last executing test programs: 8m13.621904981s ago: executing program 32 (id=23): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x221488e, &(0x7f0000000040)=ANY=[@ANYBLOB='iocharset=iso8859-7,map=normal\x00iocharset=iso8859-3,norock,mode=0x0000000000000006,gid=', @ANYRESHEX, @ANYBLOB="416d61703d61636f726e2c696f636861727365743d69736f3838352124053525a7a03763746f723d3078303030303030303030303030303030382c6e6f726f636b2c6f76657272696465726f636b7065726d2c6d61703d6e6f726d66382c61707072616973655f747970653d696d617369672c000000000000"], 0xfd, 0x6b8, &(0x7f0000000140)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6m42.728001769s ago: executing program 33 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 6m37.973260166s ago: executing program 34 (id=372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0x11, 0x148, 0x1d8, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @random="f368656e065b", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x24, 0xb0, 0x64, 0x0, 0x8, 0x11, 0x0, @empty, @loopback}, {0x4e24, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6c409407329434045b17932903ccb973549c8807a85e00000000000000000002", "ba1c1a6225a9bd0f10a2e7697518f34c83d11839bccb9379184b098120ec4f86811620828060bb58307efb7205b1e99a", "de39e3a7354bfe2b6b4ab3dfee69a297e85dc814563fb260d0f0e8fd", {"5c6c93850235402d6133bc2e9a5bcb0f", "0d05092d68c007fc2c96a0fb60a739b1"}}}}}}}, 0x0) 6m29.79560153s ago: executing program 35 (id=407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000029c0)=""/4088, 0xff8}], 0x1}, 0x81}, {{0x0, 0x0, 0x0}, 0x10}], 0x2, 0x220, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x211000, &(0x7f0000007b00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=r0, @ANYRES8, @ANYBLOB="75b8fdeeab1654b4fb498e37c662c00e75c506cf39096270875d0a02537f71fccf9c1cafa241d2b464c41eafd3a8e7fcd5e6b56f795512c98d115410085aaf9e962f396d7daff254935d6755d3d089f164a6ae605f14be2c0fdadff97e1700000000ce183beb3290da", @ANYRESOCT, @ANYRESHEX, @ANYRESDEC=r0, @ANYRES64, @ANYRES8=r2, @ANYRES64, @ANYRESHEX=r2, @ANYBLOB="71a66cd4cb3b3d056562a38186854cc55e12535799a626aa2274d68cf48ef76ba345fa6fd299358710550aef92e5bba058f9a5b603e1a457f0528a037a76a08a21b2c94eb70c8152da225766afc2a84e200c7f19e42f4c4fe32bbe04508202ba0a23de787a93a1e3c3e0defff33f0ca8", @ANYRES16, @ANYBLOB="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", @ANYRES16], 0x0, 0x151a, &(0x7f0000003240)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x800000000003) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90a495, &(0x7f00000006c0)={[{@data_journal}, {@mblk_io_submit}, {@norecovery}, {@dax_always}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x6, 0x510, &(0x7f0000002740)="$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") ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m2.364179054s ago: executing program 8 (id=505): socket$key(0xf, 0x3, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = eventfd2(0x0, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x2, r0, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x5040, 0x3000, 0x8, r0}) 6m2.218221995s ago: executing program 36 (id=505): socket$key(0xf, 0x3, 0x2) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = eventfd2(0x0, 0x1) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x2, r0, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x5040, 0x3000, 0x8, r0}) 5m34.960418218s ago: executing program 37 (id=610): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00'}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) syz_open_procfs(0x0, 0x0) 5m21.477982383s ago: executing program 38 (id=671): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x4400, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r0, 0x0, 0x0) 5m6.51520991s ago: executing program 39 (id=728): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000004706241a00000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0xf, 0xafe4, 0x3, 0x10, 0xe40b, 0x59fc0000, 0x10, 0x10, 0x4014, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5m6.325435501s ago: executing program 40 (id=730): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x1) shutdown(r0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x8088}, {r0, 0x4091}], 0x2, 0x0, 0x0, 0x0) 4m22.275547335s ago: executing program 41 (id=920): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400"], 0x0) 4m10.477968067s ago: executing program 42 (id=973): r0 = gettid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x20000000000000ff) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f00000002c0)=[{}], 0x1, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) 4m4.084443927s ago: executing program 5 (id=992): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m3.204184414s ago: executing program 5 (id=995): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) 4m2.284495511s ago: executing program 5 (id=997): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x20000000) 4m1.997358573s ago: executing program 43 (id=996): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0xf0ff1f) mlockall(0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) 4m1.974710513s ago: executing program 5 (id=999): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d2, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) pwritev2(r0, &(0x7f0000000040), 0x0, 0x7fff, 0x0, 0x0) 4m1.535933417s ago: executing program 5 (id=1000): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x121000f, &(0x7f0000000280), 0xfe, 0x50d, &(0x7f0000000f80)="$eJzs3V9rZGcZAPDnTDLbbDc1qXpRC63FVrJFdyZpbBu8aCuKdwWl3q8hmYSQSSZkJu0mFEnxAwgiWvDKK28EP4Ag/QhSWHDvRUUR3dULL9Qj58yZbHY8s0lw/pTk94N35j3vzDnP82Z2zrznz54TwJX1QkS8FRFTEfFyRMwV7ZWixHG3ZO97cP/9taxkr7zz1ySSoi0ir564Ucw2030q1T482l5tNhv7xXS9s7NXbx8e3draWd1sbDZ2l5eXXlt5feXVlcWh9DPr1xvf+OOPf/Dzb77x6y+/97vbf775vSzprxevF/0Yunv5YzX7W5yYjoj9UQSbgKmiP9VJJwIAwLlkY/xPR8QX8vH/XEzlo7lc/5BuZvzZAQAAAMOQvjkb/0oiUgAAAODSejMiZiOp1IpzAWajUqnVuufwfjaerDRb7c6XNloHu+vZaxHzUa1sbDUbi8U5tfNRTbLppbz+cPqVvunliHg6In40dz2frq21muuT3vkBAAAAV8SNvu3/f8x1t/8BAACAS2Z+0gkAAAAAIzdo+z8Zcx4AAADA6Dj+DwAAAJfat95+Oytp7/7X6+8eHmy33r213mhv13YO1mprrf292martZlfs2/nrOU1W629r8TuwZ16p9Hu1NuHR7d3Wge7ndtb7h8IAAAAk/L05z+6l0TE8Vev5yVzLXuYGjCDcwXg0qhc5M1/GF0ewPgN+pkHLr/pSScATM7xpBMAJu2RS32UDApOn7zzyD6D34wuJwAAYLgWPld+/D/bBKhOOjlgpC50/B+4VBz/h6vrgsf/Px5VHsD4VY0A4Mo761YfAy/eUXb8/9oTJY1peuayAACAkZrNS1KpFccCZ6NSqdUinsr/q3812dhqNhYj4lMR8du56hPZ9FI+Z+L2gAAAAAAAAAAAAAAAAAAAAAAAAABwTmmaRAoAAABcahGVPyXF/b8W5l6a7d8/cC3551z+HBHv/fSdn9xZ7XT2l7L2v520dz4s2l+ZxB4MAAAAoF9vO723HQ8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw/Tg/vtrvTLOuH/5WkTMl8Wfjpn8eSaqEfHk35OYPjVfEhFTQ4h//EFEPFMWP8nSivkii/74lYi4Pp74z6VpWhr/xhDiw1X2Ubb+eavs+1eJF/Ln8u//dFH+X4PXf5WT9d/UgPXfU+eM8ezdX9YHxv8g4tnp8vVPL34yIP6LZQss+aN89ztHR//T2F14pD+LWCj9/UkeiVXv7OzV24dHt7Z2Vjcbm43d5eWl11ZeX3l1ZbG+sdVsFI+lffzhc7/6T1/Tv9OuvP8xIP78Gf1/KatUTzWm/WGKYHfv3P9Mt1rtW0Qe/+aL5Z//M4+Jn/2b+GLxO5C9vtCrH3frpz3/i4+fL02siL8+oP9nff43By20z8vf/v7vz/lWAGAM2odH26vNZmN/5JUP0zQdVyyVi1d6o7uRhZg53ZKNrSfeZZVTlezz77UMY88WAADwSfNwM2DSmQAAAAAAAAAAAAAAAAAAAMDV1T6MyqgvMNYf83gyXQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKz/BgAA//8kI9qe") r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x25}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xa4ff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 4m0.878413052s ago: executing program 5 (id=1001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) 4m0.720836413s ago: executing program 44 (id=1001): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) 3m58.769921158s ago: executing program 8 (id=922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, 0x0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3m58.613693349s ago: executing program 8 (id=1006): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x20000000) 3m58.52968357s ago: executing program 8 (id=1007): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800002, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d2, &(0x7f0000000f00)="$eJzs3cFvHFcdB/DvrNeOt1TBaROaQxFWIhWkiMSJlUK4YBBCOVSoKoeercRprG6SKnFRWiFIAcEJiUP/gILkGweExD0oXLiUW68+VkLiEiEU9bJoZmfXu/Y6Xif2OoHPJxrPe/Nm3vzmN29mvOusNsD/rctn0ryfIpfPvHG3rG+sL7Y31heP1M3tJGW5kTS7sxQ3k+JBslS2FwNTBubbfLx66a3PHm583q0166laf6q/3exYIY/Yx716ynzd3/zILafH6r/bVxVeXkxypZ4Pmxm3r6EVy6Sdrudw6Drb3NvL5jte78Czr/d0KrrPzW3mkhfqJ3P1O0F9d2hMLsKDsae7HAAAADynPr112BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA86f+/v+inhr1PPMpet//P9NbVpefQUtjr3n/QOMAAAAAAAAAgMn42qM8yt0c7dU7RfU3/1NV5Xi+6CRfyvu5k5XcztnczXLWspbbOZ9kbqCjmbvLa2u3z/e3LI3e8sLILS9M6ogBAAAAAAAA4H/SL9La/Ps/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8C4pkqjurpuPJf8p55tJoZrMt95J/JJk57Hj3oBi18P7k4wAAAICnMvsE23z5UR7lbo726p2ifM2fr1Svl2fzfm5mLatZSzsruVq/hi5f9Tc21hfbG+uLN8qprA/3+71/7SmMmbqHqao2as8nqzVauZbVasnZXKmCuZpGd9+nk5O9eAbiGvBRGVPx3dqYkTXrtJY7+91O7yLsi+G3IhqPWbO1GVzSz8hCHVu55bFuBorqjZpkayZ2PTvNodpc1et0f0/n0+i/83P8AHL+Qj0vj+fXB5rzvepnopEqExd6o6+8Zh6fieTrf/nj29fbN9+9fu3OmWfnkHYxtcPyrWNicSATrzzXmWjucf2FKhMn+vXL+WF+nDOZz5u5ndX8JMtZy0o6dftyPZ7Ln3OPz9TSUO3N3SKZqc9L95yNE9N8flCVlnOq2vZoVlPkVq5mJa9X/y7kfL6Vi7mYSwNn+MSOcVfHVl31ja1Xfe9M/3Vk8Ke/URfKu9tvNu9yS4874p1G537p3vvLvB4byGt31D/sr3Vs4DpYGMjSS73sTI/sfG/3xi1vtZf7+OUuz4nJmqszUV5AvadEL7qXu5loVs+i7eP8951yu7RvdjrXl9/bof97W+qv1fNyWK1/dbe1e0afiv1VnqqXMlvfSYZHR9n2cv8uM9DW2RzL3bbhJ2653YmqrSh6V+qPcqsaANuv1Jn6d7jtPV2o2l4Z2bZYtZ0caBv6fSu30s7VCeQPgCfx97f7xbm8MNP6Z+vT1ietX7Wut96Y/f6Rbx95dSbTf5v+TnNh6rXGq8Wf80l+tvn6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHJ3Pvjw3eV2e+X26EJj56ahQitbl+zU85HR/RT1F/qMsa/nojCbZGhJ9T1HEw+jtTWMbYXOz5OJ56f3nVaj1/ltWWhuG1GjCktDS/60vcOP9hhhMd51cYCFRia706mMHgCHeFMCJuLc2o33zt354MNvrt5YfmflnZWb0xcvXlq4dPH1xXPXVtsrC92fhx0lcBA2H/qHHQkAAAAAAAAAAAAwrlEfDDj14m4fGhnrMx7+ZyEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwLy6fSfN+ipxfOLtQ1jfWF9vl1CtvrtlM0mgkxU+T4kGylO6UuYHuivzhQToj9vPx6qW3Pnu48flmX83u+kmjnu/s8a1J7tVT5pNM1fOnMNTflafur/h37xjKhH3R6XSWni4+2B//DQAA//9KkvWS") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) pwritev2(r0, &(0x7f0000000040), 0x0, 0x7fff, 0x0, 0x0) 3m58.163835083s ago: executing program 8 (id=1008): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x121000f, &(0x7f0000000280), 0xfe, 0x50d, &(0x7f0000000f80)="$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") r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x25}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x1ff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0xa4ff) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) 3m57.602739057s ago: executing program 8 (id=1009): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64, @ANYRES64], 0xf, 0xc38, &(0x7f0000001080)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNiOSEml9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSoWwEAPExXRr5y+qz7PwA8Vq75/38AAAAAAAAAAAAAANjvUhTxZKSYubKSxqr3HfXL7b47d0eHhjevdiRVNQ9V5cuf+pmz585/8YXBC9283J76gPq77dPx2si1S42Xp2/PzE7MzU2MN0an2jemxye2vYed1t/oZHUCGrdfvzN+8+Zc4+zz59Z9fHfg/f4njg9cHHz21DPdsqNDw8Mja0XqveVrD9yQjq1meByOIk5Fiue++5PUiogidn4u6g937Dc6UnXiZNWJ0aHhqiOT7dbUfPnh1e6JKCIaPZWa3XO0+VhEre+h9mFrzYiFsvllg0+W3RuZac22rk9ONK62Zufb8+3pqaup09qyP40o4kKKWIyI5f77d9cXRdQixbePraTrEXGoex6+UE0M3rodxR72cRvKdjb6IhaLAzBm+1h/FPFqpPjpOyfiRr7OVNeaz0e8Wub3I94q86WIVH4xzke8t8n3iIOpFkX8ZTn+F1fSeHU96F5XLn+18eWpm9M9ZbvXlV/y/nDfleIR3R+ObMiHY59fm+pRRKu64q+kB//NDgAAAAAAAAAAAAAAAAC77UgU8alI8cp//Ek1rziqeenHLg7+4cCv9s4Zf/pD9lOWfT4iFortzck9nCcGXk1XU3rEc4kfZ/Uo4k/z/L9vPurGAAAAAAAAAAAAAAAAAAAAPNaK+HGkePHdE2kxetcUb0/dalxrXZ/srArbXfu3u2b66urqaiN1splzLOdCzsWcSzmXc0aR6+ds5hzLuZBzMedSzuWccSjXz9nMOZZzIedizqWcyzmjluvnbOYcy7mQczEvur+U3y/njH2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEdJEUX8PFJ86+srKVJENCPGopNL/Y+6dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8b1I0fij5r1ttYhI1b8dJ8pfzkfzcJkfj+ZgmS9F81LOVpW15jcfQfvZmb5UxI8iRX/97XsDnse/r/Pu3tcg3vrG2rtP1zp5qPvhwPv9Txw/dnFw+Dee3up12qwBJy+3p+7cbYwODQ+P9Gyu5aN/vGfbQD5usTtdJyLm3njz9dbk5MTsg78ovwI7qH6AXqTa49LTg/3iN3drh1HbD915NC8e9ZWJh6G8/78XKX733f/s3vA79/96/Ern3b07fPzsz9bu/y9u3NE27/+1jfXy/b+8p292/3+yZ9uL+XcjfbWI+vztmb7jEfW5N9481b7dujVxa2Lq/OnTXxoc/NK5032HI+o325MTPa925XQBAAAAAAAAAAAAAAAAPDypiN+PFK0fraRGRNyt5msNXBx89tQzh+JQNd9q3bzt10auXWq8PH17ZnZibm5ivDE61b4xPT6x3cPVq+leo0PDe9KZD3Vkj9t/pP7y9Mwbs+1bfzy/6edH65euz83Ptm5s/nEciSKi2bvlZNXg0aHhqtGT7dZUVfXqppPpf3l9qYj/ihQ3zjfSZ/O2PP9/4wz/dfP/FzbuaI/m/3+sZ1t5zJSK+Fmk+J2/ejo+W7XzaNx3znK5v4sUJy98JpeLw2W5bhs6zxXozAwsy/5fpPinn68v250P+eRa2TPbPrEHRDn+xyLF9/7iO/Fbedv65z9sPv5HN+5oj8b/qZ5tR9c9r2DHXSeP/6lI8dKTb8fn8rYPev5H99kbJ3Lhe8/n2KPx/0TPtoF83N/ena4DAAAAAAAAAAAcaH2piL+PFD8YrqUX8rbt/P2/8Y072qO///XJnm3ju7Ne0Ye+2PFJBQAAAIB9oi8V8eNIcWv+7XtzqNfP/+6Z//l7a/M/h9KGT6s/5/u16rkBu/nnf70G8nHHdt5tAAAAAAAAAAAAAAAAAAAA2FdSKuKFvJ76WDWff3zL9dSXIsUr//NcLpeOl+W668APVL/Wr0xPnbo0OTl9ozXfuj450RiZad2YKOs+FSlW/vYzuW5Rra/eXW++s8b72lrss5Fi+B+6ZTtrsXfXJn9qreyZsuzHIsV//+P6sp/L5T6xVvZsWfZvIsXX/uX+sqXja2XPlWW/Eyl++LVGt+zRsmz3+aifXCv7/I3pYo9GBgAAAAAAAAAAAAAAAAAAgMdJXyrizyPF/95evDeXP6//39fztvLWN3rW+9/gbrXO/0C1/v9Wrx9k/f/quQILWx0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+mlIU8WakmLmykpb6y/cd9cvtqTt3R4eGN692JFU1D1Xly5/6mbPnzn/xhcEL3fzg+rvtU/HayLVLjZenb8/MTszNTYw3RqfaN6bHJ7a9h53W3+hkdQIat1+/M37z5lzj7PPn1n18d+D9/ieOD1wcfPbUM92yo0PDwyM9ZWp9D3z0+6Qtth+OIv46Ujz33Z+kH/RHFLHzc/Eh3529dqTqxMmqE6NDw1VHJtutqfnyw6vdE1FENHoqNbvn6CGMxY40IxbK5pcNPll2b2SmNdu6PjnRuNqanW/Pt6enrqZOa8v+NKKICyliMSKW++/fXV8U8Xqk+PaxlfSv/RGHuufhC1dGvnL67NbtKPawj9tQtrPRF7FYHIAx28f6o4h/jhQ/fedE/Ft/RC06P/H5iFfL/H7EW9EZ71R+Mc5HvLfJ94iDqRZF/H85/hdX0jv95fWge125/NXGl6duTveU7V5XDvz94WHa59emehTxw+qKv5L+3X/XAAAAAAAAAAAAAAAAAPtIEb8eKV5890Sq5gffm1PcnrrVuNa6PtmZ1ted+9edM726urraSJ1s5hzLuZBzMedSzuWcUeT6OZtl1ldXx/L7hZyLOZdyLueMQ7l+zmbOsZwLORdzLuVczhm1XD9nM+dYzoWcizmXci7njH0ydw8AAAAAAAAAAAAAAAAAAPhoKap/Unzr6ytptb+zvvRYdHLJeqAfeb8IAAD//1qT9HY=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 3m57.542594818s ago: executing program 45 (id=1009): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES64, @ANYRES64], 0xf, 0xc38, &(0x7f0000001080)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThq3m6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNiOSEml9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSoWwEAPExXRr5y+qz7PwA8Vq75/38AAAAAAAAAAAAAANjvUhTxZKSYubKSxqr3HfXL7b47d0eHhjevdiRVNQ9V5cuf+pmz585/8YXBC9283J76gPq77dPx2si1S42Xp2/PzE7MzU2MN0an2jemxye2vYed1t/oZHUCGrdfvzN+8+Zc4+zz59Z9fHfg/f4njg9cHHz21DPdsqNDw8Mja0XqveVrD9yQjq1meByOIk5Fiue++5PUiogidn4u6g937Dc6UnXiZNWJ0aHhqiOT7dbUfPnh1e6JKCIaPZWa3XO0+VhEre+h9mFrzYiFsvllg0+W3RuZac22rk9ONK62Zufb8+3pqaup09qyP40o4kKKWIyI5f77d9cXRdQixbePraTrEXGoex6+UE0M3rodxR72cRvKdjb6IhaLAzBm+1h/FPFqpPjpOyfiRr7OVNeaz0e8Wub3I94q86WIVH4xzke8t8n3iIOpFkX8ZTn+F1fSeHU96F5XLn+18eWpm9M9ZbvXlV/y/nDfleIR3R+ObMiHY59fm+pRRKu64q+kB//NDgAAAAAAAAAAAAAAAAC77UgU8alI8cp//Ek1rziqeenHLg7+4cCv9s4Zf/pD9lOWfT4iFortzck9nCcGXk1XU3rEc4kfZ/Uo4k/z/L9vPurGAAAAAAAAAAAAAAAAAAAAPNaK+HGkePHdE2kxetcUb0/dalxrXZ/srArbXfu3u2b66urqaiN1splzLOdCzsWcSzmXc0aR6+ds5hzLuZBzMedSzuWccSjXz9nMOZZzIedizqWcyzmjluvnbOYcy7mQczEvur+U3y/njH2ydi8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEdJEUX8PFJ86+srKVJENCPGopNL/Y+6dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8b1I0fij5r1ttYhI1b8dJ8pfzkfzcJkfj+ZgmS9F81LOVpW15jcfQfvZmb5UxI8iRX/97XsDnse/r/Pu3tcg3vrG2rtP1zp5qPvhwPv9Txw/dnFw+Dee3up12qwBJy+3p+7cbYwODQ+P9Gyu5aN/vGfbQD5usTtdJyLm3njz9dbk5MTsg78ovwI7qH6AXqTa49LTg/3iN3drh1HbD915NC8e9ZWJh6G8/78XKX733f/s3vA79/96/Ern3b07fPzsz9bu/y9u3NE27/+1jfXy/b+8p292/3+yZ9uL+XcjfbWI+vztmb7jEfW5N9481b7dujVxa2Lq/OnTXxoc/NK5032HI+o325MTPa925XQBAAAAAAAAAAAAAAAAPDypiN+PFK0fraRGRNyt5msNXBx89tQzh+JQNd9q3bzt10auXWq8PH17ZnZibm5ivDE61b4xPT6x3cPVq+leo0PDe9KZD3Vkj9t/pP7y9Mwbs+1bfzy/6edH65euz83Ptm5s/nEciSKi2bvlZNXg0aHhqtGT7dZUVfXqppPpf3l9qYj/ihQ3zjfSZ/O2PP9/4wz/dfP/FzbuaI/m/3+sZ1t5zJSK+Fmk+J2/ejo+W7XzaNx3znK5v4sUJy98JpeLw2W5bhs6zxXozAwsy/5fpPinn68v250P+eRa2TPbPrEHRDn+xyLF9/7iO/Fbedv65z9sPv5HN+5oj8b/qZ5tR9c9r2DHXSeP/6lI8dKTb8fn8rYPev5H99kbJ3Lhe8/n2KPx/0TPtoF83N/ena4DAAAAAAAAAAAcaH2piL+PFD8YrqUX8rbt/P2/8Y072qO///XJnm3ju7Ne0Ye+2PFJBQAAAIB9oi8V8eNIcWv+7XtzqNfP/+6Z//l7a/M/h9KGT6s/5/u16rkBu/nnf70G8nHHdt5tAAAAAAAAAAAAAAAAAAAA2FdSKuKFvJ76WDWff3zL9dSXIsUr//NcLpeOl+W668APVL/Wr0xPnbo0OTl9ozXfuj450RiZad2YKOs+FSlW/vYzuW5Rra/eXW++s8b72lrss5Fi+B+6ZTtrsXfXJn9qreyZsuzHIsV//+P6sp/L5T6xVvZsWfZvIsXX/uX+sqXja2XPlWW/Eyl++LVGt+zRsmz3+aifXCv7/I3pYo9GBgAAAAAAAAAAAAAAAAAAgMdJXyrizyPF/95evDeXP6//39fztvLWN3rW+9/gbrXO/0C1/v9Wrx9k/f/quQILWx0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+mlIU8WakmLmykpb6y/cd9cvtqTt3R4eGN692JFU1D1Xly5/6mbPnzn/xhcEL3fzg+rvtU/HayLVLjZenb8/MTszNTYw3RqfaN6bHJ7a9h53W3+hkdQIat1+/M37z5lzj7PPn1n18d+D9/ieOD1wcfPbUM92yo0PDwyM9ZWp9D3z0+6Qtth+OIv46Ujz33Z+kH/RHFLHzc/Eh3529dqTqxMmqE6NDw1VHJtutqfnyw6vdE1FENHoqNbvn6CGMxY40IxbK5pcNPll2b2SmNdu6PjnRuNqanW/Pt6enrqZOa8v+NKKICyliMSKW++/fXV8U8Xqk+PaxlfSv/RGHuufhC1dGvnL67NbtKPawj9tQtrPRF7FYHIAx28f6o4h/jhQ/fedE/Ft/RC06P/H5iFfL/H7EW9EZ71R+Mc5HvLfJ94iDqRZF/H85/hdX0jv95fWge125/NXGl6duTveU7V5XDvz94WHa59emehTxw+qKv5L+3X/XAAAAAAAAAAAAAAAAAPtIEb8eKV5890Sq5gffm1PcnrrVuNa6PtmZ1ted+9edM726urraSJ1s5hzLuZBzMedSzuWcUeT6OZtl1ldXx/L7hZyLOZdyLueMQ7l+zmbOsZwLORdzLuVczhm1XD9nM+dYzoWcizmXci7njH0ydw8AAAAAAAAAAAAAAAAAAPhoKap/Unzr6ytptb+zvvRYdHLJeqAfeb8IAAD//1qT9HY=") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlink(&(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') 3m37.150909077s ago: executing program 3 (id=1075): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmctl$IPC_RMID(0x0, 0x0) unshare(0x22020600) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r2, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) 3m36.223558904s ago: executing program 3 (id=1078): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0xee00]) setresgid(0x0, 0x0, r1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000ac0)=""/4096) 3m36.101231525s ago: executing program 3 (id=1079): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x10}, 0xfffffdef}], 0x4000095, 0x401eb80) 3m35.018307553s ago: executing program 3 (id=1082): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {@nodelalloc}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r1, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r3, 0x0, &(0x7f0000001040)) 3m33.264119157s ago: executing program 3 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmctl$IPC_RMID(0x0, 0x0) unshare(0x22020600) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r3, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) 3m30.404058479s ago: executing program 3 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 3m30.265810431s ago: executing program 46 (id=1099): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) 2m26.334393149s ago: executing program 1 (id=1408): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0xee00]) setresgid(0x0, 0x0, r1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000ac0)=""/4096) 2m25.987343562s ago: executing program 1 (id=1411): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002d80)="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", 0xb89}], 0x1}, 0x20000044) 2m25.847504623s ago: executing program 1 (id=1412): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001002cbd70000000000008"], 0x38}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 2m25.682918494s ago: executing program 1 (id=1413): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {@nodelalloc}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r1, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r3, 0x0, &(0x7f0000001040)) 2m22.473440149s ago: executing program 1 (id=1425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x4) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0x8}) 2m20.804126932s ago: executing program 1 (id=1433): socket$packet(0x11, 0x2, 0x300) unshare(0x6020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae07, 0x0) 2m20.708880633s ago: executing program 47 (id=1433): socket$packet(0x11, 0x2, 0x300) unshare(0x6020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae07, 0x0) 2m7.822456204s ago: executing program 6 (id=1500): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000037c0)='/', 0x1}], 0x1}}], 0x1, 0x4044891) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2m7.606605325s ago: executing program 6 (id=1501): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6(0xa, 0x803, 0x6) ftruncate(0xffffffffffffffff, 0xee72) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) syz_open_procfs(0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="0c000000010001", 0x7) 2m7.315958688s ago: executing program 6 (id=1503): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x175) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = fanotify_init(0x12, 0x141402) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10249, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m6.396154745s ago: executing program 6 (id=1506): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f00000005c0)={[{@delalloc}, {@usrjquota}, {@nobarrier}, {@dioread_lock}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@delalloc}, {@nodelalloc}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r1, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) getpeername(0xffffffffffffffff, 0x0, &(0x7f0000001040)) 2m5.432124222s ago: executing program 6 (id=1516): syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) getgroups(0x2, &(0x7f00000001c0)=[0x0, 0xee00]) setresgid(0x0, 0x0, r1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) statfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000ac0)=""/4096) 2m4.660106448s ago: executing program 6 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r2, r3}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) 2m4.462937639s ago: executing program 48 (id=1523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r2, r3}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r3}, 0xc) 13.269680467s ago: executing program 9 (id=2064): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) ftruncate(r4, 0x40001) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r3, r4, 0x0, 0xffe4) 9.587512615s ago: executing program 9 (id=2075): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$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") sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x0, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff010000000000000000000000000001"], 0x90) 8.380516875s ago: executing program 0 (id=2081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 8.379912865s ago: executing program 7 (id=2082): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x804810, &(0x7f00000002c0)={[{}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@sysvgroups}]}, 0x28, 0x765, &(0x7f0000000d40)="$eJzs3M9rHHUUAPA302zTH9GNIPjjIEILLZRukubSnhov3gqFgtcakkkImWRDdlO7sWDrWajNRUEQ9ezBg1eh1D/AmxQUvAuiNR5UkJWZpClJs0naJF1IPx+YzPvOr/dedvlmFzITwHPrzeJHEtEXEZcjorq6PY2Iw2V0JOLmynHLD26MFUsS7faV35PitFhuV9eulayuj0d5SrwaEfcqEWc+fDxvo7U4PZrn2fzqeKA5MzfQaC2enZoZncwms9mh4QuD54eHzw8Ob9vDKzvs9eQ7F47e+eHtpaUfv23efqPnbBIjZd+x2tsOL/NEVn4nlRjZsH12P5J1UdLtAgAA2JHic/6hiOgpP6VW41AZAQAAAAdJu7cNAAAAHHhJdLsCAAAAYH89/D+Ah/f27td9sJ389lZE9G+Wv6e8hzjiSFQi4thysu7OhGTlNNiVm7ci4u7IxvffV8U77OYurz24fnhr/fDwLq/OXrhbzD8jm80/6dr8E5vMPz0Pn52wS53nv0f5D3WY/y7vMMd3n79W6Zj/VsTrPZvlT9byJx3yv1sE32yf//bSR3c67Wt/GXFq078/ybpcWzwfYmRiKt/y8QP3/j19f6v+j5VPvdgkf7J1/3Pbt156f/nP6U5zSZH/9ImtX//N8hfviY9X60gj4s7quhgvbchxYuan77fqfzyi/TSv/xc77P+Xr3uv7/BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKKUR0RdJWluL07RWizgeES/HsTSvN5pnJuoLs+PFvoj+qKQTU3k2GBHVlXFSjIfK+NH43IbxcES89PPRlaRTeVYbq+fj3W4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANccjoi+StBYRaUT8VU3TWi2iZwfn9j6D+gAAAIA90t/tAgAAAIB95/s/AAAAHHxP+/0/2eM6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAPt8qVLxdJefnBjrBiPX2stTNevnR3PGtO1mYWx2lh9fq42Wa9P5lltrD6z3fXyen1u6EIsXB9oZo3mQKO1eHWmvjDbvDo1MzqZXc0qz6QrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnlRfuSRpLSLSMk7TWi3ihYjoj0oyMZVngxHxYkTcr1Z6i/FQt4sGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzzVai9OjeZ7NCwSCZxZ8EBGP7/qv3fXC1oJuz0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRDo7U4PZrn2Xyj25UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQXemvSUQUy6nqyb6New8nf1fLdUS899mVT66PNpvzQ8X2P9a2Nz8ttv/TnD/XjfoBAADguXDxSQ4uv7+fW10P7V9RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwdNoLU6P5nk2v7vgYrQW20mHY7rdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8HT+DwAA//+XV8gh") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x61) lseek(r0, 0x3, 0x2) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775) getdents(r0, 0x0, 0x0) 8.234807926s ago: executing program 9 (id=2084): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfd, 0x386, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@polexpire={0xc0, 0x1b, 0x1, 0x70bd2d, 0x25dfdbfc, {{{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x4e22, 0x0, 0x4e21, 0x7ff, 0xa, 0x80, 0xe0, 0x2f}, {0x7, 0x7, 0xa, 0x96d, 0x8, 0x8, 0x3ff, 0x9}, {0x80000000, 0x9, 0xffffffff, 0x3ff8000000000000}, 0x5, 0x6e6bb2, 0x2, 0x1, 0x2, 0x1}, 0xf2}}, 0xc0}}, 0x20008000) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) mkdirat(r0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x541a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) 8.101339427s ago: executing program 0 (id=2086): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x0) mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) ftruncate(r3, 0x40001) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r2, r3, 0x0, 0xffe4) 8.029987318s ago: executing program 7 (id=2089): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x211000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r0, @ANYRES8=0x0, @ANYBLOB="75b8fdeeab1654b4fb498e37c662c00e75c506cf39096270875d0a02537f71fccf9c1cafa241d2b464c41eafd3a8e7fcd5e6b56f795512c98d115410085aaf9e962f396d7daff254935d6755d3d089f164a6ae605f14be2c090000007e1700000000ce183beb3290da", @ANYRES64=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRES16=r1, @ANYRES16, @ANYRESHEX, @ANYRES16], 0x5, 0x151a, &(0x7f0000002c80)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000003) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90a495, &(0x7f00000019c0)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {@norecovery}, {@data_ordered}, {@dax_always}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/kvM\x00w\xb1\xe5\xafC\xe9\x84\x01\x97\x98\x95BR\xedh*\xff\xb9k\xd7L\xd7\'K\x18\x7f:X\x1a\xb1\x7f\\\v\xc1\x02\x86~\x87\xf0F\x96o9\xfe\x91\xcf\xaa/\xe5\x96\xbd2\xb4\x17\x05\xec\x03\xe6j]\xb6sV\x9a\x95k\xe5%O\xe0\x13`\xbd\x8b\x91z\x10\x0fZ%\xf8!\x12\x1e\xba\xa5\x14b\xd7\x18\xd0\xa7\xfeq\xcf\xf1W\x81\xea\xda\xc4@\xbd\x84\x81\xf8\x84\x0f\x99^\x8fb\xe0\xd3}\xcf.I\xfdn\x1a\x1f=\x05\xb1\x81\xc7n\xf3\xc3\xc6\xc9$\x18f.\xc4\x8d\x00\xb1\xa5\xae\x87\x16*\xda\xa7\x1b\b\x94\x88\xda\xb3\x9a\x8e@b\xc6\xd7\x0f\n=\x8bO\xb0\xff+s\xcd~4<^:2\x95\x82\xfdLq\xac\vyi\xb0\xc5\x88\xaf\x97[~\xb9cP\xd1X\x99\f(&\x9bQ\xe6\xfc|\f\x14\v\x18@\xf7\xea\xd7\x1f\xb6\xf7\xfe\xe5\x9c'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x6, 0x510, &(0x7f0000002740)="$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") ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.084039865s ago: executing program 2 (id=2091): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.22595947s ago: executing program 2 (id=2093): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00'}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7f) syz_open_procfs(0x0, 0x0) 4.872991902s ago: executing program 9 (id=2094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="014241bdc716fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff000008009e00001400000400ec009c0084800a00010001010101010100000a00010001010101010100000a000500505050505050000008000100cc2a431b0800020003000000340006800800050002000000080002000000100008000200020000000800030008000000080003009a0f000008000100040000000c000680080002000500000024000680080003000a0000000800000002000000080000000600000008000000ffffffff0800"], 0xe0}, 0x1, 0x0, 0x0, 0x401c051}, 0x9590f6cc3ea35512) 4.740014663s ago: executing program 7 (id=2095): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001480)={0x10, 0x3f2, 0x200, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x24000014}, 0x8084) 2.818043348s ago: executing program 0 (id=2096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.816237458s ago: executing program 7 (id=2097): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x5) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @remote, 0x3, 0x9, 0x7f, 0x100, 0x3ff, 0x200}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000540)='rxrpc\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x18, 0x0) preadv(r5, &(0x7f0000000340)=[{&(0x7f0000000380)=""/135, 0x87}], 0x1, 0x154, 0xf5ffffff) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.731299499s ago: executing program 2 (id=2098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000007c0)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@rand_addr=0x64010102, 0x4e23, 0x0, 0x4e26, 0x0, 0xa, 0x0, 0x0, 0x5e}, {@in6=@loopback, 0x4d0, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x1, 0x0, 0x0, 0x1, 0x6, 0x0, 0xffffffffffffffff}, {0x0, 0x8000000, 0x0, 0x100000}, {}, 0xfffffffe, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e23, @in=@multicast1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) 2.730383789s ago: executing program 9 (id=2100): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x42, &(0x7f0000000080)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff000085410500"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 2.491961271s ago: executing program 2 (id=2101): creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80003, &(0x7f00000003c0)={[{@prjquota}, {@jqfmt_vfsold}, {@data_err_abort}, {@data_err_ignore}, {@i_version}, {@dax}, {@debug}, {@nodioread_nolock}], [{@uid_gt}, {@context={'context', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}, 0xfe, 0x51e, &(0x7f00000008c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new u'], 0x2a, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 2.491598341s ago: executing program 4 (id=2102): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) syz_open_pts(r2, 0x80100) 2.464123321s ago: executing program 0 (id=2103): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x4c2, 0x0, 0x80, 0x3, "0062ba7d82000000000000000000f7ffffff00"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f00000000c0)={[{@quota}]}, 0x1, 0x439, &(0x7f0000000580)="$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") openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7800, 0x1000, 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.372133292s ago: executing program 2 (id=2104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) 2.337586652s ago: executing program 4 (id=2105): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150) write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2.098535584s ago: executing program 2 (id=2106): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x0) mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) ftruncate(r3, 0x40001) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendfile(r2, r3, 0x0, 0xffe4) 1.955081765s ago: executing program 4 (id=2107): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x70]}}]}) chdir(&(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.813821596s ago: executing program 9 (id=2108): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00'}, 0x10) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x7f) syz_open_procfs(0x0, 0x0) 1.723833997s ago: executing program 7 (id=2109): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$eJzs3U9sHNd9B/DfG5HiUmkrJnYUu42LTVukMmO5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLppYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUsZvatuKRIixFFibI+H5v67s6+N/PevPWMLOjNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4vdfu3T6THrUrQAAHqYrY185fdb9HwCeKFf9/z8AAAAAAAAAAAAAABx2KYp4KlLMX1lPE9X7ttrlVu+t2+PDIztX609VzSNV+fKndubsufNffGnoQicvt2Y/ov6D9my8MXb1Uv3VuZvzC9OLi9NT9fHZ1uTc1PSe97Df+tsNViegfvPNW1PXry/Wz754bsvHtwc+7PvEiYGLQ8+feq5Tdnx4ZGRss0jtvo+9g91meByNIk5Fihe++5PUjIgi9n8uag937LfrrzoxWHVifHik6shMqzm7VH442jkRRUS9q1Kjc452Hovo6X2ofdhdI2K5bH7Z4MGye2PzzYXmtZnp+mhzYam11JqbHU3t1pb9qUcRF1LESkSs9d29u94ooidSfPv4eroWEUc65+EL1cTg3dtRHGAf96BsZ703YqV4DMbsEOuLIl6PFD9972RMlucs/8TnI14v8/sR75T5SkQqvxjnIz7Y4XvE46kniviLcvwvrqep6nrQua5c/mr9y7PX57rKdq4rv+D94a4rxSO6P/Rvy4fjkF+balFEs7rir6f7/80OAAAAAAAAAAAAAAAAAA9afxTxbKR47d//uJpXHNW89OMXh/5g4Je754w/c4/9lGVfjIjlYm9zco/miYGjaTSlRzyX+ElWiyL+JM//++ajbgwAAAAAAAAAAAAAAAAAAMATrYgfR4qX3z+ZVqJ7TfHW7I361ea1mfaqsJ21fztrpm9sbGzUUzsbOSdyLudcybmacy1nFLl+zkbOiZzLOVdyruZcyxlHcv2cjZwTOZdzruRczbmWM3py/ZyNnBM5l3Ou5FzNuZYzDsnavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHydFFPHzSPGtr6+nSBHRiJiIdq72PerWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAClvlTE9yJF/Q8bd7b1RESq/m07Wf5yPhpHy/xUNIbKfCUal3I2q+xpfPMRtJ/96U1F/ChS9NXevTPgefx72+/ufA3inW9svvvVnnYe6Xw48GHfJ04cvzg08uvP7PY67dSAwcut2Vu36+PDIyNjXZt78tE/1bVtIB+3eDBdJyIW33r7zebMzPTC/b8ovwL7qO6FF4f1RfQcimY8mr7zBCjv/x9Eit95/z86N/zO/f+X2u/u3OHjZ3+6ef9/efuO9nj/79le7x73/6e6tr2cfzfS2xNRW7o533siorb41tunWjebN6ZvTM+eP336S0NDXzp3uvdoRO16a2a669UDOV0AAAAAAAAAAAAAAAAAD08q4vciRfNH66keEber+VoDF4eeP/XckThSzbfaMm/7jbGrl+qvzt2cX5heXJyeqo/Ptibnpqb3erhaNd1rfHjkQDpzT/0H3P7+2qtz828ttG780dKOnx+rXbq2uLTQnNz54+iPIqLRvWWwavD48EjV6JlWc7aqOrrjZPpfXG8q4j8jxeT5evpc3pbn/22f4b9l/v/y9h0d0Pz/T3ZtK4+ZUhE/ixS//ZfPxOeqdh6Lu85ZLve3kWLwwmdzuThaluu0of1cgfbMwLLs/0aKf/z51rKd+ZBPbZY9s+cT+5gox/94pPjen38nfiNv2/r8h53H/9j2HR3Q+D/dte3YlucV7Lvr5PE/FSleeerd+M287aOe/9F59sbJXPjO8zkOaPw/3bVtIB/3tx5M1wEAAAAAAAAAAB5rvamIv4sUPxjpSS/lbXv5+39T23d0QH//6zNd26YezHpF93yx75MKAAAAAIdEbyrix5HixtK7d+ZQb53/3TX/83c3538Op22fVn/O9yvVcwMe5J//dRvIx53Yf7cBAAAAAAAAAAAAAAAAAADgUEmpiJfyeuoT1Xz+qV3XU1+NFK/99wu5XDpRluusAz9Q/Vq7Mjd76tLMzNxkc6l5bWa6PjbfnJwu6z4dKdb/5rO5blGtr95Zb769xvvmWuwLkWLk7ztl22uxd9Ymf3qz7Jmy7CcjxX/9w9aynXWsP71Z9mxZ9q8jxdf+eeeyJzbLnivLfidS/PBr9U7ZY2XZzvNRP7NZ9sXJueIARgUAAAAAAAAAAAAAAAAAAIAnTW8q4s8ixf/cXLkzlz+v/9/b9bbyzje61vvf5na1zv9Atf7/bq/vZ/3/6rkCy7sdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp5SFPF2pJi/sp5W+8r3bbXLrdlbt8eHR3au1p+qmkeq8uVP7czZc+e/+NLQhU5+dP0H7dl4Y+zqpfqrczfnF6YXF6en6uOzrcm5qek972G/9bcbrE5A/eabt6auX1+sn33x3JaPbw982PeJEwMXh54/9Vyn7PjwyMhYV5me3vs++l3SLtuPRhF/FSle+O5P0g/6IorY/7m4x3fnoPVXnRisOjE+PFJ1ZKbVnF0qPxztnIgiot5VqdE5Rw9hLPalEbFcNr9s8GDZvbH55kLz2sx0fbS5sNRaas3NjqZ2a8v+1KOICyliJSLW+u7eXW8U8Wak+Pbx9fQvfRFHOufhC1fGvnL67O7tKA6wj3tQtrPeG7FSPAZjdoj1RRH/FCl++t7J+Ne+iJ5o/8TnI14v8/sR70R7vFP5xTgf8cEO3yMeTz1RxP+V439xPb3XV14POteVy1+tf3n2+lxX2c515bG/PzxMh/zaVIsiflhd8dfTv/nvGgAAAAAAAAAAAAAAAOAQKeLXIsXL759M1fzgO3OKW7M36leb12ba0/o6c/86c6Y3NjY26qmdjZwTOZdzruRczbmWM4pcP2ejzNrGxkR+v5xzJedqzrWccSTXz9nIOZFzOedKztWcazmjJ9fP2cg5kXM550rO1ZxrOeOQzN0DAAAAAAAAAAAAAAAAAAA+XorqnxTf+vp62uhrry89Ee1ctR7ox97/BwAA///bhfta") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107842, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000001f00)={{0x108, 0x0, 0x1, 0xb5, 0x39b, 0x2, 0x25b, 0x20}, "", ['\x00']}, 0x120) 1.719878507s ago: executing program 4 (id=2110): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002340), 0x183000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 1.646549517s ago: executing program 0 (id=2111): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@deltaction={0x14}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 1.423714009s ago: executing program 4 (id=2112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="014241bdc716fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff000008009e00001400000400ec009c0084800a00010001010101010100000a00010001010101010100000a000500505050505050000008000100cc2a431b0800020003000000340006800800050002000000080002000000100008000200020000000800030008000000080003009a0f000008000100040000000c000680080002000500000024000680080003000a0000000800000002000000080000000600000008000000ffffffff0800"], 0xe0}, 0x1, 0x0, 0x0, 0x401c051}, 0x9590f6cc3ea35512) 1.25582316s ago: executing program 7 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.210442781s ago: executing program 4 (id=2114): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x8000f28, 0x0) mkdir(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000680)='#}\x04\xe4\xfc\x1e\xff~\xb1\xe0\xa5\x9d\xc8\xca#\'\x12xY!\xa4\xde\x1b+\xb2\x1aE\x10x\xce@i}\x03\x00a\x0e\xe6\x995b\r\x00\x00\x00\x00\x00\x00\x8e\x96\xb7=\xb9OmILO\x8d\x00\x00\x00\x00\x00\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) ftruncate(r3, 0x40001) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 0s ago: executing program 0 (id=2115): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = dup(r1) syz_open_pts(r2, 0x80100) kernel console output (not intermixed with test programs): im3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.244477][ T8478] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.272222][ T8478] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.359926][ T8528] device hsr_slave_0 entered promiscuous mode [ 341.378330][ T8528] device hsr_slave_1 entered promiscuous mode [ 341.388810][ T8528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.396937][ T8528] Cannot create hsr debugfs directory [ 341.441426][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 341.470671][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 341.501023][ T8504] device veth0_macvtap entered promiscuous mode [ 341.618318][ T8504] device veth1_macvtap entered promiscuous mode [ 341.671293][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.719424][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.823871][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 341.858817][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 341.867426][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 342.007845][ T4254] Bluetooth: hci4: command 0x040f tx timeout [ 342.029287][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.035805][ T4215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.040502][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.073132][ T4215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.210234][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.361349][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.554205][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.688991][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.729014][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.768953][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.820225][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.830768][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.859232][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.887773][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 342.910419][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 342.928182][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 343.055311][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.078945][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.099154][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.110728][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.120630][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.131264][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.141196][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.151981][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.163668][ T8504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.183493][ T8504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.195322][ T8504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.220965][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.233942][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 343.250624][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.267661][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.313737][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.334898][ T8504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.349432][ T8504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.376586][ T8504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.406216][ T8504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.443976][ T8740] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 343.582939][ T4615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.609662][ T4615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.653055][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 343.676707][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.721149][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.738999][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 343.775044][ T4615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.798059][ T4615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.901973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 344.025645][ T8528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.091415][ T8528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.100647][ T4258] Bluetooth: hci4: command 0x0419 tx timeout [ 344.340970][ T8528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.689619][ T8528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.903662][ T8758] loop1: detected capacity change from 0 to 2048 [ 345.153119][ T8758] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 345.821066][ T8758] UDF-fs: Scanning with blocksize 512 failed [ 345.902990][ T8758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.183223][ T8788] fuse: Bad value for 'fd' [ 346.214407][ T4208] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.317368][ T4208] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.554560][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.797918][ T8528] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.632530][ T8528] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.716999][ T8528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.879138][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.897726][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.917508][ T8824] loop3: detected capacity change from 0 to 512 [ 348.118587][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 348.142959][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 348.151919][ T4215] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.159078][ T4215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.118014][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.201252][ T8824] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 349.219687][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.280662][ T4215] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.287825][ T4215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.309299][ T8824] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 349.353748][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.385469][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.436687][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.755468][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.775940][ T8824] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1041: corrupted in-inode xattr [ 349.888555][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.923508][ T8824] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1041: couldn't read orphan inode 15 (err -117) [ 349.975509][ T8824] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 350.013535][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 350.287618][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.310448][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.324225][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.377755][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.395233][ T4208] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.416704][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 350.459057][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.497835][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.715277][ T4208] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.588912][ T4214] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 351.599615][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.611051][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.708447][ T8876] loop1: detected capacity change from 0 to 512 [ 351.784540][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.829081][ T4214] usb 8-1: Using ep0 maxpacket: 16 [ 351.836947][ T8876] EXT4-fs (loop1): 1 orphan inode deleted [ 351.843702][ T8876] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 351.875636][ T8876] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.949237][ T4214] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.102688][ T4214] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 352.472138][ T4214] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 352.739513][ T4214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.876375][ T4214] usb 8-1: config 0 descriptor?? [ 352.917860][ T4208] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.936053][ T8900] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 353.066743][ T4208] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.147434][ T4209] usb 8-1: USB disconnect, device number 6 [ 353.223878][ T4208] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.441548][ T4208] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.583675][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 354.354506][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.596703][ T8938] loop3: detected capacity change from 0 to 512 [ 354.616640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 354.636186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.672121][ T8528] device veth0_vlan entered promiscuous mode [ 354.693413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.706021][ T8938] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 354.718244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.729597][ T8938] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 354.774697][ T8528] device veth1_vlan entered promiscuous mode [ 354.799682][ T8938] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 354.848675][ T8938] System zones: 0-2, 18-18, 34-34 [ 355.101391][ T8951] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 355.394164][ T8938] EXT4-fs (loop3): orphan cleanup on readonly fs [ 355.624928][ T8938] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 355.647837][ T8938] EXT4-fs (loop3): 1 truncate cleaned up [ 355.670203][ T8938] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 355.709088][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 355.717797][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.908314][ T8528] device veth0_macvtap entered promiscuous mode [ 356.154621][ T8528] device veth1_macvtap entered promiscuous mode [ 356.811784][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.841839][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.844661][ T8982] fuse: Bad value for 'fd' [ 356.935528][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.956792][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.985805][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.008675][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.018816][ T1111] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 357.050079][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.097067][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.126534][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.152984][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.163242][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.188029][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.209033][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.293380][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.459651][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.595578][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.750194][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.912159][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.025735][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.038578][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 358.048309][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.067172][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.190439][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.309337][ T1111] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 358.340356][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.568520][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.583733][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.600128][ T1111] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 358.611798][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.817773][ T1111] usb 1-1: config 0 descriptor?? [ 358.824955][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.868272][ T9004] loop3: detected capacity change from 0 to 1024 [ 358.886406][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.906810][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 358.917239][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.939307][ T9004] EXT4-fs (loop3): Ignoring removed nobh option [ 358.941070][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.955540][ T9004] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 358.980731][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.002111][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 359.049894][ T9004] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,usrjquota=,nobarrier,dioread_lock,norecovery,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,delalloc,nodelalloc,dioread_nolock,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 359.112703][ T8528] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.155309][ T8528] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.173270][ T7] usb 1-1: USB disconnect, device number 20 [ 359.185168][ T9004] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.1082: Allocating blocks 481-513 which overlap fs metadata [ 359.203157][ T8528] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.212253][ T8528] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.422741][ T9022] loop7: detected capacity change from 0 to 256 [ 359.497026][ T9002] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 359.535674][ T9002] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #18: comm syz.3.1082: mark_inode_dirty error [ 359.553445][ T9004] EXT4-fs error (device loop3): ext4_map_blocks:738: inode #18: block 117: comm syz.3.1082: lblock 4 mapped to illegal pblock 117 (length 1) [ 359.631081][ T4395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.653806][ T4395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.705964][ T8478] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 359.734925][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 359.842003][ T4615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.860590][ T9033] fuse: Bad value for 'fd' [ 359.862178][ T4615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.885584][ T8478] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 359.923999][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.953122][ T8478] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #18: comm syz-executor: mark_inode_dirty error [ 360.021675][ T8478] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 360.119674][ T8478] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 360.199474][ T9042] loop6: detected capacity change from 0 to 256 [ 360.382308][ T9050] loop7: detected capacity change from 0 to 1024 [ 360.782466][ T9050] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 361.022461][ T9050] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.461897][ T5963] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 362.539115][ T5963] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 428 with error 28 [ 362.552203][ T5963] EXT4-fs (loop7): This should not happen!! Data will be lost [ 362.552203][ T5963] [ 362.562594][ T5963] EXT4-fs (loop7): Total free blocks count 0 [ 362.568609][ T5963] EXT4-fs (loop7): Free/Dirty block details [ 362.576503][ T5963] EXT4-fs (loop7): free_blocks=4293918720 [ 362.582393][ T5963] EXT4-fs (loop7): dirty_blocks=432 [ 362.587629][ T5963] EXT4-fs (loop7): Block reservation details [ 362.593693][ T5963] EXT4-fs (loop7): i_reserved_data_blocks=27 [ 362.615087][ T9076] befs: (nullb0): No write support. Marking filesystem read-only [ 362.623866][ T9076] befs: (nullb0): invalid magic header [ 362.795635][ T9081] fuse: Bad value for 'fd' [ 362.829002][ T1111] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 363.119042][ T1111] usb 1-1: Using ep0 maxpacket: 16 [ 363.178721][ T4208] device hsr_slave_0 left promiscuous mode [ 363.197121][ T4208] device hsr_slave_1 left promiscuous mode [ 363.220366][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.227852][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.279297][ T1111] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.321099][ T1111] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.358968][ T1111] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 363.372356][ T9103] loop1: detected capacity change from 0 to 2048 [ 363.399145][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.454256][ T9105] loop7: detected capacity change from 0 to 2048 [ 363.462160][ T1111] usb 1-1: config 0 descriptor?? [ 363.507799][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.524786][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.544460][ T4208] device bridge_slave_1 left promiscuous mode [ 363.555948][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.585190][ T4208] device bridge_slave_0 left promiscuous mode [ 363.664013][ T9103] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,dioread_lock,,errors=continue. Quota mode: writeback. [ 363.678165][ T9103] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.847537][ T4211] usb 1-1: USB disconnect, device number 21 [ 363.878723][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.910005][ T9105] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 364.259047][ T9103] EXT4-fs (loop1): shut down requested (1) [ 364.322582][ T26] audit: type=1800 audit(1741935468.190:17): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1103" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 364.382248][ T4208] device hsr_slave_0 left promiscuous mode [ 364.405293][ T4208] device hsr_slave_1 left promiscuous mode [ 364.978668][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.274500][ T9000] Bluetooth: hci1: command 0x0406 tx timeout [ 365.336267][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.363872][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.372161][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.381917][ T4208] device bridge_slave_1 left promiscuous mode [ 365.388201][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.432239][ T4208] device bridge_slave_0 left promiscuous mode [ 365.448202][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.544848][ T4210] Bluetooth: hci3: command 0x0409 tx timeout [ 365.551860][ T9132] loop7: detected capacity change from 0 to 128 [ 365.568372][ T4208] device veth1_macvtap left promiscuous mode [ 365.578807][ T4208] device veth0_macvtap left promiscuous mode [ 365.596196][ T4208] device veth1_vlan left promiscuous mode [ 365.607567][ T4208] device veth0_vlan left promiscuous mode [ 365.631316][ T9132] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 365.644006][ T4208] device veth1_macvtap left promiscuous mode [ 365.667709][ T4208] device veth0_macvtap left promiscuous mode [ 365.702296][ T4208] device veth1_vlan left promiscuous mode [ 365.708130][ T4208] device veth0_vlan left promiscuous mode [ 365.766880][ T9132] picdev_write: 4 callbacks suppressed [ 365.766897][ T9132] kvm: pic: non byte write [ 365.819334][ T9132] kvm: pic: non byte write [ 365.824255][ T9132] kvm: pic: single mode not supported [ 365.824459][ T9132] kvm: pic: level sensitive irq not supported [ 365.859741][ T9132] kvm: pic: single mode not supported [ 365.865919][ T9132] kvm: pic: level sensitive irq not supported [ 365.932003][ T9132] kvm: pic: single mode not supported [ 365.938196][ T9132] kvm: pic: level sensitive irq not supported [ 365.966469][ T9132] kvm: pic: single mode not supported [ 365.972672][ T9132] kvm: pic: level sensitive irq not supported [ 365.978371][ T9132] kvm: pic: single mode not supported [ 365.984645][ T9132] kvm: pic: level sensitive irq not supported [ 365.999179][ T9132] kvm: pic: single mode not supported [ 366.005370][ T9132] kvm: pic: level sensitive irq not supported [ 366.013683][ T9140] befs: (nullb0): No write support. Marking filesystem read-only [ 366.029469][ T9140] befs: (nullb0): invalid magic header [ 366.040511][ T9132] kvm: pic: single mode not supported [ 366.040531][ T9132] kvm: pic: level sensitive irq not supported [ 366.050487][ T9132] kvm: pic: single mode not supported [ 366.056630][ T9132] kvm: pic: level sensitive irq not supported [ 366.064192][ T9132] kvm: pic: single mode not supported [ 366.070411][ T9132] kvm: pic: level sensitive irq not supported [ 366.095676][ T9132] kvm: pic: single mode not supported [ 366.102011][ T9132] kvm: pic: level sensitive irq not supported [ 367.370073][ T9148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1117'. [ 367.609809][ T4210] Bluetooth: hci3: command 0x041b tx timeout [ 367.689521][ T9000] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 367.994279][ T9000] usb 2-1: Using ep0 maxpacket: 16 [ 368.180838][ T9000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.329392][ T9000] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.342430][ T9000] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 368.362605][ T9000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.408809][ T9000] usb 2-1: config 0 descriptor?? [ 368.449233][ T9158] fuse: Bad value for 'fd' [ 368.694576][ T9000] usb 2-1: USB disconnect, device number 19 [ 368.728127][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 368.806935][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 368.829447][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.850556][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.970930][ T4208] bond0 (unregistering): Released all slaves [ 369.217536][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 369.240727][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 369.280068][ T9176] loop1: detected capacity change from 0 to 128 [ 369.295535][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.315157][ T9176] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 369.325280][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.447370][ T4208] bond0 (unregistering): Released all slaves [ 369.458763][ T9176] kvm: pic: non byte write [ 369.467761][ T9176] kvm: pic: non byte write [ 369.689056][ T9000] Bluetooth: hci3: command 0x040f tx timeout [ 369.775708][ T9188] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1131'. [ 370.199826][ T9097] chnl_net:caif_netlink_parms(): no params data found [ 371.302108][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.334869][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.379441][ T9097] device bridge_slave_0 entered promiscuous mode [ 371.416359][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.443625][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.456369][ T9097] device bridge_slave_1 entered promiscuous mode [ 371.701271][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.735759][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.769011][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 371.942336][ T9097] team0: Port device team_slave_0 added [ 371.966286][ T9243] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1143'. [ 371.995131][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.002638][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.074497][ T9097] team0: Port device team_slave_1 added [ 372.202661][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.268933][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.448974][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.503386][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.541103][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.690443][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.534069][ T9097] device hsr_slave_0 entered promiscuous mode [ 373.620194][ T9097] device hsr_slave_1 entered promiscuous mode [ 374.609853][ T9097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.693993][ T9097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.762920][ T9097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.806953][ T9097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 375.002862][ T9319] loop6: detected capacity change from 0 to 256 [ 375.140909][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.250470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.258615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.615096][ T9097] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.152455][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 376.202848][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 376.221679][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.228926][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.392274][ T9097] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.478885][ T9097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.899512][ T9340] befs: (nullb0): No write support. Marking filesystem read-only [ 376.911240][ T9340] befs: (nullb0): invalid magic header [ 377.018696][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 377.070857][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 377.109173][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 377.200969][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.208163][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.331073][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 377.340448][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 377.350127][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 377.361831][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 377.371335][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 377.401482][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 377.482648][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 377.530884][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 377.562113][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 377.619679][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 377.652866][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 377.689985][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 377.727445][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1169'. [ 377.757822][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.767073][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.495214][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.506055][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.748728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.815527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 378.935969][ T9097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.179333][ T8896] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 379.592586][ T8896] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 379.627511][ T8896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.111938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 380.223375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 380.439574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 380.472501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 380.501586][ T8896] usb 1-1: config 0 descriptor?? [ 380.550063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 380.558071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 380.566970][ T8896] cp210x 1-1:0.0: cp210x converter detected [ 380.586618][ T9097] device veth0_vlan entered promiscuous mode [ 380.633467][ T4208] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.663945][ T9097] device veth1_vlan entered promiscuous mode [ 380.730054][ T4208] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.770880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 380.790441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 380.825757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 380.857055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 380.897078][ T9097] device veth0_macvtap entered promiscuous mode [ 380.928201][ T4208] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.979673][ T9097] device veth1_macvtap entered promiscuous mode [ 380.998981][ T8896] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 381.006856][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.029179][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.052876][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.056499][ T8896] usb 1-1: cp210x converter now attached to ttyUSB0 [ 381.091332][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.124378][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.162616][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.185840][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.210682][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.246558][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.254141][ T1111] usb 1-1: USB disconnect, device number 22 [ 381.270837][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.289560][ T1111] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 381.305264][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.336996][ T1111] cp210x 1-1:0.0: device disconnected [ 381.350320][ T4208] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.412200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 381.436587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 381.475192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 381.496936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.540301][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.576620][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.624556][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.655976][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.684987][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.729033][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.758580][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.779224][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.789206][ T9451] loop7: detected capacity change from 0 to 256 [ 381.809081][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.828931][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.868617][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.890173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.938115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 382.168456][ T9097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.188889][ T9097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.197634][ T9097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.206437][ T9097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.818776][ T9477] netlink: 'syz.6.1186': attribute type 11 has an invalid length. [ 384.010969][ T6348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.059819][ T6348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.177122][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 384.310260][ T4614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.330635][ T4614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.401664][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 384.460364][ T9502] loop7: detected capacity change from 0 to 256 [ 384.810530][ T9515] loop4: detected capacity change from 0 to 256 [ 385.987425][ T9530] input: syz0 as /devices/virtual/input/input13 [ 386.558467][ T9530] input: failed to attach handler leds to device input13, error: -6 [ 386.951878][ T9540] loop6: detected capacity change from 0 to 512 [ 387.018563][ T9542] loop7: detected capacity change from 0 to 2048 [ 387.044427][ T9540] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 387.158184][ T9540] EXT4-fs (loop6): 1 truncate cleaned up [ 387.168615][ T9540] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 387.256942][ T9542] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,dioread_lock,,errors=continue. Quota mode: writeback. [ 387.279339][ T9542] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.297006][ T9559] loop1: detected capacity change from 0 to 256 [ 387.713053][ T4208] device hsr_slave_0 left promiscuous mode [ 387.816812][ T4208] device hsr_slave_1 left promiscuous mode [ 387.823758][ T9117] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 387.852568][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.957651][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.073188][ T4208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.081248][ T4208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.093630][ T4208] device bridge_slave_1 left promiscuous mode [ 388.128900][ T9117] usb 7-1: Using ep0 maxpacket: 16 [ 388.144845][ T4208] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.247653][ T4208] device bridge_slave_0 left promiscuous mode [ 388.258589][ T4208] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.382508][ T9117] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.405080][ T9117] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.589898][ T9000] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 388.901274][ T9117] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.949813][ T9117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.028650][ T9117] usb 7-1: Product: syz [ 389.052585][ T9117] usb 7-1: Manufacturer: syz [ 389.093832][ T9117] usb 7-1: SerialNumber: syz [ 389.149135][ T9000] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 389.171095][ T9000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.240661][ T9000] usb 5-1: config 0 descriptor?? [ 389.319766][ T9000] cp210x 5-1:0.0: cp210x converter detected [ 389.388270][ T4208] device veth1_macvtap left promiscuous mode [ 389.404698][ T4208] device veth0_macvtap left promiscuous mode [ 389.417183][ T9605] befs: (nullb0): No write support. Marking filesystem read-only [ 389.425740][ T9605] befs: (nullb0): invalid magic header [ 389.434386][ T4208] device veth1_vlan left promiscuous mode [ 389.494748][ T4208] device veth0_vlan left promiscuous mode [ 389.749105][ T9000] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 389.769242][ T9117] usb 7-1: 0:2 : does not exist [ 389.823908][ T9117] usb 7-1: USB disconnect, device number 7 [ 389.841865][ T9000] usb 5-1: cp210x converter now attached to ttyUSB0 [ 390.053592][ T9000] usb 5-1: USB disconnect, device number 3 [ 390.079883][ T9000] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 390.120976][ T8754] udevd[8754]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.139061][ T9000] cp210x 5-1:0.0: device disconnected [ 392.185563][ T9652] loop6: detected capacity change from 0 to 256 [ 392.385483][ T4208] team0 (unregistering): Port device team_slave_1 removed [ 392.436082][ T4208] team0 (unregistering): Port device team_slave_0 removed [ 392.442153][ T9661] loop7: detected capacity change from 0 to 2048 [ 392.477811][ T4208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.536275][ T4208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.601761][ T9661] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 392.677738][ T4208] bond0 (unregistering): Released all slaves [ 392.987438][ T9674] loop6: detected capacity change from 0 to 2048 [ 393.200750][ T9674] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,dioread_lock,,errors=continue. Quota mode: writeback. [ 393.269454][ T9674] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.418118][ T9704] loop7: detected capacity change from 0 to 128 [ 394.549277][ T9704] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 394.631997][ T9715] loop6: detected capacity change from 0 to 128 [ 395.003268][ T9724] loop4: detected capacity change from 0 to 512 [ 395.151158][ T9724] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1243: inode #1: comm syz.4.1243: iget: illegal inode # [ 395.186237][ T9733] loop7: detected capacity change from 0 to 512 [ 395.289009][ T9724] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1243: error while reading EA inode 1 err=-117 [ 395.371057][ T9724] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.1243: inode #1: comm syz.4.1243: iget: illegal inode # [ 395.458300][ T9724] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1243: error while reading EA inode 1 err=-117 [ 395.603814][ T9724] EXT4-fs (loop4): 1 orphan inode deleted [ 395.627540][ T9724] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,discard,norecovery,noinit_itable,resgid=0x0000000000000000,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,jqfmt=vfsold,dioread_lock,resuid=0x0000000000000000,noquota,,errors=continue. Quota mode: none. [ 395.739000][ T6171] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 396.099119][ T6171] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 396.108247][ T6171] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.188940][ T6171] usb 8-1: config 0 descriptor?? [ 396.230436][ T6171] cp210x 8-1:0.0: cp210x converter detected [ 396.457381][ T9767] loop1: detected capacity change from 0 to 128 [ 396.533611][ T9767] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 396.669130][ T6171] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 396.734780][ T6171] usb 8-1: cp210x converter now attached to ttyUSB0 [ 396.912140][ T6171] usb 8-1: USB disconnect, device number 7 [ 396.921252][ T6171] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 397.017205][ T6171] cp210x 8-1:0.0: device disconnected [ 397.107114][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.114568][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.425567][ T9803] loop4: detected capacity change from 0 to 512 [ 397.506063][ T9803] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 397.558937][ T9803] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 397.610678][ T9803] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 397.690528][ T9803] System zones: 0-2, 18-18, 34-34 [ 397.718267][ T9803] EXT4-fs (loop4): orphan cleanup on readonly fs [ 397.766572][ T9817] loop7: detected capacity change from 0 to 1024 [ 397.814756][ T9803] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 397.870102][ T9803] EXT4-fs (loop4): 1 truncate cleaned up [ 397.888948][ T9803] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 397.983615][ T9817] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 398.107055][ T9817] EXT4-fs (loop7): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x00000000000001ff,data_err=abort,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 398.508923][ T6171] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 398.869117][ T6171] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 398.878379][ T6171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.908581][ T6171] usb 5-1: config 0 descriptor?? [ 398.960205][ T6171] cp210x 5-1:0.0: cp210x converter detected [ 399.429047][ T6171] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 399.481929][ T6171] usb 5-1: cp210x converter now attached to ttyUSB0 [ 399.681730][ T6171] usb 5-1: USB disconnect, device number 4 [ 399.698681][ T6171] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 399.729116][ T9883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 399.742849][ T6171] cp210x 5-1:0.0: device disconnected [ 400.058877][ T9117] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 400.359078][ T9117] usb 1-1: Using ep0 maxpacket: 16 [ 400.499203][ T9117] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.533743][ T9117] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.578203][ T9117] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.617734][ T9117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.672533][ T9117] usb 1-1: config 0 descriptor?? [ 400.937167][ T4214] usb 1-1: USB disconnect, device number 23 [ 403.327816][T10007] loop1: detected capacity change from 0 to 2048 [ 403.473779][T10007] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,dioread_lock,,errors=continue. Quota mode: writeback. [ 403.493408][T10022] loop6: detected capacity change from 0 to 512 [ 403.500132][T10007] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.569053][ T4214] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 403.633989][T10022] EXT4-fs (loop6): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 403.669132][T10022] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.858695][ T4214] usb 8-1: Using ep0 maxpacket: 16 [ 403.979169][ T4214] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.996749][ T4214] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 404.027013][ T4214] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 404.080201][ T4214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.123050][ T4214] usb 8-1: config 0 descriptor?? [ 405.033482][ T4214] usb 8-1: USB disconnect, device number 8 [ 405.068596][T10065] loop1: detected capacity change from 0 to 164 [ 405.099008][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 405.469056][ T21] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 405.478516][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.518530][ T21] usb 5-1: config 0 descriptor?? [ 405.590307][ T21] cp210x 5-1:0.0: cp210x converter detected [ 405.958944][ T4214] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 406.029068][ T21] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 406.083854][ T21] usb 5-1: cp210x converter now attached to ttyUSB0 [ 406.281573][ T9117] usb 5-1: USB disconnect, device number 5 [ 406.306626][T10107] loop7: detected capacity change from 0 to 512 [ 406.324391][ T9117] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 406.360789][ T9117] cp210x 5-1:0.0: device disconnected [ 406.408995][T10107] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.450226][T10107] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 406.502807][T10107] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 406.509278][ T4214] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 406.520898][T10107] System zones: 0-2, 18-18, 34-34 [ 406.529070][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.537171][ T4214] usb 2-1: Product: syz [ 406.541552][ T4214] usb 2-1: Manufacturer: syz [ 406.546158][ T4214] usb 2-1: SerialNumber: syz [ 406.557494][T10107] EXT4-fs (loop7): orphan cleanup on readonly fs [ 406.572151][ T4214] usb 2-1: config 0 descriptor?? [ 406.605503][T10107] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 406.610239][ T4214] ch341 2-1:0.0: ch341-uart converter detected [ 406.705713][T10107] EXT4-fs (loop7): 1 truncate cleaned up [ 406.725902][T10107] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 407.198913][ T8896] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 407.485757][ T8896] usb 5-1: Using ep0 maxpacket: 16 [ 407.534272][T10144] loop6: detected capacity change from 0 to 256 [ 407.617892][T10144] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.631189][ T8896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.641573][T10144] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 407.661486][ T8896] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.684266][ T8896] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 407.698536][T10144] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 407.713525][ T8896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.728995][ T4214] usb 2-1: failed to send control message: -71 [ 407.745879][ T4214] ch341-uart: probe of ttyUSB0 failed with error -71 [ 407.757457][ T8896] usb 5-1: config 0 descriptor?? [ 407.778988][ T4214] usb 2-1: USB disconnect, device number 20 [ 407.824095][ T4214] ch341 2-1:0.0: device disconnected [ 408.045328][ T8896] usb 5-1: USB disconnect, device number 6 [ 408.490179][T10178] loop6: detected capacity change from 0 to 128 [ 408.622677][T10184] befs: (nullb0): No write support. Marking filesystem read-only [ 408.631831][T10184] befs: (nullb0): invalid magic header [ 409.534108][T10178] attempt to access beyond end of device [ 409.534108][T10178] loop6: rw=2049, want=761, limit=128 [ 409.539194][ T8896] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 409.812965][T10178] attempt to access beyond end of device [ 409.812965][T10178] loop6: rw=524288, want=225, limit=128 [ 409.872936][T10178] attempt to access beyond end of device [ 409.872936][T10178] loop6: rw=524288, want=369, limit=128 [ 409.906760][T10178] attempt to access beyond end of device [ 409.906760][T10178] loop6: rw=0, want=153, limit=128 [ 409.969592][ T4818] attempt to access beyond end of device [ 409.969592][ T4818] loop6: rw=1, want=233, limit=128 [ 410.139041][ T8896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.171641][ T8896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.239760][ T8896] usb 1-1: New USB device found, idVendor=2505, idProduct=0220, bcdDevice= 0.00 [ 410.281135][ T8896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.335254][ T8896] usb 1-1: config 0 descriptor?? [ 410.739291][ T8896] usbhid 1-1:0.0: can't add hid device: -71 [ 410.745312][ T8896] usbhid: probe of 1-1:0.0 failed with error -71 [ 410.805178][ T8896] usb 1-1: USB disconnect, device number 24 [ 411.617602][T10254] loop6: detected capacity change from 0 to 512 [ 411.658922][ T9000] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 411.869575][T10254] EXT4-fs (loop6): Ignoring removed oldalloc option [ 411.909020][ T9000] usb 8-1: Using ep0 maxpacket: 16 [ 412.031081][T10254] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000100,minixdf,nombcache,oldalloc,,errors=continue. Quota mode: writeback. [ 412.069280][ T9000] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.099308][T10254] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.125716][ T9000] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 412.209287][ T9000] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.454181][ T9000] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.544141][ T9000] usb 8-1: config 0 descriptor?? [ 414.759054][ T9000] usb 8-1: can't set config #0, error -71 [ 414.801632][ T9000] usb 8-1: USB disconnect, device number 9 [ 416.088913][ T4210] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 416.371877][T10328] loop1: detected capacity change from 0 to 512 [ 416.467386][T10328] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.664009][ T4210] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.709231][ T4210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.722191][ T4210] usb 7-1: config 0 descriptor?? [ 416.769321][ T9000] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 416.777586][ T4210] cp210x 7-1:0.0: cp210x converter detected [ 417.458964][ T4210] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 417.523278][ T4210] usb 7-1: cp210x converter now attached to ttyUSB0 [ 417.530877][ T9000] usb 5-1: Using ep0 maxpacket: 16 [ 417.678979][ T9000] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.709070][ T9000] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.725463][ T6171] usb 7-1: USB disconnect, device number 8 [ 417.738562][ T9000] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 417.752490][ T9000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.760411][ T6171] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 417.793425][ T6171] cp210x 7-1:0.0: device disconnected [ 417.798960][ T9000] usb 5-1: config 0 descriptor?? [ 418.115606][ T9000] usb 5-1: USB disconnect, device number 7 [ 418.431886][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1372'. [ 418.860915][T10374] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 420.940837][T10387] loop6: detected capacity change from 0 to 2048 [ 421.016788][T10387] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 421.030376][T10398] loop1: detected capacity change from 0 to 512 [ 421.106050][T10398] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 421.301534][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1386'. [ 421.408934][ T9117] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 421.685482][T10422] loop6: detected capacity change from 0 to 8192 [ 422.139367][T10427] loop1: detected capacity change from 0 to 512 [ 422.145881][ T9117] usb 5-1: Using ep0 maxpacket: 16 [ 422.183951][T10427] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 422.207923][T10422] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.233988][T10427] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 422.246478][T10427] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.1383: corrupted in-inode xattr [ 422.275189][T10427] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1383: couldn't read orphan inode 15 (err -117) [ 422.288466][T10427] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 422.313706][ T9117] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.543096][ T9117] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 422.563133][ T9117] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 422.572578][ T9117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.045865][ T9117] usb 5-1: config 0 descriptor?? [ 423.372866][ T9117] usb 5-1: USB disconnect, device number 8 [ 423.431025][T10451] 9pnet: p9_errstr2errno: server reported unknown error @í΂Í(ááí«Q1844674407370955161501777777777777777777777 [ 424.167074][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1401'. [ 424.377107][T10467] loop6: detected capacity change from 0 to 512 [ 424.622746][T10473] loop4: detected capacity change from 0 to 2048 [ 424.741520][T10467] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 424.778956][T10467] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 424.816888][T10467] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1399: Corrupt directory, running e2fsck is recommended [ 424.881319][T10467] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 424.973257][T10473] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,dioread_lock,,errors=continue. Quota mode: writeback. [ 424.978427][T10467] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1399: iget: bad extra_isize 32544 (inode size 256) [ 425.076316][T10473] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.166547][T10473] EXT4-fs (loop4): shut down requested (1) [ 425.182642][T10487] loop1: detected capacity change from 0 to 512 [ 425.220158][T10467] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1399: couldn't read orphan inode 15 (err -117) [ 425.308205][T10467] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,noblock_validity,data_err=abort,discard,auto_da_alloc,grpjquota=.usrjquota=,nogrpid,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 425.595173][T10487] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1404: bg 0: block 248: padding at end of block bitmap is not set [ 425.741926][T10501] loop7: detected capacity change from 0 to 256 [ 425.783642][T10487] Quota error (device loop1): write_blk: dquota write failed [ 425.793187][T10487] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 425.807240][T10501] FAT-fs (loop7): Unrecognized mount option "obj_role=\]" or missing value [ 425.852732][T10487] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.1404: Failed to acquire dquot type 1 [ 425.866508][T10487] EXT4-fs (loop1): 1 truncate cleaned up [ 425.872272][T10487] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 425.884035][T10487] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.739446][ T5963] Quota error (device loop1): remove_tree: Getting block too big (0 >= 6) [ 426.756786][ T5963] EXT4-fs error (device loop1): ext4_release_dquot:6220: comm kworker/u4:15: Failed to release dquot type 1 [ 426.941307][T10514] loop7: detected capacity change from 0 to 512 [ 427.035143][T10514] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 427.051794][T10514] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 427.108043][T10514] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 427.145179][T10514] System zones: 0-2, 18-18, 34-34 [ 427.197939][T10514] EXT4-fs (loop7): orphan cleanup on readonly fs [ 427.247187][T10514] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 427.282509][T10514] EXT4-fs (loop7): 1 truncate cleaned up [ 427.298606][T10514] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 427.426418][T10531] loop1: detected capacity change from 0 to 1024 [ 427.586100][T10531] EXT4-fs (loop1): Ignoring removed nobh option [ 427.601647][T10531] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 427.981468][T10531] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,usrjquota=,nobarrier,dioread_lock,norecovery,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,delalloc,nodelalloc,dioread_nolock,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 428.019730][T10539] loop7: detected capacity change from 0 to 2048 [ 428.072235][T10531] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.1413: Allocating blocks 481-513 which overlap fs metadata [ 428.090142][T10547] loop4: detected capacity change from 0 to 128 [ 428.143710][T10547] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 428.186843][T10539] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,dioread_lock,,errors=continue. Quota mode: writeback. [ 428.231511][T10562] loop6: detected capacity change from 0 to 512 [ 428.238355][T10539] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.255660][T10539] EXT4-fs (loop7): shut down requested (1) [ 428.297532][T10530] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 428.369555][T10562] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1420: bg 0: block 248: padding at end of block bitmap is not set [ 428.441976][T10530] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #18: comm syz.1.1413: mark_inode_dirty error [ 428.469513][T10562] Quota error (device loop6): write_blk: dquota write failed [ 428.511679][T10562] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 428.535881][T10562] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.1420: Failed to acquire dquot type 1 [ 428.583682][T10531] EXT4-fs error (device loop1): ext4_map_blocks:738: inode #18: block 117: comm syz.1.1413: lblock 4 mapped to illegal pblock 117 (length 1) [ 428.634689][T10562] EXT4-fs (loop6): 1 truncate cleaned up [ 428.655146][T10562] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 428.729198][T10584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.736812][T10584] IPv6: NLM_F_CREATE should be set when creating new route [ 428.744126][T10584] IPv6: NLM_F_CREATE should be set when creating new route [ 428.791403][T10562] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.665477][ T8504] EXT4-fs error (device loop1): ext4_map_blocks:628: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 429.847564][ T4208] Quota error (device loop6): remove_tree: Getting block too big (0 >= 6) [ 429.896797][ T4208] EXT4-fs error (device loop6): ext4_release_dquot:6220: comm kworker/u4:4: Failed to release dquot type 1 [ 429.920304][ T8504] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 429.958134][ T8504] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #18: comm syz-executor: mark_inode_dirty error [ 430.019143][ T8504] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 430.065175][ T8504] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 431.804057][T10611] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 432.222053][ T4614] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.475845][ T4614] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.568035][T10639] loop4: detected capacity change from 0 to 512 [ 432.604029][ T4614] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.633768][T10638] kvm: pic: non byte write [ 432.649298][T10638] kvm: pic: non byte write [ 432.659405][T10638] kvm: pic: non byte write [ 432.663945][T10638] kvm: pic: non byte write [ 432.679104][T10638] kvm: pic: non byte write [ 432.689084][T10638] kvm: pic: non byte write [ 432.699231][T10639] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 432.710889][T10638] kvm: pic: non byte write [ 432.720835][T10638] kvm: pic: non byte write [ 432.740980][T10638] kvm: pic: non byte write [ 432.745666][T10638] kvm: pic: non byte write [ 433.314573][ T4614] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.908133][T10675] loop6: detected capacity change from 0 to 128 [ 434.022124][T10651] chnl_net:caif_netlink_parms(): no params data found [ 434.091779][T10675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 434.102708][T10675] System zones: 1-3, 19-19, 35-36 [ 434.296419][T10675] EXT4-fs (loop6): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 434.486166][T10675] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 434.899195][ T9000] Bluetooth: hci2: command 0x0409 tx timeout [ 435.160760][T10651] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.212073][T10651] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.267641][T10651] device bridge_slave_0 entered promiscuous mode [ 435.343914][T10651] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.401816][T10651] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.476528][T10651] device bridge_slave_1 entered promiscuous mode [ 435.632723][T10651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.703417][T10651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.924288][T10651] team0: Port device team_slave_0 added [ 435.947128][T10651] team0: Port device team_slave_1 added [ 436.066093][ T4614] device hsr_slave_0 left promiscuous mode [ 436.092813][ T4614] device hsr_slave_1 left promiscuous mode [ 436.187572][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.206462][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.245801][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.299128][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.356988][ T4614] device bridge_slave_1 left promiscuous mode [ 436.403893][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.429430][ T4614] device bridge_slave_0 left promiscuous mode [ 436.435814][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.464362][ T4614] device veth1_macvtap left promiscuous mode [ 436.483237][ T4614] device veth0_macvtap left promiscuous mode [ 436.499180][ T4614] device veth1_vlan left promiscuous mode [ 436.505031][ T4614] device veth0_vlan left promiscuous mode [ 436.917664][ T4614] team0 (unregistering): Port device team_slave_1 removed [ 436.951939][ T4614] team0 (unregistering): Port device team_slave_0 removed [ 436.979071][ T9000] Bluetooth: hci2: command 0x041b tx timeout [ 436.989353][ T4614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.005563][ T4614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.486256][T10743] befs: (nullb0): No write support. Marking filesystem read-only [ 437.494478][T10743] befs: (nullb0): invalid magic header [ 437.537741][ T4614] bond0 (unregistering): Released all slaves [ 437.670367][T10651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.693323][T10651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.762713][T10651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.785469][T10651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.798195][T10651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.883119][T10651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.127723][T10766] picdev_write: 10 callbacks suppressed [ 438.127742][T10766] kvm: pic: non byte write [ 438.216144][T10766] kvm: pic: non byte write [ 438.241794][T10766] kvm: pic: non byte write [ 438.265670][T10778] fuse: Unknown parameter 'grou00000000000000000000' [ 438.283169][T10766] kvm: pic: non byte write [ 438.314148][T10766] kvm: pic: non byte write [ 438.350903][T10651] device hsr_slave_0 entered promiscuous mode [ 438.379513][T10766] kvm: pic: non byte write [ 438.398747][T10766] kvm: pic: non byte write [ 438.405861][T10651] device hsr_slave_1 entered promiscuous mode [ 438.469592][T10766] kvm: pic: non byte write [ 438.490091][T10766] kvm: pic: non byte write [ 438.507653][T10651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.557794][T10651] Cannot create hsr debugfs directory [ 438.563990][T10766] kvm: pic: non byte write [ 438.889034][ T9117] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 439.049041][ T1111] Bluetooth: hci2: command 0x040f tx timeout [ 439.269161][ T9117] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 439.309530][ T9117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.354446][ T9117] usb 1-1: config 0 descriptor?? [ 439.410215][ T9117] cp210x 1-1:0.0: cp210x converter detected [ 439.756362][T10651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 439.797589][T10651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 439.819790][T10651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 439.834785][T10651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.839143][ T9117] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 439.923888][ T9117] usb 1-1: cp210x converter now attached to ttyUSB0 [ 439.936276][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.943031][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.089157][T10651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.123467][ T9117] usb 1-1: USB disconnect, device number 25 [ 440.150203][ T9117] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 440.178530][ T9117] cp210x 1-1:0.0: device disconnected [ 440.179531][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.207580][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.274308][T10651] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.329695][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.369558][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.392878][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.400010][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.445287][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.520307][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 440.549772][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 440.579056][ T4395] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.586207][ T4395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.627466][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.659659][T10826] fuse: Unknown parameter 'grou00000000000000000000' [ 440.675793][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.729342][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.793768][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.836005][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.863414][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.993761][T10835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 441.001051][T10835] IPv6: NLM_F_CREATE should be set when creating new route [ 441.008294][T10835] IPv6: NLM_F_CREATE should be set when creating new route [ 441.030930][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.120500][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.139272][ T9117] Bluetooth: hci2: command 0x0419 tx timeout [ 441.342789][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.595874][T10651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.195309][T10651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.253207][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 442.289585][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.962617][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 443.009128][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 443.063617][T10651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.216397][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 443.230118][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 443.382152][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 443.414663][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 443.465141][T10651] device veth0_vlan entered promiscuous mode [ 443.493028][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 443.545930][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 443.615814][T10651] device veth1_vlan entered promiscuous mode [ 443.904216][T10651] device veth0_macvtap entered promiscuous mode [ 443.968907][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 444.003651][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 444.074758][T10651] device veth1_macvtap entered promiscuous mode [ 444.116047][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 444.171134][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 444.277645][T10651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.357343][T10651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.367740][T10651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.379510][T10651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.392363][T10651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.404082][T10651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.422300][T10651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.437167][T10872] fuse: Unknown parameter 'grou00000000000000000000' [ 444.447388][T10651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.468099][T10651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.483026][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 444.515331][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 444.579432][T10651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.598164][T10651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.618962][T10651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.643563][T10651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.654871][T10882] loop6: detected capacity change from 0 to 512 [ 444.672199][T10651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.694304][T10651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.718701][T10651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.755155][T10651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.779492][T10651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.800288][T10651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.818890][T10651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.862052][T10651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.892522][T10651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.926735][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 444.941511][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 444.982848][T10882] EXT4-fs (loop6): 1 orphan inode deleted [ 444.988716][T10882] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 445.091808][T10882] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 445.110218][T10892] netlink: 'syz.7.1499': attribute type 4 has an invalid length. [ 445.403512][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.432754][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.492227][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.679247][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.730449][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.834678][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 446.125878][T10909] fuse: Unknown parameter 'group_i00000000000000000000' [ 446.241805][T10912] loop2: detected capacity change from 0 to 512 [ 446.393749][T10912] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 446.477088][T10912] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 446.606225][T10912] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1434: Corrupt directory, running e2fsck is recommended [ 446.717534][T10923] loop6: detected capacity change from 0 to 1024 [ 446.725728][T10912] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 446.742136][T10912] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1434: iget: bad extra_isize 32544 (inode size 256) [ 446.777584][T10912] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1434: couldn't read orphan inode 15 (err -117) [ 446.810241][T10912] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,noblock_validity,data_err=abort,discard,auto_da_alloc,grpjquota=.usrjquota=,nogrpid,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 446.855184][T10923] EXT4-fs (loop6): Ignoring removed nobh option [ 446.880076][T10923] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 446.967933][T10923] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,usrjquota=,nobarrier,dioread_lock,norecovery,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,delalloc,nodelalloc,dioread_nolock,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 447.090619][T10923] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3876: comm syz.6.1506: Allocating blocks 481-513 which overlap fs metadata [ 447.197642][ T1111] Bluetooth: hci0: command 0x0406 tx timeout [ 447.284445][T10922] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 447.345047][T10922] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #18: comm syz.6.1506: mark_inode_dirty error [ 447.410096][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1514'. [ 447.495232][T10952] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1515'. [ 447.506436][ T8528] EXT4-fs error (device loop6): ext4_map_blocks:628: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 447.698545][ T8528] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 447.726471][ T8528] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #18: comm syz-executor: mark_inode_dirty error [ 447.773124][ T8528] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 447.806426][ T8528] EXT4-fs error (device loop6): ext4_dirty_inode:6010: inode #2: comm syz-executor: mark_inode_dirty error [ 448.322432][ T4614] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.448603][ T4614] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.542489][ T4614] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.699682][ T4614] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.738192][T10990] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1528'. [ 448.904560][T10994] loop2: detected capacity change from 0 to 128 [ 448.990072][T10994] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 449.057448][T10994] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 449.416895][T11012] fuse: Unknown parameter 'group_i00000000000000000000' [ 449.434598][T11013] befs: (nullb0): No write support. Marking filesystem read-only [ 449.573194][T11017] loop2: detected capacity change from 0 to 512 [ 449.648144][T11017] EXT4-fs (loop2): Test dummy encryption mode enabled [ 449.672707][T10998] chnl_net:caif_netlink_parms(): no params data found [ 449.725468][T11017] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 449.790371][T11013] befs: (nullb0): invalid magic header [ 449.835380][T11017] EXT4-fs (loop2): 1 truncate cleaned up [ 449.847737][T11017] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,test_dummy_encryption,,errors=continue. Quota mode: none. [ 450.111592][T10998] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.142992][T10998] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.193931][T10998] device bridge_slave_0 entered promiscuous mode [ 450.207278][T11017] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 450.252889][T10998] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.296190][T10998] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.312658][T10998] device bridge_slave_1 entered promiscuous mode [ 450.505618][T11046] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1539'. [ 450.547678][T10998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.656768][T10998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.974221][T10998] team0: Port device team_slave_0 added [ 451.079556][T11063] fuse: Unknown parameter 'group_id00000000000000000000' [ 451.149068][ T4247] Bluetooth: hci4: command 0x0409 tx timeout [ 451.225033][ T4614] device hsr_slave_0 left promiscuous mode [ 451.259102][ T4614] device hsr_slave_1 left promiscuous mode [ 451.625475][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.642663][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.681199][ T4614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.688657][ T4614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.778558][ T4614] device bridge_slave_1 left promiscuous mode [ 451.787394][ T4614] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.869532][ T4614] device bridge_slave_0 left promiscuous mode [ 451.875783][ T4614] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.049148][ T4614] device veth1_macvtap left promiscuous mode [ 452.055272][ T4614] device veth0_macvtap left promiscuous mode [ 452.077296][ T4614] device veth1_vlan left promiscuous mode [ 452.102093][ T4614] device veth0_vlan left promiscuous mode [ 452.300544][T11092] fuse: Unknown parameter 'group_id00000000000000000000' [ 452.690204][ T4614] team0 (unregistering): Port device team_slave_1 removed [ 452.719486][ T4614] team0 (unregistering): Port device team_slave_0 removed [ 452.743466][ T4614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.779392][ T4614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.885368][ T4614] bond0 (unregistering): Released all slaves [ 452.976723][T10998] team0: Port device team_slave_1 added [ 453.000239][T11076] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1547'. [ 453.082411][T10998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.116139][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.387427][ T4247] Bluetooth: hci4: command 0x041b tx timeout [ 453.448844][T10998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.483204][T10998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.526872][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.656354][T10998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.996820][T10998] device hsr_slave_0 entered promiscuous mode [ 454.003841][T10998] device hsr_slave_1 entered promiscuous mode [ 454.261085][T10998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.392035][T10998] Cannot create hsr debugfs directory [ 454.929559][T11114] loop2: detected capacity change from 0 to 2048 [ 455.083547][T11114] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a800c029, mo2=0002] [ 455.118448][T11114] System zones: 0-7 [ 455.382800][T11114] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,sb=0x0000000000000007,nodioread_nolock,sysvgroups,init_itable,barrier=0x0000000000000000,nombcache,debug,. Quota mode: none. [ 455.504809][T11128] fuse: Unknown parameter 'group_id00000000000000000000' [ 455.943864][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 458.228402][ T4212] Bluetooth: hci4: command 0x0419 tx timeout [ 458.465604][ T26] audit: type=1326 audit(1741935562.380:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11152 comm="syz.4.1571" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca58d7f169 code=0x0 [ 460.785911][T10998] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 460.837276][T10998] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 460.911979][T10998] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 460.966200][T10998] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 461.534709][T10998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.615258][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 461.629986][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 461.719783][T10998] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.779620][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 461.797632][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 461.824304][ T4818] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.831479][ T4818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.053149][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 462.067634][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 462.454835][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 462.684836][ T4818] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.692100][ T4818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.879079][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 462.959553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.009817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.052657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.079891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 463.115226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.128973][ T5753] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 463.139817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 463.179760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.221578][T10998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.255517][T10998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.278683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.287969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 463.329581][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 463.408987][ T5753] usb 3-1: Using ep0 maxpacket: 8 [ 463.559095][ T5753] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.588973][ T5753] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.628865][ T5753] usb 3-1: config 0 interface 0 has no altsetting 0 [ 463.670575][ T5753] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 463.700171][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.731250][ T5753] usb 3-1: config 0 descriptor?? [ 463.740133][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.775294][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.812872][T10998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.978114][T11219] loop2: detected capacity change from 0 to 512 [ 464.137840][T11219] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1583: casefold flag without casefold feature [ 464.169558][T11219] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1583: couldn't read orphan inode 15 (err -117) [ 464.183946][T11219] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,,errors=continue. Quota mode: writeback. [ 464.393158][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1591'. [ 464.409489][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.428594][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.451592][ T5753] chicony 0003:04F2:1421.0003: unbalanced delimiter at end of report description [ 464.479308][ T5753] chicony 0003:04F2:1421.0003: Chicony hid parse failed: -22 [ 464.515919][ T5753] chicony: probe of 0003:04F2:1421.0003 failed with error -22 [ 464.521214][T10998] device veth0_vlan entered promiscuous mode [ 464.568467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.592921][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.631097][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.669786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.681857][ T9117] usb 3-1: USB disconnect, device number 3 [ 464.734397][T10998] device veth1_vlan entered promiscuous mode [ 464.850300][T10998] device veth0_macvtap entered promiscuous mode [ 464.898753][T10998] device veth1_macvtap entered promiscuous mode [ 464.939528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 464.956497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 464.965114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 464.976356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 464.985714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 465.007285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 465.295907][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.552178][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.737304][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.793786][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.829780][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.844033][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.854203][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 465.878844][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.907101][T10998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.939279][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 465.959417][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 465.971542][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.009400][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.058869][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.088914][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.118843][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.148442][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.178910][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.203167][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.229516][T10998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.248140][T11300] fuse: Bad value for 'fd' [ 466.257540][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 466.298579][ T4215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 466.360216][T10998] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.387380][T10998] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.406859][T10998] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.486708][T11312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1601'. [ 466.533574][T10998] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.790602][ T4818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.839650][ T4818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.857715][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 466.949947][ T4208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.976984][ T4208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.012975][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 467.596634][T11334] befs: (nullb0): No write support. Marking filesystem read-only [ 467.606649][T11334] befs: (nullb0): invalid magic header [ 467.801106][T11335] 9pnet: Insufficient options for proto=fd [ 471.508850][ T5753] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 471.808990][ T5753] usb 10-1: Using ep0 maxpacket: 16 [ 472.849981][ T5753] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.890149][ T5753] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 472.960373][ T5753] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 22 [ 473.167530][T11396] capability: warning: `syz.2.1622' uses 32-bit capabilities (legacy support in use) [ 473.189287][ T5753] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.216237][ T5753] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 473.447565][ T5753] usb 10-1: SerialNumber: syz [ 473.527579][T11403] befs: (nullb0): No write support. Marking filesystem read-only [ 473.547064][T11403] befs: (nullb0): invalid magic header [ 474.738996][ T5753] usb 10-1: can't set config #1, error -71 [ 474.749501][ T5753] usb 10-1: USB disconnect, device number 24 [ 477.755356][T11425] loop2: detected capacity change from 0 to 1024 [ 478.067741][T11425] EXT4-fs (loop2): Ignoring removed orlov option [ 478.159142][T11425] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 478.524496][T11425] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,orlov,debug_want_extra_isize=0x0000000000000080,nogrpid,noauto_da_alloc,barrier,usrjquota=,nojournal_checksum,mblk_io_submit,stripe=0x00000000000008ca,,errors=continue. Quota mode: none. [ 479.081420][T11445] loop9: detected capacity change from 0 to 128 [ 479.273344][T11445] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 479.294650][T11445] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 479.655813][T11464] xt_bpf: check failed: parse error [ 481.560951][T11484] loop2: detected capacity change from 0 to 1024 [ 481.729164][T11484] EXT4-fs (loop2): Ignoring removed orlov option [ 481.789189][T11484] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 482.146267][T11484] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,orlov,debug_want_extra_isize=0x0000000000000080,nogrpid,noauto_da_alloc,barrier,usrjquota=,nojournal_checksum,mblk_io_submit,stripe=0x00000000000008ca,,errors=continue. Quota mode: none. [ 484.043476][T11520] xt_bpf: check failed: parse error [ 486.330756][T11541] loop2: detected capacity change from 0 to 1024 [ 486.556403][T11541] EXT4-fs (loop2): Ignoring removed orlov option [ 486.593805][T11541] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 486.789762][T11541] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,orlov,debug_want_extra_isize=0x0000000000000080,nogrpid,noauto_da_alloc,barrier,usrjquota=,nojournal_checksum,mblk_io_submit,stripe=0x00000000000008ca,,errors=continue. Quota mode: none. [ 486.891428][T11559] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1662'. [ 488.004168][T11575] netlink: 'syz.4.1669': attribute type 5 has an invalid length. [ 494.056058][T11644] binder: 11609:11644 ioctl 4018620d 0 returned -22 [ 494.086016][T11644] binder: 11609:11644 ioctl c0306201 400000000680 returned -11 [ 494.940768][T11666] 9pnet: Insufficient options for proto=fd [ 495.081850][T11674] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 495.252597][T11682] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1697'. [ 495.355516][T11686] ptrace attach of "./syz-executor exec"[9097] was attempted by "./syz-executor exec"[11686] [ 496.032803][T11698] befs: (nullb0): No write support. Marking filesystem read-only [ 496.042390][T11698] befs: (nullb0): invalid magic header [ 496.759897][T11699] fuse: Bad value for 'rootmode' [ 497.199564][T11713] 9pnet: Insufficient options for proto=fd [ 497.259032][ T4214] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 497.679114][ T4214] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.785107][ T4214] usb 10-1: config 0 has no interfaces? [ 497.869044][ T4214] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 497.918888][ T4214] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.967193][ T4214] usb 10-1: config 0 descriptor?? [ 498.204573][T11730] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 498.542912][T11743] fuse: Unknown parameter 'use00000000000000000000' [ 499.504333][T11759] loop2: detected capacity change from 0 to 128 [ 499.645524][T11759] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 500.502052][ T21] usb 10-1: USB disconnect, device number 25 [ 501.372709][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.379758][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.537128][T11788] loop2: detected capacity change from 0 to 1024 [ 501.665527][T11788] EXT4-fs (loop2): Ignoring removed orlov option [ 501.682950][T11788] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 501.720256][T11790] binder: 11760:11790 ioctl 4018620d 0 returned -22 [ 501.752700][T11790] binder: 11760:11790 ioctl c0306201 400000000680 returned -11 [ 501.764750][T11788] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,orlov,debug_want_extra_isize=0x0000000000000080,nogrpid,noauto_da_alloc,barrier,usrjquota=,nojournal_checksum,mblk_io_submit,stripe=0x00000000000008ca,,errors=continue. Quota mode: none. [ 502.325870][T11775] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.333383][T11775] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.012678][T11775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.049674][T11775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.398616][T11775] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.407663][T11775] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.417192][T11775] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.426447][T11775] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.582779][T11808] netlink: 'syz.0.1728': attribute type 4 has an invalid length. [ 504.652775][T11775] syz.4.1721 (11775) used greatest stack depth: 18744 bytes left [ 504.906454][T11830] loop9: detected capacity change from 0 to 1024 [ 505.069668][T11830] EXT4-fs (loop9): Ignoring removed orlov option [ 505.118868][T11830] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 505.195443][T11830] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,orlov,debug_want_extra_isize=0x0000000000000080,nogrpid,noauto_da_alloc,barrier,usrjquota=,nojournal_checksum,mblk_io_submit,stripe=0x00000000000008ca,,errors=continue. Quota mode: none. [ 506.878200][T11874] loop9: detected capacity change from 0 to 256 [ 506.955579][T11874] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 509.646116][T11908] loop9: detected capacity change from 0 to 1024 [ 509.870889][T11908] EXT4-fs (loop9): Ignoring removed orlov option [ 510.038348][T11908] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 510.329830][T11908] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,orlov,debug_want_extra_isize=0x0000000000000080,nogrpid,noauto_da_alloc,barrier,usrjquota=,nojournal_checksum,mblk_io_submit,stripe=0x00000000000008ca,,errors=continue. Quota mode: none. [ 510.868038][T11929] loop2: detected capacity change from 0 to 2048 [ 510.957016][T11937] loop9: detected capacity change from 0 to 512 [ 511.105096][T11929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 511.889203][T11937] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 511.942949][T11937] EXT4-fs (loop9): 1 truncate cleaned up [ 511.948662][T11937] EXT4-fs (loop9): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000358,resuid=0x0000000000000000,stripe=0x0000000000000009,,errors=continue. Quota mode: none. [ 512.065461][T11937] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1758'. [ 512.249923][T11965] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1766'. [ 514.557007][T12004] loop9: detected capacity change from 0 to 512 [ 514.766019][T12004] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 514.859629][T12004] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 514.878103][ T4247] kernel write not supported for file bpf-prog (pid: 4247 comm: kworker/1:8) [ 518.127500][T12077] loop9: detected capacity change from 0 to 1024 [ 519.402193][T12081] loop2: detected capacity change from 0 to 256 [ 519.935563][T12077] EXT4-fs (loop9): Ignoring removed orlov option [ 520.028642][T12077] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 520.185482][T12077] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,orlov,debug_want_extra_isize=0x0000000000000080,nogrpid,noauto_da_alloc,barrier,usrjquota=,nojournal_checksum,mblk_io_submit,stripe=0x00000000000008ca,,errors=continue. Quota mode: none. [ 520.412352][T12105] 9pnet: Insufficient options for proto=fd [ 520.423172][T12102] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1804'. [ 520.459424][T12102] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1804'. [ 520.862149][T12121] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1810'. [ 521.862223][T12139] loop9: detected capacity change from 0 to 1024 [ 521.905221][T12144] 9pnet: Insufficient options for proto=fd [ 521.967832][T12149] binder: 12133:12149 ioctl 4018620d 0 returned -22 [ 521.976716][T12149] binder: 12133:12149 ioctl c0306201 400000000680 returned -11 [ 522.155175][T12139] EXT4-fs (loop9): Ignoring removed orlov option [ 522.297784][T12139] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 522.628197][T12151] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1820'. [ 522.737323][T12139] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,orlov,debug_want_extra_isize=0x0000000000000080,nogrpid,noauto_da_alloc,barrier,usrjquota=,nojournal_checksum,mblk_io_submit,stripe=0x00000000000008ca,,errors=continue. Quota mode: none. [ 522.743964][T12151] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1820'. [ 522.848220][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1821'. [ 523.139031][T12177] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1825'. [ 523.163375][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1825'. [ 523.196409][T12177] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1825'. [ 523.247406][T12177] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1825'. [ 523.407547][T12189] 9pnet: Insufficient options for proto=fd [ 523.572456][T12192] loop9: detected capacity change from 0 to 512 [ 523.770062][T12192] EXT4-fs (loop9): Quota format mount options ignored when QUOTA feature is enabled [ 523.881365][T12192] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsold,noload,norecovery,norecovery,. Quota mode: writeback. [ 523.958982][T12192] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 523.989759][T12215] loop2: detected capacity change from 0 to 256 [ 524.740601][T12215] 9pnet: Insufficient options for proto=fd [ 525.707287][T12245] befs: (nullb0): No write support. Marking filesystem read-only [ 525.717273][T12245] befs: (nullb0): invalid magic header [ 526.041311][T12260] fuse: Unknown parameter '0x0000000000000003' [ 526.050008][T12259] __nla_validate_parse: 3 callbacks suppressed [ 526.050026][T12259] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1851'. [ 526.109520][T12259] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1851'. [ 526.333979][T12279] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 526.582782][T12282] loop9: detected capacity change from 0 to 2048 [ 526.588920][ T4247] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 526.733838][T12282] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.071675][ T4247] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.304399][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.737071][ T4247] usb 1-1: config 0 descriptor?? [ 527.879672][ T4247] cp210x 1-1:0.0: cp210x converter detected [ 527.984736][T12302] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1866'. [ 528.098914][ T4247] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 528.106669][ T4247] cp210x 1-1:0.0: querying part number failed [ 528.121530][T12309] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1867'. [ 528.125417][ T4247] usb 1-1: cp210x converter now attached to ttyUSB0 [ 528.295816][T12309] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1867'. [ 529.044719][T12327] loop9: detected capacity change from 0 to 128 [ 529.099208][T12327] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 529.148675][T12327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 529.201364][ T26] audit: type=1800 audit(1741935636.119:19): pid=12327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1870" name="file2" dev="loop9" ino=105 res=0 errno=0 [ 529.261144][ T4211] usb 1-1: USB disconnect, device number 26 [ 529.290593][ T4211] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 529.350070][ T26] audit: type=1800 audit(1741935636.259:20): pid=12327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1870" name="file2" dev="loop9" ino=105 res=0 errno=0 [ 529.388905][ T4211] cp210x 1-1:0.0: device disconnected [ 530.178001][T12347] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1878'. [ 530.784442][T12354] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1879'. [ 531.062742][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 531.239386][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1880'. [ 532.473943][T12395] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 532.473943][T12395] The task syz.4.1890 (12395) triggered the difference, watch for misbehavior. [ 533.274968][T12407] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1894'. [ 535.012071][T12430] loop9: detected capacity change from 0 to 512 [ 535.168137][T12430] EXT4-fs (loop9): Ignoring removed nobh option [ 535.238071][T12430] EXT4-fs (loop9): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none. [ 535.413591][T12454] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1909'. [ 536.514516][T12490] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1920'. [ 536.572974][T12495] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1923'. [ 536.584354][T12492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.591641][T12492] IPv6: NLM_F_CREATE should be set when creating new route [ 536.785208][T12501] loop9: detected capacity change from 0 to 4096 [ 537.011188][T12501] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 539.549034][ T7] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 539.819281][ T7] usb 10-1: Using ep0 maxpacket: 8 [ 540.009256][ T7] usb 10-1: unable to get BOS descriptor or descriptor too short [ 540.129121][ T7] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 113, changing to 10 [ 540.148303][ T7] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 540.177146][ T7] usb 10-1: config 1 interface 0 has no altsetting 0 [ 540.269918][T12575] netlink: 'syz.2.1945': attribute type 4 has an invalid length. [ 540.419028][ T4211] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 540.445346][ T7] usb 10-1: string descriptor 0 read error: -22 [ 540.452884][ T7] usb 10-1: New USB device found, idVendor=05ac, idProduct=021a, bcdDevice= 0.40 [ 540.466377][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.509121][T12553] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 540.789096][ T4211] usb 1-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 540.818859][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.831099][ T4211] usb 1-1: config 0 descriptor?? [ 540.949089][ T7] appletouch 10-1:1.0: Failed to request geyser raw mode [ 540.959540][ T7] appletouch: probe of 10-1:1.0 failed with error -5 [ 541.004280][ T7] usb 10-1: USB disconnect, device number 26 [ 541.317648][ T4211] uclogic 0003:28BD:0055.0004: unbalanced collection at end of report description [ 541.353883][ T4211] uclogic 0003:28BD:0055.0004: parse failed [ 541.380136][ T4211] uclogic: probe of 0003:28BD:0055.0004 failed with error -22 [ 541.738089][T11818] usb 1-1: USB disconnect, device number 27 [ 542.800009][T12664] befs: (nullb0): No write support. Marking filesystem read-only [ 542.809426][T12664] befs: (nullb0): invalid magic header [ 544.208868][ T4211] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 544.569740][ T4211] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.600305][ T4211] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.633686][ T4211] usb 10-1: config 0 descriptor?? [ 544.686188][ T4211] cp210x 10-1:0.0: cp210x converter detected [ 544.899039][ T4211] cp210x 10-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 544.916916][ T4211] cp210x 10-1:0.0: querying part number failed [ 544.954155][ T4211] usb 10-1: cp210x converter now attached to ttyUSB0 [ 545.787131][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1991'. [ 545.805808][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1991'. [ 546.723051][ T6171] usb 10-1: USB disconnect, device number 27 [ 546.800747][T12817] binder: Bad value for 'stats' [ 546.853207][ T6171] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 546.866157][ T6171] cp210x 10-1:0.0: device disconnected [ 547.175578][T12828] binder: 12824:12828 ioctl 4018620d 0 returned -22 [ 547.182695][T12828] binder: 12824:12828 ioctl c0306201 400000000680 returned -11 [ 547.376065][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2004'. [ 547.387300][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2004'. [ 548.314692][T12856] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2010'. [ 548.400647][T12862] netlink: 'syz.0.2011': attribute type 16 has an invalid length. [ 548.421403][T12862] netlink: 'syz.0.2011': attribute type 17 has an invalid length. [ 548.452687][T12862] netlink: 'syz.0.2011': attribute type 27 has an invalid length. [ 548.533558][T12869] fuse: Bad value for 'fd' [ 552.776911][T12952] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2033'. [ 552.900241][T12962] binder: 12947:12962 ioctl 4018620d 0 returned -22 [ 552.907303][T12962] binder: 12947:12962 ioctl c0306201 400000000680 returned -11 [ 554.728859][ T4247] Bluetooth: hci3: command 0x0406 tx timeout [ 556.610698][T13028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 557.360876][T13044] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 559.585337][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2061'. [ 559.779145][ T4213] Bluetooth: hci2: command 0x0406 tx timeout [ 562.821810][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.840186][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.542442][T13132] loop9: detected capacity change from 0 to 128 [ 564.093552][T13132] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 564.327707][T13132] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 564.629984][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2079'. [ 564.948573][T13166] loop9: detected capacity change from 0 to 128 [ 565.869260][T13166] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 567.429672][T13184] FAT-fs (loop9): FAT read failed (blocknr 234) [ 570.034888][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2094'. [ 570.322247][ T26] audit: type=1326 audit(1741935683.235:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.398214][ T26] audit: type=1326 audit(1741935683.255:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.399741][T13211] loop9: detected capacity change from 0 to 128 [ 570.471983][ T26] audit: type=1326 audit(1741935683.255:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.555246][ T26] audit: type=1326 audit(1741935683.255:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.599402][T13211] EXT4-fs (loop9): Test dummy encryption mode enabled [ 570.614156][T13211] EXT4-fs (loop9): Test dummy encryption mode enabled [ 570.681215][ T26] audit: type=1326 audit(1741935683.255:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.707475][ T26] audit: type=1326 audit(1741935683.255:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.708397][T13211] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 570.729994][ T26] audit: type=1326 audit(1741935683.255:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.730038][ T26] audit: type=1326 audit(1741935683.255:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.730075][ T26] audit: type=1326 audit(1741935683.255:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.730109][ T26] audit: type=1326 audit(1741935683.255:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13208 comm="syz.7.2097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f38fe9169 code=0x7ffc0000 [ 570.839928][T13211] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 571.630089][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 678.138723][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 678.145733][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P154/1:b..l [ 678.154197][ C0] (detected by 0, t=10503 jiffies, g=56701, q=70) [ 678.160713][ C0] task:kworker/u4:2 state:R running task stack:21728 pid: 154 ppid: 2 flags:0x00004000 [ 678.172855][ C0] Workqueue: netns cleanup_net [ 678.177682][ C0] Call Trace: [ 678.180975][ C0] [ 678.183920][ C0] __schedule+0x12c4/0x45b0 [ 678.188458][ C0] ? mark_lock+0x98/0x340 [ 678.192820][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 678.198822][ C0] ? release_firmware_map_entry+0x190/0x190 [ 678.204731][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 678.209948][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 678.215254][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 678.220387][ C0] ? __cond_resched+0xf0/0xf0 [ 678.225097][ C0] irqentry_exit+0x53/0x80 [ 678.229525][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 678.235526][ C0] RIP: 0010:lock_acquire+0x252/0x4f0 [ 678.240832][ C0] Code: 2b 00 74 08 4c 89 f7 e8 0c ac 67 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 678.260450][ C0] RSP: 0018:ffffc90001f578c0 EFLAGS: 00000206 [ 678.266537][ C0] RAX: 0000000000000001 RBX: 1ffff920003eaf24 RCX: 1ffff920003eaec4 [ 678.274530][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab3d00 RDI: ffffffff8af9fa80 [ 678.282520][ C0] RBP: ffffc90001f57a20 R08: dffffc0000000000 R09: fffffbfff2131e19 [ 678.290506][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920003eaf20 [ 678.298491][ C0] R13: dffffc0000000000 R14: ffffc90001f57920 R15: 0000000000000246 [ 678.306498][ C0] ? read_lock_is_recursive+0x10/0x10 [ 678.311898][ C0] ? __might_sleep+0xc0/0xc0 [ 678.316524][ C0] rcu_lock_acquire+0x2a/0x30 [ 678.321285][ C0] ? rcu_lock_acquire+0x5/0x30 [ 678.326084][ C0] inet_twsk_purge+0x129/0x9e0 [ 678.330887][ C0] ? __inet_twsk_schedule+0x130/0x130 [ 678.336280][ C0] ? iput+0x6f5/0x8b0 [ 678.340281][ C0] ? dccp_v6_exit_net+0x80/0x80 [ 678.345149][ C0] cleanup_net+0x886/0xc90 [ 678.349588][ C0] ? ops_free_list+0x340/0x340 [ 678.354384][ C0] process_one_work+0x8a1/0x10c0 [ 678.359354][ C0] ? worker_detach_from_pool+0x260/0x260 [ 678.365007][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 678.370569][ C0] ? kthread_data+0x4e/0xc0 [ 678.375091][ C0] ? wq_worker_running+0x97/0x170 [ 678.380155][ C0] worker_thread+0xaca/0x1280 [ 678.384880][ C0] kthread+0x3f6/0x4f0 [ 678.388962][ C0] ? rcu_lock_release+0x20/0x20 [ 678.393832][ C0] ? kthread_blkcg+0xd0/0xd0 [ 678.398448][ C0] ret_from_fork+0x1f/0x30 [ 678.402894][ C0] [ 678.405922][ C0] rcu: rcu_preempt kthread starved for 10528 jiffies! g56701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 678.417131][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 678.427103][ C0] rcu: RCU grace-period kthread stack dump: [ 678.432994][ C0] task:rcu_preempt state:R running task stack:27000 pid: 15 ppid: 2 flags:0x00004000 [ 678.443988][ C0] Call Trace: [ 678.447290][ C0] [ 678.450265][ C0] __schedule+0x12c4/0x45b0 [ 678.454796][ C0] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 678.460717][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 678.466645][ C0] ? __mod_timer+0xa8e/0xeb0 [ 678.471272][ C0] ? release_firmware_map_entry+0x190/0x190 [ 678.477180][ C0] ? mod_timer_pending+0x20/0x20 [ 678.482135][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 678.487527][ C0] schedule+0x11b/0x1f0 [ 678.491700][ C0] schedule_timeout+0x1b9/0x300 [ 678.496571][ C0] ? console_conditional_schedule+0x40/0x40 [ 678.502483][ C0] ? update_process_times+0x200/0x200 [ 678.507925][ C0] ? prepare_to_swait_event+0x321/0x340 [ 678.513600][ C0] rcu_gp_fqs_loop+0x2bf/0x1080 [ 678.518491][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 678.523712][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 678.528934][ C0] ? rcu_gp_init+0xdae/0x1140 [ 678.533632][ C0] ? rcu_gp_init+0x1140/0x1140 [ 678.538425][ C0] rcu_gp_kthread+0xa4/0x360 [ 678.543060][ C0] ? _raw_spin_unlock+0x40/0x40 [ 678.547928][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 678.553052][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 678.558964][ C0] ? __kthread_parkme+0x15c/0x1c0 [ 678.564005][ C0] kthread+0x3f6/0x4f0 [ 678.568086][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 678.573212][ C0] ? kthread_blkcg+0xd0/0xd0 [ 678.577817][ C0] ret_from_fork+0x1f/0x30 [ 678.582262][ C0] [ 678.585285][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 678.591608][ C0] NMI backtrace for cpu 0 [ 678.595952][ C0] CPU: 0 PID: 13263 Comm: syz.4.2114 Not tainted 5.15.179-syzkaller #0 [ 678.604199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 678.614349][ C0] Call Trace: [ 678.617639][ C0] [ 678.620511][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 678.625210][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 678.630859][ C0] ? panic+0x860/0x860 [ 678.634944][ C0] nmi_cpu_backtrace+0x46a/0x4a0 [ 678.639895][ C0] ? __wake_up_klogd+0xd5/0x100 [ 678.644762][ C0] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 678.650928][ C0] ? _printk+0xd1/0x120 [ 678.655117][ C0] ? cpu_online+0x1f/0x40 [ 678.659465][ C0] ? panic+0x860/0x860 [ 678.663555][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 678.669635][ C0] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 678.675643][ C0] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 678.681817][ C0] print_other_cpu_stall+0x137a/0x14d0 [ 678.687300][ C0] ? print_cpu_stall+0x600/0x600 [ 678.692246][ C0] ? ktime_get+0x7f/0x270 [ 678.696604][ C0] rcu_sched_clock_irq+0xa38/0x1150 [ 678.701829][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 678.706691][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 678.711910][ C0] ? hrtimer_run_queues+0x163/0x450 [ 678.717121][ C0] ? account_process_tick+0x232/0x3a0 [ 678.722516][ C0] update_process_times+0x196/0x200 [ 678.727736][ C0] tick_sched_timer+0x386/0x550 [ 678.732606][ C0] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 678.738169][ C0] __hrtimer_run_queues+0x55b/0xcf0 [ 678.743402][ C0] ? hrtimer_interrupt+0x980/0x980 [ 678.748531][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 678.754620][ C0] hrtimer_interrupt+0x392/0x980 [ 678.759593][ C0] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 678.765595][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 678.771249][ C0] [ 678.774189][ C0] [ 678.777124][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 678.783128][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 678.788945][ C0] Code: 31 60 f6 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ce 67 19 f7 48 89 df e8 26 bc 1a f7 e8 11 7c 3d f7 fb bf 01 00 00 00 16 00 0e f7 65 8b 05 87 d0 b8 75 85 c0 74 02 5b c3 e8 54 ed b6 [ 678.808561][ C0] RSP: 0018:ffffc90002dcfbc0 EFLAGS: 00000282 [ 678.814651][ C0] RAX: dbc352b3f065d500 RBX: ffff8880783e1bc0 RCX: ffffffff96a95f03 [ 678.822638][ C0] RDX: dffffc0000000000 RSI: ffffffff8aab2a60 RDI: 0000000000000001 [ 678.830622][ C0] RBP: 0000000000000000 R08: ffffffff81871b70 R09: ffffed100f07c379 [ 678.838605][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000021 [ 678.846586][ C0] R13: dffffc0000000000 R14: ffff8880783e2058 R15: ffff8880783e1bc0 [ 678.854599][ C0] ? trace_hardirqs_on+0x30/0x80 [ 678.859566][ C0] get_signal+0x13ee/0x14e0 [ 678.864103][ C0] arch_do_signal_or_restart+0xc3/0x1890 [ 678.869758][ C0] ? __do_compat_sys_x32_rt_sigreturn+0x250/0x250 [ 678.876200][ C0] ? __might_fault+0xb4/0x110 [ 678.880897][ C0] ? _copy_from_user+0x10f/0x170 [ 678.885847][ C0] ? restore_altstack+0x274/0x400 [ 678.890888][ C0] ? get_sigframe_size+0x10/0x10 [ 678.895844][ C0] ? __ia32_sys_sigaltstack+0x60/0x60 [ 678.901242][ C0] ? __do_sys_rt_sigreturn+0x19d/0x250 [ 678.906750][ C0] ? exit_to_user_mode_loop+0x39/0x130 [ 678.912237][ C0] exit_to_user_mode_loop+0x97/0x130 [ 678.917535][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 678.923116][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 678.928697][ C0] do_syscall_64+0x47/0xb0 [ 678.933137][ C0] ? clear_bhb_loop+0x15/0x70 [ 678.937839][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 678.943766][ C0] RIP: 0033:0x7fca58d7f167 [ 678.948211][ C0] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 678.967827][ C0] RSP: 002b:00007fca56be8038 EFLAGS: 00000246 [ 678.973910][ C0] RAX: 0000000000000113 RBX: 00007fca58f97fa0 RCX: 00007fca58d7f169 [ 678.981892][ C0] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 678.989871][ C0] RBP: 00007fca58e002a0 R08: 0000000008000f28 R09: 0000000000000000 [ 678.997854][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.005830][ C0] R13: 0000000000000000 R14: 00007fca58f97fa0 R15: 00007ffde0cf5c88 [ 679.013830][ C0]