last executing test programs: 20.850417998s ago: executing program 0 (id=168): openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) creat(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0) mmap(&(0x7f000047d000/0x9000)=nil, 0x9000, 0x200000f, 0x2012, r5, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f00000004c0)=[{}], 0x1, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0x0, 0x2}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) 17.850479873s ago: executing program 1 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb0b}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x24e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x200040c0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0xc810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500020001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000007c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r9, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x1f}, 0x1c) 16.865974747s ago: executing program 2 (id=176): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r1, r1}, &(0x7f0000000200)=""/211, 0xd3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@nodelalloc}]}, 0x6, 0x756, &(0x7f00000002c0)="$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") chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1243, @fixed}, 0xe) r4 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='devtmpfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) symlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 15.785068618s ago: executing program 0 (id=179): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @dev}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1a0d01080001"], 0x1d) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newsa={0x14c, 0x10, 0x413, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x70bd2a, 0x0, 0xa, 0x1}, [@algo_aead={0x5b, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x78, 0x60, "25cac5216d1c8af0a976902918bf44"}}]}, 0x14c}}, 0x0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x102, 0x0) sendfile(r6, r6, 0x0, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80dc5521, &(0x7f0000002300)=""/4115) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) 15.700821155s ago: executing program 1 (id=180): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1c00000003060102000000000000000000001f000500010007000000b3db78940ae53effbcca5a4207ed195d90b3fe4a00"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800c80, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@noblock_validity}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9b}}, {@nodiscard}]}, 0x0, 0x466, &(0x7f0000000400)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000600)={0xa}) 14.212330742s ago: executing program 1 (id=182): timer_create(0x3, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) r2 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@getchain={0x24, 0x66, 0x300, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffff, 0xc}, {0xffff, 0xa}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8008) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020660b, &(0x7f0000000040)={0x0, 0x10000002000003}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000013000500000000000000000007000000", @ANYRES8=r2, @ANYBLOB="51aa0000000000000c001a800800028004000300"], 0x2c}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4000050) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000600), &(0x7f0000000400)) 13.720727684s ago: executing program 4 (id=184): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x1, 0x151b, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0x48, 0x0) keyctl$search(0xa, r1, &(0x7f0000000180)='pkcs7_test\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x1098c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(r5, r4, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 13.593290254s ago: executing program 2 (id=185): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r1, r1}, &(0x7f0000000200)=""/211, 0xd3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@nodelalloc}]}, 0x6, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1243, @fixed}, 0xe) r3 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110350000000000a5000000000000019500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 9.41275726s ago: executing program 0 (id=188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xb0b}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={0x0}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x24e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x200040c0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0xc801}, 0xc810) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r5, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x4, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500020001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000007c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) r9 = socket$inet6(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r9, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x1f}, 0x1c) 9.195456588s ago: executing program 3 (id=189): openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) open(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0) mmap(&(0x7f000047d000/0x9000)=nil, 0x9000, 0x200000f, 0x2012, r5, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f00000004c0)=[{}], 0x1, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0x0, 0x2}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) 9.042939081s ago: executing program 2 (id=190): openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0) mmap(&(0x7f000047d000/0x9000)=nil, 0x9000, 0x200000f, 0x2012, r5, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f00000004c0)=[{}], 0x1, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0x0, 0x2}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) 8.964129878s ago: executing program 0 (id=191): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000040)={0x6, 0x1}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x15, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "be1d0000ae9ef30bea2a004000010000000000008000"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, &(0x7f0000003d40)=""/175) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b0d, &(0x7f0000001980)={'veth1_to_team\x00', @broadcast}) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x5, {0x5, 0x0, "a8dad2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 6.774281444s ago: executing program 3 (id=192): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000019c0)=ANY=[@ANYBLOB="1c00000003060102000000000000000000001f000500010007000000b3db78940ae53effbcca5a4207ed195d90b3fe4a00"], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800c80, &(0x7f0000000340)={[{@resuid={'resuid', 0x3d, 0xee01}}, {@noblock_validity}, {@usrquota}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xa9b}}, {@nodiscard}]}, 0x0, 0x466, &(0x7f0000000400)="$eJzs3c9vFFUcAPDvzG4BQdmKiIKgVTQ2/mhpQeXgRaOJB01M9ICJl9oWgizU0JoIIVqNwaMh8W48mvgHGE+ejHoy8ap3Q0KQmIBeXDO7M7C77BbabtnKfj7Jwns7b+a9b2fe7Nv3dtsABtZI9k8ScWdE/BYRlUa2tcBI478rl85M/33pzHQStdobF5N6ucuXzkwXRYv9tuSZ0TQi/TTJK2k1f+r0salqdfZknh9fOP7e+Pyp008fPT51ZPbI7InJgwcP7J947tnJZ3oSZxbf5V0fzu3e+cpb516bPnTunZ++ydq7Y09je3McvTKSBf5nra5922O9rqzP/q1dizMp97s13KxSRGSna6je/ytRimsnrxIvf9LXxgFrKrtnb+y+ebEG3MaS6HcLgP4oXuiz97/F4xYNPdaFCy803gBlcV/JH40t5UjzMkNrWP9IRBxa/OfL7BFt8xC1DvMGAACr9X02/nmq0/gvjR1N5bbma0PDEXF3RGyLiHsiYntE3BtRL3tfRNy/zPrbl4auH3+m51cU2E3Kxn/P52tbreO/YvQXw6U8d1c9/qHk8NHq7L78ZzIaQxuz/ESngxeHeOnXz7vV3zz+yx5Z/cVYMD/I+XLbBN3M1MJUrwalFz6O2FXuFH9ydSUgiYidEbFreYfeWiSOPvH17m6Fbhz/EnqwzlT7KuLxxvlfjLb4C8nS65Pjm6I6u2+8uCqu9/MvZ1/vVv+q4u+B7Pxvbr3+20pU/kqa12vnl1/H2d8/6/qesrzC639D8mZ9TXdD/twHUwsLJyciNiSv1vMtz09e27fIF+Wz+Ef3du7/2/J9svgfiIjsIt4TEQ9GxEP5uXs4Ih6JiL1LxP/ji4++223bejj/Mx3vf1ev/+HW87/8ROnYD991q//m7n8H6qnR/Jn6/e8GujdnU15ipVczAAAA/P+k9c/GJ+nY1XSajo01PsO/PTan1bn5hScPz71/YqbxGfrhGEqLma5K03zoRLKYH7GRn8zniovt+/N54y9Kd9TzY9Nz1Zk+xw6DbkuX/p/5o9Tv1gFrzve1YHC19/90ibIXv13jxgC3lNd/GFz6Pwwu/R8GV6f+/1Fb3loA3J68/sPg0v9hUNUq+j8MLv0fBtJqvtffSGRHWcHuxe8v6bCpvMS39yXWSeLt/C83rJf2SDQlyj3o3X26IQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTYfwEAAP//uBLtyQ==") openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000600)={0xa}) 5.198821818s ago: executing program 2 (id=193): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000019500)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000"], &(0x7f0000000300)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100}, 0x90) ioctl$RTC_PIE_ON(r2, 0x7005) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x3c, r5, 0x1, 0x0, 0x0, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x7}]}, 0x3c}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mremap(&(0x7f00007c9000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r6, &(0x7f00000003c0)=""/102392, 0x18ff8) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="93d904000003", 0x6}, {&(0x7f0000000140)="04a142522d9776", 0x7}], 0x2) sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) 5.198664588s ago: executing program 3 (id=194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x12, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) preadv(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, 0x0, 0x40000022) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600000000000000000038"], 0x69) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 5.198506808s ago: executing program 4 (id=195): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0xffffffff, 0x2000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001580)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000bf4a6ade6dd0745a600728897b9512b190d774ad4de3ceb1f240c579896911afac1f7c235492f82c4a852364ae05d56339c5683e24fe97f7a453fddae39620917750d120c48b95bd243bf75999df6f41be9573877efcbd0292a0192841f5ba50323d450da3f695f5e00f7b9076ed42143d94466d9b7952f9200047e026d5bd", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r4 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[], 0x0, 0xc200}) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000000)=0x7) r8 = socket(0x1d, 0x3, 0x1) getsockopt$nfc_llcp(r8, 0x65, 0x6, 0x0, 0x20000000) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0x4004ae8b, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x5000, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x1f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x4}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) 5.187052489s ago: executing program 1 (id=203): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x1, 0x151b, &(0x7f0000001580)="$eJzs3AuUjlXbOPB97b3vMaZJT5Mchn3t6+ZJg22SJIeEHJIkSZKcEpImSRISQ05JQxJynCSHISSHaUwa5/Mh56TJK0mSkJBk/5fe3k/93/d7D+vt+7zrm+u31l6zr7mfaz/Xfq5Z89zPvdb9fNNjZN3m9Wo1JSLxb4E//0gVQsQKIYYKIa4RQgRCiIoJFRMuHc+vIPXfexL2x3ow40pXwK4k7n/exv3P27j/eRv3P2/j/udt3P+8jfuft3H/GcvLts0uei2PvDv4+n9exu///4ccLjfpiw3lru/5L6Rw//M27n/exv3P27j/eRv3P2/j/v/fV/PvHOP+523cf8bysv+6FnzBe/8fcD2ax//uuNJ/f4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHG8oZz/jIthPjL/ErXxRhjjDHGGGOMsT+Oz3elK2CMMcYYY4wxxtj/PBBSKKFFIGJEPhEr8os4cZWIF1eLAuIaERHXigRxnSgorheFRGFRRBQViaKYKC6MQGEFiVCUECVFVNwgSokbRZIoLcqIssKJciJZ3CTKi5tFBXGLqChuFZXEbaKyqCKqimridlFd3CFqiJqilrhT1BZ1RF1RT9wl6ou7RQNxj2go7hWNxH2isbhfNBEPiKbiQdFMPCSai4dFC/GIaClaidaijWj7+/wp/1z+C6KPeFH0Ff1EqugvBoiXxEAxSAwWQ8RQ8bIYJl4Rw8WrIk2MECPFa2KUeF2MFm+IMWKsGCfeFOPFBDFRTBKTxRSRLt4SU8XbYpp4R0wXM8RMMUtkiNlijnhXzBXzxHzxnlgg3hcLxSKxWCwRmeIDkSWWimzxoVgmPhI5YrlYIVaKVWK1WCPWinVivdggNopNYrPYIraKbeJjsV3sEDvFLrFb7BF7xSdin/hU7BefiVzx+b+Yf/b/y+8JAgRIkKBBQwzEQCzEQhzEQTzEQwEoABGIQAIkQEEoCIWgEBSBIpAIiVAcigMCAgFBCSgBUYhCKSgFSZAEZaAMOHCQDMlQHm6GClABKkJFqASVoDJUgSpQDapBdagONaAG1IJaUBtqQ12oC3fBXXA3NIAG0BAaQiNoBI2hMTSBJtAUmkIzaAbNoTm0gBbQElpCa2gNbaEttIN20B7aQ0foCJ2gE3SGzpACKdAFukBX6ArdoBt0h+7QA3pAT+gFveAFeAFehBehH9SW/WEADICBMBAGwxAYAi/DMHgFXoFXIQ1GwEh4DV6D12E0nIExMBbGwTioLifARJgEJKdAOqTDVJgK02AaTIcZMANmQQbMhjkwB+bCPJgH78ECeB/eh0WwCJZAJmRCFiyFbMiGZXAWcmA5rICVsApWwypYC+tgLWyAjbABNsNm2Apb4WP4GHbADtgFu2AP7IFP4BP4FD6FNMiFXDgAB+AgHIRDcAgOw2E4AkfgKByFY3AMjsNxOAEn4RSchNNwGs7AWTgH5+A8nIcL8FziV832lF6fJuQlWmoZI2NkrIyVcTJOxst4WUAWkBEZkQkyQRaUBWUhWUgWkUVkokyUxWVxiRIlyVCWkCVkVEZlKVlKJskkWUaWkU46mSyTZXlZXlaQFWRFeausJG+TlWUV2cFVk9VkddnR1ZA1ZS1ZS9aWdWRdWU/Wk/VlfdlANpANZUPZSDaSjeX9sonsD4PhQXmpM83lCGghR0JL2Uq2lm3k6/CobCdHQ3vZQXaUj8uxMAY6y3YuRT4lu8iJ0FU+IyfBs7K7nAI95POyp+wle8sXZB/Z3vWV/eR06C8HyFkwUA6Sg+UQORfqyEsdqytflWlyhBwpX5NL4HU5Wr4hx8ixcpx8U46XE+REOUlOllNkunxLTpVvy2nyHTldzpAz5SyZIWfLOfJdOVfOk/Ple3KBfF8ulIvkYrlEZsoPZJZcKrPlh3KZ/EjmyOVyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8mP5Xa5Q+6Uu+RuuUfulZ/IffJTuV9+JnPl5/KA/JM8KL+Qh+SX8rD8Sh6RX8uj8ht5TH4rj8vv5Al5Up6S38vT8gd5Rp6V5+SP8rz8SV6QP8uL0kuhQEmllFaBilH5VKzKr+LUVSpeXa0KqGtURF2rEtR1qqC6XhVShVURVVQlqmKquDIKlVWkQlVClVRRdYMqpW5USaq0KqPKKqfKqWR1kyqvblYV1C2qorpVVVK3qcqqiqqqqqnbVXV1h6qhaqpa6k5VW9VRdVU9dZeqr+5WDdQ9qqG6VzVS96nG6n7VRD2gmqoHVTP1kGquHlYt1COqpWqlWqs2qq16VLVTj6n2qoPqqB5XndQTqrN6UqWop1QX9bTqqp5R3dSzqrt6TvVQz6ueqpfqrX5WF5VXfVU/lar6qwHqJTVQDVKD1RA1VL2shqlX1HD1qkpTI9RI9ZoapV5Xo9Ubaowaq8apN9V4NUFNVJPUZDVFpau31FT1tpqm3lHT1Qw1U81SGWq2GvzrSvP/ify3/0b+8F+efavapj5W29UOtVPtUrvVHrVX7VX71D61X+1XuSpXHVAH1EF1UB1Sh9RhdVgdUUfUUXVUHVPH1HF1XJ1QJ9WP6nt1Wv2gzqiz6qz6UZ1X59WFX18DoUFLrbTWgY7R+XSszq/j9FU6Xl+tC+hrdERfqxP0dbqgvl4X0oV1EV1UJ+piurg2GrXVpENdQpfUUX2DLqVv1Em6tC6jy2qny+lkfdO/nf+P6mur2+p2up1ur9vrjrqj7qQ76c66s07RKbqL7qK76q66m+6mu+vuuofuoXvqnrq37q376D66r+6rU3WqHqBf0gP1ID1YD9FD9ct6mB6mh+vhOk2n6ZF6pB6lR+nRerQeo8focXqcHq/H64l6op6sJ+t0na6n6ql6mp6mp+vpeqaeqTN0hp6j5+i5eq6er+frBXqBXqgX6sV6sc7UmTpLZ+lsna2X6WU6Ry/Xy/VKvVKv1qv1Wr1Wr9fr9Ua9UW/Wm3WO3qa36e16u96pd+rderfeq/fqfXqf3q/361ydqw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6or546bQvkIEMdKCDmCAmiA1ig7ggLogP4oMCQYEgEkSChCAhKBhcHxQKCgdFgqJBYlAsKB6YAAMbUBAGJYKSQTS4ISgV3BgkBaWDMkHZwAXlguTgpqB8cHNQIbglqBjcGlQKbgsqB1WCqkG14PagenBHUCOoGdQK7gxqB3WCukG94K6gfnB30CC4J2gY3Bs0Cu4LGgf3B02CB4KmwYNBs+ChoHnwcNAieCRoGbQKWgdtgrZ/6Prenyn8mOtr+plU098MMC+ZgWaQGWyGmKHmZTPMvGKGm1dNmhlhRprXzCjzuhlt3jBjzFgzzrxpxpsJZqKZZCabKSbdvGWmmrfNNPOOmW5mmJlmlskws80c866Za+aZ+eY9s8C8bxaaRWaxWWIyzQcmyyw12eZDs8x8ZHLMcrPCrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzMdmu9lhdppdZrfZY/aaT8w+86nZbz4zueZzc8D8yRw0X5hD5ktz2HxljpivzVHzjTlmvjXHzXfmhDlpTpnvzWnzgzljzppz5kdz3vxkLpifzUXjL53cX3p7R40aYzAGYzEW4zAO4zEeC2ABjGAEEzABC2JBLISFsAgWwURMxOJYHC8hJCyBJTCKUSyFpTAJk7AMlkGHDpMxGctjeayAFbAiVsRKWAkrY2WsilXxdrwd78A7sCbWxDvxTqyDdbAe1sP6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2w+bYHFtgC2yJLbE1tsa22BbbYTtsj+2xI3bETtgJO2NnTMEU7IJdsCt2xW7YDbtjd+yBPbAn9sTe2Bv7YB/si30xFVNxAA7AgTgQB+NgHIpDcRgOw+E4HNMwDUfiSByFo3A0jsYxOBbH4Zs4HifgRJyEk3EKpmM6TsWpOA2n4XScjjNxJmZgBs7BOTgX5+J8nI8LcAEuxIW4GBdjJmZiFmZhNmbjMlyGOZiDK3AFrsJVuAbX4DpchxtwA27CTbgFt+A23IbbcTvuxJ24G3fjXtyL+3Af7sf9mIu5eAAP4EE8iIfwEB7Gw3gEj+BRPIrH8Bgex+N4Ak/gKTyFp/E0nsEzeA7P4Xn8CS/gz3gRPcZaKeLsVTbeXm0L2GtsrM1vfxsXsUVtoi1mi1tjC9nCv4vRWptkS9sytqx2tpxNtjf9JbZ/iSvbKraqrWZvt9XtHbbGX8X17d22gb3HNrT32nr2rt/Fjex9trF92Daxj9imtpVtZtvY5vZh28I+YlvaVra1bWM72SdsZ/ukTbFP2S726b+Ks+xSu86utxvsRrvPfmrP2R/tUfuNPW9/sn1tPzvUvmyH2VfscPuqTbMj/ioeZ9+04+0EO9FOspPtlL+KZ9pZNsPOtnMsiLl23m/id+2lONN+YBdYAQvtIrvYLvklvlRTtv3QLrMf2Ry73K6wK+0qu9qusWv/q9aVdrPdYrfavfYTu93usDvtLrvb7vklvrSP/fYzm2s/t0fs1/ag/cIessfsYfvVL/Gl/R2z39rj9jt7wp60p+z39rT9wZ6xZ3/Z/6W9f29/thett4KAJCnSFFAM5aNYyk9xdBXF09VUgK6hCF1LCXQdFaTrqRAVpiJUlBKpGBUnQ0iWiEIqQSUpSjdQKbqRkqg0laGy5KgcJdNNVJ5upgp0C1WkW6kS3UaVqQpVpWp0O1WnO6gG1aRadCfVpjpUl+rRXVSf7qYGdA81pHupEd1Hjel+akIPUFN6kJrRQ9ScHqYW9Ai1pFbUmtpQW3qU2tFj1J46UEd6nDrRE9SZnqQUeoq60NPUlZ6hbvQsdafnqAc9Tz2pF/WmF6gPvUh9qR+lUn8aQC/RQBpEg2kIDaWXaRi9QsPpVUqjETSSXqNR9DqNpjdoDI2lcfQmjacJNJEm0WSaQun0Fk2lt2kavUPTaQbNpFmUQbNpDr1Lc2kezaf3aAG9TwtpES2mJZRJH1AWLaVs+pCW0UeUQ8tpBa2kVbSa1tBaWkfraQNtpE20mbbQVtpGH9N22kE7aRftpj20lz6hffQp7afPKJc+pwP0JzpIX9Ah+pIO01d0hL6mo/QNHaNv6Th9RyfoJJ2i7+k0/UBn6Cydox/pPP1EF+hnukieRAihDFWowyCMCfOFsWH+MC68KowPrw4LhNeEkfDaMCG8LiwYXh8WCguHRcKiYWJYLCwemhBDG1IYhiXCkmE0vCEsFd4YJoWlwzJh2dCF5cLk8KawfHhzWCG8JawY3hpWCm8LK4dVwofvrRbeHlYP7whrhDXDWuGdYe2wTlg3rBfeFdYP7w4bhPeEDcN7wwrhfWHj8P6wSfhA2DR8MGwWPhQ2Dx8OW4SPhC3DVmHrsE3YNnw0bBc+FrYPO4Qdw8fDTuETYefwyTAlfCrsEj79D4+nhv3DAeFL4Uuh9/eoxdEl0czoB9Gs6NJodvTD6LLoR9Gc6PLoiujK6Kro6uia6Nrouuj66Iboxuim6ObolujWqPf18gkHTjrltAtcjMvnYl1+F+eucvHualfAXeMi7lqX4K5zBd31rpAr7Iq4oi7RFXPFnXHorCMXuhKupIu6G1wpd6NLcqVdGVfWOVfOJbs2rq1r69q5x1x718F1dI+7x90T7gn3pHvSPeW6uKddV/eM6+aedd3dc+4597zr6Xq53u4F18e96Pq6fi7VpboBboAb6Aa6wW6wG+qGumFumBvuhrs0l+ZGupFulBvlRrvRbowb48a5cW68G+8muoluspvs0l26m+qmumlumpvupruZbqbLcBlujpvj5rq5br6b7xYkLXAL3UK32C12mS7TZbksl+2y3TK3zOW4HLfCrXCr3Cq3xq1x69w6t8FtcJvcJrfFbXHb3Da33W13O91Ot9vtdnvdXrfP7XP73X6X63LdAXfAHXQH3SH3pTvsvnJH3NfuqPvGHXPfuuPuO3fCnXSn3PfutPvBnXFn3Tn3ozvvfnIX3M/uovMuPfJWZGrk7ci0yDuR6ZEZkZmRWZGMyOzInMi7kbmReZH5kfciCyLvRxZGFkUWR5ZEMiMfRLIiSyPZkQ8jyyIfRXIiyyMrIisjqyKrI94X2x76Er6kj/obfCl/o0/ypX0ZX9Y7X84n+5t8eX+zr+Bv8RX9rb6Sv81X9lV8Vf+Ib+lb+da+jW/rH/Xt/GO+ve/gO/rHfSf/hO/sn/Qp/infxT/tu/pnfDf/rO/un/M9/PO+p+/le/sXfB//ou/r+/lU398P8C/5gX6QH+yH+KH+ZT/Mv+KH+1d9mh/hR/rX/Cj/uh/t3/Bj/Fg/zr/px/sJfqKf5Cf7KT7dv+Wn+rf9NP+On+5n+Jl+ls/ws/0c/66f6+f5+f49v8C/7xf6RX6xX+Iz/Qc+yy/12f5Dv8x/5HP8cr/Cr/Sr/Gq/xq/16/x6v8Fv9Jv8Zr/Fb/Xb/Md+u9/hd/pdfrff4/f6T/w+/6nf7z/zuf5zf8D/yR/0X/hD/kt/2H/lj/iv/VH/jT/mv/XH/Xf+hD/pT/nv/Wn/gz/jz/pz/kd/3v/kL/if/UW+Z40xxhhj7J/yj+717/83fid/HZcMEEJcvaPos789roUQmwr9eT5IJnaKCCGe6tfjwb+M2rVTU1N/fWyOEkHJRUKIyOX8GHE5Xi46iidEiuggyv/N+gbJXufp76wPJ7yP3ipE3G9yYsXl+PL6N/836z/6+LisSuG5hN+vf+HX1+1S/dFFQiSVvJyTX1yOL69f4b9Zv3C7v1d/jhL5v0gXov1vcuLF5fjy+sniMfG0SPndIxljjDHGGGOMsT8bJKt2q/pPfD5P1Jdz8onL8T/6fM4YY4wxxhhjjLEr79levZ98NCWlQ7c8PYkR/xFl8IQn/zGTK/2fiTHGGGOMMfZHu3zS/y8k9Yb/wYoYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLG853/j68Su9B4ZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BQAA//8vFUY1") openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0x48, 0x0) keyctl$search(0xa, r1, &(0x7f0000000180)='pkcs7_test\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x1098c0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(r5, r4, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.209836692s ago: executing program 4 (id=196): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x22) io_uring_setup(0x30d6, &(0x7f00000003c0)) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r2 = dup(r1) read(r1, &(0x7f0000000040)=""/19, 0x13) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f046}) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x237, 0x0, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000300)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x8, 0x0, &(0x7f0000000000)) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, 0x0, 0x40461c0) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.39877243s ago: executing program 4 (id=197): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x400401) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r3, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') chmod(&(0x7f0000000080)='./file1\x00', 0x0) linkat(r3, 0x0, r3, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000004c0)='./bus\x00', r4, &(0x7f0000000500)='./file0\x00', 0x0) 3.397970481s ago: executing program 2 (id=198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000020, 0x0, 0xffffffffffffff22) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040), &(0x7f0000000140)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) r3 = epoll_create(0x6bd0cc) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x0, 0x7, 0xa}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000001700)={0x40000001}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0xffffffff, 0x0, 0x0) keyctl$join(0x1, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) 3.397422401s ago: executing program 3 (id=199): sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xb635773f04ebbeea, 0x1010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f00000010c0)=""/4106, 0x100a}], 0x1, 0x7a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x1c, r3, 0x603, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TCXONC(r6, 0x540a, 0x2) ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000680), 0x4924924924925c6, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 2.446576842s ago: executing program 2 (id=200): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r1, r1}, &(0x7f0000000200)=""/211, 0xd3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100)={[{@nodelalloc}]}, 0x6, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1243, @fixed}, 0xe) r3 = socket(0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0) mmap(&(0x7f000047d000/0x9000)=nil, 0x9000, 0x200000f, 0x2012, r5, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f00000004c0)=[{}], 0x1, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0x0, 0x2}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) 2.185808134s ago: executing program 0 (id=204): openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(0x0, 0x0, 0x0) creat(0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0) mmap(&(0x7f000047d000/0x9000)=nil, 0x9000, 0x200000f, 0x2012, r5, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f00000004c0)=[{}], 0x1, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r7, 0x0, 0x0, 0x2}) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) 2.106581531s ago: executing program 4 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2d2e8d72", @ANYRES16=r3, @ANYBLOB="010000000000000000004a00000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d"], 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r7, 0xc03064ca, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB(r10, 0xc01c64ad, &(0x7f0000000000)={r9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000630100000000000095000000000000001bbfd4490c431725d0babd02fdba34396388c36d9b804085f6fa9a3ecd4dbedd899208f6b220a2ec40bec5d47473eb9a72c7fc159803cce45f98d9c1837ffd92dd0f326fba1c6cab4ea7ed293176c304a79b55a4a1340fb5a433106733514e8412e82cf1ef3d2e7d01f1785a8fe935b697207af86c339c809c9cad7cc95855e6c14ac3bdba8314e579de09862a59f0721745d5093f0f6be570425ec72c73f22b5eb58463d174c660d0062ad7bf94a8f725bae8c35a022c733c7802712b259e11699037520919eab9942b49526c5e535f68ddd1b51f2143df0d"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a}, 0x90) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000100)={[{}, {@gid}, {@nobarrier}, {@barrier}, {@force}, {}, {@nls={'nls', 0x3d, 'iso8859-13'}}, {@nobarrier}, {@type={'type', 0x3d, "666b6e99"}}]}, 0x1, 0x6dd, &(0x7f0000000240)="$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") mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r10, 0x100000000) 333.656141ms ago: executing program 3 (id=206): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x600}}, {@grpquota}]}, 0xfe, 0x46a, &(0x7f0000000dc0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) getgroups(0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "fe80f8aea80baf6fa68ed65bf05547fc83e96e", 0x0, 0x7fffffff}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3, &(0x7f0000000d40), 0x9, 0x61d, &(0x7f0000000700)="$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") mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000001400)) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1b8a877, &(0x7f0000000000)={[{@nr_inodes}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000200), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2, &(0x7f0000001280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}, 0x3) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') 0s ago: executing program 1 (id=207): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='sched_kthread_stop\x00'}, 0xffffffffffffffd5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$notify(r4, 0x402, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500), 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x4}, @generic={0x0, 0x2}]}}}}}}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x4, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@llx, {0x3, 0x3, 0x3, 0x4, 0x9}, {0x7, 0x1, 0xb, 0x1, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5d}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x800, 0x0) epoll_create1(0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 52.841960][ T3630] cgroup: Unknown subsys name 'net' [ 52.947764][ T3630] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.381204][ T3630] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.685553][ T3645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.693834][ T3645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.701606][ T3645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.709553][ T3645] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.718650][ T3645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.722245][ T3657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.726374][ T3645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.733524][ T3657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.740590][ T3645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.748278][ T3657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.754165][ T3645] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.761102][ T3657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.767985][ T3645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.775647][ T3657] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.781915][ T3645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.790129][ T3657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.796490][ T3645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.802764][ T3657] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.810207][ T3645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.816781][ T3657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.830853][ T3645] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.831164][ T3657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.838188][ T3645] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.845140][ T3657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.859733][ T3645] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.859892][ T3658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.874082][ T3658] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.882042][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.973822][ T3656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.981313][ T3656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.307278][ T3640] chnl_net:caif_netlink_parms(): no params data found [ 56.368781][ T3647] chnl_net:caif_netlink_parms(): no params data found [ 56.448038][ T3644] chnl_net:caif_netlink_parms(): no params data found [ 56.485501][ T3642] chnl_net:caif_netlink_parms(): no params data found [ 56.521072][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.528887][ T3640] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.537224][ T3640] device bridge_slave_0 entered promiscuous mode [ 56.549138][ T3640] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.556911][ T3640] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.564857][ T3640] device bridge_slave_1 entered promiscuous mode [ 56.608890][ T3646] chnl_net:caif_netlink_parms(): no params data found [ 56.625127][ T3647] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.632276][ T3647] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.640116][ T3647] device bridge_slave_0 entered promiscuous mode [ 56.671116][ T3640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.680422][ T3647] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.688648][ T3647] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.699582][ T3647] device bridge_slave_1 entered promiscuous mode [ 56.722962][ T3640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.750473][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.757861][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.765864][ T3644] device bridge_slave_0 entered promiscuous mode [ 56.796864][ T3644] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.806133][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.814370][ T3644] device bridge_slave_1 entered promiscuous mode [ 56.830999][ T3647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.864311][ T3640] team0: Port device team_slave_0 added [ 56.871588][ T3647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.899640][ T3640] team0: Port device team_slave_1 added [ 56.919336][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.926518][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.934802][ T3642] device bridge_slave_0 entered promiscuous mode [ 56.957888][ T3644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.975586][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.982807][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.990470][ T3642] device bridge_slave_1 entered promiscuous mode [ 56.997749][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.005039][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.013383][ T3646] device bridge_slave_0 entered promiscuous mode [ 57.030024][ T3644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.041293][ T3647] team0: Port device team_slave_0 added [ 57.054541][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.061606][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.069745][ T3646] device bridge_slave_1 entered promiscuous mode [ 57.077423][ T3640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.084517][ T3640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.110495][ T3640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.131203][ T3647] team0: Port device team_slave_1 added [ 57.155356][ T3640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.162659][ T3640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.188643][ T3640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.221495][ T3642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.251588][ T3644] team0: Port device team_slave_0 added [ 57.259386][ T3642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.269032][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.276360][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.302518][ T3647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.315693][ T3646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.326791][ T3646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.337752][ T3644] team0: Port device team_slave_1 added [ 57.359377][ T3647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.366856][ T3647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.393528][ T3647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.468231][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.475398][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.502185][ T3644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.516281][ T3642] team0: Port device team_slave_0 added [ 57.540165][ T3646] team0: Port device team_slave_0 added [ 57.548685][ T3646] team0: Port device team_slave_1 added [ 57.555033][ T3644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.562447][ T3644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.588894][ T3644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.601166][ T3642] team0: Port device team_slave_1 added [ 57.612056][ T3647] device hsr_slave_0 entered promiscuous mode [ 57.618889][ T3647] device hsr_slave_1 entered promiscuous mode [ 57.629554][ T3640] device hsr_slave_0 entered promiscuous mode [ 57.638030][ T3640] device hsr_slave_1 entered promiscuous mode [ 57.644728][ T3640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.652669][ T3640] Cannot create hsr debugfs directory [ 57.696273][ T3646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.703351][ T3646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.729456][ T3646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.750634][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.757716][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.783968][ T3642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.796345][ T3646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.803530][ T3646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.829460][ T3646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.852432][ T3642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.859404][ T3642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.885582][ T3642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.912564][ T3656] Bluetooth: hci0: command tx timeout [ 57.918538][ T3656] Bluetooth: hci1: command tx timeout [ 57.987598][ T3644] device hsr_slave_0 entered promiscuous mode [ 57.993806][ T3656] Bluetooth: hci3: command tx timeout [ 57.999648][ T3644] device hsr_slave_1 entered promiscuous mode [ 58.002151][ T3656] Bluetooth: hci4: command tx timeout [ 58.011332][ T3644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.022399][ T3644] Cannot create hsr debugfs directory [ 58.047529][ T3646] device hsr_slave_0 entered promiscuous mode [ 58.054592][ T3646] device hsr_slave_1 entered promiscuous mode [ 58.061099][ T3646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.069024][ T3646] Cannot create hsr debugfs directory [ 58.081828][ T3641] Bluetooth: hci2: command tx timeout [ 58.112333][ T3642] device hsr_slave_0 entered promiscuous mode [ 58.119077][ T3642] device hsr_slave_1 entered promiscuous mode [ 58.125946][ T3642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.136368][ T3642] Cannot create hsr debugfs directory [ 58.420493][ T3640] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.431167][ T3640] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.443831][ T3640] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.457292][ T3640] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.509769][ T3646] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.518705][ T3646] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.535329][ T3646] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.568636][ T3646] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.588758][ T3644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.597613][ T3644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.615251][ T3644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.629525][ T3644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.696407][ T3640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.728449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.741131][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.768795][ T3642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.778242][ T3642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.813486][ T3640] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.820329][ T3642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.834360][ T3642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.889404][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.898694][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.910686][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.918028][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.930489][ T3646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.960413][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.970564][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.979956][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.989614][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.996711][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.009055][ T3647] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.034129][ T3644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.044259][ T3646] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.052014][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.059887][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.069099][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.080224][ T3647] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.098056][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.108224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.117435][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.126791][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.133878][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.142390][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.152316][ T3647] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.164899][ T3647] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.182504][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.192272][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.200741][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.215977][ T3644] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.239393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.249070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.258078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.268707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.279779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.288420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.297328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.306185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.333819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.343242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.353176][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.360245][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.368050][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.379261][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.388186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.397000][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.404136][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.412930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.429548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.439131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.448280][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.455430][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.497635][ T3642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.520433][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.530706][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.542960][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.578463][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.589432][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.599542][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.611261][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.620107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.629182][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.637722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.648322][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.657410][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.666224][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.675904][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.684223][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.692582][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.700557][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.711381][ T3642] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.723206][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.731620][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.771433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.780980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.791097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.800365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.809445][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.816628][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.825839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.856654][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.867162][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.876169][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.887869][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.897087][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.905744][ T1187] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.912883][ T1187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.920570][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.938622][ T3646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.966270][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.975585][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.988011][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.997381][ T3641] Bluetooth: hci0: command tx timeout [ 60.002280][ T3656] Bluetooth: hci1: command tx timeout [ 60.004303][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.019256][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.027976][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.040433][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.049778][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.058693][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.067876][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.081156][ T3647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.087905][ T3641] Bluetooth: hci4: command tx timeout [ 60.087940][ T3641] Bluetooth: hci3: command tx timeout [ 60.119808][ T3640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.127931][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.140795][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.152635][ T3655] Bluetooth: hci2: command tx timeout [ 60.180303][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.225647][ T3647] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.244163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.264432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.340816][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.350877][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.373616][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.380714][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.395522][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.410877][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.425497][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.432618][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.447530][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.480722][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.495732][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.509790][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.521450][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.569298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.582651][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.590106][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.624485][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.638103][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.652695][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.661075][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.673038][ T3644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.693841][ T3647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.706022][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.722505][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.729947][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.739855][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.748934][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.763593][ T3646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.779981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.792530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.807420][ T3642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.847510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.864536][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.918276][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.929177][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.939347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.947706][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.960099][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.968714][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.978435][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.986715][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.994644][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.002603][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.018527][ T3644] device veth0_vlan entered promiscuous mode [ 61.027632][ T3646] device veth0_vlan entered promiscuous mode [ 61.039899][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.055384][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.091382][ T3646] device veth1_vlan entered promiscuous mode [ 61.110164][ T3644] device veth1_vlan entered promiscuous mode [ 61.126718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.137092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.145386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.154769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.166632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.175413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.184389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.193632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.232740][ T3642] device veth0_vlan entered promiscuous mode [ 61.242772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.250849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.259374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.269162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.279425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.287062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.298313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.306755][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.320329][ T3647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.330036][ T3640] device veth0_vlan entered promiscuous mode [ 61.340103][ T3642] device veth1_vlan entered promiscuous mode [ 61.356056][ T3644] device veth0_macvtap entered promiscuous mode [ 61.364540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.373682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.382654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.391038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.410357][ T3640] device veth1_vlan entered promiscuous mode [ 61.427331][ T3644] device veth1_macvtap entered promiscuous mode [ 61.438745][ T3646] device veth0_macvtap entered promiscuous mode [ 61.450780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.459636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.497231][ T3642] device veth0_macvtap entered promiscuous mode [ 61.506328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.516881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.529907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.543438][ T3646] device veth1_macvtap entered promiscuous mode [ 61.560187][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.573195][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.580826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.589627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.603598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.612673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.621253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.630001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.650563][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.661389][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.682893][ T3646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.694947][ T3640] device veth0_macvtap entered promiscuous mode [ 61.705183][ T3642] device veth1_macvtap entered promiscuous mode [ 61.714765][ T3644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.723977][ T3644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.733095][ T3644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.742231][ T3644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.764859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.773214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.782494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.791022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.799960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.808959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.817856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.827542][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.838784][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.850682][ T3646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.872467][ T3640] device veth1_macvtap entered promiscuous mode [ 61.884788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.893864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.901654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.910464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.920573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.929278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.938182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.946162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.956761][ T3647] device veth0_vlan entered promiscuous mode [ 61.967792][ T3646] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.977243][ T3646] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.986301][ T3646] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.995968][ T3646] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.031639][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.044329][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.054367][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.064845][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.075982][ T3655] Bluetooth: hci0: command tx timeout [ 62.086073][ T3641] Bluetooth: hci1: command tx timeout [ 62.088682][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.113489][ T3647] device veth1_vlan entered promiscuous mode [ 62.120187][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.130496][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.141540][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.152532][ T3655] Bluetooth: hci3: command tx timeout [ 62.152731][ T3641] Bluetooth: hci4: command tx timeout [ 62.167097][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.180211][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.190374][ T3642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.202909][ T3642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.214158][ T3642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.231991][ T3641] Bluetooth: hci2: command tx timeout [ 62.244634][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.256694][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.268039][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.279845][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.289986][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.300560][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.312286][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.319637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.327984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.337583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.346197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.355007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.366033][ T3642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.375320][ T3642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.385052][ T3642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.396804][ T3642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.417950][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.435559][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.445820][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.456317][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.466244][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.477622][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.490373][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.498653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.507540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.529589][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.540289][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.561301][ T3640] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.572971][ T3640] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.583888][ T3640] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.592876][ T3640] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.605251][ T3647] device veth0_macvtap entered promiscuous mode [ 62.658305][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.668080][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.678593][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.692199][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.695886][ T3647] device veth1_macvtap entered promiscuous mode [ 62.713531][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.722383][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.730290][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.738848][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.759713][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.770369][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.780690][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.791469][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.802900][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.813388][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.823441][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.834209][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.845381][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.867465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.878648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.909369][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.919067][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.930298][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.941165][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.955297][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.965981][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.976042][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.986731][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.996858][ T3647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.007342][ T3647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.018744][ T3647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.036825][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.045881][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.056845][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.079204][ T3647] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.088822][ T3647] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.099444][ T3647] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.108481][ T3647] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.131672][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.139752][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.147868][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.166737][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.212585][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.220783][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.240391][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.252414][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.271353][ T1187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.358381][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.393893][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.412797][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.441452][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.451137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.483360][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.491075][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.531229][ T1187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.544734][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.552330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.562058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 63.570340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 63.578633][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 63.586924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 63.672250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.680578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.689292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.697491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.705710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 63.756161][ T3724] loop1: detected capacity change from 0 to 1024 [ 63.770694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.787914][ T1187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.909573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.152688][ T3641] Bluetooth: hci1: command tx timeout [ 64.152896][ T3656] Bluetooth: hci0: command tx timeout [ 64.232357][ T3655] Bluetooth: hci3: command tx timeout [ 64.232527][ T3656] Bluetooth: hci4: command tx timeout [ 64.321849][ T3655] Bluetooth: hci2: command tx timeout [ 64.902359][ T3742] netlink: 200 bytes leftover after parsing attributes in process `syz.3.6'. [ 64.988686][ T3742] loop3: detected capacity change from 0 to 1024 [ 65.833774][ T1187] hfsplus: b-tree write err: -5, ino 4 [ 65.972733][ T3724] EXT4-fs: Ignoring removed orlov option [ 66.068263][ T3724] EXT4-fs (loop1): Test dummy encryption mode enabled [ 66.141360][ T3724] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 67.224485][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 68.297070][ T3771] loop1: detected capacity change from 0 to 512 [ 68.589720][ T3771] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.9: attempt to clear invalid blocks 1 len 1 [ 68.669442][ T3771] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9: bg 0: block 343: padding at end of block bitmap is not set [ 68.742120][ T3771] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 68.782525][ T3771] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.9: invalid indirect mapped block 1819239214 (level 0) [ 68.826376][ T3771] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.9: invalid indirect mapped block 1819239214 (level 1) [ 68.867504][ T3776] loop4: detected capacity change from 0 to 512 [ 68.873346][ T3771] EXT4-fs (loop1): 1 truncate cleaned up [ 68.879447][ T3771] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 69.120754][ T3771] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.431458][ T3776] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 69.572954][ T3776] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 69.898193][ T3782] loop3: detected capacity change from 0 to 2048 [ 72.745721][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.752446][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.915953][ T3655] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 72.929588][ T3655] Bluetooth: hci1: Injecting HCI hardware error event [ 72.937894][ T3655] Bluetooth: hci1: hardware error 0x00 [ 73.368229][ T3792] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.12: Directory hole found for htree leaf block 0 [ 73.533324][ T3797] sctp: [Deprecated]: syz.0.16 (pid 3797) Use of int in max_burst socket option. [ 73.533324][ T3797] Use struct sctp_assoc_value instead [ 73.557387][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 73.595334][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 73.697371][ T3799] Zero length message leads to an empty skb [ 73.721369][ T3801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 75.248814][ T3829] loop2: detected capacity change from 0 to 512 [ 75.716677][ T3655] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 76.042649][ T3829] EXT4-fs (loop2): Test dummy encryption mode enabled [ 76.086303][ T3816] loop1: detected capacity change from 0 to 2048 [ 76.113555][ T3829] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz.2.21: inline data xattr refers to an external xattr inode [ 76.170088][ T3816] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 76.178827][ T3829] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.21: couldn't read orphan inode 12 (err -117) [ 76.199239][ T3816] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 76.209947][ T3829] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.234598][ T14] cfg80211: failed to load regulatory.db [ 78.459310][ T3806] EXT4-fs error (device loop1): ext4_find_dest_de:2113: inode #2: block 16: comm syz.1.19: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 78.562538][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 78.580169][ T3843] loop4: detected capacity change from 0 to 2048 [ 78.865650][ T3843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 79.494682][ T3843] EXT4-fs (loop4): shut down requested (2) [ 79.528618][ T3843] netlink: 165 bytes leftover after parsing attributes in process `syz.4.26'. [ 80.514231][ T3843] netlink: 277 bytes leftover after parsing attributes in process `syz.4.26'. [ 80.918262][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 83.059697][ T3876] loop1: detected capacity change from 0 to 512 [ 83.192826][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 83.676273][ T3892] netlink: 256 bytes leftover after parsing attributes in process `syz.0.42'. [ 83.685748][ T3892] unsupported nlmsg_type 40 [ 85.734055][ T3876] EXT4-fs: failed to create workqueue [ 85.739475][ T3876] EXT4-fs (loop1): mount failed [ 85.842373][ T3891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 86.213946][ T3902] loop0: detected capacity change from 0 to 512 [ 86.310814][ T3914] loop3: detected capacity change from 0 to 512 [ 86.345787][ T3902] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 86.356308][ T3908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 86.385673][ T3914] EXT4-fs (loop3): Test dummy encryption mode enabled [ 86.444398][ T3918] ebt_among: dst integrity fail: 100 [ 86.458386][ T3918] loop4: detected capacity change from 0 to 512 [ 86.511710][ T3902] ext4 filesystem being mounted at /8/bus supports timestamps until 2038 (0x7fffffff) [ 87.225736][ T3922] loop2: detected capacity change from 0 to 1024 [ 87.775011][ T3918] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.784325][ T3918] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 87.843449][ T3914] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.37: inline data xattr refers to an external xattr inode [ 87.914574][ T3922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.925572][ T3914] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.37: couldn't read orphan inode 12 (err -117) [ 87.964890][ T3922] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 88.226046][ T3914] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.963500][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 89.031464][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 91.375820][ T3941] sctp: [Deprecated]: syz.4.43 (pid 3941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.375820][ T3941] Use struct sctp_sack_info instead [ 91.516047][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 91.619638][ T3944] input: syz0 as /devices/virtual/input/input7 [ 92.193292][ T3940] loop2: detected capacity change from 0 to 2048 [ 92.308899][ T3940] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.331201][ T3940] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038 (0x7fffffff) [ 92.478416][ T3940] EXT4-fs error (device loop2): ext4_find_dest_de:2113: inode #2: block 16: comm syz.2.40: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 92.579491][ T3950] loop3: detected capacity change from 0 to 128 [ 92.668718][ T3952] loop4: detected capacity change from 0 to 1024 [ 92.759411][ T26] audit: type=1800 audit(1725023583.119:2): pid=3954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.45" name="file0" dev="loop3" ino=1048596 res=0 errno=0 [ 92.835693][ T3952] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 92.837174][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 92.902153][ T3954] Invalid option length (1174) for dns_resolver key [ 94.190979][ T3649] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.314333][ T3965] loop2: detected capacity change from 0 to 2048 [ 94.343901][ T3960] loop0: detected capacity change from 0 to 2048 [ 94.435542][ T3965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.537107][ T3960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.547569][ T3960] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 94.563041][ T3965] EXT4-fs (loop2): shut down requested (2) [ 94.735306][ T3957] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 16: comm syz.0.57: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 94.761563][ T3965] netlink: 165 bytes leftover after parsing attributes in process `syz.2.46'. [ 94.762011][ T3649] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.861439][ T3975] netlink: 256 bytes leftover after parsing attributes in process `syz.3.47'. [ 95.510948][ T3965] netlink: 277 bytes leftover after parsing attributes in process `syz.2.46'. [ 95.527481][ T3649] usb 5-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 95.545729][ T3649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.726582][ T3649] usb 5-1: config 0 descriptor?? [ 95.836930][ T3649] usb 5-1: can't set config #0, error -71 [ 96.238438][ T3649] usb 5-1: USB disconnect, device number 2 [ 96.587219][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 96.804788][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 97.606410][ T155] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.635397][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 97.730652][ T3994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 97.747409][ T3997] loop0: detected capacity change from 0 to 1024 [ 97.815921][ T3997] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.831079][ T3997] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038 (0x7fffffff) [ 98.025768][ T4003] loop2: detected capacity change from 0 to 512 [ 98.053544][ T4003] ======================================================= [ 98.053544][ T4003] WARNING: The mand mount option has been deprecated and [ 98.053544][ T4003] and is ignored by this kernel. Remove the mand [ 98.053544][ T4003] option from the mount to silence this warning. [ 98.053544][ T4003] ======================================================= [ 99.471557][ T155] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 99.482446][ T155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.493746][ T155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.503728][ T155] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 99.517361][ T155] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 99.637728][ T4003] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 99.645875][ T155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.664630][ T4003] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c01c, mo2=0002] [ 99.686544][ T155] usb 4-1: config 0 descriptor?? [ 99.698170][ T4003] System zones: 1-12 [ 99.713176][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 99.722200][ T155] usb 4-1: can't set config #0, error -71 [ 99.729036][ T4003] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 99.776805][ T4001] loop1: detected capacity change from 0 to 2048 [ 99.776877][ T4003] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 99.904581][ T155] usb 4-1: USB disconnect, device number 2 [ 100.292946][ T4003] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 100.337143][ T4001] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.423119][ T4003] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 100.535651][ T4001] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 101.315914][ T4026] capability: warning: `syz.2.52' uses deprecated v2 capabilities in a way that may be insecure [ 101.462229][ T4022] sctp: [Deprecated]: syz.3.56 (pid 4022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.462229][ T4022] Use struct sctp_sack_info instead [ 101.531341][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 101.567207][ T4003] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 3: comm syz.2.52: lblock 0 mapped to illegal pblock 3 (length 1) [ 101.614498][ T4003] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.52: error -117 reading directory block [ 101.652693][ T4025] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 3: comm syz.2.52: lblock 0 mapped to illegal pblock 3 (length 1) [ 101.736262][ T4025] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.52: error -117 reading directory block [ 103.865342][ T4039] input: syz0 as /devices/virtual/input/input9 [ 103.983805][ T4003] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 3: comm syz.2.52: lblock 0 mapped to illegal pblock 3 (length 1) [ 104.191837][ T4003] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.52: error -117 reading directory block [ 104.418870][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 106.511669][ C0] sched: RT throttling activated [ 109.349730][ T4059] netlink: 256 bytes leftover after parsing attributes in process `syz.2.63'. [ 110.180635][ T4065] loop3: detected capacity change from 0 to 512 [ 110.953167][ T4067] loop2: detected capacity change from 0 to 8 [ 111.017210][ T4067] SQUASHFS error: zlib decompression failed, data probably corrupt [ 111.039341][ T4065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.062575][ T4065] ext4 filesystem being mounted at /14/bus supports timestamps until 2038 (0x7fffffff) [ 111.072616][ T4067] SQUASHFS error: Failed to read block 0x9b: -5 [ 111.079481][ T4067] SQUASHFS error: Unable to read metadata cache entry [99] [ 111.115289][ T4067] SQUASHFS error: Unable to read inode 0x127 [ 111.242851][ T4077] loop4: detected capacity change from 0 to 128 [ 111.267462][ T4077] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 111.275501][ T4077] FAT-fs (loop4): Filesystem has been set read-only [ 111.298390][ T3718] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.895711][ T4067] loop2: detected capacity change from 0 to 1024 [ 111.916322][ T4067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.955855][ T4067] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.031712][ T4067] EXT4-fs (loop2): Test dummy encryption mode enabled [ 112.062359][ T4067] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 112.087432][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 112.099972][ T4067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.142175][ T4086] loop0: detected capacity change from 0 to 2048 [ 113.154055][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 113.214215][ T4091] loop3: detected capacity change from 0 to 1024 [ 113.235998][ T4086] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.297012][ T4086] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 113.532660][ T4091] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.756794][ T4091] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 113.814139][ T4099] loop2: detected capacity change from 0 to 128 [ 113.833130][ T4086] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 16: comm syz.0.69: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 114.737038][ T26] audit: type=1800 audit(1725023605.109:3): pid=4102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.70" name="file0" dev="loop2" ino=1048601 res=0 errno=0 [ 114.773838][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 114.884077][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 114.920731][ T4102] Option 'nv/nwM`Lͫ0y'4_wdlxIF( [ 114.920731][ T4102] DvsdQ%Dp~b@&R]Jp@' to dns_resolver key: bad/missing value [ 115.320411][ T4109] No such timeout policy "syz0" [ 115.736423][ T4112] xt_TPROXY: Can be used only with -p tcp or -p udp [ 116.513318][ T4119] loop1: detected capacity change from 0 to 512 [ 116.577421][ T4117] loop2: detected capacity change from 0 to 512 [ 116.587756][ T4119] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 116.596978][ T4119] EXT4-fs (loop1): 1 truncate cleaned up [ 116.602724][ T4119] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 116.630504][ T4117] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.87: attempt to clear invalid blocks 1 len 1 [ 116.639845][ T4126] loop0: detected capacity change from 0 to 128 [ 116.811491][ T4117] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.87: bg 0: block 343: padding at end of block bitmap is not set [ 117.282602][ T4117] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 117.330628][ T4117] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.87: invalid indirect mapped block 1819239214 (level 0) [ 117.353652][ T4129] Bluetooth: MGMT ver 1.22 [ 117.578254][ T4117] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.87: invalid indirect mapped block 1819239214 (level 1) [ 117.735520][ T26] audit: type=1800 audit(1725023608.109:4): pid=4131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="file0" dev="loop0" ino=1048604 res=0 errno=0 [ 117.775075][ T4117] EXT4-fs (loop2): 1 truncate cleaned up [ 117.793533][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 117.797007][ T4117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.872479][ T4131] Option '\N9>!%ŵTu' to dns_resolver key: bad/missing value [ 120.622713][ T4150] netlink: 256 bytes leftover after parsing attributes in process `syz.4.79'. [ 120.875902][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 120.941329][ T4156] loop3: detected capacity change from 0 to 8 [ 120.955636][ T4155] loop0: detected capacity change from 0 to 16 [ 121.035091][ T4156] SQUASHFS error: zlib decompression failed, data probably corrupt [ 121.045137][ T4155] erofs: (device loop0): mounted with root inode @ nid 36. [ 121.112022][ T4156] SQUASHFS error: Failed to read block 0x9b: -5 [ 121.119151][ T4156] SQUASHFS error: Unable to read metadata cache entry [99] [ 121.154462][ T4156] SQUASHFS error: Unable to read inode 0x127 [ 121.226075][ T4162] loop2: detected capacity change from 0 to 512 [ 122.065003][ T4156] loop3: detected capacity change from 0 to 1024 [ 122.093041][ T4156] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.152169][ T4156] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 122.212674][ T4156] EXT4-fs (loop3): Test dummy encryption mode enabled [ 122.358421][ T4162] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.412082][ T4162] ext4 filesystem being mounted at /17/bus supports timestamps until 2038 (0x7fffffff) [ 122.440017][ T4156] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 123.314959][ T4175] loop1: detected capacity change from 0 to 2048 [ 123.857521][ T4156] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 123.943698][ T4175] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 123.990298][ T4185] loop0: detected capacity change from 0 to 256 [ 124.037555][ T4175] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 125.051042][ T4185] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d) [ 125.351430][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 127.598152][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 127.679284][ T4205] loop0: detected capacity change from 0 to 512 [ 127.894311][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 128.786896][ T3852] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.817720][ T4209] loop4: detected capacity change from 0 to 512 [ 128.823243][ T4205] loop0: detected capacity change from 0 to 128 [ 128.870915][ T4205] UDF-fs: bad mount option "00000000000000000003" or missing value [ 128.950722][ T4209] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.97: attempt to clear invalid blocks 1 len 1 [ 129.501201][ T4209] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.97: bg 0: block 343: padding at end of block bitmap is not set [ 129.702995][ T4209] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 129.788815][ T4209] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.97: invalid indirect mapped block 1819239214 (level 0) [ 129.842357][ T4209] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.97: invalid indirect mapped block 1819239214 (level 1) [ 129.886450][ T4226] loop1: detected capacity change from 0 to 190 [ 129.922634][ T4209] EXT4-fs (loop4): 1 truncate cleaned up [ 129.938510][ T4209] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.955351][ T4226] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 130.009807][ T4226] ntfs: (device loop1): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 130.071944][ T4226] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 130.139450][ T4226] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 130.235712][ T4212] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 131.549555][ T4226] ntfs: volume version 3.1. [ 131.561367][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 131.594075][ T4226] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is an extent inode! [ 131.619394][ T4234] loop3: detected capacity change from 0 to 256 [ 131.644679][ T4234] exfat: Deprecated parameter 'namecase' [ 131.650372][ T4234] exfat: Deprecated parameter 'namecase' [ 131.656276][ T4226] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 131.694272][ T4234] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 131.696368][ T4226] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 131.720273][ T3649] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 131.758630][ T4226] ntfs: (device loop1): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is not present but $INDEX_ROOT indicated it is. [ 131.781733][ T4226] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 131.849819][ T4238] loop2: detected capacity change from 0 to 16 [ 131.862017][ T4226] ntfs: (device loop1): load_system_files(): Failed to load root directory. [ 132.033133][ T4240] netlink: 200 bytes leftover after parsing attributes in process `syz.4.102'. [ 132.546384][ T4240] loop4: detected capacity change from 0 to 1024 [ 132.688778][ T4242] exFAT-fs (loop3): invalid start cluster (4278190088) [ 132.947884][ T4238] erofs: Unknown parameter 'v @lJpHʫPXmʦ' [ 133.019240][ T3649] usb 1-1: Using ep0 maxpacket: 8 [ 133.101916][ T3649] usb 1-1: device descriptor read/all, error -71 [ 133.170475][ T3852] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 133.247958][ T3750] hfsplus: b-tree write err: -5, ino 4 [ 133.303646][ T4244] loop1: detected capacity change from 0 to 8 [ 133.324219][ T4247] loop3: detected capacity change from 0 to 16 [ 133.367205][ T4244] SQUASHFS error: zlib decompression failed, data probably corrupt [ 133.380741][ T4247] erofs: (device loop3): mounted with root inode @ nid 36. [ 133.430317][ T4244] SQUASHFS error: Failed to read block 0x9b: -5 [ 133.452255][ T4244] SQUASHFS error: Unable to read metadata cache entry [99] [ 133.459475][ T4244] SQUASHFS error: Unable to read inode 0x127 [ 133.465755][ T3685] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 134.316590][ T4250] loop0: detected capacity change from 0 to 2048 [ 134.337803][ T3685] usb 3-1: Using ep0 maxpacket: 16 [ 134.373923][ T4244] loop1: detected capacity change from 0 to 1024 [ 134.380746][ T4244] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.548403][ T3685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 134.562808][ T3685] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 134.571934][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.583464][ T3685] usb 3-1: config 0 descriptor?? [ 134.602735][ T4244] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 134.611423][ T4244] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.628988][ T4250] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 134.770507][ T4265] loop3: detected capacity change from 0 to 512 [ 135.434361][ T4265] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 135.444643][ T4250] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038 (0x7fffffff) [ 135.455462][ T4244] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003] [ 135.486243][ T4248] EXT4-fs error (device loop0): ext4_find_dest_de:2113: inode #2: block 16: comm syz.0.107: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 135.512469][ T4265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e802e11c, mo2=0002] [ 135.521411][ T4265] System zones: 1-12 [ 135.522293][ T4244] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 135.526524][ T4265] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.622139][ T3685] usbhid 3-1:0.0: can't add hid device: -71 [ 135.628687][ T3685] usbhid: probe of 3-1:0.0 failed with error -71 [ 135.650644][ T3685] usb 3-1: USB disconnect, device number 2 [ 136.792470][ T4276] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 137.371385][ T4276] loop2: detected capacity change from 0 to 256 [ 137.396612][ T4276] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 137.426897][ T4275] exFAT-fs (loop2): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294967295) [ 137.426897][ T4275] [ 137.439296][ T4275] exFAT-fs (loop2): Filesystem has been set read-only [ 137.469801][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 137.540188][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 137.722416][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.728803][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.807487][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 138.721992][ T4282] loop3: detected capacity change from 0 to 2048 [ 138.915182][ T4282] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 138.936852][ T4282] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 139.005430][ T4279] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 16: comm syz.3.112: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 139.767659][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 139.785203][ T4308] loop0: detected capacity change from 0 to 512 [ 139.900965][ T4308] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.115: attempt to clear invalid blocks 1 len 1 [ 139.955527][ T4308] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.115: bg 0: block 343: padding at end of block bitmap is not set [ 140.057926][ T4308] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 140.112636][ T4308] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.115: invalid indirect mapped block 1819239214 (level 0) [ 140.194421][ T4308] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.115: invalid indirect mapped block 1819239214 (level 1) [ 140.215055][ T4308] EXT4-fs (loop0): 1 truncate cleaned up [ 140.220857][ T4308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 141.407845][ T4323] program syz.3.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.513290][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 141.513303][ T26] audit: type=1326 audit(1725023631.889:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 141.541336][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.581443][ T26] audit: type=1326 audit(1725023631.939:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 141.674136][ T4334] loop1: detected capacity change from 0 to 1024 [ 141.689753][ T26] audit: type=1326 audit(1725023632.059:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 141.717754][ T4334] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.752009][ T26] audit: type=1326 audit(1725023632.089:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 141.791569][ T26] audit: type=1326 audit(1725023632.089:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 141.814604][ T26] audit: type=1326 audit(1725023632.089:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 141.836824][ T26] audit: type=1326 audit(1725023632.089:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 141.858875][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.865079][ T26] audit: type=1326 audit(1725023632.089:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 141.889897][ T26] audit: type=1326 audit(1725023632.089:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 141.912458][ T26] audit: type=1326 audit(1725023632.089:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4326 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e33d79ef9 code=0x7ffc0000 [ 142.163957][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 142.301805][ T4352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.345794][ T4352] loop2: detected capacity change from 0 to 512 [ 143.159940][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 143.206455][ T4352] EXT4-fs (loop2): 1 truncate cleaned up [ 143.212251][ T4352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.241351][ T4349] EXT4-fs error (device loop2): ext4_find_dest_de:2113: inode #2: block 13: comm syz.2.124: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 143.527031][ T4361] loop1: detected capacity change from 0 to 1024 [ 143.544238][ T4361] EXT4-fs: Ignoring removed orlov option [ 144.092703][ T4361] EXT4-fs (loop1): Test dummy encryption mode enabled [ 144.152334][ T4361] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 144.234357][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 144.291473][ T4356] loop0: detected capacity change from 0 to 2048 [ 144.548157][ T4370] loop2: detected capacity change from 0 to 512 [ 145.278479][ T4356] EXT4-fs: failed to create workqueue [ 145.293161][ T4356] EXT4-fs (loop0): mount failed [ 145.337994][ T4370] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 145.369638][ T4379] loop3: detected capacity change from 0 to 8 [ 145.380241][ T4383] x_tables: ip_tables: socket.2 match: invalid size 8 (kernel) != (user) 568 [ 145.391848][ T4370] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 145.449964][ T4383] netlink: 48 bytes leftover after parsing attributes in process `syz.4.131'. [ 145.501048][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 145.639064][ T4360] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 145.724668][ T4388] overlayfs: './file2' not a directory [ 146.294169][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 146.300683][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 146.333687][ T4379] SQUASHFS error: lzo decompression failed, data probably corrupt [ 146.735773][ T4401] ALSA: seq fatal error: cannot create timer (-22) [ 147.295053][ T4379] SQUASHFS error: Failed to read block 0x0: -5 [ 147.326710][ T4403] loop2: detected capacity change from 0 to 256 [ 147.389178][ T4412] loop4: detected capacity change from 0 to 512 [ 147.418345][ T4379] SQUASHFS error: lzo decompression failed, data probably corrupt [ 147.428487][ T4379] SQUASHFS error: Failed to read block 0x0: -5 [ 147.442402][ T4403] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 147.466003][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 147.466018][ T26] audit: type=1800 audit(1725023637.829:30): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.129" name="file2" dev="loop3" ino=3 res=0 errno=0 [ 148.511411][ T4412] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 148.547777][ T4412] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 148.692289][ T4423] loop0: detected capacity change from 0 to 128 [ 149.594847][ T4412] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.135: Directory hole found for htree leaf block 0 [ 150.009598][ T4423] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 151.085789][ T3640] EXT4-fs (loop4): unmounting filesystem. [ 151.222438][ T4423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.465533][ T4453] loop3: detected capacity change from 0 to 2048 [ 152.537157][ T4455] loop4: detected capacity change from 0 to 256 [ 152.578553][ T4453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 152.641982][ T4453] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038 (0x7fffffff) [ 152.677406][ T4455] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xeed18caa, utbl_chksum : 0xe619d30d) [ 152.695483][ T4451] EXT4-fs error (device loop3): ext4_find_dest_de:2113: inode #2: block 16: comm syz.3.142: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 153.689405][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 155.841148][ T4484] loop2: detected capacity change from 0 to 1024 [ 155.932588][ T4488] rdma_op ffff8880590b11f0 conn xmit_rdma 0000000000000000 [ 155.965977][ T4489] loop3: detected capacity change from 0 to 64 [ 155.989605][ T4490] netlink: 6 bytes leftover after parsing attributes in process `syz.1.148'. [ 155.998778][ T4490] netlink: 6 bytes leftover after parsing attributes in process `syz.1.148'. [ 156.589608][ T4484] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 156.600458][ T4484] EXT4-fs (loop2): orphan cleanup on readonly fs [ 156.638812][ T4484] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 156.651575][ T4484] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 156.667408][ T4484] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 156.682085][ T4484] EXT4-fs (loop2): 1 truncate cleaned up [ 156.687750][ T4484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 156.846123][ T4496] loop1: detected capacity change from 0 to 64 [ 156.933476][ T4484] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 156.989516][ T4499] EXT4-fs error (device loop2): ext4_search_dir:1549: inode #2: block 16: comm syz.2.149: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 157.030563][ T4498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 157.251443][ T4505] loop4: detected capacity change from 0 to 16 [ 157.301362][ T4505] erofs: (device loop4): mounted with root inode @ nid 36. [ 158.867656][ T4516] loop0: detected capacity change from 0 to 65536 [ 158.972830][ T4516] XFS (loop0): Mounting V5 Filesystem [ 159.062922][ T4516] XFS (loop0): Ending clean mount [ 159.089419][ T4516] XFS (loop0): Quotacheck needed: Please wait. [ 159.108602][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 159.196834][ T4516] XFS (loop0): Quotacheck: Done. [ 160.483968][ T4532] loop2: detected capacity change from 0 to 2048 [ 162.683412][ T4532] EXT4-fs: failed to create workqueue [ 162.736088][ T4532] EXT4-fs (loop2): mount failed [ 165.674691][ T4577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 165.936935][ T3642] XFS (loop0): Unmounting Filesystem [ 167.316890][ T3054] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 167.571794][ T3054] usb 2-1: Using ep0 maxpacket: 16 [ 167.712367][ T3054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.728434][ T4601] loop2: detected capacity change from 0 to 512 [ 167.786977][ T4608] loop0: detected capacity change from 0 to 256 [ 167.804955][ T4601] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 167.813248][ T4601] EXT4-fs (loop2): 1 truncate cleaned up [ 167.818908][ T4601] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 167.869816][ T4608] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 167.912068][ T3054] usb 2-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 167.933792][ T3054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.946153][ T4608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 167.967845][ T3054] usb 2-1: Product: syz [ 167.984453][ T3054] usb 2-1: Manufacturer: syz [ 167.998666][ T3054] usb 2-1: SerialNumber: syz [ 168.043884][ T3054] usb 2-1: config 0 descriptor?? [ 168.080356][ T4615] loop4: detected capacity change from 0 to 16 [ 168.114789][ T3054] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 168.181002][ T4615] erofs: (device loop4): mounted with root inode @ nid 36. [ 168.395199][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 169.162041][ T4631] input: syz0 as /devices/virtual/input/input12 [ 169.569645][ T3054] usb 2-1: USB disconnect, device number 2 [ 169.727857][ T4634] loop2: detected capacity change from 0 to 2048 [ 169.734876][ T26] audit: type=1326 audit(1725023660.109:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 169.811143][ T26] audit: type=1326 audit(1725023660.109:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 169.837649][ T26] audit: type=1326 audit(1725023660.119:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 169.864001][ T26] audit: type=1326 audit(1725023660.119:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 169.919719][ T4634] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 169.941814][ T4634] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038 (0x7fffffff) [ 169.961767][ T26] audit: type=1326 audit(1725023660.119:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 169.985368][ T26] audit: type=1326 audit(1725023660.119:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 169.989539][ T4634] EXT4-fs error (device loop2): ext4_find_dest_de:2113: inode #2: block 16: comm syz.2.169: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 170.175837][ T26] audit: type=1326 audit(1725023660.119:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 170.279821][ T26] audit: type=1326 audit(1725023660.119:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 171.056739][ T26] audit: type=1326 audit(1725023660.119:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 171.092032][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 171.097912][ T152] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 171.108751][ T26] audit: type=1326 audit(1725023660.119:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4636 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3701d79ef9 code=0x7ffc0000 [ 171.296407][ T4651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.175'. [ 171.431857][ T152] usb 5-1: Using ep0 maxpacket: 16 [ 171.674219][ T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 171.686731][ T152] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 171.696005][ T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.927026][ T152] usb 5-1: config 0 descriptor?? [ 172.463027][ T4642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.511568][ T4642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.253597][ T152] hid (null): invalid report_size 17387 [ 173.259216][ T152] hid (null): report_id 2176741362 is invalid [ 173.338412][ T152] hid (null): unknown global tag 0xc [ 173.380916][ T152] hid (null): unknown global tag 0xd [ 173.397533][ T152] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 173.418174][ T152] hid-generic 0003:0158:0100.0001: unexpected long global item [ 173.437151][ T152] hid-generic: probe of 0003:0158:0100.0001 failed with error -22 [ 173.703168][ T4673] loop1: detected capacity change from 0 to 512 [ 173.894058][ T4667] loop2: detected capacity change from 0 to 2048 [ 173.911988][ T4673] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 173.920953][ T4673] EXT4-fs (loop1): 1 truncate cleaned up [ 173.926785][ T4673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 173.931779][ T3691] usb 5-1: USB disconnect, device number 3 [ 173.995580][ T4667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 174.034926][ T4667] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 174.116492][ T4664] EXT4-fs error (device loop2): ext4_find_dest_de:2113: inode #2: block 16: comm syz.2.176: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 175.315226][ T3646] EXT4-fs (loop1): unmounting filesystem. [ 175.363103][ T4684] loop4: detected capacity change from 0 to 256 [ 175.435835][ T4686] loop1: detected capacity change from 0 to 16 [ 175.436993][ T3647] EXT4-fs (loop2): unmounting filesystem. [ 175.469648][ T4684] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 175.490003][ T4686] erofs: (device loop1): mounted with root inode @ nid 36. [ 176.753463][ T4699] loop3: detected capacity change from 0 to 256 [ 176.859593][ T4699] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 177.005595][ T4697] loop2: detected capacity change from 0 to 2048 [ 179.712927][ T4697] EXT4-fs warning (device loop2): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop2. [ 179.896546][ T4711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 182.538650][ T4722] loop0: detected capacity change from 0 to 2048 [ 182.576641][ T4730] loop3: detected capacity change from 0 to 512 [ 182.619628][ T4730] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 182.628205][ T4730] EXT4-fs (loop3): 1 truncate cleaned up [ 182.634021][ T4730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 182.701160][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 182.901872][ T4722] loop0: detected capacity change from 2048 to 63 [ 183.165856][ T3747] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 183.216249][ T3644] EXT4-fs (loop3): unmounting filesystem. [ 183.573078][ T3747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.597663][ T3747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.628689][ T3747] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 183.638403][ T3747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.671254][ T3747] usb 1-1: config 0 descriptor?? [ 183.905853][ T4743] loop1: detected capacity change from 0 to 256 [ 183.948535][ T4743] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 184.012619][ T4746] process 'syz.3.194' launched './file0' with NULL argv: empty string added [ 184.228618][ T4722] syz.0.191: attempt to access beyond end of device [ 184.228618][ T4722] loop0: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 184.670936][ T4722] syz.0.191: attempt to access beyond end of device [ 184.670936][ T4722] loop0: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 184.802664][ T4722] syz.0.191: attempt to access beyond end of device [ 184.802664][ T4722] loop0: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 184.838414][ T4722] syz.0.191: attempt to access beyond end of device [ 184.838414][ T4722] loop0: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 185.332410][ T3747] hid (null): bogus close delimiter [ 185.552790][ T3747] usb 1-1: language id specifier not provided by device, defaulting to English [ 185.765336][ T4764] fuse: Unknown parameter 'user_id00000000000000000000' [ 186.124375][ T3747] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 186.195414][ T3747] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 186.204293][ T3747] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 186.413239][ T3747] usb 1-1: USB disconnect, device number 4 [ 186.804159][ T4771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'. [ 186.900683][ T3729] kworker/u4:7: attempt to access beyond end of device [ 186.900683][ T3729] loop0: rw=1, sector=448, nr_sectors = 16 limit=63 [ 188.261996][ T4733] kmmpd-loop0: attempt to access beyond end of device [ 188.261996][ T4733] loop0: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 188.519583][ T3729] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 188.534676][ T3729] Buffer I/O error on device loop0, logical block 112 [ 188.541687][ T3729] Buffer I/O error on device loop0, logical block 113 [ 188.712040][ T4733] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 188.720440][ T4733] EXT4-fs error (device loop0): kmmpd:186: comm kmmpd-loop0: Error writing to MMP block [ 188.730177][ T3729] Buffer I/O error on device loop0, logical block 114 [ 188.730220][ T3729] Buffer I/O error on device loop0, logical block 115 [ 188.861458][ T3642] EXT4-fs (loop0): unmounting filesystem. [ 188.920404][ T4784] loop3: detected capacity change from 0 to 512 [ 188.937027][ T4784] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.953940][ T4784] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 188.984967][ T4784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 189.003131][ T4784] System zones: 1-12 [ 189.028785][ T4784] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.206: corrupted in-inode xattr [ 189.052680][ T4775] loop2: detected capacity change from 0 to 2048 [ 189.073448][ T4733] kmmpd-loop0: attempt to access beyond end of device [ 189.073448][ T4733] loop0: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 189.088949][ T4733] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 189.097620][ T3642] ------------[ cut here ]------------ [ 189.103312][ T3642] ODEBUG: free active (active state 0) object type: timer_list hint: print_daily_error_info+0x0/0x490 [ 189.114979][ T3642] WARNING: CPU: 0 PID: 3642 at lib/debugobjects.c:517 debug_check_no_obj_freed+0x38e/0x4e0 [ 189.125078][ T3642] Modules linked in: [ 189.129017][ T3642] CPU: 0 PID: 3642 Comm: syz-executor Not tainted 6.1.107-syzkaller #0 [ 189.137561][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 189.147694][ T3642] RIP: 0010:debug_check_no_obj_freed+0x38e/0x4e0 [ 189.154160][ T3642] Code: ef e8 46 f6 a3 fd 4c 8b 45 00 48 c7 c7 20 73 5d 8b 48 c7 c6 e0 6f 5d 8b 48 c7 c2 80 74 5d 8b 8b 0c 24 49 89 d9 e8 e2 69 14 fd <0f> 0b ff 05 a2 d7 5b 0a 48 83 c5 30 48 89 e8 48 c1 e8 03 48 b9 00 [ 189.173827][ T3642] RSP: 0018:ffffc90003bcfa80 EFLAGS: 00010246 [ 189.179904][ T3642] RAX: 55cd52d60d4cb100 RBX: ffffffff824add50 RCX: ffff8880292ad940 [ 189.187914][ T3642] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 189.195909][ T3642] RBP: ffffffff8b0dd980 R08: ffffffff8152a40e R09: fffff52000779ef1 [ 189.203910][ T3642] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805559a698 [ 189.211927][ T3642] R13: ffffffff92209610 R14: ffff88805559b000 R15: ffff88807e6d7d78 [ 189.219912][ T3642] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 189.228883][ T3642] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.235504][ T3642] CR2: 00007faa28d69d58 CR3: 000000005e4e9000 CR4: 00000000003506f0 [ 189.243624][ T3642] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.251659][ T3642] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.260512][ T3642] Call Trace: [ 189.263846][ T3642] [ 189.266797][ T3642] ? __warn+0x15a/0x520 [ 189.270975][ T3642] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 189.276751][ T3642] ? report_bug+0x2af/0x500 [ 189.281268][ T3642] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 189.287039][ T3642] ? handle_bug+0x3d/0x70 [ 189.291390][ T3642] ? exc_invalid_op+0x16/0x40 [ 189.296098][ T3642] ? asm_exc_invalid_op+0x16/0x20 [ 189.301129][ T3642] ? ext4_group_desc_init+0x1de0/0x1de0 [ 189.306712][ T3642] ? __warn_printk+0x28e/0x350 [ 189.311480][ T3642] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 189.317232][ T3642] __kmem_cache_free+0x205/0x3c0 [ 189.322245][ T3642] ? generic_shutdown_super+0x130/0x340 [ 189.327808][ T3642] ? ext4_drop_inode+0x2e0/0x2e0 [ 189.332791][ T3642] generic_shutdown_super+0x130/0x340 [ 189.338186][ T3642] kill_block_super+0x7a/0xe0 [ 189.342921][ T3642] deactivate_locked_super+0xa0/0x110 [ 189.348313][ T3642] cleanup_mnt+0x490/0x520 [ 189.352770][ T3642] ? lockdep_hardirqs_on+0x94/0x130 [ 189.357981][ T3642] task_work_run+0x246/0x300 [ 189.362602][ T3642] ? kasan_quarantine_put+0xd4/0x220 [ 189.367889][ T3642] ? task_work_cancel+0x2e0/0x2e0 [ 189.372945][ T3642] ? kmem_cache_free+0x292/0x510 [ 189.377895][ T3642] ? do_exit+0xa6e/0x26a0 [ 189.382330][ T3642] do_exit+0xa73/0x26a0 [ 189.386499][ T3642] ? put_task_struct+0x80/0x80 [ 189.391264][ T3642] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 189.397372][ T3642] ? print_irqtrace_events+0x210/0x210 [ 189.402884][ T3642] ? _raw_spin_unlock_irq+0x1f/0x40 [ 189.408127][ T3642] ? lockdep_hardirqs_on+0x94/0x130 [ 189.413378][ T3642] do_group_exit+0x202/0x2b0 [ 189.418096][ T3642] __x64_sys_exit_group+0x3b/0x40 [ 189.423173][ T3642] do_syscall_64+0x3b/0xb0 [ 189.427629][ T3642] ? clear_bhb_loop+0x45/0xa0 [ 189.432357][ T3642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.438252][ T3642] RIP: 0033:0x7f72e2d79ef9 [ 189.442686][ T3642] Code: Unable to access opcode bytes at 0x7f72e2d79ecf. [ 189.449699][ T3642] RSP: 002b:00007ffed27e59b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 189.458130][ T3642] RAX: ffffffffffffffda RBX: 00007f72e2de784e RCX: 00007f72e2d79ef9 [ 189.466122][ T3642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 189.474141][ T3642] RBP: 0000000000000010 R08: 00007ffed27e3756 R09: 00007ffed27e6c70 [ 189.482152][ T3642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed27e6c70 [ 189.490116][ T3642] R13: 00007f72e2de77dc R14: 0000555592eb44a8 R15: 00007ffed27e7d30 [ 189.498130][ T3642] [ 189.501143][ T3642] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.508414][ T3642] CPU: 0 PID: 3642 Comm: syz-executor Not tainted 6.1.107-syzkaller #0 [ 189.516646][ T3642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 189.526704][ T3642] Call Trace: [ 189.529976][ T3642] [ 189.532899][ T3642] dump_stack_lvl+0x1e3/0x2cb [ 189.537617][ T3642] ? nf_tcp_handle_invalid+0x642/0x642 [ 189.543100][ T3642] ? panic+0x764/0x764 [ 189.547180][ T3642] ? vscnprintf+0x59/0x80 [ 189.551514][ T3642] panic+0x318/0x764 [ 189.555411][ T3642] ? __warn+0x169/0x520 [ 189.559561][ T3642] ? memcpy_page_flushcache+0xfc/0xfc [ 189.564930][ T3642] __warn+0x348/0x520 [ 189.568903][ T3642] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 189.574644][ T3642] report_bug+0x2af/0x500 [ 189.578983][ T3642] ? debug_check_no_obj_freed+0x38e/0x4e0 [ 189.584732][ T3642] handle_bug+0x3d/0x70 [ 189.588887][ T3642] exc_invalid_op+0x16/0x40 [ 189.593392][ T3642] asm_exc_invalid_op+0x16/0x20 [ 189.598255][ T3642] RIP: 0010:debug_check_no_obj_freed+0x38e/0x4e0 [ 189.604598][ T3642] Code: ef e8 46 f6 a3 fd 4c 8b 45 00 48 c7 c7 20 73 5d 8b 48 c7 c6 e0 6f 5d 8b 48 c7 c2 80 74 5d 8b 8b 0c 24 49 89 d9 e8 e2 69 14 fd <0f> 0b ff 05 a2 d7 5b 0a 48 83 c5 30 48 89 e8 48 c1 e8 03 48 b9 00 [ 189.624191][ T3642] RSP: 0018:ffffc90003bcfa80 EFLAGS: 00010246 [ 189.630248][ T3642] RAX: 55cd52d60d4cb100 RBX: ffffffff824add50 RCX: ffff8880292ad940 [ 189.638212][ T3642] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 189.646194][ T3642] RBP: ffffffff8b0dd980 R08: ffffffff8152a40e R09: fffff52000779ef1 [ 189.654173][ T3642] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805559a698 [ 189.662131][ T3642] R13: ffffffff92209610 R14: ffff88805559b000 R15: ffff88807e6d7d78 [ 189.670096][ T3642] ? ext4_group_desc_init+0x1de0/0x1de0 [ 189.675656][ T3642] ? __warn_printk+0x28e/0x350 [ 189.680456][ T3642] __kmem_cache_free+0x205/0x3c0 [ 189.685383][ T3642] ? generic_shutdown_super+0x130/0x340 [ 189.690934][ T3642] ? ext4_drop_inode+0x2e0/0x2e0 [ 189.695866][ T3642] generic_shutdown_super+0x130/0x340 [ 189.701319][ T3642] kill_block_super+0x7a/0xe0 [ 189.706010][ T3642] deactivate_locked_super+0xa0/0x110 [ 189.711394][ T3642] cleanup_mnt+0x490/0x520 [ 189.715804][ T3642] ? lockdep_hardirqs_on+0x94/0x130 [ 189.720996][ T3642] task_work_run+0x246/0x300 [ 189.725587][ T3642] ? kasan_quarantine_put+0xd4/0x220 [ 189.730862][ T3642] ? task_work_cancel+0x2e0/0x2e0 [ 189.735875][ T3642] ? kmem_cache_free+0x292/0x510 [ 189.740804][ T3642] ? do_exit+0xa6e/0x26a0 [ 189.745122][ T3642] do_exit+0xa73/0x26a0 [ 189.749285][ T3642] ? put_task_struct+0x80/0x80 [ 189.754050][ T3642] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 189.760029][ T3642] ? print_irqtrace_events+0x210/0x210 [ 189.765491][ T3642] ? _raw_spin_unlock_irq+0x1f/0x40 [ 189.770716][ T3642] ? lockdep_hardirqs_on+0x94/0x130 [ 189.775916][ T3642] do_group_exit+0x202/0x2b0 [ 189.780510][ T3642] __x64_sys_exit_group+0x3b/0x40 [ 189.785553][ T3642] do_syscall_64+0x3b/0xb0 [ 189.789968][ T3642] ? clear_bhb_loop+0x45/0xa0 [ 189.794641][ T3642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.800532][ T3642] RIP: 0033:0x7f72e2d79ef9 [ 189.804939][ T3642] Code: Unable to access opcode bytes at 0x7f72e2d79ecf. [ 189.811944][ T3642] RSP: 002b:00007ffed27e59b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 189.820347][ T3642] RAX: ffffffffffffffda RBX: 00007f72e2de784e RCX: 00007f72e2d79ef9 [ 189.828309][ T3642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 189.836271][ T3642] RBP: 0000000000000010 R08: 00007ffed27e3756 R09: 00007ffed27e6c70 [ 189.844247][ T3642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed27e6c70 [ 189.852210][ T3642] R13: 00007f72e2de77dc R14: 0000555592eb44a8 R15: 00007ffed27e7d30 [ 189.860195][ T3642] [ 189.863550][ T3642] Kernel Offset: disabled [ 189.867924][ T3642] Rebooting in 86400 seconds..