last executing test programs: 9m36.931201453s ago: executing program 32 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() openat$sndtimer(0xffffffffffffff9c, 0x0, 0x21a200) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@noblock_validity}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4dc, &(0x7f0000000d80)="$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") 8m43.096502793s ago: executing program 33 (id=126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500", @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./bus\x00', 0x800090, &(0x7f0000000480)={[{@shortname_winnt}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_lower}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uni_xlate}, {@rodir}, {@shortname_win95}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_lower}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x3b2}}, {@uni_xlateno}, {@uni_xlateno}, {@numtail}, {@shortname_win95}, {@rodir}, {@uni_xlateno}, {@rodir}, {@shortname_mixed}, {@shortname_lower}, {@nonumtail}, {@shortname_mixed}]}, 0x6, 0x2d2, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) 7m54.52352849s ago: executing program 0 (id=240): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='snd_soc_jack_notify\x00', r0, 0x0, 0x3}, 0x18) syz_clone(0xe2000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7m52.872260657s ago: executing program 0 (id=243): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000340)={[{@shortname_mixed}, {@shortname_winnt}, {@shortname_lower}, {@shortname_lower}, {@uni_xlateno}, {@shortname_win95}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8no}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@shortname_lower}, {@uni_xlateno}, {@rodir}]}, 0x6, 0x2cb, &(0x7f0000001040)="$eJzs3T9rJGUYAPBnksnsngq7hZUIDmhhdVyutdkgFxBTeaRQCw3eHcjuItxBwD+4XmVrY2HhJxAEP4iN30CwFew85eCVmZ1hJ5fdNRvciN7v1+Thfd9n3mcmL8mkyLPvvzgd3ynj3sPPfo5+P4udUYziURbD2InWF3HG6KsAAP7LHqUUv6W5lYueOz+URUR/u6UBAFuy+vd/2YnzRfjDlZUGAGzJ7bffefPg6OjWW2XZj8Ppl6fH1V/21df5/MG9+DAmcTduxCAeR9QvCntRvy1U4WFKaZaXlWG8Mp2dHleZ0/d+bK5/8GtEnb8fgxjWQymlvA3S4RtHt/bLuU7+rKrjmWb/UZV/MwbxfLN/87bS5t9ckh/HRbz6cqf+6zGInz6Ij2ISd+q9F/mf75fl6+nr3z99t6qqys9mp8e9et1C2r3SbwwAAAAAAAAAAAAAAAAAAAAAAP9r15veOb0oh3/OewA2/Xd2H1fze1G2hmf788zzs/ZC3f5AKaVZim/b/jo3yrJMzcJFfh4v5N3GggAAAAAAAAAAAAAAAAAAAPD0evDxJ+OTyeTu/UsH12Ix0nYDyCPij9sRl73yqDPyUtRBvqrUXrPnyWSy04Rn1+Tdkdht12QRa8uobuLyj2W8yeJr52pugu++33T3/t+v2Vu+1z8ZtKdrfJItf4a9aEf6zSH5pojOQSrignsVq6ZSbHL8iqVTg43vvXi2DmZr1kS2rrDXfpk/uWYke/IuivqpLk3fa4JO+hNn40LnOfrz9PM/KzLdOgAAAAAAAAAAAAAAAAAAYKsW//27ZPLh2tSd1NtaWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwpRaf/79BMGuSL7C4iPsP/uVbBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CnwVwAAAP//NnNahw==") creat(&(0x7f0000000040)='./bus\x00', 0x0) 7m52.124831119s ago: executing program 0 (id=245): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7"], &(0x7f0000000080)='GPL\x00', 0x4a0b645b, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x3008001) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f00000008c0)=ANY=[], 0x5b) sendfile(r5, r6, &(0x7f0000000000), 0x9) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 7m50.721930271s ago: executing program 0 (id=248): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000300)={'veth1_virt_wifi\x00', {0x2, 0x0, @multicast2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) waitid(0x0, r3, 0x0, 0x61000006, 0x0) 7m49.018317627s ago: executing program 0 (id=250): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r1, r0) 7m44.759771965s ago: executing program 0 (id=258): setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 7m44.083771146s ago: executing program 34 (id=258): setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000007d00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) 6m27.934540297s ago: executing program 2 (id=438): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[], 0x6, 0x2a4, &(0x7f0000002680)="$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") socket$inet6(0xa, 0x4, 0x5) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ftruncate(r0, 0xc17a) fadvise64(r0, 0x0, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x120c0, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@data_err_ignore}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0xff}}]}, 0x64, 0x51b, &(0x7f0000000940)="$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") 6m24.59817171s ago: executing program 2 (id=441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x40003) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0xfffffffc, 0x0}) 6m19.192801135s ago: executing program 2 (id=451): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000640)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x22, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="a8cf46", 0x3, 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000680)="537eb9f8d6b418d097c30e82bf7225819ec127c93ee0b62cef59c421632aa9448bf5bd16ca751c056ff49e38244880af0192a18af714c6025db7a9a549edda11a0e903c417290de77f413b5c83faab8abf8550b1c01619febda43e6c3eef35ccda1d1b20c0873c2a24c002d76d42618ad2c7c90090ca7d3cb429ed703187d65bde2e9cb11ff1b2cf2409bbbc2207dd2df0ba3f61fb891c1b8a8ad5d33df8596b20c693868f61aecb8bf18407e3bdad7678c3618a1452d0b43886bd2873536c6b2a99278ab1", 0xc5}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 6m18.692973513s ago: executing program 2 (id=455): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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") socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) waitid(0x0, r1, 0x0, 0x61000006, 0x0) 6m15.75310026s ago: executing program 2 (id=461): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x28303, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') pselect6(0x40, &(0x7f0000000180)={0x1f, 0x0, 0x1, 0x8000000000000, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/246, 0x36, 0xf6, 0x1, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/14, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 6m12.358732393s ago: executing program 2 (id=475): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x10) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) readahead(0xffffffffffffffff, 0xff, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 6m11.90024996s ago: executing program 35 (id=475): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x10) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) readahead(0xffffffffffffffff, 0xff, 0x80000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m39.369813794s ago: executing program 8 (id=565): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5m39.059055909s ago: executing program 8 (id=568): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, 0x0) 5m38.3497249s ago: executing program 8 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0x20002078) 5m35.957465088s ago: executing program 8 (id=574): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000ac0)={[{@delalloc}, {@data_err_abort}, {@i_version}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@minixdf}, {@jqfmt_vfsv1}, {@errors_continue}]}, 0x1, 0x55d, &(0x7f0000000e00)="$eJzs3d9rW1UcAPDvTdv91nUw5g9ECntwMpeurT8m+DAfRYcDfZ+hvSuz6TKadKx14PbgXnyRIYg4EN/13cfhP+BfMdDBkFH0wZfKTW+6bE36a1mTms8H7nbOvTc95+Tc78m5OQkJoG+NZP8UIl6KiG+SiMNNxwYjPziyct7Sw+uT2ZbE8vInfyWR5Psa5yf5/wfzzIsR8dtXEScLa8utLizOlMrldC7Pj9Zmr4xWFxZPXZotTafT6eXxiYkzb02Mv/vO2x1r6+vn//n+47sfnPn6+NJ3v9w/cjuJs3EoP9bcjqdwozkzEiP5czIUZ584cawDhfWSpNsVYFsG8jgfimwMOBwDedQD/39fRsQy0KcS8Q99qjEPaNzbd+g+eNd48P7KDdDa9g+uvDcS++r3RgeWksfujLL73eEOlJ+V8eufd25nW3TufQiADd24GRGnBwfXjn9JPv5t3+lNnPNkGcY/2Dl3s/nPG63mP4XV+U+0mP8cbBG727Fx/Bfud6CYtrL533st57+ri1bDA3nuufqcbyi5eKmcZmPb8xFxIob2Zvn11nPOLN1bbnesef6XbVn5jblgXo/7g3sff8xUqVZ6mjY3e3Az4uWW899ktf+TFv2fPR/nN1nGsfTOq+2Obdz+Z2v5p4jXWvb/oxWtZP31ydH69TDauCrW+vvWsd/bld/t9mf9f2D99g8nzeu11a2X8eO+f9N2x7Z7/e9JPq2n9+T7rpVqtbmxiD3JR2v3jz96bCPfOD9r/4nj649/ra7//RHx2Sbbf+voz69spf2F2Nn+n9pS/289ce/DL35oV/7m+v/NeupEvmcz499mK/g0zx0AAAAAAAD0mkJEHIqkUFxNFwrF4srnO47GgUK5Uq2dvFiZvzwV9e/KDsdQobHSfbjp8xBj+edhG/nxJ/ITEXEkIr4d2F/PFycr5aluNx4AAAAAAAAAAAAAAAAAAAB6xME23//P/DHQ7doBz5yf/Ib+tWH8d+KXnoCe5PUf+pf4h/71ePwnXasHsPO8/kP/Ev/Qv8Q/9C/xD/1L/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBHnT93LtuWlx5en8zyU1cX5mcqV09NpdWZ4uz8ZHGyMnelOF2pTJfT4mRldqO/V65UroyNx/y10VparY1WFxYvzFbmL9cuXJotTacX0qEdaRUAAAAAAAAAAAAAAAAAAADsLtWFxZlSuZzOSUhsKzHYG9XYfYnPX4jogWq0S3R7ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAR/4LAAD//08cNas=") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x81) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000400), 0x1, 0x44c, &(0x7f0000001380)="$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") write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x78) 5m33.590228616s ago: executing program 8 (id=584): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x8, 0x8, 0x20000}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m32.405741784s ago: executing program 8 (id=587): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000640)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x22, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="a8cf4658948be5672314f6800eb2fb5e1570dc5d3c53465450d7787fd1ee42ddaed361dbc344c8980e9509069fbbfc485a75e1934c78a361ce3b81dea5e6ea54278465dae07687ad1c6f6901522cda88f8d1d4c73eeaaa79a091489b7d91a8c34a1c9db441db7f84ef5b036d5bbb92", 0x6f, 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000680)="537eb9f8d6b418d097c30e82bf7225819ec127c93ee0b62cef59c421632aa9448bf5bd16ca751c056ff49e38244880af0192a18af714c6025db7a9a549edda11a0e903c417290de77f413b5c83faab8abf8550b1c01619febda43e6c3eef35ccda1d1b20c0873c2a24c002d76d42618ad2c7c90090ca7d3cb429ed703187d65bde2e9cb11ff1b2cf2409bbbc2207dd2df0ba3f61fb891c1b8a8ad5d33df8596b20c693868f61aecb8bf18407e3bdad7678c3618a1452d0b43886bd2873536c6b2a99278ab1", 0xc5}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 5m31.736250765s ago: executing program 36 (id=587): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000640)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x22, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="a8cf4658948be5672314f6800eb2fb5e1570dc5d3c53465450d7787fd1ee42ddaed361dbc344c8980e9509069fbbfc485a75e1934c78a361ce3b81dea5e6ea54278465dae07687ad1c6f6901522cda88f8d1d4c73eeaaa79a091489b7d91a8c34a1c9db441db7f84ef5b036d5bbb92", 0x6f, 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000680)="537eb9f8d6b418d097c30e82bf7225819ec127c93ee0b62cef59c421632aa9448bf5bd16ca751c056ff49e38244880af0192a18af714c6025db7a9a549edda11a0e903c417290de77f413b5c83faab8abf8550b1c01619febda43e6c3eef35ccda1d1b20c0873c2a24c002d76d42618ad2c7c90090ca7d3cb429ed703187d65bde2e9cb11ff1b2cf2409bbbc2207dd2df0ba3f61fb891c1b8a8ad5d33df8596b20c693868f61aecb8bf18407e3bdad7678c3618a1452d0b43886bd2873536c6b2a99278ab1", 0xc5}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) 4m41.697193265s ago: executing program 9 (id=726): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 4m40.889728928s ago: executing program 9 (id=729): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 4m40.573833753s ago: executing program 9 (id=731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', 0x0, 0x8}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000005c0)={0x80000000, 0xc2cf, 0xc, 0x4, 0x9, "00e4fdab7900f5fb00"}) write$UHID_INPUT(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x1, 0x1}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4001}, 0x20000850) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) syz_clone(0x410c2000, 0x0, 0x0, 0x0, 0x0, 0x0) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) 4m37.874602086s ago: executing program 9 (id=736): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000a00)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}, {@noblock_validity}, {@data_err_abort}]}, 0xfd, 0x278, &(0x7f0000000440)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185502, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000002, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)=ANY=[@ANYBLOB='shortname=mixed,iocharset=iso8859-=winnt,uni_xlate=1,uni_xlate=1,nonumtail=0,utf8=0,errors=continue,utf8=1,check=strict,iocharset=cp855,utf8=0,iocharset=koi8-u,codepage=857,utf8=0,rodir,shortname=win95,\x00'], 0x6, 0x2d4, &(0x7f0000002a80)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 4m36.825671282s ago: executing program 9 (id=739): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) pipe(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") recvfrom(r0, &(0x7f0000000480)=""/110, 0x28000, 0x734, 0x0, 0xfffffffffffffecb) 4m26.494217796s ago: executing program 9 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$ITER_CREATE(0xb, 0x0, 0x0) 4m25.678321688s ago: executing program 37 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x80) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$ITER_CREATE(0xb, 0x0, 0x0) 4m0.9235803s ago: executing program 7 (id=824): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000200)='THAWED\x00', 0x7) 4m0.597846475s ago: executing program 7 (id=826): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x1}) 4m0.070986443s ago: executing program 7 (id=827): r0 = timerfd_create(0x0, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r2, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x100000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 3m59.65822916s ago: executing program 7 (id=828): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000300)={'veth1_virt_wifi\x00', {0x2, 0x0, @multicast2}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000280), 0xffffffffffffffff) waitid(0x0, r2, 0x0, 0x61000006, 0x0) 3m57.318266806s ago: executing program 7 (id=831): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 3m52.780386348s ago: executing program 7 (id=847): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10007ff, 0x0, 0x0, 0x0, 0xfffff68d}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6db2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 3m52.02406629s ago: executing program 38 (id=847): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10007ff, 0x0, 0x0, 0x0, 0xfffff68d}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6db2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 9.849065065s ago: executing program 1 (id=1705): syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 9.021055919s ago: executing program 1 (id=1712): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x0, 0x9dff, 0x1, "0007edeb00cbe600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf) 6.350270933s ago: executing program 5 (id=1724): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 6.236178265s ago: executing program 5 (id=1726): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0x8890}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.9183868s ago: executing program 4 (id=1729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="420f01bd00000000660f3a0907400f01d1c481d9e58f9c8d2c34410f0f1c4c9a0f08c744240046000000c7442402427931eaff1c24650f01ca66baf80cb826eac482ef66bafc0cb000eef4", 0x4b}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.884321181s ago: executing program 5 (id=1730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x40003) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0xfffffffc, 0x0}) 5.866668241s ago: executing program 1 (id=1731): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r0, 0x1ad72f7) accept4$netrom(r0, 0x0, 0x0, 0x80000) r1 = accept4(r0, 0x0, 0x0, 0x80800) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @empty, 'wg0\x00'}}, 0x1e) 4.521490894s ago: executing program 5 (id=1733): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xc0046686, 0x0) 4.451476605s ago: executing program 1 (id=1734): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) 4.327950337s ago: executing program 4 (id=1736): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 4.037813842s ago: executing program 6 (id=1738): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x4) ioctl$sock_bt_hci(r1, 0x400448ca, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"], 0x30000) syz_open_dev$video4linux(0x0, 0x5, 0x400001) 3.956854073s ago: executing program 3 (id=1739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000200)={0x81, 0x0, 0x3}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0xeeee8000, 0x0, 0x7, 0x0, 0x10001}) 3.914226094s ago: executing program 4 (id=1740): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000180)='./file1\x00', 0xf51882, 0x79) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') 3.843470635s ago: executing program 4 (id=1741): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x0, 0x9dff, 0x1, "0007edeb00cbe600"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) syz_open_pts(r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xf) 3.729538857s ago: executing program 3 (id=1742): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000400), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.508684701s ago: executing program 3 (id=1743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) mount$tmpfs(0x0, 0x0, 0x0, 0x1000040, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer=revative:1,func=MMAP_CHECK,']) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newnexthop={0x18, 0x68, 0x1, 0x3, 0x80000000}, 0x18}}, 0x40000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 3.456132202s ago: executing program 3 (id=1744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000000)=0x40003) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0xfffffffc, 0x0}) 3.412361502s ago: executing program 6 (id=1745): r0 = timerfd_create(0x0, 0x0) fsopen(&(0x7f0000000000)='9p\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) read(r4, &(0x7f0000000240)=""/123, 0x7b) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x3fb, 0x320, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x100000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x34}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) 2.464598168s ago: executing program 6 (id=1746): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x2, 0xfffffffe}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x6, 0x1, 0x2, "3b9ff15183ec79ac3234ffb108ea1b6d40b737ca9bc66e4b922b07872c7b1092", 0x38416761}) 2.332148741s ago: executing program 3 (id=1747): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x637deca37acb8865) timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r3}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r7, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) 2.245271642s ago: executing program 6 (id=1748): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/4094, 0xffe}], 0x1, 0xf0, 0x3) 2.132910344s ago: executing program 6 (id=1749): socket$unix(0x1, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000003c0)=@gettaction={0x30, 0x32, 0x301, 0xfffffffe, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xcd3}]}, 0x30}}, 0x0) 582.14748ms ago: executing program 4 (id=1750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c980128876360864668f82ffdeefa000000000000ff"], 0x3e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0308"], 0xffdd) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 338.323494ms ago: executing program 5 (id=1751): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 338.075974ms ago: executing program 1 (id=1752): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000180)='./file1\x00', 0xf51882, 0x79) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) unlink(&(0x7f0000000040)='./file1\x00') 314.238214ms ago: executing program 3 (id=1753): open(&(0x7f0000000300)='.\x00', 0x0, 0x0) socket(0x10, 0x802, 0x0) socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) epoll_create(0x101) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000040)={0x2, 0x0, 0x1, 0x0, 0x0, [{{r4}, 0x1}]}) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) 269.351995ms ago: executing program 4 (id=1754): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 183.061977ms ago: executing program 6 (id=1755): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000080)=0x2) 78.625918ms ago: executing program 1 (id=1756): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x7e}, 'port0\x00', 0x511e36599023629, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0xffffffff}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d41, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 0s ago: executing program 5 (id=1757): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0x7f, 0x1004, 0x0, 0xb9df, 0x9}) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$kcm(0x10, 0x7, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) kernel console output (not intermixed with test programs): Pv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.189615][ T7279] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.634: corrupted inode contents [ 376.199735][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.264510][ T7279] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #16: comm syz.7.634: mark_inode_dirty error [ 376.272768][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.310136][ T7279] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.634: corrupted inode contents [ 376.320178][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.350012][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.353118][ T7279] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 376.367895][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.377263][ T7279] EXT4-fs error (device loop7): ext4_do_update_inode:5224: inode #16: comm syz.7.634: corrupted inode contents [ 376.386019][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.408636][ T7279] EXT4-fs error (device loop7): ext4_truncate:4311: inode #16: comm syz.7.634: mark_inode_dirty error [ 376.422881][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.462740][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.499915][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.516594][ T7279] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 376.549531][ T7279] EXT4-fs (loop7): 1 truncate cleaned up [ 376.574106][ T5737] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 376.576564][ T7279] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 376.604690][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.612363][ T5737] EXT4-fs error (device loop7): ext4_release_dquot:6825: comm kworker/u4:18: Failed to release dquot type 1 [ 376.635058][ T7279] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.639236][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.167467][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.188742][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.191402][ T5581] EXT4-fs (loop7): unmounting filesystem. [ 377.261194][ T7304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.301740][ T7307] loop6: detected capacity change from 0 to 256 [ 377.336750][ T7092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.375278][ T7307] FAT-fs (loop6): Directory bread(block 64) failed [ 377.402372][ T7307] FAT-fs (loop6): Directory bread(block 65) failed [ 377.424333][ T7307] FAT-fs (loop6): Directory bread(block 66) failed [ 377.458901][ T7307] FAT-fs (loop6): Directory bread(block 67) failed [ 377.489847][ T7307] FAT-fs (loop6): Directory bread(block 68) failed [ 377.520827][ T7307] FAT-fs (loop6): Directory bread(block 69) failed [ 377.558110][ T7307] FAT-fs (loop6): Directory bread(block 70) failed [ 377.584919][ T7307] FAT-fs (loop6): Directory bread(block 71) failed [ 377.601325][ T7307] FAT-fs (loop6): Directory bread(block 72) failed [ 377.611783][ T7307] FAT-fs (loop6): Directory bread(block 73) failed [ 377.866857][ T7321] loop7: detected capacity change from 0 to 1024 [ 378.021750][ T7321] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 378.845390][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.852385][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.058955][ T7337] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 379.411401][ T7337] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 379.645881][ T7337] EXT4-fs (loop7): This should not happen!! Data will be lost [ 379.645881][ T7337] [ 379.896874][ T7337] EXT4-fs (loop7): Total free blocks count 0 [ 379.971209][ T7337] EXT4-fs (loop7): Free/Dirty block details [ 380.024395][ T7337] EXT4-fs (loop7): free_blocks=68451041280 [ 380.053757][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.097776][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.117762][ T7337] EXT4-fs (loop7): dirty_blocks=16 [ 380.185567][ T7337] EXT4-fs (loop7): Block reservation details [ 380.193130][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.244856][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.252896][ T7337] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 380.322814][ T7092] device veth0_vlan entered promiscuous mode [ 380.397327][ T7092] device veth1_vlan entered promiscuous mode [ 380.537064][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.572464][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.646152][ T7092] device veth0_macvtap entered promiscuous mode [ 380.720010][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.762603][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.809311][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 380.859873][ T7092] device veth1_macvtap entered promiscuous mode [ 380.938986][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.981847][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.018263][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.054911][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.108419][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.148208][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.208233][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.258842][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.310867][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.342819][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 381.352479][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.379325][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.412748][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.446081][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.487271][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.502284][ T7367] loop1: detected capacity change from 0 to 256 [ 381.535827][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.568230][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.598210][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.638271][ T7092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.668220][ T7092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.716655][ T7092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.725106][ T5957] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 381.789421][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.825036][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.860042][ T7092] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.879643][ T7092] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.913677][ T7092] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.944487][ T7092] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.990088][ T5581] EXT4-fs (loop7): unmounting filesystem. [ 382.616837][ T4493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.672689][ T4493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.772653][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 382.859630][ T7377] loop5: detected capacity change from 0 to 1024 [ 382.867101][ T7377] EXT4-fs: Ignoring removed orlov option [ 382.882290][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.934340][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.999727][ T7377] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 383.023346][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 383.389924][ T7385] EXT4-fs error (device loop5): ext4_check_all_de:666: inode #12: block 7: comm syz.5.655: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 384.169361][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 384.211269][ T7395] loop9: detected capacity change from 0 to 256 [ 387.910133][ T7409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.128283][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 388.330196][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.368278][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.405362][ T7] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 388.425720][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.498897][ T7] usb 2-1: config 0 descriptor?? [ 388.916215][ T7] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 388.942988][ T7] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 388.978363][ T7] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 389.005126][ T7] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 389.018247][ T7] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 389.045624][ T7] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 389.093631][ T7] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 389.176688][ T7] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 390.948121][ T7] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 390.955910][ T7] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 390.990466][ T7463] loop1: detected capacity change from 0 to 512 [ 391.115976][ T7] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -71 [ 391.257141][ T7463] /dev/loop1: Can't open blockdev [ 392.028060][ T7] usb 2-1: USB disconnect, device number 3 [ 392.097743][ T7471] netlink: 24 bytes leftover after parsing attributes in process `syz.9.672'. [ 392.982713][ T7484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 392.990391][ T7484] IPv6: NLM_F_CREATE should be set when creating new route [ 393.124338][ T7486] loop6: detected capacity change from 0 to 512 [ 393.247483][ T7486] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 393.264284][ T7486] EXT4-fs (loop6): invalid journal inode [ 393.278534][ T7486] EXT4-fs (loop6): can't get journal size [ 393.382998][ T7486] EXT4-fs (loop6): 1 truncate cleaned up [ 393.403484][ T7486] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 394.100196][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 394.678429][ T4366] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 394.795588][ T7520] loop1: detected capacity change from 0 to 256 [ 394.878262][ T4366] usb 7-1: Using ep0 maxpacket: 32 [ 394.885666][ T4366] usb 7-1: config 0 has an invalid interface number: 15 but max is 0 [ 394.904598][ T4366] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 394.925294][ T4366] usb 7-1: config 0 has no interface number 0 [ 394.947103][ T4366] usb 7-1: config 0 interface 15 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 394.999979][ T4366] usb 7-1: config 0 interface 15 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 395.048936][ T4366] usb 7-1: config 0 interface 15 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.131709][ T5957] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 395.982171][ T4366] usb 7-1: New USB device found, idVendor=078b, idProduct=1234, bcdDevice=ac.04 [ 395.991557][ T4366] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.999748][ T4366] usb 7-1: Product: syz [ 396.004498][ T4366] usb 7-1: Manufacturer: syz [ 396.009476][ T4366] usb 7-1: SerialNumber: syz [ 396.058311][ T4366] usb 7-1: config 0 descriptor?? [ 396.069202][ T4366] pl2303 7-1:0.15: required endpoints missing [ 396.278400][ T4294] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 396.331485][ T7] usb 7-1: USB disconnect, device number 3 [ 396.339248][ T7530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.498531][ T4294] usb 8-1: Using ep0 maxpacket: 16 [ 396.521051][ T4294] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 396.539261][ T4294] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 396.550188][ T4294] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 396.577260][ T4294] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 396.602270][ T4294] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 396.620361][ T4294] usb 8-1: SerialNumber: syz [ 396.642940][ T7517] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 398.119082][ T4294] cdc_ether: probe of 8-1:1.0 failed with error -71 [ 398.138501][ T4294] usb 8-1: USB disconnect, device number 4 [ 399.218027][ T7555] loop5: detected capacity change from 0 to 512 [ 399.276752][ T7555] EXT4-fs: Ignoring removed oldalloc option [ 399.316432][ T7555] ext4: Unknown parameter 'noacl' [ 399.887522][ T7569] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 401.571652][ T7581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.804065][ T7584] loop6: detected capacity change from 0 to 1024 [ 401.854813][ T7584] EXT4-fs error (device loop6): __ext4_fill_super:5390: inode #2: comm syz.6.702: casefold flag without casefold feature [ 401.888775][ T7584] EXT4-fs (loop6): get root inode failed [ 401.894584][ T7584] EXT4-fs (loop6): mount failed [ 402.359084][ T7598] loop5: detected capacity change from 0 to 512 [ 402.372069][ T7598] EXT4-fs: Ignoring removed i_version option [ 402.406682][ T7598] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.472222][ T7602] loop6: detected capacity change from 0 to 128 [ 402.486694][ T7598] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 402.560944][ T7602] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 403.642182][ T7605] FAT-fs (loop6): FAT read failed (blocknr 128) [ 403.729656][ T7610] loop7: detected capacity change from 0 to 256 [ 403.932354][ T7598] EXT4-fs (loop5): orphan cleanup on readonly fs [ 403.958507][ T7598] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 404.060900][ T7598] EXT4-fs warning (device loop5): ext4_enable_quotas:7037: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 404.228747][ T7598] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 404.308577][ T7598] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 404.437154][ T7598] EXT4-fs (loop5): Remounting filesystem read-only [ 404.505127][ T7598] EXT4-fs (loop5): 1 truncate cleaned up [ 404.542471][ T7598] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 405.164123][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 406.930085][ T7637] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 407.525710][ T7645] loop6: detected capacity change from 0 to 4096 [ 407.606391][ T7645] EXT4-fs: Ignoring removed orlov option [ 407.652592][ T7645] EXT4-fs (loop6): Test dummy encryption mode enabled [ 407.786887][ T7651] loop1: detected capacity change from 0 to 1024 [ 408.107273][ T7645] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 409.413344][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 409.478758][ T7677] loop9: detected capacity change from 0 to 256 [ 409.599895][ T7677] FAT-fs (loop9): Directory bread(block 64) failed [ 409.631897][ T7677] FAT-fs (loop9): Directory bread(block 65) failed [ 409.654540][ T7677] FAT-fs (loop9): Directory bread(block 66) failed [ 409.693698][ T7677] FAT-fs (loop9): Directory bread(block 67) failed [ 409.719383][ T7677] FAT-fs (loop9): Directory bread(block 68) failed [ 409.748247][ T7677] FAT-fs (loop9): Directory bread(block 69) failed [ 409.754976][ T7677] FAT-fs (loop9): Directory bread(block 70) failed [ 409.808253][ T7677] FAT-fs (loop9): Directory bread(block 71) failed [ 409.815156][ T7677] FAT-fs (loop9): Directory bread(block 72) failed [ 409.872289][ T7677] FAT-fs (loop9): Directory bread(block 73) failed [ 410.337070][ T7692] loop9: detected capacity change from 0 to 128 [ 410.438898][ T27] audit: type=1800 audit(1744527021.456:14): pid=7692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.726" name="file2" dev="loop9" ino=1048653 res=0 errno=0 [ 410.449474][ T7692] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 410.555190][ T7696] loop6: detected capacity change from 0 to 16 [ 410.592468][ T7696] erofs: (device loop6): mounted with root inode @ nid 36. [ 410.598739][ T7692] FAT-fs (loop9): Filesystem has been set read-only [ 410.640169][ T7692] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 410.670026][ T7692] syz.9.726: attempt to access beyond end of device [ 410.670026][ T7692] loop9: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 411.064879][ T7676] loop7: detected capacity change from 0 to 40427 [ 411.217495][ T7676] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 411.235678][ T7676] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 411.527500][ T7712] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.998832][ T7676] F2FS-fs (loop7): Failed to start F2FS issue_checkpoint_thread (-12) [ 414.170788][ T7737] loop9: detected capacity change from 0 to 128 [ 414.337391][ T7737] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 414.394383][ T7737] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.030417][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 0 [ 415.108756][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 1024 [ 415.243128][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 415.318588][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 2048 [ 415.366063][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 3072 [ 415.659755][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 4096 [ 415.814782][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 416.085258][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 5120 [ 416.598834][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 6144 [ 416.631142][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 7168 [ 416.715634][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 8192 [ 416.785439][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 9216 [ 416.864954][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 416.926122][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 416.974312][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 417.124224][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 417.195322][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 417.218573][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 417.259413][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 417.270475][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 417.377033][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 417.435277][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 419.068593][ T4357] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 419.271048][ T4357] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 419.311168][ T4357] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.362798][ T4357] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 419.395420][ T4357] usb 2-1: config 1 has no interface number 1 [ 419.425846][ T4357] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 419.463573][ T4357] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.493497][ T4357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.514863][ T4357] usb 2-1: Product: syz [ 419.555586][ T4357] usb 2-1: Manufacturer: syz [ 419.563592][ T4357] usb 2-1: SerialNumber: syz [ 419.796694][ T7776] loop1: detected capacity change from 0 to 16 [ 420.054512][ T7092] EXT4-fs error: 1223 callbacks suppressed [ 420.054575][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 10240 [ 420.082799][ T7776] /dev/loop1: Can't open blockdev [ 420.264140][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 11264 [ 420.425594][ T7092] EXT4-fs error (device loop9): ext4_empty_dir:3139: inode #11: comm syz-executor: Directory block failed checksum [ 420.474675][ T7776] loop1: detected capacity change from 0 to 512 [ 420.574597][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 0 [ 420.796987][ T7776] /dev/loop1: Can't open blockdev [ 420.858776][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 1024 [ 421.014128][ T7814] fuse: Bad value for 'fd' [ 421.034598][ T7092] EXT4-fs warning: 180 callbacks suppressed [ 421.034619][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 421.501379][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 2048 [ 421.750478][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 3072 [ 422.085455][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 4096 [ 422.127664][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 422.202531][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 5120 [ 422.460792][ T7092] EXT4-fs error (device loop9): ext4_readdir:223: inode #11: comm syz-executor: path /17/file0/lost+found: directory fails checksum at offset 6144 [ 422.954664][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 422.979375][ T7827] binder: 7822:7827 ioctl c0306201 2000000003c0 returned -22 [ 423.101071][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 423.352708][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 423.530043][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 423.685691][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 423.729213][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 423.800137][ T4357] usb 2-1: USB disconnect, device number 4 [ 423.930051][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 424.010025][ T7092] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 424.923399][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 424.992759][ T7843] loop6: detected capacity change from 0 to 256 [ 425.125735][ T7843] FAT-fs (loop6): Directory bread(block 64) failed [ 425.148451][ T7843] FAT-fs (loop6): Directory bread(block 65) failed [ 425.189039][ T7843] FAT-fs (loop6): Directory bread(block 66) failed [ 425.217809][ T7843] FAT-fs (loop6): Directory bread(block 67) failed [ 425.229591][ T7092] EXT4-fs (loop9): unmounting filesystem. [ 425.238895][ T7843] FAT-fs (loop6): Directory bread(block 68) failed [ 425.246120][ T7843] FAT-fs (loop6): Directory bread(block 69) failed [ 425.308455][ T7843] FAT-fs (loop6): Directory bread(block 70) failed [ 425.328429][ T7843] FAT-fs (loop6): Directory bread(block 71) failed [ 425.364306][ T7843] FAT-fs (loop6): Directory bread(block 72) failed [ 425.394659][ T7843] FAT-fs (loop6): Directory bread(block 73) failed [ 425.969292][ T7853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 426.053656][ T4380] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.298280][ T4380] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.347141][ T7864] loop7: detected capacity change from 0 to 1024 [ 426.462608][ T4380] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.503111][ T7864] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 426.612474][ T4380] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.736820][ T5581] EXT4-fs (loop7): unmounting filesystem. [ 427.620610][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.635958][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 427.846755][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 427.873862][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 427.895190][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 427.912304][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 430.028805][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 430.430044][ T7907] loop6: detected capacity change from 0 to 1024 [ 430.501934][ T7907] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 430.644692][ T7893] chnl_net:caif_netlink_parms(): no params data found [ 431.322959][ T7906] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 431.418498][ T7906] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 431.468588][ T7906] EXT4-fs (loop6): This should not happen!! Data will be lost [ 431.468588][ T7906] [ 431.509476][ T7893] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.516643][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.542772][ T7893] device bridge_slave_0 entered promiscuous mode [ 431.563065][ T7906] EXT4-fs (loop6): Total free blocks count 0 [ 431.572803][ T7893] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.596324][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.612250][ T7893] device bridge_slave_1 entered promiscuous mode [ 431.631038][ T7906] EXT4-fs (loop6): Free/Dirty block details [ 431.637023][ T7906] EXT4-fs (loop6): free_blocks=68451041280 [ 431.743845][ T7906] EXT4-fs (loop6): dirty_blocks=32 [ 431.751714][ T7906] EXT4-fs (loop6): Block reservation details [ 431.757835][ T7906] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 432.094901][ T7893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.108415][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 432.178095][ T7893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.303565][ T4380] device hsr_slave_0 left promiscuous mode [ 432.333962][ T4380] device hsr_slave_1 left promiscuous mode [ 432.357032][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.368348][ T4380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.399191][ T4380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.406942][ T4380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.461390][ T4380] device bridge_slave_1 left promiscuous mode [ 432.467967][ T4380] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.527317][ T4380] device bridge_slave_0 left promiscuous mode [ 432.548602][ T4380] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.649035][ T4380] device veth1_macvtap left promiscuous mode [ 432.655855][ T4380] device veth0_macvtap left promiscuous mode [ 432.693389][ T4380] device veth1_vlan left promiscuous mode [ 432.721347][ T4380] device veth0_vlan left promiscuous mode [ 433.206159][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 433.416860][ T7921] loop1: detected capacity change from 0 to 40427 [ 433.512991][ T5957] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 433.757955][ T7942] loop6: detected capacity change from 0 to 1024 [ 433.949005][ T7942] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 434.188388][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 435.514785][ T7967] loop1: detected capacity change from 0 to 512 [ 435.519506][ T4380] team0 (unregistering): Port device team_slave_1 removed [ 435.563339][ T7967] /dev/loop1: Can't open blockdev [ 435.710554][ T4380] team0 (unregistering): Port device team_slave_0 removed [ 435.812840][ T4380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.919176][ T4380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.268394][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 436.942514][ T4380] bond0 (unregistering): Released all slaves [ 437.041722][ T7893] team0: Port device team_slave_0 added [ 437.059547][ T7893] team0: Port device team_slave_1 added [ 437.114045][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 437.191972][ T7974] loop6: detected capacity change from 0 to 1024 [ 437.234205][ T7893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.259431][ T7893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.318398][ T7893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.331537][ T7978] loop1: detected capacity change from 0 to 1024 [ 437.344300][ T7974] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 437.349636][ T7978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 437.365663][ T7893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.374548][ T7978] /dev/loop1: Can't open blockdev [ 437.396885][ T7893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.465099][ T7893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.260457][ T7893] device hsr_slave_0 entered promiscuous mode [ 438.301060][ T7893] device hsr_slave_1 entered promiscuous mode [ 438.318468][ T7893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.326543][ T7893] Cannot create hsr debugfs directory [ 438.387034][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 438.901073][ T7982] loop5: detected capacity change from 0 to 40427 [ 438.964062][ T7982] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 438.996724][ T7982] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 439.052430][ T7982] F2FS-fs (loop5): Found nat_bits in checkpoint [ 439.134287][ T7982] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 439.144707][ T7982] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 439.569171][ T7987] loop6: detected capacity change from 0 to 40427 [ 439.597921][ T7987] F2FS-fs (loop6): invalid crc value [ 439.680117][ T7987] F2FS-fs (loop6): Found nat_bits in checkpoint [ 439.849963][ T7987] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 440.036992][ T5030] syz-executor: attempt to access beyond end of device [ 440.036992][ T5030] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 440.247030][ T8004] loop5: detected capacity change from 0 to 256 [ 440.273772][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.280324][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.494559][ T7893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 440.565475][ T7893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 440.633780][ T7893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 440.672476][ T7893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 440.744823][ T8009] loop5: detected capacity change from 0 to 128 [ 440.975719][ T7893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.063586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 441.109266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.144545][ T8014] loop5: detected capacity change from 0 to 1024 [ 441.157763][ T7893] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.171771][ T8018] loop7: detected capacity change from 0 to 1024 [ 441.198782][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.218952][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.269145][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.269811][ T8018] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 441.277190][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.289971][ T8014] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 441.363488][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 441.373031][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.383910][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.392811][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.400107][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.168813][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 442.382119][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 442.388816][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 442.556153][ T5581] EXT4-fs (loop7): unmounting filesystem. [ 442.596217][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 442.648794][ T8045] loop5: detected capacity change from 0 to 16 [ 442.678287][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 442.681113][ T8045] erofs: (device loop5): mounted with root inode @ nid 36. [ 442.733993][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 442.768606][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.795533][ T8045] process 'syz.5.803' launched './file0/file0' with NULL argv: empty string added [ 442.846278][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 442.945076][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 443.232211][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.423284][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 444.470166][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.722245][ T8055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.806'. [ 445.461925][ T8076] loop6: detected capacity change from 0 to 256 [ 447.759914][ T8091] loop6: detected capacity change from 0 to 2048 [ 447.777550][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 447.796875][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.808500][ T8091] EXT4-fs: test_dummy_encryption requires encrypt feature [ 447.846442][ T7893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.071664][ T8091] loop6: detected capacity change from 0 to 1024 [ 448.169631][ T8091] ext2: Unknown parameter 'defcontext' [ 448.233580][ T5957] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 448.252289][ T8089] kvm: emulating exchange as write [ 448.520445][ T8103] loop7: detected capacity change from 0 to 1024 [ 448.669441][ T8103] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 449.091726][ T5581] EXT4-fs (loop7): unmounting filesystem. [ 449.119329][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.140596][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.229136][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.255819][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.287166][ T7893] device veth0_vlan entered promiscuous mode [ 449.295025][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.330284][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.416936][ T7893] device veth1_vlan entered promiscuous mode [ 449.528249][ T8127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.585739][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 449.626885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 449.702347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.769416][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.822682][ T7893] device veth0_macvtap entered promiscuous mode [ 450.154117][ T7893] device veth1_macvtap entered promiscuous mode [ 450.219752][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.251815][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.311607][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.338723][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.376168][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.406249][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.443916][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.496414][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.548222][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.579948][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.619374][ T7893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.681355][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.699274][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.760653][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.798319][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.855596][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.867133][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.877788][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.898919][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.944255][ T7893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.984263][ T7893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.026581][ T7893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.062294][ T7893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.109362][ T7893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.156552][ T7893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.194245][ T7893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.237602][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.283286][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.642824][ T4380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.669609][ T4380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.722738][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 451.760856][ T4343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.789503][ T4343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.851767][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 452.761432][ T8169] loop7: detected capacity change from 0 to 1024 [ 452.867264][ T8169] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 454.310339][ T8180] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.317759][ T8180] IPv6: NLM_F_CREATE should be set when creating new route [ 454.490664][ T5581] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 454.654588][ T5581] EXT4-fs error (device loop7): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 454.742101][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 454.777917][ T5581] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 454.899829][ T5581] EXT4-fs error (device loop7): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 454.974438][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 455.009072][ T5581] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 455.089285][ T5581] EXT4-fs error (device loop7): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 455.169075][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 455.206440][ T5581] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 455.297278][ T5581] EXT4-fs error (device loop7): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 455.378249][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 455.428710][ T5581] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 32: comm syz-executor: path /99/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 455.524685][ T5581] EXT4-fs error (device loop7): ext4_empty_dir:3145: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 455.605644][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 455.745153][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 455.828679][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 456.007663][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 456.099787][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 456.236282][ T5581] EXT4-fs warning (device loop7): ext4_empty_dir:3147: inode #11: comm syz-executor: directory missing '.' [ 458.530154][ T8236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.966097][ T5581] EXT4-fs (loop7): unmounting filesystem. [ 461.003327][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.015889][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.025815][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.039899][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.047872][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.058878][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.304382][ T4509] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.581558][ T4509] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.755327][ T4509] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.954321][ T4509] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.402861][ T8276] chnl_net:caif_netlink_parms(): no params data found [ 463.090356][ T8309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.097791][ T8276] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.148545][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 463.181994][ T8276] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.199481][ T8276] device bridge_slave_0 entered promiscuous mode [ 463.354478][ T8276] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.425129][ T8276] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.497409][ T8276] device bridge_slave_1 entered promiscuous mode [ 464.432304][ T8276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.510466][ T8276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.754420][ T8276] team0: Port device team_slave_0 added [ 464.822759][ T8276] team0: Port device team_slave_1 added [ 464.916321][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.945727][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.045514][ T8276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.237139][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 465.400340][ T8276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.663688][ T8276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.107204][ T8276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.535914][ T8276] device hsr_slave_0 entered promiscuous mode [ 466.609340][ T8276] device hsr_slave_1 entered promiscuous mode [ 466.718445][ T8276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.726349][ T8276] Cannot create hsr debugfs directory [ 467.308307][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 467.616110][ T8371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.551055][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 471.820036][ T4509] device hsr_slave_0 left promiscuous mode [ 471.843932][ T4509] device hsr_slave_1 left promiscuous mode [ 471.888959][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.918007][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.940531][ T4509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.984532][ T4509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.039084][ T4509] device bridge_slave_1 left promiscuous mode [ 472.046128][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.072708][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.123771][ T4509] device veth1_macvtap left promiscuous mode [ 472.130556][ T4509] device veth0_macvtap left promiscuous mode [ 472.137707][ T4509] device veth1_vlan left promiscuous mode [ 472.154725][ T4509] device veth0_vlan left promiscuous mode [ 474.255415][ T4509] team0 (unregistering): Port device team_slave_1 removed [ 474.356190][ T4509] team0 (unregistering): Port device team_slave_0 removed [ 474.469407][ T4509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.602365][ T4509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.834244][ T4509] bond0 (unregistering): Released all slaves [ 476.774342][ T8276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 476.816846][ T8276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 476.877204][ T8276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 476.905703][ T8276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 477.234911][ T8276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.288830][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 477.319233][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.370188][ T8276] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.429947][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 477.450304][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.489005][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.497207][ T4493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.578926][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 477.659514][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 477.679142][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 477.720218][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.728226][ T4493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.768301][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 477.816241][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 477.905558][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 477.934639][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 477.969268][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 478.009531][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 478.077563][ T8276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 478.137923][ T8276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.153123][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 478.203759][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 478.252651][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 478.303876][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 478.389128][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 478.448389][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 479.405346][ T8276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.436219][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 479.447836][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 479.589320][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 479.608762][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 479.681766][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 479.715023][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 479.811431][ T8276] device veth0_vlan entered promiscuous mode [ 479.824383][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 479.843351][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 479.908056][ T8276] device veth1_vlan entered promiscuous mode [ 480.031196][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 480.054923][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 480.093932][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 480.145527][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 480.189247][ T8276] device veth0_macvtap entered promiscuous mode [ 480.238941][ T8276] device veth1_macvtap entered promiscuous mode [ 480.341131][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.388192][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.423072][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.446219][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.476734][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.520026][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.554665][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.634380][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.689224][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.761810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 480.781848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 480.897610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 480.947333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 480.992217][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.044155][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.077447][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.091443][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.150874][ T8542] overlayfs: failed to resolve './file1': -2 [ 481.174295][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.391578][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.547179][ T8276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.748452][ T8276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.925065][ T8276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.014325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 482.029186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 482.132774][ T8276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.161578][ T8276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.194050][ T8276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.228433][ T8276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.596689][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.647247][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.720213][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.790375][ T5737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.860197][ T5737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.901810][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 486.323004][ T8596] device wg2 entered promiscuous mode [ 491.373697][ T8667] loop6: detected capacity change from 0 to 1024 [ 491.383574][ T8667] EXT4-fs: Ignoring removed orlov option [ 491.479374][ T8667] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 491.978761][ T8678] EXT4-fs error (device loop6): ext4_check_all_de:666: inode #12: block 7: comm syz.6.934: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 492.724669][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 501.719017][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.814795][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.103153][ T8925] loop5: detected capacity change from 0 to 1024 [ 514.277440][ T8925] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 515.466228][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 523.634709][ T9033] loop6: detected capacity change from 0 to 1024 [ 523.805632][ T9033] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 523.884628][ T9045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.892255][ T9045] IPv6: NLM_F_CREATE should be set when creating new route [ 525.033194][ T9032] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 525.049431][ T9032] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 525.062177][ T9032] EXT4-fs (loop6): This should not happen!! Data will be lost [ 525.062177][ T9032] [ 525.072622][ T9032] EXT4-fs (loop6): Total free blocks count 0 [ 525.080556][ T9032] EXT4-fs (loop6): Free/Dirty block details [ 525.087062][ T9032] EXT4-fs (loop6): free_blocks=68451041280 [ 525.094145][ T9032] EXT4-fs (loop6): dirty_blocks=16 [ 525.100031][ T9032] EXT4-fs (loop6): Block reservation details [ 525.106508][ T9032] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 525.349563][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 527.412155][ T9121] loop1: detected capacity change from 0 to 1024 [ 527.448165][ T9121] /dev/loop1: Can't open blockdev [ 532.976046][ T9099] device wg2 entered promiscuous mode [ 532.982089][ T9102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.947011][ T9185] loop3: detected capacity change from 0 to 1024 [ 534.540036][ T9185] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 535.004368][ T9203] device wg2 entered promiscuous mode [ 535.392909][ T9184] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 535.541396][ T9184] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 535.618245][ T9184] EXT4-fs (loop3): This should not happen!! Data will be lost [ 535.618245][ T9184] [ 535.720266][ T9184] EXT4-fs (loop3): Total free blocks count 0 [ 535.765541][ T9184] EXT4-fs (loop3): Free/Dirty block details [ 535.838624][ T9184] EXT4-fs (loop3): free_blocks=68451041280 [ 535.886779][ T9184] EXT4-fs (loop3): dirty_blocks=32 [ 535.920954][ T9184] EXT4-fs (loop3): Block reservation details [ 535.998322][ T9184] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 536.163008][ T9232] device wg2 entered promiscuous mode [ 540.174130][ T8276] EXT4-fs (loop3): unmounting filesystem. [ 541.619353][ T9327] loop6: detected capacity change from 0 to 1024 [ 541.891482][ T9332] Â: renamed from pim6reg1 [ 541.924323][ T9327] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 542.620910][ T9326] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 542.701901][ T9326] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 542.839181][ T9326] EXT4-fs (loop6): This should not happen!! Data will be lost [ 542.839181][ T9326] [ 542.872808][ T9326] EXT4-fs (loop6): Total free blocks count 0 [ 542.962816][ T9326] EXT4-fs (loop6): Free/Dirty block details [ 542.989833][ T9326] EXT4-fs (loop6): free_blocks=68451041280 [ 543.016312][ T9326] EXT4-fs (loop6): dirty_blocks=32 [ 543.046103][ T9326] EXT4-fs (loop6): Block reservation details [ 543.066826][ T9326] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 543.122479][ T9356] device pim6reg1 entered promiscuous mode [ 544.921222][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 546.952686][ T9437] loop5: detected capacity change from 0 to 1024 [ 547.339630][ T9437] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 547.607894][ T9436] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 547.624821][ T9436] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 547.640860][ T9436] EXT4-fs (loop5): This should not happen!! Data will be lost [ 547.640860][ T9436] [ 547.653680][ T9436] EXT4-fs (loop5): Total free blocks count 0 [ 547.661828][ T9436] EXT4-fs (loop5): Free/Dirty block details [ 547.670129][ T9436] EXT4-fs (loop5): free_blocks=68451041280 [ 547.676909][ T9436] EXT4-fs (loop5): dirty_blocks=32 [ 547.682873][ T9436] EXT4-fs (loop5): Block reservation details [ 547.689226][ T9436] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 547.814141][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 549.552891][ T9510] device pim6reg1 entered promiscuous mode [ 554.990030][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 564.658628][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.665775][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.002182][ T9685] device wg2 left promiscuous mode [ 565.080512][ T9685] device wg2 entered promiscuous mode [ 566.792669][ T9710] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1206'. [ 570.848821][ T9753] syz.1.1214 uses obsolete (PF_INET,SOCK_PACKET) [ 571.209495][ T9765] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1215'. [ 573.796699][ T6939] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 573.990177][ T6939] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 574.025049][ T6939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.049111][ T6939] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.068353][ T6939] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 574.113369][ T6939] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 574.143327][ T6939] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 574.167054][ T6939] usb 7-1: Manufacturer: syz [ 574.257821][ T6939] usb 7-1: config 0 descriptor?? [ 574.703146][ T6939] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 574.726631][ T6939] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 574.779269][ T6939] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 575.101373][ T6939] usb 7-1: USB disconnect, device number 4 [ 576.076825][ T9823] loop1: detected capacity change from 0 to 1024 [ 576.275398][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1231'. [ 576.658738][ T9841] loop5: detected capacity change from 0 to 512 [ 576.707332][ T9841] EXT4-fs: Ignoring removed mblk_io_submit option [ 576.765278][ T9841] EXT4-fs: inline encryption not supported [ 576.776256][ T9841] EXT4-fs: Ignoring removed mblk_io_submit option [ 576.793095][ T9841] EXT4-fs (loop5): Test dummy encryption mode enabled [ 576.807659][ T9841] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 576.843071][ T9841] EXT4-fs (loop5): 1 truncate cleaned up [ 576.875772][ T9841] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 577.415960][ T9841] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 577.620400][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 579.211812][ T9896] loop5: detected capacity change from 0 to 512 [ 579.244853][ T9896] EXT4-fs: Ignoring removed orlov option [ 579.309219][ T9896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 579.364259][ T9896] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #15: comm syz.5.1244: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 579.491593][ T9896] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1244: couldn't read orphan inode 15 (err -117) [ 579.516166][ T9896] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 579.548520][ T9682] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 579.695519][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 579.768174][ T9682] usb 2-1: Using ep0 maxpacket: 16 [ 579.775717][ T9682] usb 2-1: config 0 has no interfaces? [ 579.818264][ T9682] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 579.827813][ T9682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.888751][ T9682] usb 2-1: config 0 descriptor?? [ 580.191351][ T9917] loop6: detected capacity change from 0 to 256 [ 580.294427][ T9917] MINIX-fs: mounting file system with errors, running fsck is recommended [ 582.120860][ T9944] serio: Serial port ttyS3 [ 582.225153][ T6939] usb 2-1: USB disconnect, device number 5 [ 582.330687][ T9951] tipc: Started in network mode [ 582.336236][ T9951] tipc: Node identity 4, cluster identity 4711 [ 582.408305][ T9951] tipc: Node number set to 4 [ 582.603615][ T9959] loop4: detected capacity change from 0 to 2048 [ 582.675932][ T9959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.694182][ T9957] loop6: detected capacity change from 0 to 4096 [ 582.965826][ T9964] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 583.430088][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1265'. [ 583.469530][ T9976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1265'. [ 583.541513][ T9976] device syz_tun entered promiscuous mode [ 583.571481][ T9976] device syz_tun left promiscuous mode [ 585.047540][ T9998] dccp_close: ABORT with 214 bytes unread [ 585.708500][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 585.922478][T10017] input: syz0 as /devices/virtual/input/input12 [ 586.986734][T10035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1282'. [ 587.279677][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 587.997111][ T4262] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 588.006745][ T4262] Bluetooth: hci2: Injecting HCI hardware error event [ 588.017778][ T4265] Bluetooth: hci2: hardware error 0x00 [ 588.227806][T10048] device veth1_macvtap left promiscuous mode [ 588.234303][T10048] device macsec0 entered promiscuous mode [ 588.286994][T10050] loop5: detected capacity change from 0 to 128 [ 588.306857][T10050] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 588.384649][T10050] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 588.647111][ T4303] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 590.342579][ T4265] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 590.366836][T10088] loop1: detected capacity change from 0 to 1024 [ 590.399189][T10088] /dev/loop1: Can't open blockdev [ 590.403410][T10093] loop6: detected capacity change from 0 to 512 [ 590.547496][T10093] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1296: inode #1: comm syz.6.1296: iget: illegal inode # [ 590.701495][T10093] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1296: error while reading EA inode 1 err=-117 [ 590.779988][T10093] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.1296: inode #1: comm syz.6.1296: iget: illegal inode # [ 590.818485][T10093] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.1296: error while reading EA inode 1 err=-117 [ 590.853475][T10093] EXT4-fs (loop6): 1 orphan inode deleted [ 590.882092][T10093] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 591.002924][T10089] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1296: invalid indirect mapped block 234881024 (level 0) [ 591.324022][T10110] loop1: detected capacity change from 0 to 2048 [ 591.468506][ T5957] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 591.594005][T10113] loop3: detected capacity change from 0 to 256 [ 591.856734][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 592.785243][T10127] loop6: detected capacity change from 0 to 256 [ 592.960807][T10127] FAT-fs (loop6): Directory bread(block 64) failed [ 592.985169][T10131] loop5: detected capacity change from 0 to 1024 [ 592.998436][T10127] FAT-fs (loop6): Directory bread(block 65) failed [ 593.005614][T10127] FAT-fs (loop6): Directory bread(block 66) failed [ 593.044663][T10131] EXT4-fs: Ignoring removed nobh option [ 593.064498][T10127] FAT-fs (loop6): Directory bread(block 67) failed [ 593.087478][T10131] EXT4-fs: Ignoring removed bh option [ 593.100700][T10127] FAT-fs (loop6): Directory bread(block 68) failed [ 593.107315][T10127] FAT-fs (loop6): Directory bread(block 69) failed [ 593.140083][T10131] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 593.163960][T10127] FAT-fs (loop6): Directory bread(block 70) failed [ 593.221003][T10131] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 593.247784][T10127] FAT-fs (loop6): Directory bread(block 71) failed [ 593.278424][T10127] FAT-fs (loop6): Directory bread(block 72) failed [ 593.285039][T10127] FAT-fs (loop6): Directory bread(block 73) failed [ 593.864818][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 594.264221][T10148] loop1: detected capacity change from 0 to 1024 [ 594.329397][T10148] EXT4-fs: Ignoring removed orlov option [ 594.355831][T10148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 594.408475][T10148] /dev/loop1: Can't open blockdev [ 594.643423][T10151] loop6: detected capacity change from 0 to 512 [ 595.304254][T10165] dccp_close: ABORT with 214 bytes unread [ 596.467039][T10182] x_tables: duplicate underflow at hook 4 [ 597.035498][T10198] loop5: detected capacity change from 0 to 1024 [ 597.188427][ T6939] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 597.197417][T10198] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 597.342432][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 597.370787][ T6939] usb 2-1: Using ep0 maxpacket: 16 [ 597.383413][ T6939] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 597.427099][ T6939] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 597.476791][ T6939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.503528][ T6939] usb 2-1: Product: syz [ 597.527375][ T6939] usb 2-1: Manufacturer: syz [ 597.576961][ T6939] usb 2-1: SerialNumber: syz [ 597.607235][ T6939] usb 2-1: config 0 descriptor?? [ 597.647349][ T6939] appledisplay 2-1:0.0: Could not find int-in endpoint [ 597.679391][ T6939] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 597.892787][ T6939] usb 2-1: USB disconnect, device number 6 [ 598.274888][T10228] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 600.015467][ T4293] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 600.041685][T10261] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1342'. [ 600.208554][ T4293] usb 6-1: Using ep0 maxpacket: 32 [ 600.219788][ T4293] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 600.258241][ T4293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.282545][ T4293] usb 6-1: Product: syz [ 600.286768][ T4293] usb 6-1: Manufacturer: syz [ 600.318355][ T4293] usb 6-1: SerialNumber: syz [ 600.329456][ T4293] usb 6-1: config 0 descriptor?? [ 600.364113][ T4293] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 600.869051][T10281] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1347'. [ 600.910874][T10284] loop3: detected capacity change from 0 to 1024 [ 601.023575][T10284] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 601.058928][T10284] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.208378][T10284] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 601.298706][T10284] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 601.338253][T10284] EXT4-fs (loop3): This should not happen!! Data will be lost [ 601.338253][T10284] [ 601.368831][T10284] EXT4-fs (loop3): Total free blocks count 0 [ 601.408404][T10284] EXT4-fs (loop3): Free/Dirty block details [ 601.428899][T10284] EXT4-fs (loop3): free_blocks=4293918720 [ 601.476847][T10284] EXT4-fs (loop3): dirty_blocks=16 [ 601.507318][T10284] EXT4-fs (loop3): Block reservation details [ 601.556351][T10284] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 601.566928][ T4293] gspca_stk1135: reg_w 0xd err -71 [ 601.580246][ T4293] gspca_stk1135: serial bus timeout: status=0x00 [ 601.633096][ T4293] gspca_stk1135: Sensor write failed [ 601.695953][ T4293] gspca_stk1135: serial bus timeout: status=0x00 [ 602.022300][ T4293] gspca_stk1135: Sensor write failed [ 602.268268][ T4293] gspca_stk1135: serial bus timeout: status=0x00 [ 602.328295][ T4293] gspca_stk1135: Sensor read failed [ 602.333681][ T4293] gspca_stk1135: serial bus timeout: status=0x00 [ 602.467533][ T4293] gspca_stk1135: Sensor read failed [ 602.490311][ T4293] gspca_stk1135: Detected sensor type unknown (0x0) [ 602.497589][ T4293] gspca_stk1135: serial bus timeout: status=0x00 [ 602.564166][ T4293] gspca_stk1135: Sensor read failed [ 602.576771][ T4293] gspca_stk1135: serial bus timeout: status=0x00 [ 602.604630][ T4293] gspca_stk1135: Sensor read failed [ 602.624155][ T4293] gspca_stk1135: serial bus timeout: status=0x00 [ 602.646963][ T4293] gspca_stk1135: Sensor write failed [ 602.654701][ T4293] gspca_stk1135: serial bus timeout: status=0x00 [ 602.662046][ T4293] gspca_stk1135: Sensor write failed [ 602.673015][ T4293] stk1135: probe of 6-1:0.0 failed with error -71 [ 602.686712][ T4293] usb 6-1: USB disconnect, device number 5 [ 602.715979][ T4355] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 28 [ 602.852409][T10313] loop6: detected capacity change from 0 to 512 [ 602.891534][T10313] EXT4-fs: Ignoring removed mblk_io_submit option [ 602.929939][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1350'. [ 602.939404][T10313] EXT4-fs: inline encryption not supported [ 602.939465][T10313] EXT4-fs: Ignoring removed mblk_io_submit option [ 602.996744][T10313] EXT4-fs (loop6): Test dummy encryption mode enabled [ 603.030598][T10313] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 603.097639][T10313] EXT4-fs (loop6): 1 truncate cleaned up [ 603.122385][T10313] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 603.298451][ T4293] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 603.385688][T10313] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 603.484581][ T4296] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 603.492849][ T4293] usb 6-1: Using ep0 maxpacket: 16 [ 603.500528][ T4293] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 603.541633][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 603.546583][ T4293] usb 6-1: config 0 has no interface number 0 [ 603.566006][ T4293] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 603.587212][ T4293] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.619470][ T4293] usb 6-1: Product: syz [ 603.623708][ T4293] usb 6-1: Manufacturer: syz [ 603.648353][ T4293] usb 6-1: SerialNumber: syz [ 603.680462][ T4293] usb 6-1: config 0 descriptor?? [ 603.698413][ T4296] usb 5-1: Using ep0 maxpacket: 32 [ 603.705915][ T4296] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 603.918609][ T4293] hub 6-1:0.145: bad descriptor, ignoring hub [ 603.938021][ T4293] hub: probe of 6-1:0.145 failed with error -5 [ 603.949104][ T4296] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 603.961757][ T4293] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.145/input/input13 [ 603.972153][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 604.372185][ T4296] usb 5-1: Product: syz [ 604.379018][ T4296] usb 5-1: Manufacturer: syz [ 604.383949][ T4296] usb 5-1: SerialNumber: syz [ 604.393231][ T4296] usb 5-1: config 0 descriptor?? [ 604.401821][T10324] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 604.439256][ T4293] usb 6-1: USB disconnect, device number 6 [ 605.939476][T10365] device veth1_macvtap left promiscuous mode [ 605.946288][T10365] device macsec0 entered promiscuous mode [ 605.953445][ T6939] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 606.161183][ T6939] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 606.191539][ T6939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.239259][ T6939] usb 2-1: config 0 descriptor?? [ 606.280336][ T6939] gspca_main: spca508-2.14.0 probing 8086:0110 [ 606.339258][ T4296] usb 5-1: USB disconnect, device number 2 [ 606.450737][ T6939] gspca_spca508: reg_read err -32 [ 606.657745][ T6939] gspca_spca508: reg_read err -71 [ 606.678438][ T6939] gspca_spca508: reg_read err -71 [ 606.689541][ T6939] gspca_spca508: reg_read err -71 [ 606.728546][ T6939] gspca_spca508: reg write: error -71 [ 606.734862][ T6939] spca508: probe of 2-1:0.0 failed with error -71 [ 606.760749][ T27] audit: type=1326 audit(1744539505.783:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705b8d169 code=0x7ffc0000 [ 606.778773][ T6939] usb 2-1: USB disconnect, device number 7 [ 606.875785][ T27] audit: type=1326 audit(1744539505.783:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705b8d169 code=0x7ffc0000 [ 606.931934][T10390] loop5: detected capacity change from 0 to 512 [ 606.938378][ T4296] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 606.950620][ T27] audit: type=1326 audit(1744539505.843:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fb705b8d169 code=0x7ffc0000 [ 607.008281][ T27] audit: type=1326 audit(1744539505.843:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705b8d169 code=0x7ffc0000 [ 607.108972][ T27] audit: type=1326 audit(1744539505.843:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10387 comm="syz.3.1370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb705b8d169 code=0x7ffc0000 [ 607.128303][ T4296] usb 5-1: Using ep0 maxpacket: 32 [ 607.188300][ T4296] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 607.197182][ T4296] usb 5-1: config 0 has no interface number 0 [ 607.238993][ T4296] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 607.268597][ T4296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.277300][ T4296] usb 5-1: Product: syz [ 607.317050][ T4296] usb 5-1: Manufacturer: syz [ 607.320731][T10397] loop5: detected capacity change from 0 to 1024 [ 607.333644][ T4296] usb 5-1: SerialNumber: syz [ 607.373361][ T4296] usb 5-1: config 0 descriptor?? [ 607.405559][ T4296] smsc95xx v2.0.0 [ 607.438344][ T4292] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 607.638245][ T4292] usb 4-1: Using ep0 maxpacket: 32 [ 607.650217][ T4292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 607.735466][ T4292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.778699][ T4292] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 607.827654][ T4292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.828594][ T4296] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 607.863174][ T4296] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 607.925164][ T4292] usb 4-1: config 0 descriptor?? [ 607.966338][ T4292] hub 4-1:0.0: USB hub found [ 608.130093][T10407] loop1: detected capacity change from 0 to 1024 [ 608.179565][ T4292] hub 4-1:0.0: 1 port detected [ 608.283200][T10407] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 608.415921][T10407] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 608.508580][T10407] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 608.802450][ T4292] hub 4-1:0.0: activate --> -90 [ 608.885779][ T4296] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 608.925296][ T4296] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 608.982989][ T4296] usb 5-1: USB disconnect, device number 3 [ 609.020005][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 609.029276][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 609.038215][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 609.046939][ T4292] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 609.075300][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 609.102116][ T9682] usb 4-1: USB disconnect, device number 2 [ 610.398813][T10464] omfs: Invalid superblock (0) [ 611.478274][ T9682] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 611.657792][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 611.678250][ T9682] usb 6-1: Using ep0 maxpacket: 16 [ 613.575728][ T9682] usb 6-1: device descriptor read/all, error -71 [ 613.982693][T10508] loop1: detected capacity change from 0 to 256 [ 614.049186][ T5957] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 614.746565][T10522] loop4: detected capacity change from 0 to 256 [ 614.772667][T10522] exfat: Deprecated parameter 'utf8' [ 614.888021][T10522] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 615.346844][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1410'. [ 616.120221][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'. [ 616.397488][T10547] device vlan2 entered promiscuous mode [ 616.616793][T10551] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1428'. [ 616.651146][T10553] loop4: detected capacity change from 0 to 1024 [ 616.704666][T10553] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 616.714085][T10553] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.741892][T10553] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 616.757869][T10553] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 8 with error 28 [ 616.771246][T10553] EXT4-fs (loop4): This should not happen!! Data will be lost [ 616.771246][T10553] [ 616.784099][T10553] EXT4-fs (loop4): Total free blocks count 0 [ 616.790230][T10553] EXT4-fs (loop4): Free/Dirty block details [ 616.796697][T10553] EXT4-fs (loop4): free_blocks=4293918720 [ 616.802895][T10553] EXT4-fs (loop4): dirty_blocks=16 [ 616.808523][T10553] EXT4-fs (loop4): Block reservation details [ 616.814694][T10553] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 616.973530][ T4510] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 28 [ 617.076082][T10569] loop1: detected capacity change from 0 to 256 [ 617.105562][T10569] /dev/loop1: Can't open blockdev [ 617.219810][T10572] syz.4.1422 sent an empty control message without MSG_MORE. [ 618.041208][T10595] loop3: detected capacity change from 0 to 1024 [ 618.137941][T10595] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 618.212556][T10595] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.413058][T10595] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 620.303291][T10595] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 620.434664][T10595] EXT4-fs (loop3): This should not happen!! Data will be lost [ 620.434664][T10595] [ 620.485405][T10595] EXT4-fs (loop3): Total free blocks count 0 [ 620.564735][T10595] EXT4-fs (loop3): Free/Dirty block details [ 620.598144][T10595] EXT4-fs (loop3): free_blocks=4293918720 [ 620.624459][T10595] EXT4-fs (loop3): dirty_blocks=16 [ 620.660276][T10595] EXT4-fs (loop3): Block reservation details [ 620.696472][T10595] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 620.794050][T10613] loop4: detected capacity change from 0 to 2048 [ 620.903003][T10613] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 621.112161][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 28 [ 621.136719][T10613] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 621.363461][ T7893] EXT4-fs (loop4): unmounting filesystem. [ 621.531959][T10623] Invalid ELF header magic: != ELF [ 621.591868][T10621] loop1: detected capacity change from 0 to 4096 [ 621.629534][T10621] /dev/loop1: Can't open blockdev [ 621.679007][ T5957] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 622.002756][T10628] loop3: detected capacity change from 0 to 4096 [ 622.107688][T10631] netlink: 'syz.1.1449': attribute type 4 has an invalid length. [ 624.644412][T10653] loop3: detected capacity change from 0 to 512 [ 624.838772][T10653] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 625.093817][T10653] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1452: invalid block [ 625.298994][T10653] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1452: invalid indirect mapped block 4294967295 (level 1) [ 625.392954][T10653] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1452: invalid indirect mapped block 4294967295 (level 1) [ 625.461429][T10653] EXT4-fs (loop3): 2 truncates cleaned up [ 625.473248][T10653] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 625.773361][ T8276] EXT4-fs (loop3): unmounting filesystem. [ 627.077141][T10689] netlink: 'syz.5.1457': attribute type 13 has an invalid length. [ 627.535435][T10689] gretap0: refused to change device tx_queue_len [ 627.554873][T10689] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 627.600834][ T4293] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 629.398183][ T4293] usb 2-1: Using ep0 maxpacket: 32 [ 629.672525][T10699] loop3: detected capacity change from 0 to 4096 [ 629.712054][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.718657][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.045462][T10705] overlayfs: upper fs does not support tmpfile. [ 630.100964][ T4293] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 630.113401][ T4293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.134854][ T4293] usb 2-1: config 0 descriptor?? [ 630.146328][ T4293] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 630.256171][ T27] audit: type=1800 audit(1744540809.272:20): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1468" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 630.277054][ T4293] gspca_vc032x: reg_r err -71 [ 630.277096][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277109][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277118][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277128][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277137][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277146][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277156][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277165][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277175][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277184][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277194][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277204][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277213][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277223][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277233][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277243][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277253][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277263][ T4293] gspca_vc032x: I2c Bus Busy Wait 00 [ 630.277273][ T4293] gspca_vc032x: Unknown sensor... [ 630.277319][ T4293] vc032x: probe of 2-1:0.0 failed with error -22 [ 630.279660][ T4293] usb 2-1: USB disconnect, device number 8 [ 630.634517][T10710] loop1: detected capacity change from 0 to 4096 [ 630.658697][T10710] /dev/loop1: Can't open blockdev [ 630.948212][ T5137] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 630.994525][ T4265] Bluetooth: hci4: unexpected event 0x2f length: 763 > 260 [ 631.138864][ T5137] usb 6-1: Using ep0 maxpacket: 16 [ 631.166097][ T5137] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 631.182800][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1477'. [ 631.208630][T10716] device bridge_slave_1 left promiscuous mode [ 631.217912][ T5137] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 631.237505][T10716] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.250348][ T5137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.450619][ T5137] usb 6-1: Product: syz [ 631.455510][ T5137] usb 6-1: Manufacturer: syz [ 631.460255][ T5137] usb 6-1: SerialNumber: syz [ 631.467506][ T5137] usb 6-1: config 0 descriptor?? [ 631.476199][T10716] device bridge_slave_0 left promiscuous mode [ 631.500086][T10716] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.975072][T10728] loop4: detected capacity change from 0 to 256 [ 632.010093][T10728] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 632.065371][T10728] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 632.221960][T10728] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf59595d9, utbl_chksum : 0xe619d30d) [ 632.349711][T10736] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1482'. [ 634.174276][T10747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1483'. [ 634.284829][ T4293] usb 6-1: USB disconnect, device number 9 [ 635.189065][T10759] loop5: detected capacity change from 0 to 256 [ 635.235445][T10759] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 635.296263][T10759] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 635.332095][T10759] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 637.043647][T10759] exFAT-fs (loop5): hint_cluster is invalid (17) [ 638.125691][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1491'. [ 638.178779][T10772] device bridge_slave_1 left promiscuous mode [ 638.198568][T10772] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.265922][T10772] device bridge_slave_0 left promiscuous mode [ 638.288747][T10772] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.953806][T10777] loop6: detected capacity change from 0 to 8192 [ 639.860405][ T4293] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 640.178435][ T4293] usb 7-1: Using ep0 maxpacket: 32 [ 640.206349][ T4293] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 640.237443][ T4293] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.278671][T10809] loop5: detected capacity change from 0 to 24 [ 640.281577][ T4293] usb 7-1: Product: syz [ 640.285826][T10809] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 640.323415][ T4293] usb 7-1: Manufacturer: syz [ 640.352093][ T4293] usb 7-1: SerialNumber: syz [ 640.391277][ T4293] usb 7-1: config 0 descriptor?? [ 640.412469][T10809] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 640.424575][ T4293] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 640.510266][T10809] romfs: read error for inode 0x70040 [ 640.872191][ T4265] block nbd5: Receive control failed (result -104) [ 640.887652][T10815] block nbd5: shutting down sockets [ 641.208847][ T4293] gspca_ov534_9: reg_w failed -71 [ 641.618336][ T4293] gspca_ov534_9: Unknown sensor 0000 [ 641.618469][ T4293] ov534_9: probe of 7-1:0.0 failed with error -22 [ 641.709218][ T4293] usb 7-1: USB disconnect, device number 5 [ 641.738254][ T5137] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 641.948192][ T5137] usb 6-1: Using ep0 maxpacket: 16 [ 641.959560][ T5137] usb 6-1: config 0 has no interfaces? [ 642.011546][ T5137] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 642.078240][ T5137] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.158790][ T5137] usb 6-1: config 0 descriptor?? [ 644.008237][ T4293] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 644.061325][T10853] device macvlan2 entered promiscuous mode [ 644.067985][T10853] device bond_slave_0 entered promiscuous mode [ 644.074912][T10853] device bond_slave_1 entered promiscuous mode [ 644.128127][T10853] device bond0 entered promiscuous mode [ 644.178656][T10853] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 644.199960][ T4293] usb 4-1: Using ep0 maxpacket: 32 [ 644.205785][T10853] team0: Port device macvlan2 added [ 644.211948][ T4293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.238750][ T4293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.265953][ T4293] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 644.284284][ T4293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.308527][ T4293] usb 4-1: config 0 descriptor?? [ 644.336211][ T4293] hub 4-1:0.0: USB hub found [ 644.472589][ T26] usb 6-1: USB disconnect, device number 10 [ 644.532164][ T4293] hub 4-1:0.0: 1 port detected [ 644.660437][T10858] device veth1_macvtap left promiscuous mode [ 644.666526][T10858] device macsec0 entered promiscuous mode [ 645.144962][ T4293] hub 4-1:0.0: activate --> -90 [ 645.312682][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1524'. [ 645.577035][ T26] usb 4-1: USB disconnect, device number 3 [ 648.243595][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1536'. [ 648.251778][T10896] loop3: detected capacity change from 0 to 8192 [ 649.016992][ T27] audit: type=1326 audit(1744541852.026:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10909 comm="syz.6.1540" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad59f8d169 code=0x0 [ 649.422387][T10920] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 651.358572][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1548'. [ 651.958444][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 652.158296][ T22] usb 2-1: Using ep0 maxpacket: 16 [ 652.166035][ T22] usb 2-1: config 0 has no interfaces? [ 652.186353][ T22] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 652.209937][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.269559][ T22] usb 2-1: config 0 descriptor?? [ 652.655924][T10957] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.676544][ T22] usb 2-1: USB disconnect, device number 9 [ 655.556137][T11001] 9pnet_virtio: no channels available for device syz [ 656.316404][T11016] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1573'. [ 657.284030][T11027] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.1577' resets device [ 658.401613][T11045] loop6: detected capacity change from 0 to 524287999 [ 658.435825][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.445310][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.457518][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.467372][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.491089][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.500606][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.513698][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.523174][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.538428][ T8912] loop: Write error at byte offset 1, length 1024. [ 658.558482][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 658.568119][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 658.578722][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.587920][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.596926][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.606690][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.621336][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.630710][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.640862][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 658.650825][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.659362][T11045] ldm_validate_partition_table(): Disk read failed. [ 658.677081][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.687278][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 658.701633][T11045] Dev loop6: unable to read RDB block 0 [ 658.711963][T11045] loop6: unable to read partition table [ 658.718028][T11045] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 658.973370][T11056] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 659.732808][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1587'. [ 661.948602][ T9682] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 662.148353][ T9682] usb 6-1: Using ep0 maxpacket: 16 [ 662.155645][ T9682] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 662.200932][ T9682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.247073][ T9682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.298373][ T9682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.329820][ T9682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.385039][ T9682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.413838][ T9682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.445734][ T9682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.475012][ T9682] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.516849][ T9682] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 662.547198][ T9682] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 662.567698][ T9682] usb 6-1: SerialNumber: syz [ 662.599238][ T9682] usb 6-1: config 0 descriptor?? [ 662.639281][ T9682] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 662.724676][T11130] loop6: detected capacity change from 0 to 1024 [ 662.801966][T11130] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 662.811685][T11130] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.823606][ T3607] bcm5974 6-1:0.0: could not read from device [ 662.846998][ T3607] bcm5974 6-1:0.0: could not read from device [ 662.858460][ T9682] usb 6-1: USB disconnect, device number 11 [ 662.872028][ T3607] bcm5974 6-1:0.0: could not read from device [ 662.889382][ T3607] bcm5974 6-1:0.0: could not read from device [ 662.942945][ T5030] EXT4-fs (loop6): unmounting filesystem. [ 666.826965][T11199] loop5: detected capacity change from 0 to 1024 [ 667.234143][T11199] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 667.443855][T11199] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.616418][ T4355] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 667.744858][ T4355] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 667.870184][ T4355] EXT4-fs (loop5): This should not happen!! Data will be lost [ 667.870184][ T4355] [ 667.906473][ T4355] EXT4-fs (loop5): Total free blocks count 0 [ 667.933964][ T4355] EXT4-fs (loop5): Free/Dirty block details [ 667.961532][ T4355] EXT4-fs (loop5): free_blocks=4293918720 [ 667.981820][ T4355] EXT4-fs (loop5): dirty_blocks=16 [ 667.987645][ T4355] EXT4-fs (loop5): Block reservation details [ 668.015355][ T4355] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 668.039921][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 668.934710][T11243] loop3: detected capacity change from 0 to 1024 [ 669.094991][T11243] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 669.106819][T11243] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 670.045834][ T8276] EXT4-fs (loop3): unmounting filesystem. [ 670.532564][T11273] tipc: Started in network mode [ 670.548306][T11273] tipc: Node identity 22fc352da6df, cluster identity 4711 [ 670.556870][T11273] tipc: Enabled bearer , priority 0 [ 670.616538][T11267] tipc: Resetting bearer [ 672.180184][T11304] loop5: detected capacity change from 0 to 1024 [ 672.251901][ T9682] tipc: Node number set to 2216899885 [ 672.313581][T11304] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 672.326814][T11304] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.491058][ T4355] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 672.526047][ T4355] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 672.539541][ T4355] EXT4-fs (loop5): This should not happen!! Data will be lost [ 672.539541][ T4355] [ 672.550267][ T4355] EXT4-fs (loop5): Total free blocks count 0 [ 672.556929][ T4355] EXT4-fs (loop5): Free/Dirty block details [ 672.563973][ T4355] EXT4-fs (loop5): free_blocks=4293918720 [ 672.576749][ T4355] EXT4-fs (loop5): dirty_blocks=16 [ 672.582785][ T4355] EXT4-fs (loop5): Block reservation details [ 672.600390][ T4355] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 672.622289][ T4525] EXT4-fs (loop5): unmounting filesystem. [ 673.281187][ T26] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 673.518663][ T26] usb 7-1: Using ep0 maxpacket: 16 [ 673.551673][ T26] usb 7-1: config 0 has no interfaces? [ 673.557313][ T26] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 673.580276][ T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.591082][ T26] usb 7-1: config 0 descriptor?? [ 674.243408][ T7] usb 7-1: USB disconnect, device number 6 [ 675.383464][T11345] loop6: detected capacity change from 0 to 524287999 [ 675.408135][ C1] blk_print_req_error: 9 callbacks suppressed [ 675.408157][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.425244][ C1] buffer_io_error: 7 callbacks suppressed [ 675.425256][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.447350][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.456619][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.465156][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.474618][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.483533][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.493294][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.503942][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.513806][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.522729][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.532162][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.544829][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.554564][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.566379][ T4305] loop: Write error at byte offset 1, length 1024. [ 675.574014][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 675.583701][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.592470][T11345] ldm_validate_partition_table(): Disk read failed. [ 675.604563][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 675.614398][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 675.624522][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.649270][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 675.671983][T11345] Dev loop6: unable to read RDB block 0 [ 675.694408][T11345] loop6: unable to read partition table [ 675.705868][T11345] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 675.733025][ T3622] ldm_validate_partition_table(): Disk read failed. [ 675.748657][ T3622] Dev loop6: unable to read RDB block 0 [ 675.763801][ T3622] loop6: unable to read partition table [ 675.875005][T11351] autofs4:pid:11351:autofs_fill_super: called with bogus options [ 677.258704][ T52] block nbd6: Attempted send on invalid socket [ 677.286393][ T93] block nbd6: Attempted send on invalid socket [ 677.293254][T11358] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 677.326658][ T93] block nbd6: Attempted send on invalid socket [ 677.333778][T11358] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 677.353982][ T93] block nbd6: Attempted send on invalid socket [ 677.360906][ T52] block nbd6: Attempted send on invalid socket [ 677.367399][T11358] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 677.384040][ T52] block nbd6: Attempted send on invalid socket [ 677.390553][T11358] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 677.401691][ T52] block nbd6: Attempted send on invalid socket [ 677.408464][ T93] block nbd6: Attempted send on invalid socket [ 677.415176][T11358] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 677.430912][ T93] block nbd6: Attempted send on invalid socket [ 677.437418][T11358] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 677.455136][ T93] block nbd6: Attempted send on invalid socket [ 677.462427][T11358] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 677.472354][T11358] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 677.500036][T11358] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 677.683756][T11267] tipc: Disabling bearer [ 677.711756][T11344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 678.084706][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.084856][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.084881][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.084904][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.084927][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.084951][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.084974][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.084997][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085020][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085043][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085066][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085089][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085113][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085143][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085166][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085189][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085212][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085235][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085258][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085281][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085304][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085327][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085351][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085376][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085399][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085422][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085446][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085470][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085493][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085516][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085539][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.085562][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: unknown main item tag 0x0 [ 678.213851][ T9682] hid-generic 0004:FFFFFFFF:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 679.249800][ T9682] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 679.433358][T11381] autofs4:pid:11381:autofs_fill_super: called with bogus options [ 679.438224][ T9682] usb 2-1: Using ep0 maxpacket: 16 [ 679.440705][ T9682] usb 2-1: config 0 has no interfaces? [ 679.440741][ T9682] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 679.440768][ T9682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.444049][ T9682] usb 2-1: config 0 descriptor?? [ 680.033664][ T4265] Bluetooth: hci0: command 0x0401 tx timeout [ 680.276157][T11396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 681.534004][ T4295] usb 2-1: USB disconnect, device number 10 [ 681.596513][T11417] autofs4:pid:11417:autofs_fill_super: called with bogus options [ 682.370445][T11438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 682.797911][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 682.837357][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 682.870517][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 682.901456][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 682.924864][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 682.944234][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 682.971167][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 682.982896][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 682.989817][T11453] loop6: detected capacity change from 0 to 128 [ 683.001996][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.010265][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.021756][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.030809][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.040539][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.057355][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.060400][ C0] blk_print_req_error: 38 callbacks suppressed [ 683.060424][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.084228][ C0] buffer_io_error: 24 callbacks suppressed [ 683.084244][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.085190][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.125400][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.142524][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.148963][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.157681][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.161296][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.178858][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.187384][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.195865][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.217733][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.221237][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.225832][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.234817][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.259512][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.267677][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.281556][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.290461][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.300872][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.305221][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.321285][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.331130][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.345781][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.354910][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.364484][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.374330][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.382543][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.382588][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.410393][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.419814][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.434590][T11453] ldm_validate_partition_table(): Disk read failed. [ 683.442407][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.450685][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.460269][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.475486][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.483858][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: unknown main item tag 0x0 [ 683.492527][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 683.502242][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.520602][ T5137] hid-generic 0004:FFFFFFFF:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 683.560430][T11453] Dev loop6: unable to read RDB block 0 [ 683.603345][T11453] loop6: unable to read partition table [ 683.647638][T11453] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 683.828393][ T4240] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 684.038329][ T4240] usb 2-1: Using ep0 maxpacket: 16 [ 684.052317][ T4240] usb 2-1: config 0 has no interfaces? [ 684.083835][ T4240] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 684.126512][ T4240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.142047][ T4240] usb 2-1: config 0 descriptor?? [ 684.404502][T11479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 684.538215][ T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 684.739841][ T7] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 684.748306][ T4262] Bluetooth: hci0: command 0x0401 tx timeout [ 684.757108][ T7] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 684.767869][ T7] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 684.785562][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.798493][T11475] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 685.023245][ T5137] usb 7-1: USB disconnect, device number 7 [ 685.170482][T11482] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 685.178171][T11482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 685.195629][T11482] vhci_hcd vhci_hcd.0: Device attached [ 685.212744][T11482] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 685.219519][T11482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 685.230048][T11482] vhci_hcd vhci_hcd.0: Device attached [ 685.256008][T11482] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 685.262916][T11482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 685.274771][T11482] vhci_hcd vhci_hcd.0: Device attached [ 685.285031][T11487] vhci_hcd: connection closed [ 685.298309][T11485] vhci_hcd: connection closed [ 685.303671][ T4355] vhci_hcd: stop threads [ 685.313090][T11483] vhci_hcd: connection closed [ 685.320103][ T4355] vhci_hcd: release socket [ 685.350545][ T4355] vhci_hcd: disconnect device [ 685.363601][ T4355] vhci_hcd: stop threads [ 685.375589][ T4355] vhci_hcd: release socket [ 685.384066][ T4355] vhci_hcd: disconnect device [ 685.390019][ T4366] vhci_hcd: vhci_device speed not set [ 685.403818][ T4355] vhci_hcd: stop threads [ 685.411830][ T4355] vhci_hcd: release socket [ 685.418174][ T4355] vhci_hcd: disconnect device [ 685.458198][ T4366] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 685.478518][ T4366] usb 39-1: enqueue for inactive port 0 [ 685.580705][ T4366] vhci_hcd: vhci_device speed not set [ 685.981254][ T7] usb 2-1: USB disconnect, device number 11 [ 686.744445][T11518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 688.374729][ T5137] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 688.514222][T11556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 688.688407][ T5137] usb 5-1: Using ep0 maxpacket: 16 [ 688.766758][ T5137] usb 5-1: config 0 has no interfaces? [ 688.773546][ T5137] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 688.783734][ T5137] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.896794][ T5137] usb 5-1: config 0 descriptor?? [ 689.788375][ T4265] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 689.797239][ T4262] Bluetooth: hci3: command 0xfc11 tx timeout [ 689.972776][T11535] sp0: Synchronizing with TNC [ 691.158196][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.166029][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.197034][ T4366] usb 5-1: USB disconnect, device number 4 [ 691.934580][T11589] ------------[ cut here ]------------ [ 691.941772][T11589] WARNING: CPU: 1 PID: 11589 at fs/inode.c:389 inc_nlink+0x120/0x130 [ 691.952082][T11589] Modules linked in: [ 691.956510][T11589] CPU: 1 PID: 11589 Comm: syz.4.1754 Not tainted 6.1.134-syzkaller #0 [ 691.965990][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 691.977124][T11589] RIP: 0010:inc_nlink+0x120/0x130 [ 691.982674][T11589] Code: e9 ff e9 37 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 49 ff ff ff 4c 89 ef e8 fa e1 e9 ff e9 3c ff ff ff e8 20 80 92 ff <0f> 0b eb 80 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 53 48 [ 692.005312][T11589] RSP: 0018:ffffc9000c777bc8 EFLAGS: 00010283 [ 692.011606][T11589] RAX: ffffffff81f82a30 RBX: 1ffff1100e4172f5 RCX: 0000000000080000 [ 692.020023][T11589] RDX: ffffc90004ec1000 RSI: 0000000000004b78 RDI: 0000000000004b79 [ 692.028617][T11589] RBP: 0000000000000000 R08: ffffffff81f829aa R09: ffffed100e417243 [ 692.037044][T11589] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 692.046032][T11589] R13: ffff8880720b97a8 R14: ffff8880720b9760 R15: 0000000000000007 [ 692.054398][T11589] FS: 00007f2d7e9ff6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 692.064403][T11589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.071922][T11589] CR2: 00002000000b2000 CR3: 0000000066ec3000 CR4: 00000000003526e0 [ 692.080813][T11589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 692.089351][T11589] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 692.098138][T11589] Call Trace: [ 692.101477][T11589] [ 692.104649][T11589] v9fs_vfs_mkdir_dotl+0x83d/0xa20 [ 692.110551][T11589] ? v9fs_vfs_symlink_dotl+0x6f0/0x6f0 [ 692.116439][T11589] ? security_capable+0x86/0xb0 [ 692.121511][T11589] ? do_proc_dointvec_ms_jiffies_conv+0x120/0x1f0 [ 692.128831][T11589] ? generic_permission+0x27c/0x4f0 [ 692.135236][T11589] ? inode_permission+0xf7/0x450 [ 692.141726][T11589] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 692.147620][T11589] ? security_inode_mkdir+0xb4/0x100 [ 692.153585][T11589] vfs_mkdir+0x3b6/0x590 [ 692.158157][T11589] do_mkdirat+0x225/0x360 [ 692.163172][T11589] ? vfs_mkdir+0x590/0x590 [ 692.168648][T11589] ? getname_flags+0x1f9/0x4f0 [ 692.173744][T11589] __x64_sys_mkdirat+0x85/0x90 [ 692.179231][T11589] do_syscall_64+0x3b/0xb0 [ 692.184637][T11589] ? clear_bhb_loop+0x45/0xa0 [ 692.190537][T11589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.197711][T11589] RIP: 0033:0x7f2d7eb8d169 [ 692.203243][T11589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.226801][T11589] RSP: 002b:00007f2d7e9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 692.236957][T11589] RAX: ffffffffffffffda RBX: 00007f2d7eda5fa0 RCX: 00007f2d7eb8d169 [ 692.245396][T11589] RDX: 0000000000000003 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 692.255055][T11589] RBP: 00007f2d7ec0e990 R08: 0000000000000000 R09: 0000000000000000 [ 692.264164][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.272687][T11589] R13: 0000000000000000 R14: 00007f2d7eda5fa0 R15: 00007ffd6035a598 [ 692.281085][T11589] [ 692.284161][T11589] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 692.291831][T11589] CPU: 1 PID: 11589 Comm: syz.4.1754 Not tainted 6.1.134-syzkaller #0 [ 692.300032][T11589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 692.310297][T11589] Call Trace: [ 692.313735][T11589] [ 692.316768][T11589] dump_stack_lvl+0x1e3/0x2cb [ 692.321552][T11589] ? nf_tcp_handle_invalid+0x647/0x647 [ 692.327167][T11589] ? panic+0x764/0x764 [ 692.331968][T11589] ? vscnprintf+0x59/0x80 [ 692.336677][T11589] panic+0x318/0x764 [ 692.340790][T11589] ? __warn+0x169/0x520 [ 692.345508][T11589] ? memcpy_page_flushcache+0xfc/0xfc [ 692.351086][T11589] __warn+0x348/0x520 [ 692.355209][T11589] ? inc_nlink+0x120/0x130 [ 692.360043][T11589] report_bug+0x2af/0x500 [ 692.364845][T11589] ? inc_nlink+0x120/0x130 [ 692.369484][T11589] handle_bug+0x3d/0x70 [ 692.373786][T11589] exc_invalid_op+0x16/0x40 [ 692.378885][T11589] asm_exc_invalid_op+0x16/0x20 [ 692.384256][T11589] RIP: 0010:inc_nlink+0x120/0x130 [ 692.390485][T11589] Code: e9 ff e9 37 ff ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 49 ff ff ff 4c 89 ef e8 fa e1 e9 ff e9 3c ff ff ff e8 20 80 92 ff <0f> 0b eb 80 66 2e 0f 1f 84 00 00 00 00 00 66 90 41 57 41 56 53 48 [ 692.411826][T11589] RSP: 0018:ffffc9000c777bc8 EFLAGS: 00010283 [ 692.418754][T11589] RAX: ffffffff81f82a30 RBX: 1ffff1100e4172f5 RCX: 0000000000080000 [ 692.428534][T11589] RDX: ffffc90004ec1000 RSI: 0000000000004b78 RDI: 0000000000004b79 [ 692.437254][T11589] RBP: 0000000000000000 R08: ffffffff81f829aa R09: ffffed100e417243 [ 692.445732][T11589] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 692.453826][T11589] R13: ffff8880720b97a8 R14: ffff8880720b9760 R15: 0000000000000007 [ 692.462192][T11589] ? inc_nlink+0x9a/0x130 [ 692.466760][T11589] ? inc_nlink+0x120/0x130 [ 692.471231][T11589] ? inc_nlink+0x120/0x130 [ 692.475977][T11589] v9fs_vfs_mkdir_dotl+0x83d/0xa20 [ 692.481229][T11589] ? v9fs_vfs_symlink_dotl+0x6f0/0x6f0 [ 692.486811][T11589] ? security_capable+0x86/0xb0 [ 692.491879][T11589] ? do_proc_dointvec_ms_jiffies_conv+0x120/0x1f0 [ 692.498319][T11589] ? generic_permission+0x27c/0x4f0 [ 692.503623][T11589] ? inode_permission+0xf7/0x450 [ 692.509059][T11589] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 692.514294][T11589] ? security_inode_mkdir+0xb4/0x100 [ 692.520525][T11589] vfs_mkdir+0x3b6/0x590 [ 692.525164][T11589] do_mkdirat+0x225/0x360 [ 692.529608][T11589] ? vfs_mkdir+0x590/0x590 [ 692.534478][T11589] ? getname_flags+0x1f9/0x4f0 [ 692.539746][T11589] __x64_sys_mkdirat+0x85/0x90 [ 692.544807][T11589] do_syscall_64+0x3b/0xb0 [ 692.550392][T11589] ? clear_bhb_loop+0x45/0xa0 [ 692.555819][T11589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 692.561862][T11589] RIP: 0033:0x7f2d7eb8d169 [ 692.566581][T11589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.586688][T11589] RSP: 002b:00007f2d7e9ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 692.595574][T11589] RAX: ffffffffffffffda RBX: 00007f2d7eda5fa0 RCX: 00007f2d7eb8d169 [ 692.603874][T11589] RDX: 0000000000000003 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 692.612062][T11589] RBP: 00007f2d7ec0e990 R08: 0000000000000000 R09: 0000000000000000 [ 692.620153][T11589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.628194][T11589] R13: 0000000000000000 R14: 00007f2d7eda5fa0 R15: 00007ffd6035a598 [ 692.636752][T11589] [ 692.640242][T11589] Kernel Offset: disabled [ 692.645372][T11589] Rebooting in 86400 seconds..