for htree leaf block 0 [ 148.460709][ T6643] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 149.118399][ T6645] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 149.778148][ T6659] loop0: detected capacity change from 0 to 1764 [ 149.922681][ T6672] loop6: detected capacity change from 0 to 512 [ 149.955241][ T6672] EXT4-fs (loop6): Unrecognized mount option "subj_type=*\[" or missing value [ 150.076378][ T6672] loop6: detected capacity change from 0 to 256 [ 150.130441][ T6672] exfat: Bad value for 'uid' [ 150.145146][ T6690] loop4: detected capacity change from 0 to 512 [ 150.231729][ T6690] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.587: corrupted in-inode xattr [ 150.271530][ T6690] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.587: couldn't read orphan inode 15 (err -117) [ 150.272240][ T6692] loop0: detected capacity change from 0 to 2048 [ 150.296465][ T6690] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.327365][ T6703] team0: Port device vlan2 added [ 150.328608][ T6692] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 150.401630][ T6710] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.587: Directory hole found for htree leaf block 0 [ 150.406008][ T6690] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 150.461640][ T6692] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 150.513662][ T6705] loop6: detected capacity change from 0 to 1024 [ 150.824546][ T6725] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 150.861278][ T6720] loop1: detected capacity change from 0 to 1764 [ 151.176074][ T6733] loop4: detected capacity change from 0 to 512 [ 151.229360][ T6735] loop1: detected capacity change from 0 to 512 [ 151.263572][ T6733] EXT4-fs (loop4): Unrecognized mount option "subj_type=*\[" or missing value [ 151.329770][ T6735] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.599: corrupted in-inode xattr [ 151.368672][ T4728] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.380259][ T6733] loop4: detected capacity change from 0 to 256 [ 151.423348][ T6743] loop0: detected capacity change from 0 to 512 [ 151.440986][ T6735] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.599: couldn't read orphan inode 15 (err -117) [ 151.448711][ T6735] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.459232][ T6746] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.599: Directory hole found for htree leaf block 0 [ 151.533501][ T6747] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 151.756876][ T6733] exfat: Bad value for 'uid' [ 152.060868][ T6743] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.603: corrupted in-inode xattr [ 152.068536][ T6743] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.603: couldn't read orphan inode 15 (err -117) [ 152.088671][ T6743] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.290768][ T6752] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.603: Directory hole found for htree leaf block 0 [ 152.295033][ T6743] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 152.627791][ T6763] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.658181][ T6764] loop0: detected capacity change from 0 to 1764 [ 152.885011][ T6778] loop1: detected capacity change from 0 to 512 [ 152.900048][ T6780] loop6: detected capacity change from 0 to 512 [ 152.986677][ T6780] EXT4-fs (loop6): Unrecognized mount option "subj_type=*\[" or missing value [ 153.026116][ T6778] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.616: corrupted in-inode xattr [ 153.090120][ T6778] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.616: couldn't read orphan inode 15 (err -117) [ 153.134760][ T6780] loop6: detected capacity change from 0 to 256 [ 153.198774][ T6778] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.241928][ T6780] exfat: Bad value for 'uid' [ 153.281211][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.305103][ T6803] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.616: Directory hole found for htree leaf block 0 [ 153.320783][ T6778] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 153.328982][ T6793] loop5: detected capacity change from 0 to 1024 [ 153.343963][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 153.380063][ T6795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 153.419174][ T6799] loop4: detected capacity change from 0 to 1764 [ 153.443183][ T6795] device bridge_slave_0 left promiscuous mode [ 153.463977][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.524020][ T6795] device bridge_slave_1 left promiscuous mode [ 153.563032][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.618345][ T6795] bond0: (slave bond_slave_0): Releasing backup interface [ 153.695234][ T6795] bond0: (slave bond_slave_1): Releasing backup interface [ 153.820825][ T6795] team0: Port device team_slave_0 removed [ 153.852520][ T6795] team0: Port device team_slave_1 removed [ 153.859199][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.874220][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.898446][ T6795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.913979][ T6795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.939294][ T6804] netlink: 'syz.0.623': attribute type 10 has an invalid length. [ 153.965063][ T6804] netlink: 2 bytes leftover after parsing attributes in process `syz.0.623'. [ 153.997808][ T6804] device team0 entered promiscuous mode [ 154.013521][ T6804] bridge0: port 1(team0) entered blocking state [ 154.020288][ T6804] bridge0: port 1(team0) entered disabled state [ 154.042962][ T6804] bridge0: port 1(team0) entered blocking state [ 154.049308][ T6804] bridge0: port 1(team0) entered forwarding state [ 154.113763][ T4282] bridge0: port 1(team0) entered disabled state [ 154.329157][ T6843] loop4: detected capacity change from 0 to 512 [ 154.421888][ T6843] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.631: corrupted in-inode xattr [ 154.449058][ T6843] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.631: couldn't read orphan inode 15 (err -117) [ 154.683288][ T6843] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.065207][ T6859] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.631: Directory hole found for htree leaf block 0 [ 155.206183][ T6862] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.509920][ T6870] loop0: detected capacity change from 0 to 512 [ 155.541347][ T6867] loop1: detected capacity change from 0 to 512 [ 155.610992][ T6870] EXT4-fs (loop0): Unrecognized mount option "subj_type=*\[" or missing value [ 155.633959][ T6867] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.636: corrupted in-inode xattr [ 155.668358][ T6878] loop4: detected capacity change from 0 to 512 [ 155.677104][ T6867] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.636: couldn't read orphan inode 15 (err -117) [ 155.696748][ T6867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.723001][ T6883] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.636: Directory hole found for htree leaf block 0 [ 155.740060][ T6867] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 155.745412][ T6880] loop6: detected capacity change from 0 to 1764 [ 155.808051][ T6870] loop0: detected capacity change from 0 to 256 [ 155.889865][ T6878] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.640: corrupted inode contents [ 155.901788][ T6870] exfat: Bad value for 'uid' [ 155.925709][ T6878] EXT4-fs error (device loop4): ext4_dirty_inode:6010: inode #3: comm syz.4.640: mark_inode_dirty error [ 156.000442][ T6878] EXT4-fs error (device loop4): ext4_do_update_inode:5174: inode #3: comm syz.4.640: corrupted inode contents [ 156.025715][ T6893] device syzkaller0 entered promiscuous mode [ 156.087673][ T6878] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #3: comm syz.4.640: mark_inode_dirty error [ 156.172572][ T6878] Quota error (device loop4): write_blk: dquota write failed [ 156.190508][ T6878] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 156.203225][ T6903] sctp: [Deprecated]: syz.0.646 (pid 6903) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.203225][ T6903] Use struct sctp_sack_info instead [ 156.254563][ T6878] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.640: Failed to acquire dquot type 0 [ 156.517870][ T6878] EXT4-fs (loop4): 1 orphan inode deleted [ 156.698327][ T6878] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.931243][ T6878] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.989055][ T6920] loop0: detected capacity change from 0 to 512 [ 157.199461][ T6920] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.650: corrupted in-inode xattr [ 157.213625][ T5321] Bluetooth: hci4: command 0x0405 tx timeout [ 157.241721][ T6920] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.650: couldn't read orphan inode 15 (err -117) [ 157.293442][ T6920] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.347897][ T6942] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.650: Directory hole found for htree leaf block 0 [ 157.413040][ T6944] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 157.816704][ T6949] loop6: detected capacity change from 0 to 512 [ 157.892647][ T6949] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.654: corrupted in-inode xattr [ 157.896009][ T6951] loop1: detected capacity change from 0 to 1764 [ 157.925242][ T6956] loop0: detected capacity change from 0 to 512 [ 157.951395][ T6949] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.654: couldn't read orphan inode 15 (err -117) [ 157.961244][ T6949] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.055578][ T6956] EXT4-fs (loop0): Unrecognized mount option "subj_type=*\[" or missing value [ 158.088313][ T6961] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.654: Directory hole found for htree leaf block 0 [ 158.105605][ T6949] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 158.270863][ T6956] loop0: detected capacity change from 0 to 256 [ 158.291932][ T6966] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 158.373898][ T6956] exfat: Bad value for 'uid' [ 158.523248][ T6980] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.648645][ T6988] loop6: detected capacity change from 0 to 512 [ 159.078076][ T6988] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.665: corrupted in-inode xattr [ 159.328879][ T6988] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.665: couldn't read orphan inode 15 (err -117) [ 159.494990][ T6988] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.565775][ T7012] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.665: Directory hole found for htree leaf block 0 [ 159.643146][ T7013] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.647507][ T7011] loop0: detected capacity change from 0 to 512 [ 160.104086][ T7011] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.668: corrupted in-inode xattr [ 160.187617][ T7011] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.668: couldn't read orphan inode 15 (err -117) [ 160.246278][ T7024] loop6: detected capacity change from 0 to 512 [ 160.291136][ T7011] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 160.343816][ T7028] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.668: Directory hole found for htree leaf block 0 [ 160.347188][ T7011] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 160.419602][ T6089] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz-executor: Directory hole found for htree leaf block 0 [ 160.436922][ T7024] EXT4-fs (loop6): Unrecognized mount option "subj_type=*\[" or missing value [ 160.544529][ T7024] loop6: detected capacity change from 0 to 256 [ 160.579037][ T7034] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 160.689062][ T7024] exfat: Bad value for 'uid' [ 161.219412][ T7062] loop1: detected capacity change from 0 to 512 [ 161.755648][ T7062] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.681: corrupted in-inode xattr [ 161.836686][ T7070] loop0: detected capacity change from 0 to 512 [ 161.903898][ T7062] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.681: couldn't read orphan inode 15 (err -117) [ 161.941833][ T7062] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.952470][ T7070] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.683: corrupted in-inode xattr [ 161.977795][ T7082] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.681: Directory hole found for htree leaf block 0 [ 161.979317][ T7070] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.683: couldn't read orphan inode 15 (err -117) [ 162.019622][ T7070] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.077030][ T7084] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 162.448646][ T7087] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.683: Directory hole found for htree leaf block 0 [ 162.517434][ T7089] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 162.981780][ T7088] loop5: detected capacity change from 0 to 512 [ 163.120966][ T7099] loop0: detected capacity change from 0 to 512 [ 163.123090][ T7088] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.686: corrupted inode contents [ 163.160146][ T7097] loop6: detected capacity change from 0 to 512 [ 163.170166][ T7099] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.689: corrupted in-inode xattr [ 163.194007][ T7088] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #3: comm syz.5.686: mark_inode_dirty error [ 163.246261][ T7099] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.689: couldn't read orphan inode 15 (err -117) [ 163.255036][ T7088] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.686: corrupted inode contents [ 163.270356][ T7099] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.286743][ T7097] EXT4-fs (loop6): Unrecognized mount option "subj_type=*\[" or missing value [ 163.381702][ T7122] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.689: Directory hole found for htree leaf block 0 [ 163.438175][ T7097] loop6: detected capacity change from 0 to 256 [ 163.439511][ T7123] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 163.510805][ T7088] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.686: mark_inode_dirty error [ 163.586025][ T7088] Quota error (device loop5): write_blk: dquota write failed [ 163.703766][ T7088] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 163.857314][ T7088] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.686: Failed to acquire dquot type 0 [ 163.862526][ T7097] exfat: Bad value for 'uid' [ 163.877597][ T7088] EXT4-fs (loop5): 1 orphan inode deleted [ 163.887950][ T7088] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.900097][ T7088] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.538627][ T7139] loop1: detected capacity change from 0 to 512 [ 164.560625][ T7134] loop4: detected capacity change from 0 to 2048 [ 164.644411][ T7139] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.698: corrupted in-inode xattr [ 164.683395][ T7134] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 164.712384][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 164.731559][ T7139] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.698: couldn't read orphan inode 15 (err -117) [ 164.781302][ T7139] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.814774][ T7134] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 164.857386][ T7160] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.698: Directory hole found for htree leaf block 0 [ 164.928246][ T7161] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 165.880863][ T7174] loop1: detected capacity change from 0 to 512 [ 166.015090][ T7178] device syzkaller0 entered promiscuous mode [ 166.017895][ T7174] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.706: corrupted in-inode xattr [ 166.075451][ T7174] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.706: couldn't read orphan inode 15 (err -117) [ 166.120690][ T7187] loop6: detected capacity change from 0 to 1764 [ 166.127968][ T7174] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.195712][ T7193] loop0: detected capacity change from 0 to 1024 [ 166.212186][ T7194] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.706: Directory hole found for htree leaf block 0 [ 166.300968][ T7197] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 166.722992][ T7193] EXT4-fs (loop0): Test dummy encryption mode enabled [ 166.751654][ T7193] EXT4-fs (loop0): Ignoring removed orlov option [ 166.777186][ T7212] loop4: detected capacity change from 0 to 512 [ 166.812101][ T4869] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 166.833015][ T7193] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,stripe=0x0000000000000008,commit=0x0000000000000005,orlov,min_batch_time=0x0000000000000116,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 166.878229][ T7212] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.714: corrupted in-inode xattr [ 166.919393][ T7212] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.714: couldn't read orphan inode 15 (err -117) [ 166.924987][ T7221] loop5: detected capacity change from 0 to 2048 [ 166.990413][ T7212] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.002641][ T7221] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 167.040465][ T7222] loop1: detected capacity change from 0 to 1024 [ 167.065172][ T7230] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 167.121444][ T4869] usb 7-1: Using ep0 maxpacket: 16 [ 167.156336][ T7221] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 167.404173][ T4869] usb 7-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 167.435796][ T4869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.205335][ T4869] usb 7-1: Product: syz [ 168.212187][ T4869] usb 7-1: Manufacturer: syz [ 168.216888][ T4869] usb 7-1: SerialNumber: syz [ 168.862790][ T7249] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 169.731671][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.200275][ T7254] loop4: detected capacity change from 0 to 512 [ 170.332781][ T7254] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.724: corrupted in-inode xattr [ 170.395728][ T7254] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.724: couldn't read orphan inode 15 (err -117) [ 170.463207][ T7254] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.488279][ T7265] loop1: detected capacity change from 0 to 512 [ 170.561988][ T4869] snd-usb-audio: probe of 7-1:222.0 failed with error -71 [ 170.574030][ T7272] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.724: Directory hole found for htree leaf block 0 [ 170.626650][ T4869] usb 7-1: USB disconnect, device number 2 [ 170.639739][ T7273] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 170.707117][ T7265] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.726: corrupted inode contents [ 170.744984][ T7265] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.726: mark_inode_dirty error [ 171.036846][ T7265] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.726: corrupted inode contents [ 171.083295][ T7265] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.726: mark_inode_dirty error [ 171.144470][ T7265] Quota error (device loop1): write_blk: dquota write failed [ 171.184220][ T7265] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 171.212449][ T7265] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.726: Failed to acquire dquot type 0 [ 171.275166][ T7265] EXT4-fs (loop1): 1 orphan inode deleted [ 171.294002][ T7265] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 171.336128][ T7265] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.348263][ T7288] loop4: detected capacity change from 0 to 8 [ 172.118093][ T7301] loop4: detected capacity change from 0 to 1024 [ 172.207051][ T7307] loop5: detected capacity change from 0 to 2048 [ 172.221986][ T7305] device syzkaller0 entered promiscuous mode [ 172.232384][ T7301] hfsplus: unable to parse mount options [ 173.081670][ T7307] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 173.182872][ T7324] loop6: detected capacity change from 0 to 1024 [ 173.226472][ T7307] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 173.338092][ T7335] loop4: detected capacity change from 0 to 512 [ 173.766358][ T7348] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 173.834361][ T7335] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.739: corrupted in-inode xattr [ 173.898714][ T7335] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.739: couldn't read orphan inode 15 (err -117) [ 173.993853][ T7335] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.074255][ T7357] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.739: Directory hole found for htree leaf block 0 [ 174.387489][ T7358] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 174.561737][ T7363] loop5: detected capacity change from 0 to 512 [ 174.655193][ T7369] loop0: detected capacity change from 0 to 512 [ 174.707699][ T7363] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.744: corrupted inode contents [ 174.751864][ T7369] Quota error (device loop0): v2_read_file_info: Free block number too big (100663296 >= 6). [ 174.764031][ T7363] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #3: comm syz.5.744: mark_inode_dirty error [ 174.776331][ T7379] device syzkaller0 entered promiscuous mode [ 174.797923][ T7369] EXT4-fs warning (device loop0): ext4_enable_quotas:6432: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 174.816436][ T7369] EXT4-fs (loop0): mount failed [ 174.854178][ T7363] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #3: comm syz.5.744: corrupted inode contents [ 174.890960][ T7387] loop6: detected capacity change from 0 to 256 [ 174.910974][ T7363] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #3: comm syz.5.744: mark_inode_dirty error [ 174.936926][ T7363] Quota error (device loop5): write_blk: dquota write failed [ 174.954843][ T7363] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 174.975165][ T7363] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.744: Failed to acquire dquot type 0 [ 175.037828][ T7363] EXT4-fs (loop5): 1 orphan inode deleted [ 175.067215][ T7363] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.110010][ T7392] loop0: detected capacity change from 0 to 2048 [ 175.119021][ T7363] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.155396][ T7392] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 175.196900][ T7395] loop6: detected capacity change from 0 to 2048 [ 175.268826][ T7395] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.309651][ T7392] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 175.411367][ T21] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 175.635828][ T7412] loop5: detected capacity change from 0 to 512 [ 175.671622][ T7407] loop_set_status: loop6 () has still dirty pages (nrpages=8) [ 175.676243][ T7414] loop4: detected capacity change from 0 to 2048 [ 175.704270][ T7412] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.756: corrupted in-inode xattr [ 175.723424][ T7412] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.756: couldn't read orphan inode 15 (err -117) [ 175.725290][ T7414] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 175.749974][ T6115] UDF-fs: error (device loop6): udf_read_inode: (ino 1329) failed !bh [ 175.753694][ T7412] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.777419][ T6115] UDF-fs: error (device loop6): udf_read_inode: (ino 1329) failed !bh [ 175.803808][ T7421] EXT4-fs error (device loop5): ext4_add_entry:2486: inode #2: comm syz.5.756: Directory hole found for htree leaf block 0 [ 175.882645][ T7423] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 175.902727][ T21] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 175.951880][ T21] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.150872][ T21] usb 2-1: config 0 has no interface number 0 [ 176.197904][ T21] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 255, setting to 64 [ 176.249927][ T21] usb 2-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.460917][ T7429] loop5: detected capacity change from 0 to 1024 [ 176.467819][ T21] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 176.482678][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.495406][ T21] usb 2-1: Product: syz [ 176.495406][ T7436] loop4: detected capacity change from 0 to 256 [ 176.506683][ T21] usb 2-1: Manufacturer: syz [ 176.511436][ T21] usb 2-1: SerialNumber: syz [ 176.520739][ T21] usb 2-1: config 0 descriptor?? [ 176.540628][ T7436] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xff532d92, utbl_chksum : 0xe619d30d) [ 176.556380][ T7391] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.604487][ T21] usb-storage 2-1:0.20: USB Mass Storage device detected [ 176.664657][ T21] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 176.682633][ T4286] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.789771][ T4202] usb 2-1: USB disconnect, device number 2 [ 176.818554][ T4286] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.866539][ T7456] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 177.419796][ T4286] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.553877][ T4286] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.636539][ T7467] loop4: detected capacity change from 0 to 2048 [ 177.749747][ T7471] loop5: detected capacity change from 0 to 2048 [ 177.859866][ T7467] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 177.884832][ T7471] loop5: p3 < > p4 < > [ 177.889778][ T7471] loop5: partition table partially beyond EOD, truncated [ 177.984121][ T7471] loop5: p3 start 4284289 is beyond EOD, truncated [ 178.218171][ T7467] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 178.634240][ T4219] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 178.647268][ T4286] team0: Port device vlan2 removed [ 178.669376][ T7492] netlink: 16 bytes leftover after parsing attributes in process `syz.0.773'. [ 178.921194][ T4219] usb 2-1: Using ep0 maxpacket: 16 [ 179.044875][ T7478] chnl_net:caif_netlink_parms(): no params data found [ 179.062024][ T7515] loop0: detected capacity change from 0 to 256 [ 179.067405][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.084640][ T4219] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 179.108016][ T7518] loop5: detected capacity change from 0 to 2048 [ 179.122287][ T7515] exfat: Deprecated parameter 'namecase' [ 179.127958][ T7515] exfat: Deprecated parameter 'namecase' [ 179.139070][ T4219] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.184091][ T7515] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 179.199664][ T7518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.202267][ T4219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.228318][ T7528] loop4: detected capacity change from 0 to 1024 [ 179.243131][ T4219] usb 2-1: config 0 descriptor?? [ 179.267348][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.275891][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.285615][ T7478] device bridge_slave_0 entered promiscuous mode [ 179.287453][ T7518] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (0) does not match entry length (44) [ 179.294357][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.334341][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.344773][ T7478] device bridge_slave_1 entered promiscuous mode [ 179.387762][ T7532] netlink: 104 bytes leftover after parsing attributes in process `syz.0.780'. [ 179.456130][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.507969][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.545631][ T4286] device hsr_slave_0 left promiscuous mode [ 179.558919][ T4286] device hsr_slave_1 left promiscuous mode [ 179.594039][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.612672][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.732417][ T4286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.764799][ T4286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.911722][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 180.474984][ T4286] device bridge_slave_1 left promiscuous mode [ 180.496442][ T4286] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.528335][ T4286] device bridge_slave_0 left promiscuous mode [ 180.534759][ T4286] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.552939][ T7552] loop5: detected capacity change from 0 to 2048 [ 180.577782][ T4286] device veth1_macvtap left promiscuous mode [ 180.585607][ T4286] device veth0_macvtap left promiscuous mode [ 180.592416][ T4286] device veth1_vlan left promiscuous mode [ 180.598426][ T4286] device veth0_vlan left promiscuous mode [ 180.625111][ T7552] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 180.686204][ T7552] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 181.025369][ T4286] team0 (unregistering): Port device team_slave_1 removed [ 181.042815][ T4286] team0 (unregistering): Port device team_slave_0 removed [ 181.057734][ T4286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.078119][ T4286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.150939][ T4286] bond0 (unregistering): Released all slaves [ 181.244303][ T7478] team0: Port device team_slave_0 added [ 181.263616][ T7478] team0: Port device team_slave_1 added [ 181.433159][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.440115][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.516511][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.541966][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.558473][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.579474][ T7601] loop5: detected capacity change from 0 to 2048 [ 181.591345][ T4219] usbhid 2-1:0.0: can't add hid device: -71 [ 181.597322][ T4219] usbhid: probe of 2-1:0.0 failed with error -71 [ 181.624247][ T4219] usb 2-1: USB disconnect, device number 3 [ 181.662910][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.730369][ T7478] device hsr_slave_0 entered promiscuous mode [ 181.792436][ T7601] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 181.812177][ T7478] device hsr_slave_1 entered promiscuous mode [ 182.021095][ T4219] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.033888][ T26] audit: type=1800 audit(1731125563.784:8): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.790" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 182.352943][ T4219] usb 2-1: Using ep0 maxpacket: 16 [ 182.377587][ T7618] loop4: detected capacity change from 0 to 1024 [ 182.391602][ T4869] Bluetooth: hci0: command 0x041b tx timeout [ 182.485513][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.538010][ T4219] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.572311][ T4219] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.591893][ T4219] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 182.607511][ T4219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.619844][ T4219] usb 2-1: config 0 descriptor?? [ 182.817452][ T7634] loop5: detected capacity change from 0 to 2048 [ 182.917650][ T7634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.083085][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.119649][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.212108][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.219985][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.285041][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.311659][ T7478] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 183.521838][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.571167][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.579897][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.616661][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.680135][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.731155][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.757680][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.800375][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.828257][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.867160][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.902921][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.936555][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 183.959397][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 184.004119][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 184.041231][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 184.076574][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 184.104851][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 184.135506][ T4219] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 184.169394][ T7667] loop1: detected capacity change from 0 to 256 [ 184.191759][ T4219] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 184.218225][ T4219] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 184.250235][ T4219] microsoft 0003:045E:07DA.0002: no inputs found [ 184.302090][ T4219] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 184.323566][ T26] audit: type=1804 audit(1731125566.074:9): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.805" name="/newroot/74/file0/file0" dev="loop1" ino=1048612 res=1 errno=0 [ 184.325525][ T7665] loop0: detected capacity change from 0 to 8192 [ 184.422497][ T4219] usb 2-1: USB disconnect, device number 4 [ 184.471617][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 184.487411][ T7478] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 184.549045][ T7478] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 184.582407][ T7665] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.624572][ T7478] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 184.669836][ T7678] loop5: detected capacity change from 0 to 2048 [ 184.865190][ T7678] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 185.573076][ T7678] EXT4-fs (loop5): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,abort,mblk_io_submit,nouid32,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: none. [ 185.626319][ T7695] loop1: detected capacity change from 0 to 1024 [ 185.695970][ T7478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.776780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.791782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.823980][ T4186] ================================================================== [ 185.826032][ T7478] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.832350][ T4186] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x11d6/0x3f50 [ 185.832415][ T4186] Read of size 1 at addr ffff888079448c0a by task kworker/u5:6/4186 [ 185.832431][ T4186] [ 185.832436][ T4186] CPU: 0 PID: 4186 Comm: kworker/u5:6 Not tainted 5.15.171-syzkaller #0 [ 185.832452][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.832469][ T4186] Workqueue: hci3 hci_rx_work [ 185.832488][ T4186] Call Trace: [ 185.832495][ T4186] [ 185.832503][ T4186] dump_stack_lvl+0x1e3/0x2d0 [ 185.832528][ T4186] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 185.832548][ T4186] ? _printk+0xd1/0x120 [ 185.832572][ T4186] ? __wake_up_klogd+0xcc/0x100 [ 185.832593][ T4186] ? panic+0x860/0x860 [ 185.832612][ T4186] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 185.832642][ T4186] print_address_description+0x63/0x3b0 [ 185.832664][ T4186] ? hci_le_meta_evt+0x11d6/0x3f50 [ 185.832684][ T4186] kasan_report+0x16b/0x1c0 [ 185.832704][ T4186] ? hci_le_meta_evt+0x11d6/0x3f50 [ 185.832731][ T4186] hci_le_meta_evt+0x11d6/0x3f50 [ 185.832752][ T4186] ? __lock_acquire+0x1ff0/0x1ff0 [ 185.832787][ T4186] ? hci_remote_host_features_evt+0x280/0x280 [ 185.832807][ T4186] ? __mutex_unlock_slowpath+0x218/0x750 [ 185.832826][ T4186] ? hci_event_packet+0x3b4/0x1550 [ 185.832852][ T4186] ? mutex_unlock+0x10/0x10 [ 185.832875][ T4186] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 185.832898][ T4186] ? print_irqtrace_events+0x210/0x210 [ 185.832922][ T4186] hci_event_packet+0xc41/0x1550 [ 185.832952][ T4186] ? rcu_lock_release+0x20/0x20 [ 185.832984][ T4186] ? hci_send_to_monitor+0x99/0x4d0 [ 185.833011][ T4186] hci_rx_work+0x232/0x990 [ 185.833042][ T4186] process_one_work+0x8a1/0x10c0 [ 185.833080][ T4186] ? worker_detach_from_pool+0x260/0x260 [ 185.833105][ T4186] ? _raw_spin_lock_irqsave+0x120/0x120 [ 185.833126][ T4186] ? kthread_data+0x4e/0xc0 [ 185.833146][ T4186] ? wq_worker_running+0x97/0x170 [ 185.833168][ T4186] worker_thread+0xaca/0x1280 [ 185.833214][ T4186] kthread+0x3f6/0x4f0 [ 185.833232][ T4186] ? rcu_lock_release+0x20/0x20 [ 185.833251][ T4186] ? kthread_blkcg+0xd0/0xd0 [ 185.833276][ T4186] ret_from_fork+0x1f/0x30 [ 185.833312][ T4186] [ 185.833319][ T4186] [ 185.833324][ T4186] Allocated by task 7706: [ 185.833333][ T4186] ____kasan_kmalloc+0xba/0xf0 [ 185.833349][ T4186] __kmalloc_node_track_caller+0x195/0x390 [ 185.833368][ T4186] __alloc_skb+0x12c/0x590 [ 185.833385][ T4186] vhci_write+0xbc/0x430 [ 185.833403][ T4186] vfs_write+0xacd/0xe50 [ 185.833419][ T4186] ksys_write+0x1a2/0x2c0 [ 185.833435][ T4186] do_syscall_64+0x3b/0xb0 [ 185.833450][ T4186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 185.833469][ T4186] [ 185.833474][ T4186] Last potentially related work creation: [ 185.833481][ T4186] kasan_save_stack+0x36/0x60 [ 185.833497][ T4186] kasan_record_aux_stack+0xba/0x100 [ 185.833513][ T4186] kvfree_call_rcu+0x118/0x8a0 [ 185.833530][ T4186] neigh_flush_dev+0x189/0x9e0 [ 186.120791][ T4186] neigh_changeaddr+0x2c/0x40 [ 186.125463][ T4186] ndisc_netdev_event+0x105/0x320 [ 186.130471][ T4186] raw_notifier_call_chain+0xd0/0x170 [ 186.135832][ T4186] dev_set_mac_address+0x325/0x470 [ 186.140940][ T4186] dev_set_mac_address_user+0x2d/0x50 [ 186.146301][ T4186] do_setlink+0x7f0/0x3d80 [ 186.150706][ T4186] rtnl_newlink+0x17d6/0x2070 [ 186.155380][ T4186] rtnetlink_rcv_msg+0x993/0xee0 [ 186.160301][ T4186] netlink_rcv_skb+0x1cf/0x410 [ 186.165050][ T4186] netlink_unicast+0x7b6/0x980 [ 186.169792][ T4186] netlink_sendmsg+0xa30/0xd60 [ 186.174536][ T4186] __sys_sendto+0x564/0x720 [ 186.179018][ T4186] __x64_sys_sendto+0xda/0xf0 [ 186.183674][ T4186] do_syscall_64+0x3b/0xb0 [ 186.188068][ T4186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.193944][ T4186] [ 186.196247][ T4186] The buggy address belongs to the object at ffff888079448800 [ 186.196247][ T4186] which belongs to the cache kmalloc-1k of size 1024 [ 186.210280][ T4186] The buggy address is located 10 bytes to the right of [ 186.210280][ T4186] 1024-byte region [ffff888079448800, ffff888079448c00) [ 186.224053][ T4186] The buggy address belongs to the page: [ 186.229669][ T4186] page:ffffea0001e51200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79448 [ 186.239803][ T4186] head:ffffea0001e51200 order:3 compound_mapcount:0 compound_pincount:0 [ 186.248129][ T4186] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 186.256102][ T4186] raw: 00fff00000010200 ffffea0001820600 0000000300000003 ffff888017041dc0 [ 186.264667][ T4186] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 186.273222][ T4186] page dumped because: kasan: bad access detected [ 186.279620][ T4186] page_owner tracks the page as allocated [ 186.285568][ T4186] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6154, ts 132974515944, free_ts 130944304335 [ 186.304123][ T4186] get_page_from_freelist+0x3b78/0x3d40 [ 186.309653][ T4186] __alloc_pages+0x272/0x700 [ 186.314219][ T4186] new_slab+0xbb/0x4b0 [ 186.318271][ T4186] ___slab_alloc+0x6f6/0xe10 [ 186.322838][ T4186] __kmalloc+0x1c9/0x300 [ 186.327057][ T4186] ___neigh_create+0x6be/0x2220 [ 186.331883][ T4186] neigh_add+0x939/0xdd0 [ 186.336120][ T4186] rtnetlink_rcv_msg+0x993/0xee0 [ 186.341033][ T4186] netlink_rcv_skb+0x1cf/0x410 [ 186.345779][ T4186] netlink_unicast+0x7b6/0x980 [ 186.350520][ T4186] netlink_sendmsg+0xa30/0xd60 [ 186.355351][ T4186] __sys_sendto+0x564/0x720 [ 186.359834][ T4186] __x64_sys_sendto+0xda/0xf0 [ 186.364489][ T4186] do_syscall_64+0x3b/0xb0 [ 186.368885][ T4186] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 186.374758][ T4186] page last free stack trace: [ 186.379404][ T4186] free_unref_page_prepare+0xc34/0xcf0 [ 186.384843][ T4186] free_unref_page+0x95/0x2d0 [ 186.389498][ T4186] __unfreeze_partials+0x1b7/0x210 [ 186.394587][ T4186] put_cpu_partial+0x132/0x1a0 [ 186.399328][ T4186] ___cache_free+0xe3/0x100 [ 186.403812][ T4186] qlist_free_all+0x36/0x90 [ 186.408296][ T4186] kasan_quarantine_reduce+0x162/0x180 [ 186.413732][ T4186] __kasan_slab_alloc+0x2f/0xc0 [ 186.418561][ T4186] slab_post_alloc_hook+0x53/0x380 [ 186.423741][ T4186] kmem_cache_alloc_node+0x121/0x2c0 [ 186.429004][ T4186] __alloc_skb+0xdd/0x590 [ 186.433312][ T4186] netlink_ack+0x33c/0xb10 [ 186.437708][ T4186] netlink_rcv_skb+0x24c/0x410 [ 186.442451][ T4186] netlink_unicast+0x7b6/0x980 [ 186.447193][ T4186] netlink_sendmsg+0xa30/0xd60 [ 186.451936][ T4186] __sys_sendto+0x564/0x720 [ 186.456416][ T4186] [ 186.458806][ T4186] Memory state around the buggy address: [ 186.464410][ T4186] ffff888079448b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 186.472445][ T4186] ffff888079448b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 186.480479][ T4186] >ffff888079448c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.488513][ T4186] ^ [ 186.492818][ T4186] ffff888079448c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.500854][ T4186] ffff888079448d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.508890][ T4186] ================================================================== [ 186.516926][ T4186] Disabling lock debugging due to kernel taint [ 186.528197][ T4186] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.535401][ T4186] CPU: 0 PID: 4186 Comm: kworker/u5:6 Tainted: G B 5.15.171-syzkaller #0 [ 186.545113][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.555164][ T4186] Workqueue: hci3 hci_rx_work [ 186.559843][ T4186] Call Trace: [ 186.563113][ T4186] [ 186.566038][ T4186] dump_stack_lvl+0x1e3/0x2d0 [ 186.570710][ T4186] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 186.576335][ T4186] ? panic+0x860/0x860 [ 186.580390][ T4186] ? rcu_is_watching+0x11/0xa0 [ 186.585136][ T4186] ? preempt_schedule_common+0xa6/0xd0 [ 186.590585][ T4186] panic+0x318/0x860 [ 186.594474][ T4186] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 186.600621][ T4186] ? check_panic_on_warn+0x1d/0xa0 [ 186.605723][ T4186] ? fb_is_primary_device+0xd0/0xd0 [ 186.610910][ T4186] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 186.616868][ T4186] ? _raw_spin_unlock+0x40/0x40 [ 186.621805][ T4186] check_panic_on_warn+0x7e/0xa0 [ 186.626739][ T4186] ? hci_le_meta_evt+0x11d6/0x3f50 [ 186.631839][ T4186] end_report+0x6d/0xf0 [ 186.635982][ T4186] kasan_report+0x18e/0x1c0 [ 186.640467][ T4186] ? hci_le_meta_evt+0x11d6/0x3f50 [ 186.645566][ T4186] hci_le_meta_evt+0x11d6/0x3f50 [ 186.650484][ T4186] ? __lock_acquire+0x1ff0/0x1ff0 [ 186.655502][ T4186] ? hci_remote_host_features_evt+0x280/0x280 [ 186.661556][ T4186] ? __mutex_unlock_slowpath+0x218/0x750 [ 186.667169][ T4186] ? hci_event_packet+0x3b4/0x1550 [ 186.672260][ T4186] ? mutex_unlock+0x10/0x10 [ 186.676743][ T4186] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 186.682702][ T4186] ? print_irqtrace_events+0x210/0x210 [ 186.688225][ T4186] hci_event_packet+0xc41/0x1550 [ 186.693147][ T4186] ? rcu_lock_release+0x20/0x20 [ 186.697994][ T4186] ? hci_send_to_monitor+0x99/0x4d0 [ 186.703186][ T4186] hci_rx_work+0x232/0x990 [ 186.707603][ T4186] process_one_work+0x8a1/0x10c0 [ 186.712534][ T4186] ? worker_detach_from_pool+0x260/0x260 [ 186.718153][ T4186] ? _raw_spin_lock_irqsave+0x120/0x120 [ 186.723684][ T4186] ? kthread_data+0x4e/0xc0 [ 186.728169][ T4186] ? wq_worker_running+0x97/0x170 [ 186.733174][ T4186] worker_thread+0xaca/0x1280 [ 186.737844][ T4186] kthread+0x3f6/0x4f0 [ 186.741893][ T4186] ? rcu_lock_release+0x20/0x20 [ 186.746722][ T4186] ? kthread_blkcg+0xd0/0xd0 [ 186.751300][ T4186] ret_from_fork+0x1f/0x30 [ 186.755698][ T4186] [ 186.758936][ T4186] Kernel Offset: disabled [ 186.763251][ T4186] Rebooting in 86400 seconds..