last executing test programs: 2m53.52732569s ago: executing program 1 (id=25): rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0xa08802, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC], 0x1, 0x693, &(0x7f0000000ec0)="$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") ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) utime(&(0x7f0000000000)='./file0\x00', 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x11) 2m53.241904333s ago: executing program 1 (id=27): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 2m52.79587412s ago: executing program 1 (id=28): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x685c, 0x800, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f00000022c0)={0x3, 0x88b}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r3, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) getpid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x102) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x65a, 0x40000008, 0xffffffffffffff9c, 0x0) chdir(&(0x7f0000000200)='./cgroup\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$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") 2m52.304952231s ago: executing program 32 (id=28): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xa3c}) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) syz_io_uring_setup(0x9ee, &(0x7f0000000180)={0x0, 0x685c, 0x800, 0x3, 0xfffffffe}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f00000022c0)={0x3, 0x88b}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) removexattr(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000380)={0x6, 0x8000, 0x1, 0xd, 0xfffffffe, 0xfdfffffa}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udp6\x00') pread64(r3, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) getpid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b", 0x4, 0x850, 0x0, 0x0) recvmsg(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x102) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x65a, 0x40000008, 0xffffffffffffff9c, 0x0) chdir(&(0x7f0000000200)='./cgroup\x00') ioctl$KVM_RUN(r3, 0xae80, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x320c840, &(0x7f0000000000), 0x41, 0x53d, &(0x7f0000000800)="$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") 2m20.519513921s ago: executing program 3 (id=116): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) remap_file_pages(&(0x7f00000c7000/0x3000)=nil, 0x3000, 0x2, 0xd, 0x0) 2m20.065932099s ago: executing program 0 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, 0x4, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) 2m19.647619753s ago: executing program 0 (id=123): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) writev(r0, &(0x7f0000000240)=[{0x0}], 0x1) 2m19.299686521s ago: executing program 0 (id=126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08004500001c00000000021190"], 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x140) 2m19.131768915s ago: executing program 3 (id=128): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x20, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xda, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x32}, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f0000000680)=""/150, 0x96}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/72, 0x48}], 0x4, 0xfffffffffffffffd}, 0x10122) r7 = dup(0xffffffffffffffff) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="ec00000010e200081200200000000000000000e68d35ae6981d03aa73af9777699a6369ddf6a2e7bcabb4528b785362cf1e45e823958d6d81f88e60bb80f2d371f65856b088effffffff000000009a3e221659769af5e3407ff1ca4d979b160000000000000000000000ea382dc375", @ANYRES32=r8, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe8000000000000000000000000000aab0000280090001800c0000000000000008000000000000001b0000000000000008000000000000000800000000000000180002801400018018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a8000000700200100000000000000000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fe8000000000000000000000000000004800080000000000000008000000000004001c00"], 0xec}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r9, &(0x7f00000000c0)='net/tcp6\x00') sendmsg$nl_route(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x33, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r12, 0xc0145401, &(0x7f00000001c0)={0x2, 0x2, 0x1001, 0x1000000, 0x7fffffff}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r13}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x9) 2m17.267984019s ago: executing program 3 (id=131): syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x5}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2m16.03981882s ago: executing program 3 (id=134): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x55e, &(0x7f0000000580)="$eJzs3c9rHFUcAPDvbJL+1qZQiopIsAcrtZsm8UcFD/UoWizovS7JNJRsuiW7KU0s2B7sxYsUQcSCeNeTF4/Ff8C/oqCFIiXowcvKbGbT/NhNtuk2m7qfD0zy3szsvvnuzPfxZt8uG0DfGsn+FCJejIivk4jDEZHk2wYj3ziyvN/Sw+uT2ZJEvf7JX0ljv6zefK7m4w7mlRci4rcvI04WNrZbXVicKZXL6VxeH63NXhmtLiyeujRbmk6n08vjExNn3poYf/edt7sW6+vn//nu47sfnPnq+NK3P98/cjuJs3Eo37Y6jidwY3VlJEby12Qozq7bcawLje0mSa8PgG0ZyPN8KLI+4HAM5FkP/P99ERF1oE8l8h/6VHMc0Ly379J98DPjwfvLN0Ab4x9cfm8k9jXujQ4sJWvujLL73eEutJ+18eufd25nS3TvfQiALd24GRGnBwc39n9J3v9t3+kO9lnfhv4Pds7dbPzzRqvxT2Fl/BMtxj8HW+Tudmyd/4X7XWimrWz8917L8e/KpNXwQF57rjHmG0ouXiqnWd/2fESciKG9WX2z+ZwzS/fq69f98ury/9Xjv2zJ2m+OBfPjuD+4d+1jp0q10hMHnntwM+KlluPfZOX8Jy3Of/Z6nO+wjWPpnVfabds6/qer/mPEay3P/6MZrWTz+cnRxvUw2rwqNvr71rHf27Xf6/iz839g8/iHk9XztdXHb+OHff+m7batiT86v/73JJ82ynvydddKtdrcWMSe5KON68cfPbZZb+6fxX/i+Ob9X6vrf39EfNZh/LeO/vRyR/H36PxPPdb5f/zCvQ8//75d+531f282SifyNZ30f50e4JO8dgAAAAAAALDbFCLiUCSF4kq5UCgWlz/fcTQOFMqVau3kxcr85alofFd2OIYKzZnuw6s+DzGWfx62WR9fV5+IiCMR8c3A/ka9OFkpT/U6eAAAAAAAAAAAAAAAAAAAANglDrb5/n/mj4FeHx3w1PnJb+hfW+Z/N37pCdiV1uT/2d4dB7DzjP+hf8l/6F/yH/qX/If+Jf+hf8l/6F/yHwAAAAAAAAAAAAAAAAAAAAAAAAAAALrq/Llz2VJfenh9MqtPXV2Yn6lcPTWVVmeKs/OTxcnK3JXidKUyXU6Lk5XZrZ6vXKlcGRuP+WujtbRaG60uLF6Yrcxfrl24NFuaTi+kQzsSFQAAAAAAAAAAAAAAAAAAADxbqguLM6VyOZ1TUNhWYXB3HIZClwu97pkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JH/AgAA//8y4DjG") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x64da, 0x4) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) chdir(&(0x7f0000000300)='./file0\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2m14.528929133s ago: executing program 3 (id=139): dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000140)=""/61, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x0, 0x1}) 2m12.923592265s ago: executing program 0 (id=143): unshare(0x22020600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000004000000010007000000000000000040", @ANYRES32, @ANYBLOB="02"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m12.712486243s ago: executing program 3 (id=144): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2m10.513954394s ago: executing program 33 (id=144): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 2m10.490282436s ago: executing program 0 (id=148): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000040)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x814) close(r4) 2m9.415169794s ago: executing program 0 (id=154): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000006c0), 0x0, 0x20, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10}, 0x94) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x5fffffffffe, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68fc, 0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe], 0x100000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m53.634378791s ago: executing program 34 (id=154): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f00000006c0), 0x0, 0x20, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10}, 0x94) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r5, 0x4068aea3, &(0x7f0000000080)={0xed, 0x0, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x5fffffffffe, 0x1000000000, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0x0, 0x0, 0x68fc, 0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe], 0x100000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m24.739533876s ago: executing program 5 (id=216): socket(0x2, 0x2, 0x1) syz_emit_vhci(&(0x7f00000008c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_conf_req={{0x4, 0x9, 0x4}, {0xf, 0x401}}]}}, 0x11) 1m24.414006783s ago: executing program 5 (id=217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000000000380050800800030002ac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 1m23.911986004s ago: executing program 5 (id=219): openat2(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', &(0x7f0000000480)={0x8000, 0x44, 0x4}, 0xffffffffffffff7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_create_ruleset(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x2, [{0x9, 0x3}, {0xb, 0x2}, {0xa, 0x3}, {0x0, 0x5}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0xa, 0x1}, 0x28) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f0000"], 0x50) 1m22.294526257s ago: executing program 5 (id=220): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0xa) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x201000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0xa87944eebfbf14c6) preadv2(r0, &(0x7f0000001880)=[{&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000001400)=""/207, 0xcf}, {&(0x7f0000001500)=""/184, 0xb8}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f0000001800)=""/6, 0x6}, {&(0x7f0000001840)=""/20, 0x14}], 0x6, 0x0, 0x7fff, 0xa) 1m18.803688154s ago: executing program 5 (id=226): mkdir(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r1, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000080)='./file2\x00', 0x404, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES8, @ANYRES16], 0x1, 0x122e, &(0x7f0000002580)="$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") write$FUSE_ATTR(r0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x2000000000000000, 0x0, 0x0, {0xffffffffff7ffffe, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x4, 0x6288f666, 0x0, 0xc000}}}, 0x6f) utime(&(0x7f0000000200)='./file0\x00', 0x0) 1m16.843229094s ago: executing program 5 (id=230): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000600)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0xffff23fb, &(0x7f00000000c0)=0x4) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) 1m15.918770561s ago: executing program 35 (id=230): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000600)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0xffff23fb, &(0x7f00000000c0)=0x4) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0x7, @any, 0x73, 0x2}, 0xe) 1m5.279173495s ago: executing program 6 (id=250): syz_open_dev$sndpcmp(0x0, 0xb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x2c, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@nobarrier}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x30000008}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x35, 0x0, "fd4e774e0f7cc8ba196d221230558161ad37e0ded15072b810a8ae11112cd0ab13e6b9fa08efdd93677c1b19fee75cb809252747680be8c480678c31768093f0d0cf5292de1a7505f7cc281300"}, 0xd8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) 1m4.835469182s ago: executing program 6 (id=251): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x8, 0x33}) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x7, 0x28, 0x64, 0x0, 0x1, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe83}}}}}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 1m4.478332651s ago: executing program 6 (id=253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r3, &(0x7f0000002940), 0x40000000000017d, 0x811) 1m2.881041142s ago: executing program 6 (id=255): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80048e, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c3208000000334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e7cd97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9e2d]}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000140)={@desc={0x1, 0x0, @desc4}}) write$binfmt_script(r0, 0x0, 0x0) 59.775402077s ago: executing program 6 (id=261): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4e}]}) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[], 0x6) 52.972379766s ago: executing program 6 (id=277): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000001500)) 52.360275657s ago: executing program 36 (id=277): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000001500)) 45.14364897s ago: executing program 4 (id=292): writev(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$eJzs3U9sHNd9B/DfG5HiUmkrJnYUu42LTVukMmO5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLppYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUsZvatuKRIixFFibI+H5v67s6+N/PevPWMLOjNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4vdfu3T6THrUrQAAHqYrY185fdb9HwCeKFf9/z8AAAAAAAAAAAAAABx2KYp4KlLMX1lPE9X7ttrlVu+t2+PDIztX609VzSNV+fKndubsufNffGnoQicvt2Y/ov6D9my8MXb1Uv3VuZvzC9OLi9NT9fHZ1uTc1PSe97Df+tsNViegfvPNW1PXry/Wz754bsvHtwc+7PvEiYGLQ8+feq5Tdnx4ZGRss0jtvo+9g91meByNIk5Fihe++5PUjIgi9n8uag937LfrrzoxWHVifHik6shMqzm7VH442jkRRUS9q1Kjc452Hovo6X2ofdhdI2K5bH7Z4MGye2PzzYXmtZnp+mhzYam11JqbHU3t1pb9qUcRF1LESkSs9d29u94ooidSfPv4eroWEUc65+EL1cTg3dtRHGAf96BsZ703YqV4DMbsEOuLIl6PFD9972RMlucs/8TnI14v8/sR75T5SkQqvxjnIz7Y4XvE46kniviLcvwvrqep6nrQua5c/mr9y7PX57rKdq4rv+D94a4rxSO6P/Rvy4fjkF+balFEs7rir6f7/80OAAAAAAAAAAAAAAAAAA9afxTxbKR47d//uJpXHNW89OMXh/5g4Je754w/c4/9lGVfjIjlYm9zco/miYGjaTSlRzyX+ElWiyL+JM//++ajbgwAAAAAAAAAAAAAAAAAAMATrYgfR4qX3z+ZVqJ7TfHW7I361ea1mfaqsJ21fztrpm9sbGzUUzsbOSdyLudcybmacy1nFLl+zkbOiZzLOVdyruZcyxlHcv2cjZwTOZdzruRczbmWM3py/ZyNnBM5l3Ou5FzNuZYzDsnavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHydFFPHzSPGtr6+nSBHRiJiIdq72PerWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAClvlTE9yJF/Q8bd7b1RESq/m07Wf5yPhpHy/xUNIbKfCUal3I2q+xpfPMRtJ/96U1F/ChS9NXevTPgefx72+/ufA3inW9svvvVnnYe6Xw48GHfJ04cvzg08uvP7PY67dSAwcut2Vu36+PDIyNjXZt78tE/1bVtIB+3eDBdJyIW33r7zebMzPTC/b8ovwL7qO6FF4f1RfQcimY8mr7zBCjv/x9Eit95/z86N/zO/f+X2u/u3OHjZ3+6ef9/efuO9nj/79le7x73/6e6tr2cfzfS2xNRW7o533siorb41tunWjebN6ZvTM+eP336S0NDXzp3uvdoRO16a2a669UDOV0AAAAAAAAAAAAAAAAAD08q4vciRfNH66keEber+VoDF4eeP/XckThSzbfaMm/7jbGrl+qvzt2cX5heXJyeqo/Ptibnpqb3erhaNd1rfHjkQDpzT/0H3P7+2qtz828ttG780dKOnx+rXbq2uLTQnNz54+iPIqLRvWWwavD48EjV6JlWc7aqOrrjZPpfXG8q4j8jxeT5evpc3pbn/22f4b9l/v/y9h0d0Pz/T3ZtK4+ZUhE/ixS//ZfPxOeqdh6Lu85ZLve3kWLwwmdzuThaluu0of1cgfbMwLLs/0aKf/z51rKd+ZBPbZY9s+cT+5gox/94pPjen38nfiNv2/r8h53H/9j2HR3Q+D/dte3YlucV7Lvr5PE/FSleeerd+M287aOe/9F59sbJXPjO8zkOaPw/3bVtIB/3tx5M1wEAAAAAAAAAAB5rvamIv4sUPxjpSS/lbXv5+39T23d0QH//6zNd26YezHpF93yx75MKAAAAAIdEbyrix5HixtK7d+ZQb53/3TX/83c3538Op22fVn/O9yvVcwMe5J//dRvIx53Yf7cBAAAAAAAAAAAAAAAAAADgUEmpiJfyeuoT1Xz+qV3XU1+NFK/99wu5XDpRluusAz9Q/Vq7Mjd76tLMzNxkc6l5bWa6PjbfnJwu6z4dKdb/5rO5blGtr95Zb769xvvmWuwLkWLk7ztl22uxd9Ymf3qz7Jmy7CcjxX/9w9aynXWsP71Z9mxZ9q8jxdf+eeeyJzbLnivLfidS/PBr9U7ZY2XZzvNRP7NZ9sXJueIARgUAAAAAAAAAAAAAAAAAAIAnTW8q4s8ixf/cXLkzlz+v/9/b9bbyzje61vvf5na1zv9Atf7/bq/vZ/3/6rkCy7sdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp5SFPF2pJi/sp5W+8r3bbXLrdlbt8eHR3au1p+qmkeq8uVP7czZc+e/+NLQhU5+dP0H7dl4Y+zqpfqrczfnF6YXF6en6uOzrcm5qek972G/9bcbrE5A/eabt6auX1+sn33x3JaPbw982PeJEwMXh54/9Vyn7PjwyMhYV5me3vs++l3SLtuPRhF/FSle+O5P0g/6IorY/7m4x3fnoPVXnRisOjE+PFJ1ZKbVnF0qPxztnIgiot5VqdE5Rw9hLPalEbFcNr9s8GDZvbH55kLz2sx0fbS5sNRaas3NjqZ2a8v+1KOICyliJSLW+u7eXW8U8Wak+Pbx9fQvfRFHOufhC1fGvnL67O7tKA6wj3tQtrPeG7FSPAZjdoj1RRH/FCl++t7J+Ne+iJ5o/8TnI14v8/sR70R7vFP5xTgf8cEO3yMeTz1RxP+V439xPb3XV14POteVy1+tf3n2+lxX2c515bG/PzxMh/zaVIsiflhd8dfTv/nvGgAAAAAAAAAAAAAAAOAQKeLXIsXL759M1fzgO3OKW7M36leb12ba0/o6c/86c6Y3NjY26qmdjZwTOZdzruRczbmWM4pcP2ejzNrGxkR+v5xzJedqzrWccSTXz9nIOZFzOedKztWcazmjJ9fP2cg5kXM550rO1ZxrOeOQzN0DAAAAAAAAAAAAAAAAAAA+XorqnxTf+vp62uhrry89Ee1ctR7ox97/BwAA///bhfta") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000300)='.\x00', 0xa8406c, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0) 44.383175872s ago: executing program 4 (id=294): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x40, 0x1411, 0x1, 0x0, 0x20000, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x40}}, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) write$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x10, 0x700, 0xfffff5cd, 0x6, {{0x5, 0x4, 0x3, 0x19, 0x14, 0x68, 0x0, 0x79, 0x29, 0x0, @remote, @empty}}}}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f787900000000040002801400"], 0xcc}}, 0x0) r6 = getpgid(0xffffffffffffffff) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peeksig(0x4209, r7, &(0x7f0000000100)={0x1e, 0x1}, 0x0) kcmp(r6, r7, 0x0, r4, r4) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x30, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 40.266900041s ago: executing program 4 (id=306): openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x83b, &(0x7f0000000240)) fsopen(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x20003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 34.339933778s ago: executing program 4 (id=316): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000000700)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 33.807954382s ago: executing program 4 (id=317): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x4a) flock(r0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xd3, 0x8000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c400)="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", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x20, 0x0, 0x9, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, 0x0, 0x45080) flock(r0, 0x1) 33.315385442s ago: executing program 4 (id=318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r1, 0x3, 0x0, 0x0, 0x0, 0x0) 32.73638505s ago: executing program 37 (id=318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r1, 0x3, 0x0, 0x0, 0x0, 0x0) 15.152053255s ago: executing program 9 (id=373): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x200000201, 0xa401) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) open(0x0, 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) landlock_restrict_self(0xffffffffffffffff, 0x7) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getpgrp(0xffffffffffffffff) sched_setscheduler(r4, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x68}, 0x1, 0x7}, 0xa840) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) sendmmsg$unix(r2, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0xae5e728031207861) pipe(&(0x7f00000002c0)) 14.076867073s ago: executing program 9 (id=374): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x808, &(0x7f0000000480)=ANY=[], 0x1, 0x1c2, &(0x7f0000000280)="$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") r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r4, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) socket$inet_tcp(0x2, 0x1, 0x0) dup(0xffffffffffffffff) 12.05246554s ago: executing program 9 (id=378): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x21202100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x900, 0x11) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x84, r7, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x10) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) 11.839702097s ago: executing program 7 (id=379): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020) 11.454952599s ago: executing program 7 (id=380): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000791838000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.867987167s ago: executing program 7 (id=382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x240, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 8.900139669s ago: executing program 9 (id=385): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f00000014c0)=ANY=[@ANYBLOB="040e0a022d04"], 0xd) 8.875405111s ago: executing program 8 (id=386): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 8.465863384s ago: executing program 8 (id=387): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r5, 0x0, r4, 0x0, 0x1000, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x0) write$binfmt_aout(r3, 0x0, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 8.267872961s ago: executing program 9 (id=388): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 8.03584037s ago: executing program 8 (id=389): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020) 7.573318648s ago: executing program 8 (id=390): openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x83b, &(0x7f0000000240)) fsopen(0x0, 0x0) syz_open_dev$vim2m(0x0, 0x20003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='vegas\x00', 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 7.572882618s ago: executing program 7 (id=391): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0x2, 0xbb8, &(0x7f00000017c0)="$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") syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8040, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x274, &(0x7f0000000000)="$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") mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r7 = accept(r6, 0x0, 0x0) r8 = accept(r7, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)="f0486787b7112eb18ab0b3f3b58958526c542f849ee48003d2a68034e0afe30c57c9cbb8be01fb304120af375bef807c32ac068d43ebb879e6145b338ba4c783e5826196e77f35dd9914dcbb6497b41e16d4fff6b88e078c6a7af0aa93edff0d1cefc59e7bcefadfecb9a0c3d78f7658889bea814c49deb3d837ba910e4b8f414767eaf4fc044b665c81ee4069f717d296813bb557af293f97594f909546536b0566a8fa962487b4fe79fc9e424e89072248e2a660984f6a7028a9a7d2aeafd4911cf47339670f1b92ad51", 0xcb}, {&(0x7f0000000040)="4da5457a23b800729bbefeb66794cca57f33c7c4c877", 0x16}, {&(0x7f00000004c0)="bc360cc1951af1be43d043feb865d2190925c8cf72c808fe00d32c31b1af550b9d6e17af7656d3d30b265411d0c165cb717f8c0282192053ef8c3a29553db183a16b9da9dc92553656b70805fb9de3958eb31d44c97bd7e53e81fdf116e3763ede07b8a87b97dea7d897e5e800635ad1f1c5194c8f3fe6f71a0e5c7c372627a96e602aab6ca1f0de2d312a143deecc227cebdc0cb4211e3f6610c1a236c5e421507a7f78acbb215a6d", 0xa9}, {&(0x7f0000000580)="0a23fbfad4a0c422a89574765ec950e5edaf5ce857bb587c40a80aaa9363a4f0ab58330245c6a4f3b745ad157c0478772e13cef0237dbdd37a2b2d4dfc09a0f78078f1bc2abb4e44145b81ff4984563c118faa5f905e2ff683ace705ff402e580491159e2506e6698c5f9171d750855acde22b6e925cad96b34673234eb81f278428939201fc11ff4ae4556d0ce104d4380b95e4dd1453fc57ff5001cea07fa262c9edc090eeb216cd43c40707c02b1b", 0xb0}, {&(0x7f0000000640)="22a7d9ceafbcf6bd136d98c89844376cb20ff7838c19af8ba99720fe6c9f11920b5ca1790c02199838646f3de01a1ca72b7c14e15f8b1b85fc35f6fde3d33fe9fc649c9a1367a3a29b7213174fe5217d5e0864d5b3035182a440f03d36988959d894e87d7f863f4a938c32c8479e7cb7e953d2ab020f2ea818c68328436b795213efff6768cb46bb069d17effac477f282c95a384ee1c5ba6f9564f494f384c45719abaa8fad0c72", 0xa8}, {&(0x7f0000000700)="c00c93c1b8e9f6eaadc08cc900530a65e829ef2819c99c9e0384acdae998941f332bba653195debb05546861f647b56aad9261ec38ae25ae4e1b226132fab28605bcd5aba653e3937be7c8fc7e83239268f66d2e73aaf79db04731be0207d74abee381bd45b24870a84077c4f4bde699c9794899420a2027a7f9e2ec8397d0ec32cf2d05dc048be8a3fb25226c87c49e99921ecba0499619bdbef1e052dcb33dfcf881b6d478b081e0648e3f88e01c6f042d335b605c66c00c504ae1f85a3b25d83d9af35b4b9ead350d", 0xca}, {&(0x7f0000000100)="64a1e9aeff6ec62525497d7d17a4000cd64af1976632389bcefecb0b1b8aea8621165fb925bfa99943fc49d2e5090320274b3614feb8", 0x36}, {&(0x7f0000000800)="f8ddcd52242182d01de7b0adbcf0aa10a54e67ee68967394b6af559481222b5f904192bac95af0659d0c97613f895654139b8f7f7f96aff25155622d0a52a8626a73f26276a4617b7f09c2174b800a37b11289fe93af017dc452eb6d8882cc98b0dd063ca7c230d9585ca48cc5ac2bd70ef5065c87eae8437506c14ea1db2c43063227f2de385a8f79d4c16bdbc3eaba19dee4fbfa76", 0x96}], 0x8}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=[@dstopts_2292={{0x18, 0x29, 0x32}}], 0x18}}], 0x1, 0x4c0c0) 7.513276423s ago: executing program 1 (id=319): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000001c0)=0x20000005) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000280)) 7.497225764s ago: executing program 9 (id=392): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/keycreate\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x2004, &(0x7f0000000680)) 6.789470112s ago: executing program 1 (id=393): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) syz_open_procfs(0x0, &(0x7f0000000280)='smaps_rollup\x00') r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x10405, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000380)={0x10000008}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newneigh={0x1c, 0x20, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x2, 0x3}}, 0x1c}}, 0x0) 5.029969997s ago: executing program 1 (id=394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="35000000000000000000000000006d01000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) r2 = syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/1425], 0x41, 0x1d3, &(0x7f0000000980)="$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") ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, 'syz1\x00', 0x9}, 0x1, [0x7, 0xd5, 0x100000000009, 0x9, 0x6, 0x10000, 0x2, 0x5, 0xffffffffffffffff, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0x1, 0x1, 0x7, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x1, 0x4, 0x1, 0x3, 0x3, 0x1, 0xfffffffffffffffe, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x88b, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x0, 0xd, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0xfffffffffffffffd, 0x4, 0xfffffffffffffffa, 0x5, 0x100000000000006, 0xca4f, 0x2f, 0xffffffffffffffff, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x7, 0x201, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x81, 0x4, 0x200, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x9, 0x680000000000, 0x5, 0x7, 0xe88, 0x0, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x8, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x80000000005, 0x6, 0x20000000004, 0x0, 0x7f, 0x3]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x200003, 0x0) lgetxattr(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="7266f32e2f64657692432300000000000000000000000000007cd136a3ac82028f64dc01b6fe30469f7711e1e93f16ab9674c1b5d2dccf8eb37bc2db518845f8ffffffffffffff8f7d144219d34c7a47fd694f94d93bd6bfd9eaba4279452f13c196e2dd3bb1c4c1c216ca207a4304310d7aee0775d856466bb34d4bc88b1ab4e43e6b"], &(0x7f0000000cc0)=""/49, 0x31) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r3) fsmount(r3, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback, 0x3}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0xfdfffffd, @mcast2, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1c000000b888fd0c378183108431c53bd14274a0d1c524848018d66b5c3d0286d00c7438a8d7480420862e56790a6702ed74275624ab865c832169c46e10be1134962244ab4c07f9a2a808dde3af01885ab884447e53c47138061f68ea0eeefa624477e81d602bb3b15d4fd264e675df39f4caf8b38c14", @ANYRES16=r4, @ANYBLOB="000228bd7000fbdbdf250100000005000300ac000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d000905090000"], 0x0) 3.490147983s ago: executing program 7 (id=395): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x12, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x1f, 0xffffffff, 0x0, 0x0, 0x200c, 0x4, 0x1, 0x4}}) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000fec5df2523000000080003000db21eefd822570932653019f73b3f0566288de3f31ae1b7c5374a777d60fee4ca65ef318738e86086f0f35eaee5c85dfafbe871ea757c50d603e8a16e880411e387b7a516951228446c9e3404240c89361f97fa4f9b3f1f"], 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x40) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000440)}) 3.175901219s ago: executing program 2 (id=396): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xfe}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0xc4, 0x0, 0x9, 0x3e}) ftruncate(0xffffffffffffffff, 0x201f) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002800)={0x2020}, 0x2020) 2.975908356s ago: executing program 2 (id=397): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0502460c"], 0x8) 2.758151373s ago: executing program 2 (id=398): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0x421630d3}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x80, 0x0, 0x0) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x100e2) 1.675736482s ago: executing program 2 (id=399): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x7040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020) 1.499070287s ago: executing program 7 (id=400): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2000c001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() pipe2$9p(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000340)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet6(0xa, 0x2, 0x9) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f00000000c0)) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x60) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x92, @time={0xffffff3f, 0x316575}}) 1.203571571s ago: executing program 8 (id=401): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 515.978088ms ago: executing program 2 (id=402): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) 325.371343ms ago: executing program 2 (id=403): socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000001c0)=0x20000005) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r0, 0x5501) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000280)) 0s ago: executing program 8 (id=404): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000337000/0x3000)=nil, 0x3000, 0x1000008, 0x11012, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000, 0x3}) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$unix(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)="d9e5585432", 0x5}], 0x1, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18, 0x84}, 0x1011) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): rt 2(bridge_slave_1) entered disabled state [ 398.616527][ T4544] device bridge_slave_1 entered promiscuous mode [ 398.959120][ T4544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.011611][ T4544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.309077][ T4544] team0: Port device team_slave_0 added [ 399.328914][ T4544] team0: Port device team_slave_1 added [ 399.995920][ T14] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 400.165939][ T4318] Bluetooth: hci1: command 0x041b tx timeout [ 400.308427][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.368196][ T14] usb 3-1: config 0 has no interfaces? [ 400.398249][ T4544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.447873][ T4544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.464865][ T14] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 400.528457][ T4610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.44'. [ 400.539393][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.547945][ T14] usb 3-1: Product: syz [ 400.550685][ T4544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.555993][ T14] usb 3-1: Manufacturer: syz [ 400.581730][ T4544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.582049][ T14] usb 3-1: SerialNumber: syz [ 400.753767][ T14] usb 3-1: config 0 descriptor?? [ 401.001547][ T4544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.855286][ T4544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.205804][ T4318] Bluetooth: hci1: command 0x040f tx timeout [ 402.470043][ T4379] usb 3-1: USB disconnect, device number 2 [ 402.525701][ T4395] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 402.727853][ T4395] usb 1-1: config index 0 descriptor too short (expected 5668, got 36) [ 402.745923][ T4395] usb 1-1: config 3 has too many interfaces: 84, using maximum allowed: 32 [ 402.785253][ T4395] usb 1-1: config 3 has 1 interface, different from the descriptor's value: 84 [ 402.800342][ T4635] loop2: detected capacity change from 0 to 1024 [ 402.824189][ T4395] usb 1-1: config 3 has no interface number 0 [ 402.851171][ T4395] usb 1-1: config 3 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 402.905392][ T4395] usb 1-1: config 3 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.927340][ T4635] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 402.957633][ T4395] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 402.966955][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.977983][ T4395] usb 1-1: Product: syz [ 402.985646][ T4395] usb 1-1: Manufacturer: syz [ 402.990863][ T4395] usb 1-1: SerialNumber: syz [ 403.003669][ T4631] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 403.034726][ T26] audit: type=1326 audit(1756000047.345:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca05d8ebe9 code=0x7ffc0000 [ 403.144380][ T26] audit: type=1326 audit(1756000047.375:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca05d8ebe9 code=0x7ffc0000 [ 403.227579][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.265927][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.285834][ T26] audit: type=1326 audit(1756000047.375:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fca05d8ebe9 code=0x7ffc0000 [ 403.324953][ T4395] usb-storage 1-1:3.20: USB Mass Storage device detected [ 403.398233][ T4395] usb-storage 1-1:3.20: Quirks match for vid 04e6 pid 000b: 4 [ 403.434641][ T4544] device hsr_slave_0 entered promiscuous mode [ 403.456334][ T4544] device hsr_slave_1 entered promiscuous mode [ 403.464803][ T26] audit: type=1326 audit(1756000047.375:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca05d8ebe9 code=0x7ffc0000 [ 403.486997][ T4544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.501428][ T4544] Cannot create hsr debugfs directory [ 403.505638][ T4395] scsi host1: usb-storage 1-1:3.20 [ 403.624793][ T4395] usb 1-1: USB disconnect, device number 2 [ 403.685433][ T26] audit: type=1326 audit(1756000047.375:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fca05d8ebe9 code=0x7ffc0000 [ 403.736579][ T11] device hsr_slave_0 left promiscuous mode [ 403.786744][ T11] device hsr_slave_1 left promiscuous mode [ 403.796299][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.846000][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.887282][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.894744][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.899853][ T26] audit: type=1326 audit(1756000047.405:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca05d2ade9 code=0x7ffc0000 [ 404.033644][ T11] device bridge_slave_1 left promiscuous mode [ 404.047051][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.116832][ T26] audit: type=1326 audit(1756000047.405:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca05d2ade9 code=0x7ffc0000 [ 404.151268][ T11] device bridge_slave_0 left promiscuous mode [ 404.179625][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.207416][ T26] audit: type=1326 audit(1756000047.405:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca05d2ade9 code=0x7ffc0000 [ 404.275896][ T4318] Bluetooth: hci1: command 0x0419 tx timeout [ 404.303232][ T26] audit: type=1326 audit(1756000047.405:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca05d2ade9 code=0x7ffc0000 [ 404.356545][ T11] device veth1_macvtap left promiscuous mode [ 404.385980][ T11] device veth0_macvtap left promiscuous mode [ 404.392179][ T11] device veth1_vlan left promiscuous mode [ 404.431318][ T26] audit: type=1326 audit(1756000047.415:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4634 comm="syz.2.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca05d2ade9 code=0x7ffc0000 [ 404.455243][ T11] device veth0_vlan left promiscuous mode [ 405.221497][ T4660] loop4: detected capacity change from 0 to 128 [ 405.277107][ T4660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 405.335916][ T4660] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.113276][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 406.281082][ T4313] EXT4-fs (loop4): unmounting filesystem. [ 406.496140][ T4669] loop4: detected capacity change from 0 to 512 [ 406.525372][ T4669] EXT4-fs: Ignoring removed nobh option [ 406.543138][ T4669] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 406.569815][ T4669] EXT4-fs (loop4): orphan cleanup on readonly fs [ 406.582681][ T4669] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.58: iget: bad i_size value: 38620345925642 [ 406.597244][ T4669] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.58: couldn't read orphan inode 15 (err -117) [ 406.624845][ T4669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 406.758286][ T11] team0 (unregistering): Port device team_slave_1 removed [ 406.875189][ T11] team0 (unregistering): Port device team_slave_0 removed [ 406.969372][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.063918][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.543319][ T4313] EXT4-fs (loop4): unmounting filesystem. [ 407.941555][ T4687] netlink: 20 bytes leftover after parsing attributes in process `syz.4.63'. [ 409.906427][ T11] bond0 (unregistering): Released all slaves [ 410.787966][ T4696] capability: warning: `syz.0.68' uses deprecated v2 capabilities in a way that may be insecure [ 411.091709][ T4707] loop0: detected capacity change from 0 to 256 [ 411.290815][ T4544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.338383][ T4432] blk_print_req_error: 26 callbacks suppressed [ 411.338399][ T4432] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 411.357841][ T4544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.432814][ T4717] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 411.458132][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 411.545441][ T4718] loop2: detected capacity change from 0 to 2048 [ 412.158604][ T4718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.259676][ T4544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 412.299165][ T4544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 413.144611][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.197272][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.229388][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.275232][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.308963][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.332715][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.359315][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.383281][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.520931][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.570223][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 413.647800][ T4742] xt_CONNSECMARK: invalid mode: 0 [ 414.334876][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.342823][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.350792][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.363971][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.371511][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.378991][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.389474][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.412265][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.442502][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.465015][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.494506][ T4544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.503244][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.532967][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.545783][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.554324][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.576592][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.584125][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.598656][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.600333][ T4544] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.610379][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.629353][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 414.664558][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.678164][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.700767][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.701093][ T4753] loop3: detected capacity change from 0 to 256 [ 414.708521][ T4437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.711209][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.741432][ T4753] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 414.749281][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 414.760768][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.773904][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.781591][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.790055][ T4753] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 414.794777][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.811325][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 414.821009][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 414.834618][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.851716][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.858965][ T4437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.873846][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.881538][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.895178][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 414.903419][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.917049][ T4753] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 414.918494][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.942993][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.950699][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 414.967421][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 414.981992][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 414.998603][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.045293][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.102629][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.203609][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.206166][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 415.323047][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.390617][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 415.460201][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.629240][ T4761] loop0: detected capacity change from 0 to 2048 [ 415.636028][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.643615][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.650113][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 415.670290][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.692761][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 415.699556][ T4761] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.716218][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.746347][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.755271][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.774871][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.790448][ T26] kauditd_printk_skb: 584 callbacks suppressed [ 415.790465][ T26] audit: type=1800 audit(1756000060.105:598): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.80" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 415.838193][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 415.846188][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.872453][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.881864][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.903268][ T4544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 415.911103][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.923770][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.940679][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.956130][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.973858][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.985604][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 415.995084][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.015366][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.035612][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.043086][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.061161][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.077881][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.095599][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.108201][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.116557][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.124401][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.134045][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.142633][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.150958][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.160210][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.169058][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.177548][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.185917][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.193956][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.215607][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.223105][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.241371][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.261049][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.275855][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.283335][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.305721][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.313218][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.327173][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.345774][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.353317][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.375806][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.383285][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.405824][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.413328][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.431050][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.450369][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.456048][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.463921][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.472528][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.472559][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.472580][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.472601][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.509949][ T4544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.517605][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.525061][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.546042][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.553533][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.585613][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.593156][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.601179][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.610305][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.623684][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.634662][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.648377][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.658618][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.666548][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.673989][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.682595][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.690367][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.698156][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.705992][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.714189][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.722101][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.729908][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.742564][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.750379][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.763301][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.779744][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.797724][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.805205][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.816705][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.824168][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.837419][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.844888][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.855056][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.862957][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.870788][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.878533][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.886359][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.893790][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.925815][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.933363][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.951576][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.959859][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.967707][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.975157][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.983137][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 416.998405][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 417.008287][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 417.020657][ T4431] hid-generic 0008:0008:8001.0001: unknown main item tag 0x0 [ 417.095035][ T4431] hid-generic 0008:0008:8001.0001: hidraw0: HID v10.00 Device [syz0] on syz1 [ 417.288502][ T4790] loop0: detected capacity change from 0 to 128 [ 417.473377][ T4798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 417.587661][ T4790] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 417.607786][ T4790] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.131466][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 419.147499][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 419.263939][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 419.296426][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 419.336704][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 419.378643][ T4544] device veth0_vlan entered promiscuous mode [ 419.408226][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 419.447015][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 419.513670][ T4544] device veth1_vlan entered promiscuous mode [ 419.533088][ T4819] loop2: detected capacity change from 0 to 512 [ 419.635296][ T4815] fido_id[4815]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 419.663724][ T4816] loop4: detected capacity change from 0 to 8192 [ 419.689520][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 419.706654][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 419.713364][ T4819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 419.756052][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 419.764915][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 419.835869][ T4819] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 419.842552][ T4816] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 419.891341][ T4822] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 419.900217][ T4819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.91'. [ 419.927881][ T4544] device veth0_macvtap entered promiscuous mode [ 419.967486][ T4544] device veth1_macvtap entered promiscuous mode [ 420.081978][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.163809][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.184284][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.223070][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.245864][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.276676][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.294839][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.330620][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.344507][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 420.368409][ T4544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.413702][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 420.427305][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 420.461235][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 420.507607][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 420.589961][ T4842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 420.617789][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.637686][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.667870][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.696543][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.735065][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.756939][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.778139][ T4544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.806774][ T4544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.814028][ T4856] loop0: detected capacity change from 0 to 512 [ 420.823621][ T4544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.840408][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 420.867469][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 420.925322][ T4856] EXT4-fs: Ignoring removed bh option [ 420.926619][ T4544] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.981795][ T4856] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 420.982204][ T4544] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.063222][ T4856] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 421.107620][ T4862] loop4: detected capacity change from 0 to 512 [ 421.118806][ T4856] EXT4-fs (loop0): 1 truncate cleaned up [ 421.124514][ T4856] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 421.124671][ T4544] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.174207][ T4544] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.411330][ T26] audit: type=1326 audit(1756000065.725:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4861 comm="syz.4.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc03d8ebe9 code=0x7ffc0000 [ 422.605532][ T4318] Bluetooth: hci0: command 0x0401 tx timeout [ 422.677616][ T4868] loop2: detected capacity change from 0 to 512 [ 422.833189][ T4868] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 422.903552][ T4879] netlink: 'syz.3.102': attribute type 13 has an invalid length. [ 422.912466][ T4321] EXT4-fs (loop0): unmounting filesystem. [ 423.010423][ T4868] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.99: bg 0: block 16: invalid block bitmap [ 423.049737][ T4759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.097951][ T4759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.123040][ T4868] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 423.144266][ T4868] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.99: invalid indirect mapped block 5 (level 0) [ 423.197839][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 423.225357][ T4868] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.99: invalid indirect mapped block 4294967295 (level 1) [ 423.248561][ T4764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.279466][ T4764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.292436][ T4868] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.99: invalid indirect mapped block 4294967295 (level 2) [ 423.325648][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 423.352052][ T4868] EXT4-fs (loop2): 1 truncate cleaned up [ 423.511812][ T4868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 423.547289][ T4890] Illegal XDP return value 4294967294 on prog (id 19) dev N/A, expect packet loss! [ 423.851429][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 423.882609][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 423.937486][ T4898] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 424.030860][ T4903] loop5: detected capacity change from 0 to 128 [ 424.146712][ T4904] loop3: detected capacity change from 0 to 16 [ 424.518229][ T4911] loop0: detected capacity change from 0 to 512 [ 424.647116][ T4911] EXT4-fs: Mount option(s) incompatible with ext2 [ 424.782486][ T4904] erofs: (device loop3): mounted with root inode @ nid 36. [ 424.894634][ T4916] loop4: detected capacity change from 0 to 8 [ 425.000092][ T4916] SQUASHFS error: Unable to read inode 0x127 [ 425.557572][ T4460] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 426.039680][ T951] hid-generic 0005:16C0:0005.0002: item fetching failed at offset 0/1 [ 426.064264][ T951] hid-generic: probe of 0005:16C0:0005.0002 failed with error -22 [ 426.342074][ T4934] netlink: 600 bytes leftover after parsing attributes in process `syz.5.118'. [ 426.897329][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.122'. [ 426.955366][ T4928] mmap: syz.3.116 (4928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 427.067829][ T4956] loop4: detected capacity change from 0 to 16 [ 427.123871][ T4956] erofs: (device loop4): mounted with root inode @ nid 36. [ 427.444544][ T4962] loop5: detected capacity change from 0 to 8192 [ 427.521523][ T4962] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 428.177189][ T4964] device syzkaller0 entered promiscuous mode [ 431.240188][ T4985] loop4: detected capacity change from 0 to 128 [ 431.312361][ T4985] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 431.338740][ T4989] loop3: detected capacity change from 0 to 1024 [ 431.410601][ T4985] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 431.463010][ T4989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 431.576497][ T4313] EXT4-fs (loop4): unmounting filesystem. [ 431.701263][ T4989] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #18: block 373: comm syz.3.134: lblock 245 mapped to illegal pblock 373 (length 1) [ 431.762684][ T4989] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 431.776426][ T4989] EXT4-fs error (device loop3): ext4_ext_truncate:4454: inode #18: comm syz.3.134: mark_inode_dirty error [ 431.804339][ T4989] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 431.832420][ T4989] EXT4-fs error (device loop3): ext4_truncate:4312: inode #18: comm syz.3.134: mark_inode_dirty error [ 431.907437][ T4325] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 431.999867][ T4325] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 432.009908][ T4325] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #18: comm syz-executor: mark_inode_dirty error [ 432.022069][ T4325] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 432.037627][ T4325] EXT4-fs error (device loop3): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 432.110867][ T4325] EXT4-fs (loop3): unmounting filesystem. [ 433.379786][ T4993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.135'. [ 434.002432][ T4609] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.756141][ T4609] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.867574][ T4609] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.027434][ T4609] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.092581][ T5033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 436.119880][ T5033] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 437.019921][ T5040] loop4: detected capacity change from 0 to 1024 [ 437.151344][ T5040] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 437.225599][ T5040] EXT4-fs (loop4): group descriptors corrupted! [ 440.300480][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.306874][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.473274][ T4319] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 440.482969][ T4319] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 440.491446][ T4319] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 440.499346][ T4319] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 440.509870][ T4319] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 440.517245][ T4319] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 441.685678][ T4394] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 442.737447][ T4394] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 442.758524][ T4318] Bluetooth: hci4: command 0x0409 tx timeout [ 442.775735][ T4394] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 442.845758][ T4394] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.907524][ T4394] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.958924][ T4394] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.013016][ T4394] usb 5-1: Product: syz [ 443.023160][ T4394] usb 5-1: Manufacturer: syz [ 443.035586][ T4394] usb 5-1: SerialNumber: syz [ 444.835762][ T4318] Bluetooth: hci4: command 0x041b tx timeout [ 444.924541][ T4394] usb 5-1: 0:2 : does not exist [ 444.950723][ T5071] chnl_net:caif_netlink_parms(): no params data found [ 445.022585][ T4609] device hsr_slave_0 left promiscuous mode [ 445.058675][ T4394] usb 5-1: USB disconnect, device number 2 [ 445.066874][ T4609] device hsr_slave_1 left promiscuous mode [ 445.080916][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.115626][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.135426][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.143024][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.176358][ T4609] device bridge_slave_1 left promiscuous mode [ 445.183084][ T4609] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.257450][ T4609] device bridge_slave_0 left promiscuous mode [ 445.268058][ T4609] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.336044][ T4609] device veth1_macvtap left promiscuous mode [ 445.351211][ T4817] udevd[4817]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 445.365582][ T4609] device veth0_macvtap left promiscuous mode [ 445.373225][ T4609] device veth1_vlan left promiscuous mode [ 445.393424][ T4609] device veth0_vlan left promiscuous mode [ 446.899413][ T4609] team0 (unregistering): Port device team_slave_1 removed [ 446.917333][ T4318] Bluetooth: hci4: command 0x040f tx timeout [ 446.949150][ T4609] team0 (unregistering): Port device team_slave_0 removed [ 446.988059][ T4609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.030020][ T4609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.413588][ T4609] bond0 (unregistering): Released all slaves [ 447.488207][ T5109] netlink: 6 bytes leftover after parsing attributes in process `syz.5.162'. [ 447.787480][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.796866][ T5071] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.805153][ T5071] device bridge_slave_0 entered promiscuous mode [ 449.249068][ T4318] Bluetooth: hci4: command 0x0419 tx timeout [ 449.315723][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.325679][ T5071] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.334050][ T5071] device bridge_slave_1 entered promiscuous mode [ 449.560570][ T5071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.677779][ T5071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.007956][ T5071] team0: Port device team_slave_0 added [ 453.052760][ T5071] team0: Port device team_slave_1 added [ 453.297254][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.304306][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.435512][ T5071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.490701][ T5071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.525545][ T5071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.647053][ T5071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.237194][ T4318] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 455.247522][ T4318] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 455.257000][ T4318] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 455.274025][ T4318] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 455.306927][ T4318] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 455.319851][ T4318] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 455.576207][ T5071] device hsr_slave_0 entered promiscuous mode [ 455.596153][ T5071] device hsr_slave_1 entered promiscuous mode [ 455.651194][ T5071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.670755][ T5071] Cannot create hsr debugfs directory [ 457.395739][ T4319] Bluetooth: hci2: command 0x0409 tx timeout [ 457.689733][ T4609] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.913664][ T4609] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.100320][ T4609] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.849617][ T4609] batman_adv: batadv0: Removing interface: netdevsim0 [ 458.917177][ T4609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.114645][ T5193] loop2: detected capacity change from 0 to 512 [ 459.475730][ T4319] Bluetooth: hci2: command 0x041b tx timeout [ 459.487374][ T5166] chnl_net:caif_netlink_parms(): no params data found [ 459.631282][ T5071] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 459.737881][ T5071] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 459.773761][ T5071] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.838632][ T5071] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 459.983690][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.994006][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.006652][ T5166] device bridge_slave_0 entered promiscuous mode [ 460.068559][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.078271][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.097655][ T5166] device bridge_slave_1 entered promiscuous mode [ 460.248268][ T5166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.264824][ T5216] xt_hashlimit: max too large, truncated to 1048576 [ 460.304724][ T5166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.324610][ T5071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.360134][ T5071] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.370794][ T5166] team0: Port device team_slave_0 added [ 460.385399][ T5166] team0: Port device team_slave_1 added [ 460.429494][ T5071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.442071][ T5071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.479384][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.515681][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.634126][ T5166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.718583][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.746112][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.763327][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.784128][ T5225] loop4: detected capacity change from 0 to 512 [ 460.789517][ T5223] loop2: detected capacity change from 0 to 1024 [ 460.796765][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.826219][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.833390][ T4437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.891002][ T5225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 460.925757][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.934854][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.945107][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.952347][ T4437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.962063][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 460.969158][ T5225] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 460.972088][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.989524][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 461.000630][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 461.009785][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 461.024629][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 461.034177][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 461.054735][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 461.089683][ T5225] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.186: corrupted inode contents [ 461.098354][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 461.127386][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 461.171342][ T5225] EXT4-fs error (device loop4): ext4_dirty_inode:6119: inode #2: comm syz.4.186: mark_inode_dirty error [ 461.212093][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.225563][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.246458][ T5223] hfsplus: xattr search failed [ 461.285303][ T5225] EXT4-fs error (device loop4): ext4_do_update_inode:5254: inode #2: comm syz.4.186: corrupted inode contents [ 461.316746][ T5166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.343143][ T5225] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.186: mark_inode_dirty error [ 461.510743][ T4324] hfsplus: node 4:3 still has 1 user(s)! [ 461.568366][ T4319] Bluetooth: hci2: command 0x040f tx timeout [ 463.394898][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.636558][ T4319] Bluetooth: hci2: command 0x0419 tx timeout [ 463.691000][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.895601][ T4313] EXT4-fs (loop4): unmounting filesystem. [ 463.980294][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.006778][ T5251] 9pnet_virtio: no channels available for device syz [ 464.134544][ T5166] device hsr_slave_0 entered promiscuous mode [ 464.220924][ T5166] device hsr_slave_1 entered promiscuous mode [ 464.425609][ T5166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.433702][ T5166] Cannot create hsr debugfs directory [ 465.379663][ T5266] loop2: detected capacity change from 0 to 256 [ 465.850181][ T5279] process 'syz.2.194' launched './bus' with NULL argv: empty string added [ 466.247356][ T5276] loop4: detected capacity change from 0 to 8192 [ 466.342100][ T5276] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 466.912020][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.938160][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.589876][ T5071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.964303][ T4609] device hsr_slave_0 left promiscuous mode [ 470.008028][ T4609] device hsr_slave_1 left promiscuous mode [ 470.081927][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.105558][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.153973][ T4609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.185886][ T4609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.208595][ T4609] device bridge_slave_1 left promiscuous mode [ 470.216021][ T4609] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.273812][ T5305] loop2: detected capacity change from 0 to 512 [ 470.287297][ T4609] device bridge_slave_0 left promiscuous mode [ 470.293630][ T4609] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.337324][ T5305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 470.542453][ T4609] device veth1_macvtap left promiscuous mode [ 471.358254][ T4609] device veth0_macvtap left promiscuous mode [ 471.385654][ T4609] device veth1_vlan left promiscuous mode [ 471.407403][ T5314] loop5: detected capacity change from 0 to 8 [ 471.419098][ T4609] device veth0_vlan left promiscuous mode [ 471.437800][ T5305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002] [ 471.491192][ T5314] SQUASHFS error: Unable to read directory block [249:8] [ 471.499985][ T5305] System zones: 1-12 [ 471.585867][ T5305] EXT4-fs (loop2): 1 truncate cleaned up [ 471.593114][ T5305] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 473.311783][ T5320] sched: RT throttling activated [ 474.680051][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 474.729369][ T5323] loop4: detected capacity change from 0 to 1024 [ 474.756586][ T5323] EXT4-fs: Ignoring removed nomblk_io_submit option [ 474.790809][ T5323] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 474.837890][ T5323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 474.865182][ T5323] System zones: 0-1, 3-36 [ 474.891510][ T5323] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 475.103649][ T4313] EXT4-fs (loop4): unmounting filesystem. [ 475.440444][ T5339] loop4: detected capacity change from 0 to 8 [ 475.466097][ T5339] squashfs: Unknown parameter 'îŸJe [ 475.466097][ T5339] CðQí65Ä' [ 475.478388][ T4609] team0 (unregistering): Port device team_slave_1 removed [ 475.547122][ T4609] team0 (unregistering): Port device team_slave_0 removed [ 475.594784][ T4609] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.679577][ T4609] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.335316][ T4609] bond0 (unregistering): Released all slaves [ 476.519090][ T5330] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 476.539339][ T5330] netlink: 'syz.2.204': attribute type 2 has an invalid length. [ 476.664626][ T5166] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 476.725428][ T5166] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 476.812807][ T5166] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 476.842964][ T5346] loop5: detected capacity change from 0 to 512 [ 476.874881][ T5166] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 476.926771][ T5346] EXT4-fs: Ignoring removed nobh option [ 476.966874][ T5346] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 476.976204][ T5348] loop2: detected capacity change from 0 to 512 [ 477.042118][ T5346] EXT4-fs error (device loop5): ext4_lookup:1858: inode #15: comm syz.5.210: iget: bad i_size value: 15393162788874 [ 477.170818][ T5348] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 477.180188][ T5166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.194527][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 477.246634][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 477.309122][ T5348] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 477.328973][ T5166] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.372019][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 477.386437][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 477.438156][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.445321][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.454761][ T4544] EXT4-fs (loop5): unmounting filesystem. [ 477.516982][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 479.021570][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 479.056298][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 479.086274][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.093504][ T5246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.336658][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 481.758358][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 481.796672][ T5166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.856094][ T5166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.927511][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 481.956633][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.022871][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.086646][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 482.116496][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.158955][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 482.206751][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.224980][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 482.256437][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.296424][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.324553][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 482.374424][ T5382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.217'. [ 482.393525][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 482.416454][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.506224][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.527223][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.576847][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 482.606216][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.614312][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.657981][ T5071] device veth0_vlan entered promiscuous mode [ 484.172173][ T5071] device veth1_vlan entered promiscuous mode [ 484.306530][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 484.336417][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 484.382194][ T5071] device veth0_macvtap entered promiscuous mode [ 484.401597][ T5071] device veth1_macvtap entered promiscuous mode [ 484.503597][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.550645][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.581886][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.608195][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.674666][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.699416][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.736900][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.796872][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 484.836565][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 484.856850][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 484.886863][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 484.918422][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.996150][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.049053][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.089612][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.100154][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.119235][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.162972][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.184260][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.203580][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.233602][ T5071] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.269124][ T5071] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.281938][ T5071] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.319108][ T5071] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.394696][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 485.429413][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 485.454306][ T5166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.563241][ T5408] loop4: detected capacity change from 0 to 128 [ 485.686638][ T5408] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 485.727548][ T2923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.759680][ T2923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.790950][ T5408] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 485.948349][ T5408] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.223: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 486.065826][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 486.109466][ T4313] EXT4-fs (loop4): unmounting filesystem. [ 486.131048][ T5419] loop5: detected capacity change from 0 to 2048 [ 486.288359][ T4609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.450985][ T5419] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.493148][ T4609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.570659][ T5426] Invalid option length (544) for dns_resolver key [ 487.281173][ T26] audit: type=1800 audit(1756000131.595:600): pid=5419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.220" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 487.340666][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 487.612627][ T4544] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 487.676230][ T4544] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 489.509347][ T5448] loop4: detected capacity change from 0 to 512 [ 489.525850][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 489.587246][ T5448] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 489.627609][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 489.703764][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 489.737506][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 489.810371][ T5448] EXT4-fs (loop4): 1 truncate cleaned up [ 489.825861][ T5448] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 489.996787][ T4455] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.083934][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 490.112277][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 490.182864][ T5166] device veth0_vlan entered promiscuous mode [ 490.260094][ T4455] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.281340][ T4313] EXT4-fs (loop4): unmounting filesystem. [ 490.367261][ T5166] device veth1_vlan entered promiscuous mode [ 490.490081][ T4455] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.569140][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 490.613663][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 490.615750][ T5459] capability: warning: `syz.6.232' uses 32-bit capabilities (legacy support in use) [ 490.681831][ T5461] loop4: detected capacity change from 0 to 1024 [ 490.709956][ T4455] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.825915][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 490.838398][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 490.868529][ T5166] device veth0_macvtap entered promiscuous mode [ 490.921812][ T5166] device veth1_macvtap entered promiscuous mode [ 491.057268][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.098878][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.118970][ T5464] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 491.145742][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.164975][ T5464] hfsplus: xattr searching failed [ 491.178264][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.219366][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.263468][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.311324][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.357933][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.403786][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.468188][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 491.493561][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 491.512398][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 491.537035][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 491.578289][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.613611][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.669899][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.682275][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.702808][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.719021][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.731055][ T5166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.748985][ T5166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.749831][ T4318] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.764296][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.772541][ T5470] loop2: detected capacity change from 0 to 128 [ 491.779591][ T4320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.809576][ T4320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.819427][ T4320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.833335][ T4320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 491.840897][ T4320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.863795][ T4409] hfsplus: b-tree write err: -5, ino 4 [ 491.870201][ T4817] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 491.926715][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 491.942308][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 491.987071][ T5166] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.008424][ T5166] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.063405][ T5477] loop6: detected capacity change from 0 to 512 [ 492.065516][ T5166] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.152386][ T5166] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.693262][ T4764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.752246][ T5477] EXT4-fs (loop6): Test dummy encryption mode enabled [ 492.760032][ T5477] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 492.785167][ T4764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.801105][ T5477] EXT4-fs (loop6): 1 truncate cleaned up [ 492.811571][ T5477] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 493.102345][ T5477] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 493.109900][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 493.210093][ T5071] EXT4-fs (loop6): unmounting filesystem. [ 495.569848][ T4320] Bluetooth: hci1: command 0x0409 tx timeout [ 496.260390][ T5502] input: syz0 as /devices/virtual/input/input5 [ 496.318306][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.328735][ T5502] input: failed to attach handler leds to device input5, error: -6 [ 496.332291][ T5504] loop6: detected capacity change from 0 to 512 [ 496.349194][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.384387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 496.564128][ T5504] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #16: comm syz.6.239: corrupted inode contents [ 496.688347][ T4320] Bluetooth: Wrong link type (-22) [ 496.708449][ T5504] EXT4-fs error (device loop6): ext4_dirty_inode:6119: inode #16: comm syz.6.239: mark_inode_dirty error [ 496.806728][ T5504] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #16: comm syz.6.239: corrupted inode contents [ 496.860385][ T5504] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.239: mark_inode_dirty error [ 496.879772][ T5467] chnl_net:caif_netlink_parms(): no params data found [ 498.283088][ T4320] Bluetooth: hci1: command 0x041b tx timeout [ 498.328024][ T5504] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #16: comm syz.6.239: corrupted inode contents [ 498.408586][ T5504] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 498.482051][ T5504] EXT4-fs error (device loop6): ext4_do_update_inode:5254: inode #16: comm syz.6.239: corrupted inode contents [ 498.515767][ T4320] Bluetooth: hci3: command 0x0406 tx timeout [ 498.521855][ T4320] Bluetooth: hci0: command 0x0406 tx timeout [ 498.540610][ T5504] EXT4-fs error (device loop6): ext4_truncate:4312: inode #16: comm syz.6.239: mark_inode_dirty error [ 498.559856][ T5504] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 498.583373][ T5523] loop7: detected capacity change from 0 to 256 [ 498.664385][ T5523] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 498.680636][ T5504] EXT4-fs (loop6): 1 truncate cleaned up [ 498.718030][ T5504] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 498.770962][ T41] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 498.775742][ T5523] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 498.796366][ T5504] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.807095][ T41] EXT4-fs error (device loop6): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 1 [ 498.854879][ T5523] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 498.947414][ T5467] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.957657][ T5504] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 498.959036][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.033097][ T5467] device bridge_slave_0 entered promiscuous mode [ 499.097256][ T5071] EXT4-fs (loop6): unmounting filesystem. [ 500.899507][ T4320] Bluetooth: hci1: command 0x040f tx timeout [ 500.957547][ T4320] Bluetooth: hci2: unexpected cc 0x0809 length: 68 > 4 [ 500.957583][ T4299] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 500.966164][ T5467] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.995580][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.043186][ T5467] device bridge_slave_1 entered promiscuous mode [ 501.249589][ T4299] usb 3-1: not running at top speed; connect to a high speed hub [ 501.278862][ T4299] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 501.332446][ T5547] loop6: detected capacity change from 0 to 512 [ 501.342970][ T4299] usb 3-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 501.425673][ T5547] EXT4-fs (loop6): 1 truncate cleaned up [ 501.431432][ T5547] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 501.481971][ T4299] usb 3-1: config 1 interface 0 has no altsetting 0 [ 501.545504][ T4299] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 501.554631][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.569333][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.575743][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.645648][ T4299] usb 3-1: Product: syz [ 501.649899][ T4299] usb 3-1: Manufacturer: syz [ 501.654527][ T4299] usb 3-1: SerialNumber: syz [ 501.700104][ T5071] EXT4-fs (loop6): unmounting filesystem. [ 501.700257][ T5534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 502.035038][ T4299] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 502.049573][ T5467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.538864][ T4320] Bluetooth: hci1: command 0x0419 tx timeout [ 503.552898][ T4299] usb 3-1: USB disconnect, device number 3 [ 503.581987][ T4299] usblp0: removed [ 503.600810][ T4455] device hsr_slave_0 left promiscuous mode [ 503.612389][ T4455] device hsr_slave_1 left promiscuous mode [ 503.675726][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.683222][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.738428][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.754049][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.778004][ T4455] device bridge_slave_1 left promiscuous mode [ 503.787450][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.811362][ T4455] device bridge_slave_0 left promiscuous mode [ 503.818850][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.852579][ T4455] device veth1_macvtap left promiscuous mode [ 503.859270][ T4455] device veth0_macvtap left promiscuous mode [ 503.872680][ T4455] device veth1_vlan left promiscuous mode [ 503.885550][ T4455] device veth0_vlan left promiscuous mode [ 504.330161][ T5568] loop2: detected capacity change from 0 to 4096 [ 504.402184][ T5568] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 505.044262][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 506.307941][ T5584] loop2: detected capacity change from 0 to 1024 [ 506.313758][ T5586] loop6: detected capacity change from 0 to 2048 [ 506.347367][ T5586] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 506.374902][ T5586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.408490][ T5584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 506.542739][ T5586] loop6: detected capacity change from 2048 to 64 [ 506.672219][ T5071] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=1345, location=33 [ 506.705601][ T5071] UDF-fs: error (device loop6): udf_read_inode: (ino 1345) failed !bh [ 506.741677][ T5071] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=1345, location=33 [ 506.781714][ T5071] UDF-fs: error (device loop6): udf_read_inode: (ino 1345) failed !bh [ 507.968021][ T26] audit: type=1800 audit(1890217882.277:601): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.260" name="file1" dev="loop2" ino=839 res=0 errno=0 [ 508.198252][ T26] audit: type=1326 audit(1890217882.507:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca05d8ebe9 code=0x7ffc0000 [ 508.256977][ T4455] team0 (unregistering): Port device team_slave_1 removed [ 508.257686][ T26] audit: type=1326 audit(1890217882.537:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca05d90b07 code=0x7ffc0000 [ 508.340469][ T5600] loop7: detected capacity change from 0 to 8 [ 508.409626][ T5600] SQUASHFS error: Failed to read block 0x1e8: -5 [ 508.416334][ T5600] unable to read xattr id index table [ 508.880979][ T26] audit: type=1326 audit(1890217882.537:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fca05d90a7c code=0x7ffc0000 [ 508.929789][ T26] audit: type=1326 audit(1890217882.537:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fca05d909b4 code=0x7ffc0000 [ 508.978627][ T4455] team0 (unregistering): Port device team_slave_0 removed [ 509.011374][ T26] audit: type=1326 audit(1890217882.537:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fca05d909b4 code=0x7ffc0000 [ 509.035202][ T26] audit: type=1326 audit(1890217882.537:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fca05d8d84a code=0x7ffc0000 [ 509.076520][ T26] audit: type=1326 audit(1890217882.537:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5598 comm="syz.2.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca05d8ebe9 code=0x7ffc0000 [ 509.259879][ T4455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.272184][ T5606] loop7: detected capacity change from 0 to 1024 [ 509.283417][ T5606] EXT4-fs: quotafile must be on filesystem root [ 509.550173][ T4455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.575485][ T5621] trusted_key: encrypted_key: insufficient parameters specified [ 513.020711][ T4455] bond0 (unregistering): Released all slaves [ 513.134666][ T5467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.369315][ T5071] syz-executor: attempt to access beyond end of device [ 513.369315][ T5071] loop6: rw=2049, sector=128, nr_sectors = 1 limit=64 [ 513.396094][ T5071] buffer_io_error: 25 callbacks suppressed [ 513.396108][ T5071] Buffer I/O error on dev loop6, logical block 128, lost sync page write [ 513.423159][ T5626] loop4: detected capacity change from 0 to 512 [ 513.432109][ T5467] team0: Port device team_slave_0 added [ 513.459493][ T5467] team0: Port device team_slave_1 added [ 513.487614][ T5626] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 513.578244][ T5626] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 513.622104][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.635924][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.664690][ T5626] EXT4-fs (loop4): 1 truncate cleaned up [ 513.691509][ T5626] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 513.756243][ T5626] EXT4-fs (loop4): shut down requested (0) [ 513.762327][ T5467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.843077][ T5467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.894363][ T5467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.967561][ T5467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.979872][ T4313] EXT4-fs (loop4): unmounting filesystem. [ 515.607311][ T5467] device hsr_slave_0 entered promiscuous mode [ 515.625960][ T5467] device hsr_slave_1 entered promiscuous mode [ 515.643426][ T5467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.673731][ T5467] Cannot create hsr debugfs directory [ 515.999125][ T5653] loop7: detected capacity change from 0 to 2048 [ 516.070728][ T5653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 516.103051][ T4455] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.614201][ T4455] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.955508][ T4455] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.997638][ T5653] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 11776 lbcount: 12288 extent 129+11264 [ 517.184109][ T4319] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 517.196070][ T4319] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 517.207501][ T4319] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 517.216878][ T4319] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 517.224714][ T4319] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 517.232198][ T4319] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 517.336045][ T4455] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.018613][ T5467] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 519.125315][ T5467] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 519.187295][ T5467] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 519.314458][ T4319] Bluetooth: hci4: command 0x0409 tx timeout [ 519.321984][ T5467] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 520.052307][ T5467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.211702][ T5467] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.230662][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.263200][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.380098][ T5696] loop2: detected capacity change from 0 to 512 [ 520.389125][ T5696] EXT4-fs: Ignoring removed oldalloc option [ 520.403602][ T5696] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 520.426522][ T5664] chnl_net:caif_netlink_parms(): no params data found [ 520.447015][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 520.473880][ T5696] EXT4-fs (loop2): 1 truncate cleaned up [ 520.474221][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.479693][ T5696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 520.502788][ T26] audit: type=1800 audit(1890218150.808:609): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.288" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 520.610020][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.617218][ T5661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.678212][ T5710] loop4: detected capacity change from 0 to 256 [ 520.709816][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.736437][ T26] audit: type=1800 audit(1890218151.048:610): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.287" name="file1" dev="loop4" ino=1048607 res=0 errno=0 [ 520.776143][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.787043][ T5710] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 520.809474][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.816697][ T5661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.858967][ T5710] FAT-fs (loop4): Filesystem has been set read-only [ 520.890867][ T5710] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 520.900285][ T5661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.921337][ T5710] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 520.970422][ T5714] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 521.025209][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.033605][ T5715] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 521.047933][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.232290][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.289099][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.393347][ T4319] Bluetooth: hci4: command 0x041b tx timeout [ 521.445275][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 521.486563][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.508644][ T5720] loop4: detected capacity change from 0 to 2048 [ 521.522059][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.564446][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.577239][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.596299][ T5720] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 521.610865][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.620720][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.640165][ T5720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 521.654878][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.705060][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.746228][ T5724] Bluetooth: MGMT ver 1.22 [ 522.012487][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.052713][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.103837][ T5664] device bridge_slave_0 entered promiscuous mode [ 522.270703][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.292780][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.301079][ T5664] device bridge_slave_1 entered promiscuous mode [ 522.507293][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.522500][ T4393] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 522.724837][ T4393] usb 5-1: Using ep0 maxpacket: 8 [ 522.735403][ T4393] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 522.772326][ T4393] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 522.784863][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.849952][ T4393] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.869397][ T4393] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 522.879256][ T4393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.937216][ T4393] usbtmc 5-1:16.0: bulk endpoints not found [ 523.046071][ T5754] loop2: detected capacity change from 0 to 8 [ 523.083535][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.091144][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.129381][ T5754] SQUASHFS error: Failed to read block 0x6e6: -5 [ 523.141725][ T5664] team0: Port device team_slave_0 added [ 523.150483][ T5754] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 523.167245][ T5467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.176121][ T5754] SQUASHFS error: Unable to read directory block [631:26] [ 523.200490][ T5664] team0: Port device team_slave_1 added [ 523.223575][ T4455] device hsr_slave_0 left promiscuous mode [ 523.230750][ T4455] device hsr_slave_1 left promiscuous mode [ 523.261760][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.272483][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.291701][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.322381][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.350972][ T4455] device bridge_slave_1 left promiscuous mode [ 523.388338][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.428788][ T4455] device bridge_slave_0 left promiscuous mode [ 523.449666][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.472338][ T4319] Bluetooth: hci4: command 0x040f tx timeout [ 523.539899][ T4455] device veth1_macvtap left promiscuous mode [ 523.546243][ T4455] device veth0_macvtap left promiscuous mode [ 523.559805][ T4455] device veth1_vlan left promiscuous mode [ 523.565881][ T4455] device veth0_vlan left promiscuous mode [ 523.671949][ T5091] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 523.861903][ T5091] usb 3-1: Using ep0 maxpacket: 32 [ 523.869368][ T5091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.890933][ T5091] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.901160][ T5091] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 523.910522][ T5091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.939825][ T5091] usb 3-1: config 0 descriptor?? [ 523.964431][ T5091] hub 3-1:0.0: USB hub found [ 524.307479][ T4455] team0 (unregistering): Port device team_slave_1 removed [ 524.353428][ T4455] team0 (unregistering): Port device team_slave_0 removed [ 524.396559][ T4455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.446824][ T4455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.917510][ T4455] bond0 (unregistering): Released all slaves [ 525.117569][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.151657][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.211086][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.230208][ T5781] loop7: detected capacity change from 0 to 4096 [ 525.247965][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.261366][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.317546][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.363254][ T5781] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 525.507941][ T5664] device hsr_slave_0 entered promiscuous mode [ 525.528253][ T5664] device hsr_slave_1 entered promiscuous mode [ 525.552606][ T4319] Bluetooth: hci4: command 0x0419 tx timeout [ 525.580739][ T5664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 525.594998][ T5664] Cannot create hsr debugfs directory [ 525.934381][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.949115][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.961829][ T5091] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 526.002667][ T5091] usbhid 3-1:0.0: can't add hid device: -71 [ 526.008779][ T5091] usbhid: probe of 3-1:0.0 failed with error -71 [ 526.044056][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 526.052270][ T951] usb 5-1: USB disconnect, device number 3 [ 526.071736][ T5091] usb 3-1: USB disconnect, device number 4 [ 526.078229][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.137602][ T5166] EXT4-fs (loop7): unmounting filesystem. [ 526.157978][ T5467] device veth0_vlan entered promiscuous mode [ 526.178911][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.191516][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.253664][ T5467] device veth1_vlan entered promiscuous mode [ 527.361851][ T5664] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 527.438937][ T5664] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 527.508288][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 527.526691][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 527.606203][ T5664] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 527.683184][ T5467] device veth0_macvtap entered promiscuous mode [ 527.774474][ T5664] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 527.858919][ T5467] device veth1_macvtap entered promiscuous mode [ 528.069680][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.175315][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.199964][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.239550][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.283087][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 528.320059][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.390067][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 528.400419][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 528.430892][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 528.460631][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 528.500098][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 528.566983][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.595675][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.616119][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.627158][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.666400][ T5467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 528.694420][ T5467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 528.736060][ T5467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 528.802508][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 528.812020][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 528.860396][ T5467] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.882867][ T5467] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.901042][ T5467] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.059267][ T5467] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.320854][ T5829] loop2: detected capacity change from 0 to 1764 [ 530.013259][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.296196][ T4762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.302931][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 530.315817][ T4762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.353517][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 530.402504][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.419818][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 530.443111][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 530.453367][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 530.469463][ T4759] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.476639][ T4759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.512876][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 530.534240][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 530.553384][ T4759] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.560621][ T4759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.598024][ T4759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 530.704344][ T2923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.737843][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 531.111695][ T2923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.037527][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 532.048550][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 532.085150][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 532.135111][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 532.168981][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 532.199496][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 532.224434][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 532.239300][ T5845] loop4: detected capacity change from 0 to 256 [ 532.251771][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.266087][ T5845] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 532.284277][ T5664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.325138][ T5845] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 532.329165][ T5664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.362791][ T5845] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 532.382588][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 532.392748][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.472591][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.497514][ T4365] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 532.679469][ T4365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.705258][ T4365] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.735486][ T4365] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 532.755702][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.788680][ T4365] usb 3-1: config 0 descriptor?? [ 533.025429][ T4365] usbhid 3-1:0.0: can't add hid device: -71 [ 533.034171][ T4365] usbhid: probe of 3-1:0.0 failed with error -71 [ 533.067500][ T4365] usb 3-1: USB disconnect, device number 5 [ 533.232340][ T4809] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.415869][ T4809] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.502942][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.532510][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.662370][ T4809] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.695402][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.850116][ T4809] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.353875][ T5879] loop8: detected capacity change from 0 to 512 [ 534.409172][ T5879] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 534.566289][ T5879] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.323: Unimplemented hash flags: 0x0001 [ 534.596678][ T5879] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.323: Corrupt directory, running e2fsck is recommended [ 534.767955][ T5467] EXT4-fs (loop8): unmounting filesystem. [ 534.809772][ T4320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 534.821617][ T4320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 534.831361][ T4320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 534.840440][ T4320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 534.864283][ T4320] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 534.872428][ T4320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 535.369215][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 535.397178][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 535.513900][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 535.541977][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 535.573294][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.596406][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.676164][ T5664] device veth0_vlan entered promiscuous mode [ 536.160837][ T5664] device veth1_vlan entered promiscuous mode [ 536.322412][ T5915] loop8: detected capacity change from 0 to 1764 [ 536.418315][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 536.436827][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 536.486295][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.495090][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.628508][ T5664] device veth0_macvtap entered promiscuous mode [ 536.812889][ T5664] device veth1_macvtap entered promiscuous mode [ 536.855228][ T5884] chnl_net:caif_netlink_parms(): no params data found [ 537.046407][ T4320] Bluetooth: hci0: command 0x0409 tx timeout [ 537.598568][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 537.608895][ T5922] loop8: detected capacity change from 0 to 2048 [ 537.741890][ T4809] device hsr_slave_0 left promiscuous mode [ 537.749303][ T4809] device hsr_slave_1 left promiscuous mode [ 537.756981][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.766997][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.790675][ T4809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.854905][ T4809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.888211][ T4809] device bridge_slave_1 left promiscuous mode [ 537.929276][ T4809] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.972131][ T4809] device bridge_slave_0 left promiscuous mode [ 537.999216][ T4809] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.680410][ T4809] device veth1_macvtap left promiscuous mode [ 539.030778][ T4809] device veth0_macvtap left promiscuous mode [ 539.051622][ T4809] device veth1_vlan left promiscuous mode [ 539.065663][ T4809] device veth0_vlan left promiscuous mode [ 539.144443][ T4320] Bluetooth: hci0: command 0x041b tx timeout [ 540.012417][ T4809] team0 (unregistering): Port device team_slave_1 removed [ 540.060270][ T4809] team0 (unregistering): Port device team_slave_0 removed [ 540.084006][ T951] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 540.111893][ T4809] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.157940][ T4809] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.301817][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.313593][ T951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.323414][ T951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.337868][ T951] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.351721][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.367174][ T951] usb 3-1: config 0 descriptor?? [ 540.382028][ T951] hub 3-1:0.0: USB hub found [ 540.583875][ T951] hub 3-1:0.0: 9 ports detected [ 540.598767][ T951] hub 3-1:0.0: insufficient power available to use all downstream ports [ 540.706653][ T4809] bond0 (unregistering): Released all slaves [ 540.790923][ T951] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 540.802326][ T951] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 540.824969][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.838914][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.853141][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.866359][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.876434][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.887480][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.897777][ T951] usb 3-1: USB disconnect, device number 6 [ 540.899492][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.961426][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 540.971383][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 540.994803][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.008761][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.019236][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.030625][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.040653][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.051283][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.082318][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.099369][ T5884] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.107837][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.116714][ T5884] device bridge_slave_0 entered promiscuous mode [ 541.131902][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 541.151355][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 541.414707][ T5949] 9pnet_fd: Insufficient options for proto=fd [ 542.603321][ T4320] Bluetooth: hci0: command 0x040f tx timeout [ 542.645310][ T5664] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.662535][ T5664] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.671310][ T5664] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.718480][ T5664] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.746538][ T5884] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.762935][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.782625][ T5884] device bridge_slave_1 entered promiscuous mode [ 542.932329][ T5884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.959819][ T5884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.155469][ T5884] team0: Port device team_slave_0 added [ 543.203025][ T5884] team0: Port device team_slave_1 added [ 543.276649][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.292360][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.351697][ T5884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.393785][ T4762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.416466][ T5884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.423896][ T4762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.445804][ T5884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.521932][ T5884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.577763][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 543.707003][ T4442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.729174][ T5884] device hsr_slave_0 entered promiscuous mode [ 543.732090][ T4442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.781061][ T5884] device hsr_slave_1 entered promiscuous mode [ 543.850098][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 544.214401][ T5970] loop8: detected capacity change from 0 to 512 [ 544.293473][ T5970] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 544.640237][ T5970] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.339: bg 0: block 16: invalid block bitmap [ 544.661996][ T4320] Bluetooth: hci0: command 0x0419 tx timeout [ 544.740756][ T5976] Device name cannot be null; rc = [-22] [ 545.182663][ T5970] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 545.193614][ T5970] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.339: invalid indirect mapped block 5 (level 0) [ 545.237758][ T5970] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.339: invalid indirect mapped block 4294967295 (level 1) [ 545.308727][ T5970] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.339: invalid indirect mapped block 4294967295 (level 2) [ 545.354726][ T5970] EXT4-fs (loop8): 1 truncate cleaned up [ 545.386930][ T5970] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 545.417172][ T5970] EXT4-fs (loop8): unmounting filesystem. [ 545.675871][ T5980] loop9: detected capacity change from 0 to 16 [ 545.776429][ T5980] erofs: (device loop9): mounted with root inode @ nid 36. [ 545.902587][ T5980] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 545.976886][ T5980] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 546.019745][ T5980] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 546.308269][ T26] audit: type=1326 audit(1890218176.631:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.7.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bb8ebe9 code=0x7ffc0000 [ 546.378418][ T5981] erofs: (device loop9): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 546.412022][ T5984] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 546.430713][ T26] audit: type=1326 audit(1890218176.641:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.7.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb87bb8ebe9 code=0x7ffc0000 [ 546.488999][ T26] audit: type=1326 audit(1890218176.641:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.7.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bb8ebe9 code=0x7ffc0000 [ 546.528149][ T5981] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 546.555457][ T5984] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 546.612716][ T26] audit: type=1326 audit(1890218176.641:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.7.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb87bb8ebe9 code=0x7ffc0000 [ 546.643047][ T5980] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 546.683497][ T26] audit: type=1326 audit(1890218176.641:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5987 comm="syz.7.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87bb8ebe9 code=0x7ffc0000 [ 546.790810][ T5981] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 546.835434][ T5980] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 546.915326][ T5981] erofs: (device loop9): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 546.968678][ T5980] erofs: (device loop9): z_erofs_read_folio: failed to read, err [-117] [ 547.290120][ T6006] loop7: detected capacity change from 0 to 512 [ 547.320742][ T5884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 547.321723][ T6006] EXT4-fs: Ignoring removed bh option [ 547.355010][ T5884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 547.363029][ T6008] loop2: detected capacity change from 0 to 512 [ 547.380384][ T6006] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 547.396354][ T6008] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 547.412984][ T6010] loop8: detected capacity change from 0 to 256 [ 547.461160][ T6006] EXT4-fs (loop7): 1 truncate cleaned up [ 547.466918][ T6006] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 547.481973][ T6008] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.357: bad orphan inode 131083 [ 547.493013][ T6008] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 547.508781][ T5884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 547.602546][ T6010] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 547.614507][ T5884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.652997][ T6010] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 547.744455][ T6010] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 547.903062][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 548.378635][ T5166] EXT4-fs (loop7): unmounting filesystem. [ 548.806170][ T6031] ip6t_REJECT: ECHOREPLY is not supported [ 549.854409][ T5884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.980035][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.9.363'. [ 550.052856][ T5884] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.078208][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 550.104449][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.182929][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 550.212073][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.268818][ T4609] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.276098][ T4609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.291087][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 550.302459][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.311492][ T4609] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.318688][ T4609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.387125][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 550.449088][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 550.549214][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 550.588170][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 550.645786][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.658194][ T6057] loop8: detected capacity change from 0 to 128 [ 550.689595][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 550.699170][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.709140][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 550.734118][ T6057] EXT4-fs (loop8): Test dummy encryption mode enabled [ 550.739479][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.776573][ T5884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.813056][ T5884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 550.832332][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 550.852914][ T6059] loop9: detected capacity change from 0 to 2048 [ 550.883426][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 550.893245][ T6057] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 550.913341][ T6057] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 550.925682][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.960411][ T6059] loop9: p1 < > p3 [ 550.971927][ T6059] loop9: p3 size 134217728 extends beyond EOD, truncated [ 551.161485][ T5467] EXT4-fs (loop8): unmounting filesystem. [ 551.471381][ T4460] udevd[4460]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 551.492326][ T4817] udevd[4817]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 552.271673][ T4460] udevd[4460]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 552.274565][ T4817] udevd[4817]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 552.795843][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.7.376'. [ 553.060525][ T6092] loop9: detected capacity change from 0 to 8 [ 553.882285][ T6092] SQUASHFS error: Unable to read inode 0x127 [ 553.979485][ T6094] netlink: 148 bytes leftover after parsing attributes in process `syz.8.377'. [ 553.988728][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.8.377'. [ 554.008185][ T6094] loop8: detected capacity change from 0 to 1024 [ 554.015402][ T6094] hfsplus: unable to parse mount options [ 554.079803][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 554.091487][ T4460] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 554.113186][ T5246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 554.150268][ T5884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.184287][ T4817] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 554.436333][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 554.471975][ T4809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 554.583418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 554.608293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 554.688235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 554.744037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 554.817567][ T5884] device veth0_vlan entered promiscuous mode [ 554.878681][ T5884] device veth1_vlan entered promiscuous mode [ 555.003711][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 555.040184][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 555.101269][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 555.171600][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 555.228539][ T5884] device veth0_macvtap entered promiscuous mode [ 555.250524][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 555.282470][ T5884] device veth1_macvtap entered promiscuous mode [ 555.387119][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.405279][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.417339][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.436975][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.458418][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.473387][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.485130][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.500836][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.524323][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.591822][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 555.621141][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 555.669963][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.739109][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.795000][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.299885][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.325780][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.384968][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.413714][ T5884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 557.451957][ T5884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.530217][ T5884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 557.632780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 557.686825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 557.746649][ T5884] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.774537][ T5884] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.833587][ T5884] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.865110][ T5884] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.151232][ T4809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.200051][ T4809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.248789][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 558.386134][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.9.388'. [ 558.397033][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.445337][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.495838][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 559.357186][ T6149] loop7: detected capacity change from 0 to 4096 [ 559.602452][ T6149] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 562.609188][ T26] audit: type=1800 audit(1890218192.939:616): pid=6166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.391" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 562.664297][ T6166] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #15: comm syz.7.391: corrupted inode contents [ 562.683409][ T6166] EXT4-fs error (device loop7): ext4_dirty_inode:6119: inode #15: comm syz.7.391: mark_inode_dirty error [ 562.697220][ T6166] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #15: comm syz.7.391: corrupted inode contents [ 562.709555][ T6166] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.391: mark_inode_dirty error [ 562.723018][ T6166] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #15: comm syz.7.391: corrupted inode contents [ 562.742716][ T6166] EXT4-fs error (device loop7): __ext4_ext_dirty:202: inode #15: comm syz.7.391: mark_inode_dirty error [ 562.755325][ T6166] EXT4-fs error (device loop7): ext4_do_update_inode:5254: inode #15: comm syz.7.391: corrupted inode contents [ 562.772065][ T6166] EXT4-fs error (device loop7): ext4_truncate:4312: inode #15: comm syz.7.391: mark_inode_dirty error [ 562.784837][ T6166] EXT4-fs error (device loop7) in ext4_setattr:5658: Corrupt filesystem [ 562.870069][ T6166] syz.7.391 (6166) used greatest stack depth: 20392 bytes left [ 562.953900][ T5166] EXT4-fs (loop7): unmounting filesystem. [ 562.975407][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.981754][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.632264][ T26] audit: type=1326 audit(1890218194.970:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.7.395" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb87bb8ebe9 code=0x0 [ 565.216360][ T6189] loop1: detected capacity change from 0 to 8 [ 565.274875][ T6189] SQUASHFS error: zlib decompression failed, data probably corrupt [ 565.340464][ T6189] SQUASHFS error: Failed to read block 0x9b: -5 [ 565.377653][ T6189] SQUASHFS error: Unable to read metadata cache entry [99] [ 565.434040][ T6189] SQUASHFS error: Unable to read inode 0x127 [ 565.805982][ T4431] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 565.995671][ T4431] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.017615][ T4431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 566.051372][ T4431] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.104445][ T4431] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 566.151525][ T4431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.191690][ T4431] usb 2-1: Product: syz [ 566.205548][ T4431] usb 2-1: Manufacturer: syz [ 566.215673][ T4431] usb 2-1: SerialNumber: syz [ 566.249312][ T4431] usb 2-1: config 0 descriptor?? [ 567.213620][ C1] ------------[ cut here ]------------ [ 567.219518][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1952/0x1f50 [ 567.229408][ C1] Modules linked in: [ 567.233415][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.148-syzkaller #0 [ 567.241180][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.251319][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 567.257706][ C1] Code: ff ff ff e8 40 21 e5 f7 0f 0b 48 8b 7c 24 20 e8 e4 cf 7f fe e9 dd e9 ff ff e8 2a 21 e5 f7 0f 0b e9 f1 ee ff ff e8 1e 21 e5 f7 <0f> 0b e9 61 f2 ff ff e8 12 21 e5 f7 48 c7 c7 70 5f fa 8d 4c 89 f6 [ 567.277472][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 567.283583][ C1] RAX: ffffffff899b9d42 RBX: 0000000000000000 RCX: ffff888017739dc0 [ 567.291591][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.299577][ C1] RBP: ffffc900001e0aa8 R08: ffff888017739dc0 R09: 0000000000000003 [ 567.307584][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 567.315584][ C1] R13: dffffc0000000000 R14: ffff888054062258 R15: ffff888074190a00 [ 567.323601][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 567.332563][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 567.339156][ C1] CR2: 0000200000014000 CR3: 000000007ebfa000 CR4: 00000000003506e0 [ 567.347161][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 567.355190][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 567.363192][ C1] Call Trace: [ 567.366484][ C1] [ 567.369350][ C1] ? verify_lock_unused+0x140/0x140 [ 567.374583][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 567.380166][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 567.386206][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 567.391801][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 567.397376][ C1] ? read_lock_is_recursive+0x10/0x10 [ 567.402801][ C1] __iterate_interfaces+0x243/0x500 [ 567.408025][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 567.414320][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 567.421575][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 567.427851][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 567.434932][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 567.440171][ C1] __hrtimer_run_queues+0x554/0xd60 [ 567.445431][ C1] ? hw_scan_work+0xf30/0xf30 [ 567.450161][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 567.455302][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 567.461428][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 567.466562][ C1] handle_softirqs+0x2a1/0x920 [ 567.471372][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 567.476264][ C1] ? do_softirq+0x200/0x200 [ 567.480808][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 567.486026][ C1] __irq_exit_rcu+0x12f/0x220 [ 567.490830][ C1] ? irq_exit_rcu+0x20/0x20 [ 567.495356][ C1] irq_exit_rcu+0x5/0x20 [ 567.499647][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 567.505321][ C1] [ 567.508262][ C1] [ 567.511225][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 567.517280][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 567.523145][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 50 ff c7 08 e8 0b b1 2e 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 567.542833][ C1] RSP: 0018:ffffc90000177bd8 EFLAGS: 00000286 [ 567.548955][ C1] RAX: 5656d010932bdf00 RBX: 0000000000000000 RCX: 5656d010932bdf00 [ 567.557001][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c0420 RDI: ffffffff8adef6a0 [ 567.565061][ C1] RBP: ffffc90000177c30 R08: dffffc0000000000 R09: ffffed10171c7551 [ 567.573065][ C1] R10: ffffed10171c7551 R11: 1ffff110171c7550 R12: ffff888017739dc0 [ 567.581094][ C1] R13: dffffc0000000000 R14: ffff88802c515940 R15: ffff8880b8f3b550 [ 567.589098][ C1] ? finish_task_switch+0x265/0x8f0 [ 567.594430][ C1] __schedule+0x10f4/0x40b0 [ 567.598961][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 567.604880][ C1] ? flush_smp_call_function_queue+0x120/0x340 [ 567.611839][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 567.619145][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 567.625248][ C1] schedule_idle+0x4a/0x90 [ 567.629696][ C1] do_idle+0x525/0x570 [ 567.633818][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 567.639048][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 567.644738][ C1] ? schedule_idle+0x57/0x90 [ 567.649352][ C1] cpu_startup_entry+0x3f/0x60 [ 567.654268][ C1] start_secondary+0xe4/0xf0 [ 567.658966][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 567.664907][ C1] [ 567.667940][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 567.675222][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.1.148-syzkaller #0 [ 567.682941][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.693014][ C1] Call Trace: [ 567.696294][ C1] [ 567.699139][ C1] dump_stack_lvl+0x168/0x22e [ 567.703846][ C1] ? memcpy+0x3c/0x60 [ 567.707839][ C1] ? show_regs_print_info+0x12/0x12 [ 567.713040][ C1] ? load_image+0x3b0/0x3b0 [ 567.717567][ C1] panic+0x2c9/0x710 [ 567.721488][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 567.726016][ C1] ? secondary_startup_64_no_verify+0xcf/0xdb [ 567.732391][ C1] __warn+0x2f8/0x4f0 [ 567.736394][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 567.742129][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 567.747873][ C1] report_bug+0x2ba/0x4f0 [ 567.752226][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 567.757981][ C1] handle_bug+0x3a/0x70 [ 567.762140][ C1] exc_invalid_op+0x16/0x40 [ 567.766646][ C1] asm_exc_invalid_op+0x16/0x20 [ 567.771507][ C1] RIP: 0010:__ieee80211_beacon_get+0x1952/0x1f50 [ 567.777843][ C1] Code: ff ff ff e8 40 21 e5 f7 0f 0b 48 8b 7c 24 20 e8 e4 cf 7f fe e9 dd e9 ff ff e8 2a 21 e5 f7 0f 0b e9 f1 ee ff ff e8 1e 21 e5 f7 <0f> 0b e9 61 f2 ff ff e8 12 21 e5 f7 48 c7 c7 70 5f fa 8d 4c 89 f6 [ 567.797461][ C1] RSP: 0018:ffffc900001e08a0 EFLAGS: 00010246 [ 567.803542][ C1] RAX: ffffffff899b9d42 RBX: 0000000000000000 RCX: ffff888017739dc0 [ 567.811516][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.819485][ C1] RBP: ffffc900001e0aa8 R08: ffff888017739dc0 R09: 0000000000000003 [ 567.827457][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: 1ffff9200003c12c [ 567.835514][ C1] R13: dffffc0000000000 R14: ffff888054062258 R15: ffff888074190a00 [ 567.843495][ C1] ? __ieee80211_beacon_get+0x1952/0x1f50 [ 567.849243][ C1] ? verify_lock_unused+0x140/0x140 [ 567.854445][ C1] ? __ieee80211_beacon_get+0xad/0x1f50 [ 567.859998][ C1] ? ieee80211_beacon_get_template+0x40/0x40 [ 567.866004][ C1] ieee80211_beacon_get_tim+0x5b/0x4d0 [ 567.871498][ C1] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 567.877046][ C1] ? read_lock_is_recursive+0x10/0x10 [ 567.882429][ C1] __iterate_interfaces+0x243/0x500 [ 567.887631][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 567.893877][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 567.901085][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 567.907341][ C1] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 567.914367][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 567.919569][ C1] __hrtimer_run_queues+0x554/0xd60 [ 567.924778][ C1] ? hw_scan_work+0xf30/0xf30 [ 567.929480][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 567.934595][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 567.940766][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 567.945883][ C1] handle_softirqs+0x2a1/0x920 [ 567.950662][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 567.955527][ C1] ? do_softirq+0x200/0x200 [ 567.960043][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 567.965273][ C1] __irq_exit_rcu+0x12f/0x220 [ 567.969996][ C1] ? irq_exit_rcu+0x20/0x20 [ 567.974532][ C1] irq_exit_rcu+0x5/0x20 [ 567.978781][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 567.984417][ C1] [ 567.987358][ C1] [ 567.990315][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 567.996321][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 568.002135][ C1] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 e9 e8 04 00 00 4c 8b 75 d0 4c 89 e7 e8 50 ff c7 08 e8 0b b1 2e 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 568.021744][ C1] RSP: 0018:ffffc90000177bd8 EFLAGS: 00000286 [ 568.027812][ C1] RAX: 5656d010932bdf00 RBX: 0000000000000000 RCX: 5656d010932bdf00 [ 568.035785][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c0420 RDI: ffffffff8adef6a0 [ 568.043760][ C1] RBP: ffffc90000177c30 R08: dffffc0000000000 R09: ffffed10171c7551 [ 568.051733][ C1] R10: ffffed10171c7551 R11: 1ffff110171c7550 R12: ffff888017739dc0 [ 568.059707][ C1] R13: dffffc0000000000 R14: ffff88802c515940 R15: ffff8880b8f3b550 [ 568.067791][ C1] ? finish_task_switch+0x265/0x8f0 [ 568.073019][ C1] __schedule+0x10f4/0x40b0 [ 568.077563][ C1] ? release_firmware_map_entry+0x18a/0x18a [ 568.083556][ C1] ? flush_smp_call_function_queue+0x120/0x340 [ 568.089717][ C1] ? generic_smp_call_function_single_interrupt+0x120/0x120 [ 568.097007][ C1] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 568.103091][ C1] schedule_idle+0x4a/0x90 [ 568.107510][ C1] do_idle+0x525/0x570 [ 568.111589][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 568.116799][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 568.122466][ C1] ? schedule_idle+0x57/0x90 [ 568.127075][ C1] cpu_startup_entry+0x3f/0x60 [ 568.131848][ C1] start_secondary+0xe4/0xf0 [ 568.136443][ C1] secondary_startup_64_no_verify+0xcf/0xdb [ 568.142376][ C1] [ 568.145690][ C1] Kernel Offset: disabled [ 568.150076][ C1] Rebooting in 86400 seconds..