last executing test programs: 4m28.332583479s ago: executing program 32 (id=2289): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000080)={0x9, 0x5, 0x1, 'queue0\x00', 0x4}) clock_gettime(0x9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x1b32, 0x10000, 0x2, 0x335}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_enter(r3, 0x1047ba, 0xaa6f, 0x4, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r6, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) 4m28.16698277s ago: executing program 33 (id=2305): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xffff7ffc}) syslog(0x4, &(0x7f0000000280)=""/225, 0xe1) 3m54.072560105s ago: executing program 34 (id=2446): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "f836067aecc6280bebb179637f7aaa58a4495b17e0bde8b9053bb0e86332e46b", "287733ba34fec7e5a2d11993eaa2fb92d0d7367b7c7e9dd0d94024d4d173b8e8", "7aa671b3d735232cd593d6a5d5d86128ddf612066831bc10dc500f3fd9a32cbf", "ea352994cbb9ccb28c5668f7b421915ea123b86c817931ef92a29b1fbbc5fddd", "2beae7ccc511f90142c15e86e222724487b33a9df18efc7b3392619975b9b293", "3e28cb970004465e7f38aae4", 0x81, 0x7, 0xf, 0xff, 0x50}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000003ac0)={'wlan0\x00', &(0x7f0000003a80)=@ethtool_link_settings={0x4c}}) fcntl$setlease(r0, 0x400, 0x1) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000057c0)={0x2020}, 0x2020) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) gettid() sigaltstack(0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x3, 0x6b2, &(0x7f0000000280)="$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") socket$unix(0x1, 0x1, 0x0) 3m49.870737226s ago: executing program 35 (id=2459): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = socket$inet6(0xa, 0x80000, 0x0) listen(r1, 0x101) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0x12, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setsig(r6, 0xa, 0x2d) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x2, {0x60, 0x0, 0x0, 0x0, {}, {0xfff2, 0xa}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xc, 0x8c4, 0xf, 0x7, 0x5, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000055}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="a637016f65de46fc56ed5e210d7b", 0xe}], 0x1}}], 0x1, 0x800) 3m4.586806125s ago: executing program 36 (id=2600): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) utimes(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80c0, &(0x7f00000002c0), 0x4, 0x455, &(0x7f0000000e80)="$eJzs3M1vVFUfAODfvZ0WXr7aF/EDRK0SY+NHSwsqCzcaTVxgNNEFLuu0EMJADa2JECLVGNyYGBJdG5cm/gXu3Bh1ZeJW94aEKBvQVc29cy/MDDOlhWkHOs+T3PacOWfmnDPnnnvPvee2AfSt0exHErEtIn6PiOF6tDnDaP3XtSvnqv9cOVdNYmnp7b+SPN/VK+eqZdbyfVuLyFgakX6aFIU0mz9z9sR0rTZ7uohPLJx8f2L+zNnnjp+cPjZ7bPbU1KFDBw9MvvjC1PNdaWfWrqt7Pprbu/v1dy++UT1y8b2fv8vqu61Ib2xHt4xmDf97Kdea9mS3C+ux7Q3hpNIux+b1qwwrNhARWXcN5uN/OAbiRucNx2uf9LRywJrKzk2bOicvLgEbWBK9rgHQG+WJPrv+Lbd1mnrcFS6/XL8Aytp9rdjqKZVIizyDLde33TQaEUcW//0622KN7kMAADT6vPrV4Xi23fwvjQca8u0o1lBGIuL/EbEzIu6LiF0RcX9EnvfBiHholeW3Lg3dPP9JL91Ww1Yom/+9VKxtNc//ytlfjAwUse15+weTo8drs/uL72QsBjdl8cllyvjh1d++6JTWOP/Ltqz8ci5Y1ONSpeUG3cz0wnQ+Ke2Cyx9H7Km0a39yfSUgiYjdEbFndR+9owwcf/rbvZ0y3br9y2i7zrQ6S99EPFXv/8VoaX8pWX59cmJz1Gb3T5R7xc1++fXCW53Kv6P2d0HW/1ua9//WLCNJ43rt/OrLuPDHZx2vaSq3uf8PJe/k/TJUvPbh9MLC6cmIoeRwHm96ferGe8t4mT9r/9i+9uN/Z/GerJyHIyLbiR+JiEcj4rGi7x6PiCciYt8y7f/plc5pd0P/z7Q9/l3f/1v6f/WBgRM/ft+p/JUd/w7mobHilfz4dwsrreCdfHcAAABwr0jzZ+CTdPx6OE3Hx+vP8O+KLWltbn7hmaNzH5yaqT8rPxKDaXmna7jhfuhkslh8Yj0+VdwrLtMPFPeNvxz4Xx4fr87VZnrcduh3WzuM/8yfA72uHbDm2q2jTQ31oCLAumsd/2lz9Pyb61kZYF114Tka4B5VWf4I0Dgd8F8cYINx/of+1W78n2+JWwuAjcn5H/qX8Q/9y/iH/mX8Q1+6k7/rF+jnQKR3RTUE1ijQ6yMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAd/wXAAD//91E7sY=") prlimit64(0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 2m56.371426265s ago: executing program 37 (id=2626): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000000140)=""/136) 2m53.343536699s ago: executing program 1 (id=2637): openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7e8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 2m50.101483763s ago: executing program 1 (id=2641): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2m49.630888746s ago: executing program 1 (id=2643): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x20}, 0x4010) sendmsg$nl_route(r0, 0x0, 0x0) pipe(&(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) prctl$PR_GET_IO_FLUSHER(0x3a) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x3c8, 0xd0, 0x0, 0x2c0, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c8}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) 2m48.270606306s ago: executing program 1 (id=2644): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0xffffffffffffffda, 0x0, {0x9}}, 0x34) 2m47.172337445s ago: executing program 1 (id=2648): syz_usb_connect(0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a84b5110100c00008478010203010902125fab"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4138ae84, &(0x7f0000000c40)=@x86={0x3, 0xd, 0x8, 0x0, 0x5, 0x0, 0xfe, 0xa, 0x1, 0x4, 0xb, 0x0, 0x0, 0x4000005, 0x80000, 0x9, 0xff, 0x9, 0x5, '\x00', 0x5, 0x9}) 2m46.50020593s ago: executing program 1 (id=2649): openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7e8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 2m46.009793853s ago: executing program 38 (id=2649): openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7e8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 2m38.829606137s ago: executing program 9 (id=2601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r7, &(0x7f00000000c0)={0x2020}, 0x2067) 2m37.745899596s ago: executing program 9 (id=2677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340), 0x1, 0x51a, &(0x7f0000001200)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_clone(0x8800400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x28, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffffffffffef1, {0xf000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c0f000000c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576648eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af095a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0714b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb6ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b40867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d0400000000000000a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f710100ab8d0b545c334014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b57fe072d3218983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 2m36.744586443s ago: executing program 9 (id=2678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x70, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x1, 0x6, 0x0, {0xc3, 0x3, 0x0, 0x377, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x3ff, 0x4}}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac=@device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 2m35.050759236s ago: executing program 8 (id=2685): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 2m34.884110387s ago: executing program 9 (id=2686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r7, &(0x7f00000000c0)={0x2020}, 0x2067) 2m34.43929474s ago: executing program 39 (id=2686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0x8, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r7, &(0x7f00000000c0)={0x2020}, 0x2067) 2m34.420272671s ago: executing program 8 (id=2689): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x18, 0x31, 0x10b, 0x70bd2b, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 2m34.000040644s ago: executing program 8 (id=2691): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x1c, 0x1, 0x1, [r0, r2, r2]}}], 0x20, 0x800}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x4008}) 2m33.804214775s ago: executing program 8 (id=2693): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1818c42, &(0x7f0000000d80)=ANY=[], 0xfe, 0x27a, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 2m33.295690409s ago: executing program 8 (id=2695): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010000000000000000", @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="738dd1ab253c88c8a427e7058c071b87f5b36f167a164cc395d1e2b7659837ff070000f52e219d5958e24c"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m32.757019233s ago: executing program 8 (id=2700): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./bus\x00', 0xa00000, &(0x7f0000000ac0), 0x40, 0x550, &(0x7f0000002540)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m32.254145247s ago: executing program 40 (id=2700): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000640)='./bus\x00', 0xa00000, &(0x7f0000000ac0), 0x40, 0x550, &(0x7f0000002540)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1m56.632214304s ago: executing program 5 (id=2866): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x8fd, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) ioctl$KDFONTOP_SET_DEF(r3, 0x4b72, &(0x7f0000001480)={0x2, 0x1, 0xf, 0x1f, 0x19e, &(0x7f0000001080)="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"}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000015c0)=' hash=', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000800000000000000fbcf000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185900000100000000000000000000008500000067000000186100000600000000000000810000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xd23, 0x9d, &(0x7f00000006c0)=""/157, 0x41000, 0x8, '\x00', 0x0, 0x17, r5, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x5, 0x1, 0x7}, 0x10, 0x12167, r3, 0x0, &(0x7f0000000500)=[r6, r5, r3, r3], 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r8, 0xffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000005140)=@raw={'raw\x00', 0x3c1, 0x3, 0x1b40, 0x18e0, 0xffffff80, 0x178, 0x0, 0x178, 0x1a70, 0x22b, 0x258, 0x1a70, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x18b8, 0x18e0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@u32={{0x7e0}, {[], 0x70}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, @private1}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1ba0) fcntl$addseals(r8, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000080)=0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd29000084"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={&(0x7f0000000340), 0x0, 0x0, 0x0, 0xc, r11}, 0x38) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='.\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d9, &(0x7f0000000c00)="$eJzs3c1vHGcdB/DvrNcbb6iC0yY0QkVYiVSQIhInVgrhgkEI5VChqhx6thKnsbpJqsRFaYWKCwhOSBz6BxQk3zggJO5B4cKl3Hr1sRISl4hDVAktmtlZe9devyV+C3w+0XieZ55nnvntb5+Z2V3H2gD/t66dT/Nhilw7//qDsr6yPNNZWZ45Vjd3kpTlRtLsrVLcSYpHyWzZXgwsGVhv8PHC1Tc/e7zyea/WrJeq/9hW+40wou9SvWSqHm9q5J7jOz3EUh1eXkhyvV4Pa+10rKGOZdLO1Ws4dN0Nlnaz+27OW+CI6d+dit59c4PJ5HiSifp1QOqrQ+PgItwfu7rKAQAAwHPq07uHHQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8f+rv/y/qpVGvM5Wi//3/rf62unwEze6458N9jQMAAAAAAAAADsbXn+RJHuREv94tqt/5n60qp/JFN/lS3sv9zOdeLuRB5rKYxdzLpSSTAwO1HswtLt67tLpnafSel0fuefmgHjEAAAAAAAAA/E/6Rdprv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjoEjGeqtqOVWvM5lGM2ttWUr+kaR12PHuQjFq48ODjwMAAACeycSIbePb7PPlJ3mSBznRr3eL6j3/V6r3yxN5L3eymIUsppP53KjfQ5fv+hsryzOdleWZ2+VS1ofH/f6/dhV6qx5hrKqNOvKZqkc7N7NQbbmQ61UwN9LoHftccqYfz0BcAz4qYyq+V9thZM06reXBfrfZpwh7YvijiMYWPdtrwSWrGZmuYyv3PNnLQFF9UJOsz0T/2Xl1syM0h2qT1ajjq0e6lMbqJz+n9iHnx+t1+Xh+va85363VTDRSZeJyf/aV58zWmUi+8Zc/vnWrc+edWzfvnz86D2kbY5tsXz8nZgYy8fJznYnmLvtPV5k4vVq/lh/lJzmfqbyRe1nITzOXxcynW7fP1fO5/Dm5daZmh2pvbBdJq35ees/ZTmKayg+r0lzOVvueyEKK3M2NzOe16t/lXMq3cyVXcnXgGT69adzVY6vO+sb6s77/TP91ZPDnvlkXyqvbb9aucrNbPeLNZude6V37y7yeHMhrb9Y/Xu11cuA8mB7I0ov97Iy+Cz/NtbH51bpQHuOX29wnDtZknYnyBOrfJfrRvdTLRLO6F22c57/vVi9UOne63Vtz724y/tK6ev/mVU6r5a9t17tvuxdEe6GcLy9mor6SDM+Osu2l1avMQFt3bS732obvuOV+p6u2ouifqT/O3WoCbDxTW/VruI0jXa7aXh7ZNlO1nem3/ac7/Hord9PJjQPIHwBP4+9vrRYnc7zV/mf70/Yn7V+1b7Vfn/jBse8ce6WV8b+Nf7c5PfZq45Xiz/kkH669/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7e/fc/eGeu05m/N7rQ2LxpqNDO+i3bjbyuUNRf6LO7vY5uYSLJ0Jbqe44OPIz2+jA2FLo/T/b66B9u16dVfynY6D6/LQvNDTNqVGF2aMufNg740S6DL3Z2XuxjoZGDPehYRk+Aw70uAfvv4uLtdy/ef/+Dby3cnnt7/u35O+NXrlydvnrltZmLNxc689O9n4cdJbAf1m76hx0JAAAAAAAAAAAAsFOj/jDg7Avb/dHITgot/7MQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2BPXzqf5MEUuTV+YLusryzOdcumX13o2kzQaSfGzpHiUzKa3ZHJguCJ/eJTuiON8vHD1zc8er3y+Nlaz1z9p1OvNbd2aZKleMpVkrF4/g6Hxrj/zeMW/+4+hTNgX3W539tnig73x3wAAAP//jST3Sg==") socket$key(0xf, 0x3, 0x2) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f0000000180)={[0x6]}, 0x8) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x4a, 0x8}, {0x74, 0x2}, @cond=[{0x7ff, 0xe55c, 0xe3, 0x6, 0x8001, 0xf}, {0x2, 0x4, 0x7f, 0x4, 0xfff8, 0x10}]}) 1m53.372502589s ago: executing program 5 (id=2870): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f0000000340)) 1m53.18609352s ago: executing program 5 (id=2872): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$9p_rdma(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x860, 0x0) 1m52.953881932s ago: executing program 5 (id=2875): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./bus\x00', 0x200000, &(0x7f00000023c0)=ANY=[], 0x13, 0x70a, &(0x7f0000000740)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 1m52.540597105s ago: executing program 5 (id=2879): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="738dd1ab253c88c8a427e7058c071b87f5b36f167a164cc395d1e2b7659837ff070000f52e219d5958e24c"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m51.95012037s ago: executing program 5 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="738dd1ab253c88c8a427e7058c071b87f5b36f167a164cc395d1e2b7659837ff070000f52e219d5958e24c"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m51.554270653s ago: executing program 41 (id=2893): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r6, @ANYBLOB="738dd1ab253c88c8a427e7058c071b87f5b36f167a164cc395d1e2b7659837ff070000f52e219d5958e24c"], 0x3c}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m3.230061865s ago: executing program 3 (id=3136): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x3a, 0x2a, 0x3, 0x18, 0xf, 0xa9, 0x4, 0xf5, 0x1}) 1m2.912604498s ago: executing program 3 (id=3138): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc56, &(0x7f0000002a00)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) r0 = inotify_init1(0x800) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1m2.273058073s ago: executing program 3 (id=3144): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x4, 0x58d, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 1m1.554694508s ago: executing program 3 (id=3151): syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x5, 0x6b5, &(0x7f0000001540)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1m0.884485982s ago: executing program 3 (id=3156): r0 = gettid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x800010, &(0x7f0000002a40)=ANY=[@ANYBLOB='umask=00000000000000000177777,gid=', @ANYRESDEC=0x0, @ANYBLOB="0004696c657365743d30303030303030303030303030303030303031302c766f6c756d653d30300900000000000000303030303030303132372c726f6f746469723d30303030303030303030303030303030303030332c726f00000000723d30303030303030303030303030303030303031352c6c6f6e6761642c7569643d666f7267c57a2c73686f7274ec61642c766f6c756d653d31383434363734343037332530393535213631342c008eada0ed984f9a5af751f327cca44ff225406bd094b93234c4690545eaa623391f85c5e0d626f9f3930dc93d1366c82bc0d5e5df3c7c467aa5464ab6098e47adfb488e790d868847cf72f86b32d68e342f523291d6d32a570d718651a108af8ed05993c43362815929aae62d2d7c4b92fc514f7e9f28b73788bc4ae74d3c01d2a7bb84cecd58a1575e065a44cfc2dd3d899276a95b6e0f4a3023de40392225925a3dc44a76fe070b4eb63b07763749395551653c8a62b0c78a746d6225a8693c3b3e993a000000000000000000000000000000000000000069e2e9b106b3e9416a207137f0d621c82c7d7aa36e81f261552eed4224b8a56b5b9ea3798b23580136df1f7d596076f13b3350e815723c06ae66c3786af72828073082d7866711f7bd8d67fc2ccab4bebc7f9a22eb2ef1784a71423fb9f5a2014ad99ed5b91c585c4500"/503], 0x1, 0xc29, &(0x7f0000001940)="$eJzs3U9sHOd5B+D32yEtUm6ateMof5TDAg4QV44NUpQtFnIAKmKIGBBkwRRzMFCAK5FSFyaXFEkVclCkKpCgCNIWKnLIsQKcAL1VpxYIGkA9uUUQgOip6KFQW0dwb5sAaYsezGJ2vyWXtCSylkRS1vMI0m929p3db9Z8uTPrmZ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK+/o2TQ8Npr0cBAOymM5NvDo14/weAJ8o5+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGwvRRHfjRTv/qCVptu3OwZON5pXrk6NT9x9scEUKSpRtOvLvwPDR0eOvfLq8dFu3n/5h+0L8cbkuZO1Uwvzi0uzy8uzM7WpZuPCwszsjh/hQZff6kj7BajNv31l5uLF5drRl0c23X21eufA04eqJ0YPj7zVrZ0an5iY7Knp6//Yz/4R6eE9FJ8gT0UR34wU7730QapHRCUevBe2+d3xqA1GX9l/7ZWYGp9or8hco95cKe9MlVzVF1HtWWis2yO70IsPZCziWvnfqRzwkXL1JhfrS/Xzc7O1s/WllcZKY6GZKp3RlutTjUqMpojFiGgVez149pv+KOJYpLjz61Y6HxFFtw9ePDP55tDI9g/QtwuDvMfTVouI1XgMehb2qQNRxF9Eih9OD8WF3Ffttnk/4itlvhZxucxbKa7n26n8BTEa8SvvJ/BY64sifhEpFlIrzXR7v71defpbtdebFxd6arvblY/9/sFusm3CPjYQRZxvb/G30sf/sAsAAAAAAAAAAAAA2B1F/DRS3Jx/IS1G7zmljeal2rn6+bnOUcHdY/9ream1tbW1aupkLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5o5KfP2ct51DOsZxnc07nXMx5Lef1nDdy3sx5K+dqzts5WznDeU8AAAAAAAAAAAAAAAAAAAA8ZINRxESkuPHuH7SvKx3t69J/+sTomfHneq8Z/7ltHqesfTkifho7uyZvf77WeKqUfx7+egHbG4givpOv//fHez0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX6hEEd+NFD/6TStFioixiOno5O1ir0cHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQGUhGnIsV/fmOgfXs1Ir4YER+ulX8i/mdtq70eMQAAAAAAAAAAAAAAAAAAAHwCpSIuR4ofv9dK1Yi4Wr1z4OlD1ROjh0feKqKIVJb01r8xee5k7dTC/OLS7PLy7Extqtm4sDAzu9OnGzjdaF65OjU+8UhWZluDj3j8gwOnFhbfWWpc+v2Vu95/cODk+eWVpfqFu98dg9EXMdQ750h7wFPjE+1BzzXqzfaiqXKPAfZF1Ha6MgAAAAAAAAAAAAAAAAAAAOwbB1MR45Hi+Z8dS93zxvs65/x/qnOrWK/9yR9ufBfA3Jbs6v3+gJ1Mp50O9Ej7xPva1PjExGTP7L7+j5aWY0qpiM9GisN/9/n2+fApDt713Piy7k8jxej/Hst11cNl3dimqoEjU+MTtTMLzZdOzs0tXKiv1M/PzdYmF+sXdvzFAQAAAAAAAAAAAAAAAAAAAHAfB1MRfxYpjr2+mrrXnc/n//d1bvWc//9aRPey8wNpc65rn9v/2+1z+zvTnz4x+vrR5+81/1Gc/1+OKaUiPowUz/zl59vX0++e/z+0pbas+3Gk+MX3vpTrKk+VdcPd1ek84sXG3OxQWftipPj+2W5ttGtfzbWf2agdLmv/PlI8+3uba4/n2uc2ao+WtXcixcSZu9d+dqN2pKwdjBRf/ZNat/ZgWfv1XHtoo/blCwtzMzt9eXkylf3/r5Hiy8PfTN2f+Xv2f8/3f1zbkus+0vP3n35Y/V/tmXct9/Va7v/hbfr/cqT48+tfynWd3jua73+m/e9G/38/UvzOpzbXvpJrn92oHd7pasFeKvv/HyPF6u1/Xv+Zz/2fO2ujQ3v7/4t9m7O7XbBX/f9Mz7xqHtfI//O1gCfN8jvffrs+Nze7ZMKECRPrE3v9mwl41Mrt//+KFF+7XKTufmze/v+tzq2N/f///s7G9v+JLbluj7b/n+2ZdyLvtfT3RQyszC/2fy5iYPmdb7/UmK9fmr002xwZGT3+u8eGjx4f7n+qu3O/MbXj1w4ed2X/vx0pfvLX/7T+Ofbm/f+7f/53cEuu26P+/0zvOm3ar9nxSwFPnLL//ypS/MuND9b/f9P9Pv/rfs73wvObc7BbtEf9/1zPvFr+Z7Rn3gtFxMmdPhcAAAAAAAAAADwmDqYifhYp/qb1D+vXvN98/E98uVvbe/zfveyH6/8DAPdXvv9PRoqfH/xq6n6HzE6O/5/Zkuv26PjfQz3zZnbpvOYdv8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAxpSjiQKR49wetdLsob3cMnG40r1ydGp+4+2KDKVJUomjXl38Hho+OHHvl1eOj3bz/8g/bF+KNyXMna6cW5heXZpeXZ2dqU83GhYWZ2R0/woMuv9WR9gtQm3/7yszFi8u1oy+PbLr7avXOgacPVU+MHh55q1s7NT4xMdlT09f/sZ/9I9LDeyg+QZ6KIn4eKd576YP0b0VEJR68F7b53fGoDUZf2X/tlZgan2ivyFyj3lwp70yVXNUXUe1ZaKzbI7vQiw9kLOJaRFTKAR8pV29ysb5UPz83WztbX1pprDQWmqnSGW25PtWoxGiKWIyIVrHXg2e/6Y8i/jZS3Pl1K/17EVF0++DFM5NvDo1s/wB9uzDIezxttYhYjcegZ2GfOhBFPBcpfjg9FP9RdPqq3TbvR3ylzNciLpd5K8X1fDuVvyBGI37l/QQea31RxNlIsZBa6f0i9357u/L0t2qvNy8udMr+KNrbzvkd9XHfP9hNtk3YxwaiiF+2t/hb6ZfezwEAAAAAAAAAAABgnyvia5Hi5vwLqX1+6Po5pY3mpdq5+vm5zmH93WP/a3mptbW1tWrqZC3nUM6xnGdzTudczHkt5/WcN3LezHkr52rO2zlbOaOSnz9nLedQzrGcZ3NO51zMeS3n9Zw3ct7MeSvnas7bOVs5w3HSAAAAAAAAAAAAAAAAAAA8IpUo4nuR4ke/aaW1onN92eno5G3nucIn2v8FAAD//+X2R4U=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003040)={0x2020}, 0x2020) 59.590828773s ago: executing program 3 (id=3161): epoll_create(0x7) epoll_create1(0x0) epoll_create(0x7) epoll_create1(0x0) epoll_create(0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 59.085070626s ago: executing program 42 (id=3161): epoll_create(0x7) epoll_create1(0x0) epoll_create(0x7) epoll_create1(0x0) epoll_create(0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 8.387552897s ago: executing program 4 (id=3374): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xf, 0x64}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "17a8ea1deb0fd17ed984091524b95552257126840952c10a"}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 8.167022618s ago: executing program 4 (id=3377): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xd, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x40, 0x13, 0x5, 0x1, 0x0, 0x5, 0x0}) 7.95232078s ago: executing program 4 (id=3379): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xc00, 0x8d) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) 7.261519316s ago: executing program 4 (id=3387): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="201803"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000004c0)={0x0, 0x3, 0x4, "ecba627e"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.489803984s ago: executing program 6 (id=3390): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = dup(r0) inotify_rm_watch(r2, r1) 3.121756667s ago: executing program 6 (id=3394): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101341) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 2.968467358s ago: executing program 7 (id=3396): r0 = memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xff64000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) 2.820289339s ago: executing program 2 (id=3398): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000140)) 2.774187439s ago: executing program 6 (id=3399): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001240)='net/igmp6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/4088, 0xff8}, {&(0x7f0000000000)=""/7, 0x7}, {&(0x7f0000001280)=""/224, 0xe0}], 0x3, 0x15f, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f00000003c0)='./bus\x00', 0x0) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) mlockall(0x2) ftruncate(r2, 0x2008002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 2.62623082s ago: executing program 0 (id=3400): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}}, 0x0) 2.56855448s ago: executing program 7 (id=3401): syz_emit_ethernet(0x107, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xd1, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @loopback, [{0x4, 0x15, "e5cf2b3c7c255d2d6ab98e00a4a6f09fd3cda0615abe938d3cc80cac5785b3433dd37afb2d2aca3b6b9c1722f161389c951386972726ab58764d48befa04e6c609d9b7c2f162ff27768127909f1fd8fd77c962253af1e7c2b8a4f148869860660a3ead62d17eea24ac4b118faa450268a0bc59b9fc9a35f3ba2b9724a7c8012c20f90256889bcb111499ed6a7d9086ab4405bb38ab7bbc4d79f0e7b6c4989ab79824f95eede7eb"}]}}}}}}, 0x0) 2.385707722s ago: executing program 0 (id=3402): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000003c0)='./control/file0\x00', 0x84840, 0x0) rmdir(&(0x7f0000000040)='./control\x00') 2.345214153s ago: executing program 7 (id=3403): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x100, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 1.556648788s ago: executing program 2 (id=3404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x101142, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file1\x00', 0xa, &(0x7f00000002c0)=ANY=[], 0x0, 0x199, &(0x7f0000000000)="$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") r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 910.442883ms ago: executing program 7 (id=3405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x6da24b7ebfdfaf83}, 0xc) pread64(0xffffffffffffffff, &(0x7f0000000400)=""/179, 0xb3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0xc, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x29]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 910.279803ms ago: executing program 2 (id=3406): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x4, 0x101801) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) open(&(0x7f0000000040)='./file1\x00', 0x64941, 0x20) 907.959843ms ago: executing program 0 (id=3407): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000)={[{@errors_remount}, {@nobh}]}, 0x1, 0x513, &(0x7f0000000380)="$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") signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 891.403823ms ago: executing program 6 (id=3408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000780)='ext4_remove_blocks\x00', r0}, 0x18) 664.594195ms ago: executing program 2 (id=3409): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 663.965095ms ago: executing program 7 (id=3410): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000f00)={0xa, 0x4e21, 0x7, @mcast2, 0xc}, 0x1c) 648.744545ms ago: executing program 0 (id=3411): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0xfffffffa, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x34, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0xc, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x10c8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0xfff, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 622.448896ms ago: executing program 6 (id=3412): r0 = syz_open_dev$usbmon(&(0x7f0000000500), 0x4, 0x20800) readv(r0, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/11, 0xb}], 0x1) 448.530527ms ago: executing program 2 (id=3413): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = syz_open_dev$vcsn(&(0x7f0000000580), 0x3, 0x2) read$FUSE(r3, &(0x7f0000006340)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}]}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x93c916, &(0x7f0000000380)={[{@nobarrier}, {@noblock_validity}, {@grpid}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@resgid={'resgid', 0x3d, 0xee01}}, {@nodiscard}, {@noauto_da_alloc}, {@bh, 0x32}]}, 0x9b, 0x4df, &(0x7f0000001b80)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000400)=0xc) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000004c0)={[{@verity_require}, {@xino_auto}, {@redirect_dir_nofollow}, {@userxattr}, {@volatile}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) read$FUSE(r2, &(0x7f0000004300)={0x2020}, 0x2020) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 448.328907ms ago: executing program 7 (id=3414): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000031c0000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000000140)) 349.181088ms ago: executing program 0 (id=3415): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x140) execveat(r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 346.328248ms ago: executing program 4 (id=3416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 291.834518ms ago: executing program 6 (id=3417): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(0x0, 0x6, 0x0, 0x0, 0x0, 0xffffff7a) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0xfc, 0xc41, &(0x7f0000001b80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000600)=ANY=[], 0x4000) 4.57426ms ago: executing program 4 (id=3418): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000003c0)='./control/file0\x00', 0x84840, 0x0) rmdir(&(0x7f0000000040)='./control\x00') 3.7385ms ago: executing program 0 (id=3428): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)={[{@shortad}, {@partition={'partition', 0x3d, 0x5}}, {@noadinicb}, {@uid}, {@gid}, {@volume={'volume', 0x3d, 0x6}}]}, 0x1, 0x489, &(0x7f0000000580)="$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") symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103) 0s ago: executing program 2 (id=3419): syz_open_dev$evdev(&(0x7f0000000080), 0x8fd, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = dup(r1) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f0000001480)={0x2, 0x1, 0xf, 0x1f, 0x19e, &(0x7f0000001080)="133bb9e09e554f9b8740efacbac4c6cdf385ef60e129c09631f9c64c9a4a0160276cd3efaf2f207516cf15b4893de76d53ead0802055cf49cbf979586eb361448b84225891ed31c03d0b581de58d59252c3c9a96183bdd097bd5c5f3dea2471ff782805437c1df90096c3c8d1dae875f84b9b7236be71eb11373b5a0c2a700708db1f5931dcf35a539ea9768efa2bfed5ee063f2be5cea0f4740f22ad4592c93dc57c6616fd6e222394e6da4ee5e01c6a2cab8337e6f1838ea29a0a2ec4aa3b966afe2cbca8c75ef07831cc2a920735414e1e3e5fdbe840dabe299d8ddefac71ef01a304d5647ba3454e474d8180a1e6b2a15a58846c0d40b546419b8b167ecb4ed04f078142aecf3359e0774ba10de80ccbfcf7b3241405eda5afc5759ad27d1b8297669d90e4c4010993b58a2842c50ad562656804dea6032f80648b82e48d25412d136ee57421573a888f770858016df6d9339d5822ca84ad670c1766c97b85220395513b40ba5a53a52fe26f951e34199fa577d61a0e24f743354ed8f45981c6c11ddde6729a9207d24cb04e2702c6ef5dfa2aa23b067817227cecf4041e207e815cf337e98adac52942c471f4870345245680838bbea95180a7fd079be15aa697db7b0f787646888d301d6f49c1448d964b43a03d71a892234eccc9079ae5f6d0a7c7882ce8d52e1fe467a0a2ce9a238b86156aec36fa5d397f1ec9f2c3eb2d602bace49d8a124b450cb9a193e9ca7edc88b6d4d8adbd4556460623dd171df2b0d78149c7862a6360390b2dae2b488dd96fd4c007b1ef02c09e29b1dd012e19a983f415eae0e050fdb78c976341cc0c8d7fd50f502ff084920d42a2ad6b3d26d67889ecf3aa0b745921d1de33bd017582e4be11d171b320a0407ae4d0bc8b08084fd5974c31dd3aaccd73364547445147e172ac2f3e940c5f41001293b386e847efe75c627811d035070a4619305aba159997d14065609fb908e40b90ec09849a5c176014952ae5df9d5684661f9a11c902c29ac08ceafc294fd81edfd7723a20b41b7845775c3ffa12f18cb6657b49e88f04b1977429c759f43e93347f256184fb5cf78d2685670128de2090948da360df9bc41c87b3b3ed32575c5af999ad49a6142bc3df31da0800667977f2f801d7ae9606577368c43c3e29b79f9d2dec92afd44f634c003750421fca988fa389712eef0255a02622eb88ce0a63b2121c130fc183df8388d0fcdeaf508ab9373a1d8a9d9df2e150ba39cebca45b4e3f98db1f74a3d6d37b47d62a69bca9da92ee6d7154b33d4f605d9e384f58c36b897265b6c7e6cd87781c9cd749581400a9601ce5480926e72578dd4d6dd3c29f525d5067d5d78c9bb805cf9b787a2ac505a82a1133326e388c6d1b2d764bdee7e55c2ea7e834355393bc48da9dff20a6c6d0344b56567ebe8f7fbbe707f5aad7"}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000015c0)=' hash=', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000800000000000000fbcf000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000185900000100000000000000000000008500000067000000186100000600000000000000810000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xd23, 0x9d, &(0x7f00000006c0)=""/157, 0x41000, 0x8, '\x00', 0x0, 0x17, r4, 0x8, &(0x7f00000002c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x5, 0x1, 0x7}, 0x10, 0x12167, r2, 0x0, &(0x7f0000000500)=[r5, r4, r2, r2], 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r7, 0xffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000005140)=@raw={'raw\x00', 0x3c1, 0x3, 0x1b40, 0x18e0, 0xffffff80, 0x178, 0x0, 0x178, 0x1a70, 0x22b, 0x258, 0x1a70, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x18b8, 0x18e0, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@u32={{0x7e0}, {[], 0x70}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, @private1}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1ba0) fcntl$addseals(r7, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000080)=0x1) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={&(0x7f0000000340), 0x0, 0x0, 0x0, 0xc}, 0x38) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='.\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d9, &(0x7f0000000c00)="$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") socket$key(0xf, 0x3, 0x2) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f0000000180)={[0x6]}, 0x8) kernel console output (not intermixed with test programs): ly 0 port 6081 - 0 [ 510.409637][T12801] loop2: detected capacity change from 0 to 164 [ 510.510353][ T4298] usb 3-1: USB disconnect, device number 44 [ 510.638093][ T5311] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.661916][T12719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.669427][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.705620][T12719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.835480][T12719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.844053][T12719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.872464][T12719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.912110][ T5311] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.135572][ T5311] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.178487][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 511.252558][T12824] loop3: detected capacity change from 0 to 1024 [ 511.364969][ T5311] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.439535][T12826] loop2: detected capacity change from 0 to 512 [ 511.457922][T12141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.474895][T12719] device hsr_slave_0 entered promiscuous mode [ 511.483716][T12141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.497534][T12826] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 511.508974][T12719] device hsr_slave_1 entered promiscuous mode [ 511.523133][T12719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.545318][T12719] Cannot create hsr debugfs directory [ 511.556308][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 511.580954][T12826] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 511.608636][T12826] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.677549][ T5289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.723054][ T5289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.801872][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 511.811575][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 512.006204][T12837] loop2: detected capacity change from 0 to 1024 [ 512.110316][T12837] hfsplus: cannot replace xattr [ 512.167829][T12683] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 512.211882][T12683] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 512.271996][T12844] loop3: detected capacity change from 0 to 256 [ 512.308240][T12683] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 512.308892][ T5325] hfsplus: b-tree write err: -5, ino 4 [ 512.401653][T12683] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 512.794450][T12860] loop2: detected capacity change from 0 to 512 [ 512.829183][T12860] EXT4-fs: Ignoring removed mblk_io_submit option [ 512.892206][T12719] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.909683][T12860] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 512.957859][T12860] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.2731: attempt to clear invalid blocks 2 len 1 [ 513.009714][ T4300] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 513.065189][T12860] EXT4-fs (loop2): Remounting filesystem read-only [ 513.077938][T12865] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.090512][T12860] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 513.111747][T12865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.120100][T12865] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.129454][T12860] EXT4-fs (loop2): Remounting filesystem read-only [ 513.137620][T12865] device bridge_slave_0 left promiscuous mode [ 513.146252][T12860] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2731: invalid indirect mapped block 1819239214 (level 0) [ 513.171333][T12865] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.180067][T12860] EXT4-fs (loop2): Remounting filesystem read-only [ 513.188004][T12860] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2731: invalid indirect mapped block 1819239214 (level 1) [ 513.203774][ T4300] usb 4-1: Using ep0 maxpacket: 8 [ 513.211028][ T4300] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.222391][ T4300] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 513.232227][ T4300] usb 4-1: config 0 has no interface number 0 [ 513.238467][T12860] EXT4-fs (loop2): Remounting filesystem read-only [ 513.248906][ T4300] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 513.258418][T12860] EXT4-fs (loop2): 1 truncate cleaned up [ 513.264115][T12860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 513.274059][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.308818][ T4300] usb 4-1: config 0 descriptor?? [ 513.315423][T12865] device bridge_slave_1 left promiscuous mode [ 513.325313][T12393] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 513.339341][T12865] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.353045][T12393] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 513.382585][T12865] bond0: (slave bond_slave_0): Releasing backup interface [ 513.421385][T12865] bond0: (slave bond_slave_1): Releasing backup interface [ 513.425492][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 513.537198][T12873] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2733'. [ 513.542226][T12393] usb 4-1: USB disconnect, device number 30 [ 513.567804][T12865] team0: Port device team_slave_0 removed [ 513.633017][T12865] team0: Port device team_slave_1 removed [ 513.657443][T12865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.658023][T12875] loop2: detected capacity change from 0 to 1024 [ 513.667484][T12865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.682394][T12865] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.698418][T12865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.766409][T12866] team0: Mode changed to "loadbalance" [ 513.841369][T12719] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.914915][T12877] loop2: detected capacity change from 0 to 1024 [ 513.937432][T12868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2732'. [ 513.956013][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2732'. [ 514.032155][ T5289] hfsplus: b-tree write err: -5, ino 4 [ 514.157646][T12879] loop2: detected capacity change from 0 to 512 [ 514.192029][T12879] EXT4-fs (loop2): filesystem is read-only [ 514.208211][T12879] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 514.235225][T12879] EXT4-fs (loop2): filesystem is read-only [ 514.247610][T12879] EXT4-fs (loop2): orphan cleanup on readonly fs [ 514.301105][T12879] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2736: bg 0: block 64: padding at end of block bitmap is not set [ 514.344570][T12879] EXT4-fs (loop2): Remounting filesystem read-only [ 514.361350][T12879] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 514.375621][T12879] EXT4-fs (loop2): Remounting filesystem read-only [ 514.384266][T12879] EXT4-fs (loop2): 1 orphan inode deleted [ 514.390432][T12879] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 514.561004][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 514.592869][T12719] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.821154][T12719] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.045250][T12898] loop2: detected capacity change from 0 to 1024 [ 515.085818][T12898] EXT4-fs: Ignoring removed nobh option [ 515.092132][T12898] EXT4-fs: Ignoring removed bh option [ 515.098161][T12898] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 515.478641][T12898] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 515.886825][T12683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.902458][T12898] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.2743: Allocating blocks 385-513 which overlap fs metadata [ 516.005359][T12906] EXT4-fs (loop2): pa ffff8880743ba2a0: logic 16, phys. 129, len 24 [ 516.014034][T12906] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 516.068382][T12683] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.168760][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 516.187110][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 516.210427][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 516.277092][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 516.287337][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 516.296515][ T5314] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.303729][ T5314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.332525][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 516.357095][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 516.380048][ T5314] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.387280][ T5314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.401476][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 516.411144][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 516.771976][ T4293] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 516.988467][ T4293] usb 4-1: Using ep0 maxpacket: 16 [ 517.004319][ T4293] usb 4-1: config 5 has an invalid interface number: 146 but max is 0 [ 517.495858][ T4293] usb 4-1: config 5 has no interface number 0 [ 517.503729][ T4293] usb 4-1: config 5 interface 146 has no altsetting 0 [ 517.517492][T12921] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.558061][T12921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 517.578082][ T4293] usb 4-1: New USB device found, idVendor=16d8, idProduct=8001, bcdDevice=ec.10 [ 517.589046][ T4293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.597086][ T4293] usb 4-1: Product: syz [ 517.602199][ T4293] usb 4-1: Manufacturer: syz [ 517.606846][ T4293] usb 4-1: SerialNumber: syz [ 517.630164][T12921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 517.721063][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 517.742908][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 517.772953][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 517.810170][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 517.835378][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 517.855448][T12932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2748'. [ 517.876946][T12936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2748'. [ 518.107075][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 518.152920][ T4293] usb 4-1: USB disconnect, device number 31 [ 518.160624][T12719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 518.209212][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 518.222138][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 518.242683][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 518.252895][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 518.281596][T12683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 518.297776][T12951] Bluetooth: MGMT ver 1.22 [ 518.309875][T12719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 518.361843][T12719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 518.555619][T12719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 518.651413][ T5311] device hsr_slave_0 left promiscuous mode [ 518.671372][ T5311] device hsr_slave_1 left promiscuous mode [ 518.854282][ T5311] device veth1_macvtap left promiscuous mode [ 518.868682][ T5311] device veth0_macvtap left promiscuous mode [ 518.885168][ T5311] device veth1_vlan left promiscuous mode [ 518.897816][ T5311] device veth0_vlan left promiscuous mode [ 521.525067][ T5311] bond0 (unregistering): Released all slaves [ 521.636831][T12683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.650784][T12985] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 521.685143][T12985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.699801][T12985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.783276][T12994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2760'. [ 521.809600][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2760'. [ 521.853326][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.877695][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.058824][T12719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.094382][T13003] loop3: detected capacity change from 0 to 256 [ 522.129907][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.137457][T13003] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 522.157480][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.217884][T12719] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.239449][T13003] syz.3.2762: attempt to access beyond end of device [ 522.239449][T13003] loop3: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 522.260062][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 522.300556][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 522.329880][T13003] syz.3.2762: attempt to access beyond end of device [ 522.329880][T13003] loop3: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 522.330769][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.351123][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.362604][T13008] kvm: pic: level sensitive irq not supported [ 522.362997][T13008] kvm: pic: non byte read [ 522.385211][T13003] syz.3.2762: attempt to access beyond end of device [ 522.385211][T13003] loop3: rw=0, sector=280, nr_sectors = 8 limit=256 [ 522.399084][T13008] kvm: pic: level sensitive irq not supported [ 522.399154][T13008] kvm: pic: non byte read [ 522.429023][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 522.454426][ T26] audit: type=1800 audit(1742044949.444:466): pid=13003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2762" name="file1" dev="loop3" ino=1048761 res=0 errno=0 [ 522.488728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 522.499243][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.506398][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.540205][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 522.600082][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 522.609874][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 522.641024][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 522.672008][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 522.684332][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 522.786650][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 522.811377][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 522.837949][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 522.867350][T13012] loop3: detected capacity change from 0 to 256 [ 522.870635][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 522.892885][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 522.922230][T13012] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 522.932089][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 522.953488][T13012] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 522.965740][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 522.976835][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.989506][T12719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.032638][T12683] device veth0_vlan entered promiscuous mode [ 523.065602][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 523.082937][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.115529][T12683] device veth1_vlan entered promiscuous mode [ 523.148940][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.169707][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.199421][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 523.279602][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 523.290020][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.329116][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 523.354004][T12683] device veth0_macvtap entered promiscuous mode [ 523.396143][T12683] device veth1_macvtap entered promiscuous mode [ 523.487730][T12683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.525355][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 523.534077][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 523.570717][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 523.589827][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 523.623380][T12683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.674584][T12683] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.708378][T12683] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.717136][T12683] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.743747][T12683] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.769839][T13032] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 523.783468][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 523.814372][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.840109][T13032] Error parsing options; rc = [-22] [ 523.901804][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.921258][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.946913][T12719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.071874][ T5314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.098433][ T5314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.172302][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.185503][T12141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 524.206005][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.266018][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 524.450780][T13044] device lo entered promiscuous mode [ 524.489356][T13044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 524.522427][T13047] loop5: detected capacity change from 0 to 1024 [ 525.704753][T13069] loop5: detected capacity change from 0 to 512 [ 525.740489][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.751747][T13069] EXT4-fs error (device loop5): __ext4_fill_super:5390: inode #2: comm syz.5.2779: casefold flag without casefold feature [ 525.771738][T13069] EXT4-fs (loop5): get root inode failed [ 525.778688][T13069] EXT4-fs (loop5): mount failed [ 525.797574][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.842709][ T4324] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 525.851225][T13074] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 525.866988][T13074] Error parsing options; rc = [-22] [ 525.878428][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.894437][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.913195][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.950338][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.978995][T12719] device veth0_vlan entered promiscuous mode [ 526.035827][T12719] device veth1_vlan entered promiscuous mode [ 526.137004][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 526.154448][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 526.188838][T12719] device veth0_macvtap entered promiscuous mode [ 526.280734][T12719] device veth1_macvtap entered promiscuous mode [ 526.427855][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.285206][T13085] loop3: detected capacity change from 0 to 2048 [ 527.367273][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.404289][T12719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.423087][T13085] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.438092][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 527.459175][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 527.489019][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 527.508604][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 527.611489][T12719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.648529][T12719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.715282][T12719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.764379][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.789857][ T5328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.819426][T12719] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.849439][T12719] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.858846][T12719] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.878369][T12719] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.028449][ T4300] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 528.082815][ T5314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.104960][ T5314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.151101][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 528.166473][T11876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.175387][T11876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.188518][ T4347] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 528.206848][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 528.228827][ T4300] usb 6-1: Using ep0 maxpacket: 32 [ 528.258873][ T4300] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.297822][ T4300] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 528.327698][ T4300] usb 6-1: config 1 has no interface number 1 [ 528.364245][ T4300] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 528.383340][ T4347] usb 3-1: Using ep0 maxpacket: 32 [ 528.388952][ T4300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.393060][ T4347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 36975, setting to 1024 [ 528.407272][ T4300] usb 6-1: Product: syz [ 528.417397][ T4300] usb 6-1: Manufacturer: syz [ 528.427866][ T4300] usb 6-1: SerialNumber: syz [ 528.448787][ T4347] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 528.493212][ T4347] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 528.510833][ T4347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.521196][ T4347] usb 3-1: Product: syz [ 528.525493][ T4347] usb 3-1: Manufacturer: syz [ 528.530423][ T4347] usb 3-1: SerialNumber: syz [ 528.555700][ T4347] usb 3-1: config 0 descriptor?? [ 528.570718][T13101] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 528.694749][ T4300] usb 6-1: USB disconnect, device number 2 [ 528.786532][T13123] loop3: detected capacity change from 0 to 16 [ 528.819566][T13123] erofs: (device loop3): mounted with root inode @ nid 36. [ 528.846848][ T4347] usb 3-1: USB disconnect, device number 45 [ 528.961889][ T4324] udevd[4324]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.423248][T13143] loop3: detected capacity change from 0 to 128 [ 529.501326][T13143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 529.551673][T13143] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 529.648344][ T4300] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 529.683610][T13143] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.2801: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 529.778881][T13143] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.3.2801: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 529.870292][ T4300] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.891081][ T4300] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 529.932301][ T4300] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 529.998715][ T4300] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 530.001096][T12334] EXT4-fs (loop3): unmounting filesystem. [ 530.038307][ T4300] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.046365][ T4300] usb 6-1: Product: syz [ 530.063419][ T4300] usb 6-1: Manufacturer: syz [ 530.097515][ T4300] usb 6-1: SerialNumber: syz [ 530.123627][ T4300] usb 6-1: config 0 descriptor?? [ 530.182642][T13170] loop4: detected capacity change from 0 to 256 [ 530.242424][T13170] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 530.292256][T13170] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 530.317708][T13172] loop3: detected capacity change from 0 to 1024 [ 530.340544][ T4300] usb 6-1: Found UVC 34.00 device syz (8086:0b5b) [ 530.359919][ T4300] usb 6-1: No valid video chain found. [ 530.429448][T13172] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 530.438577][T13175] loop2: detected capacity change from 0 to 2048 [ 530.450533][T13172] hfsplus: xattr search failed [ 530.517120][T13175] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 530.565871][ T4300] usb 6-1: USB disconnect, device number 3 [ 530.700386][T13182] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 530.814274][T13182] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 12 with error 28 [ 530.898325][T13182] EXT4-fs (loop2): This should not happen!! Data will be lost [ 530.898325][T13182] [ 530.928334][T13182] EXT4-fs (loop2): Total free blocks count 0 [ 530.940572][T13182] EXT4-fs (loop2): Free/Dirty block details [ 530.954792][T13182] EXT4-fs (loop2): free_blocks=2415919504 [ 530.968914][T13182] EXT4-fs (loop2): dirty_blocks=112 [ 530.978589][T13182] EXT4-fs (loop2): Block reservation details [ 530.994899][T13182] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 531.038431][T12701] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 531.158512][ T5314] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 531.235977][T12701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 531.264444][T12701] usb 4-1: not running at top speed; connect to a high speed hub [ 531.299887][T12701] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x82 has invalid maxpacket 2031, setting to 64 [ 531.348533][T12701] usb 4-1: config 1 interface 0 has no altsetting 0 [ 531.368407][T12701] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 531.407351][T12701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.430223][T12701] usb 4-1: Product: syz [ 531.434448][T12701] usb 4-1: Manufacturer: syz [ 531.442921][T12701] usb 4-1: SerialNumber: syz [ 531.480857][T13186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 531.687637][T13214] loop5: detected capacity change from 0 to 2048 [ 531.732276][T12701] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 531.736839][T13214] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 531.773674][T13214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 531.801459][T12701] usb 4-1: USB disconnect, device number 32 [ 532.135479][T13229] loop4: detected capacity change from 0 to 1024 [ 532.204299][T13229] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 532.361334][T13229] EXT4-fs (loop4): shut down requested (2) [ 532.672820][T12719] EXT4-fs (loop4): unmounting filesystem. [ 532.982923][T13260] loop5: detected capacity change from 0 to 1024 [ 533.098083][ T26] audit: type=1800 audit(1742044960.084:467): pid=13260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2841" name="file2" dev="loop5" ino=21 res=0 errno=0 [ 533.383343][T13272] loop3: detected capacity change from 0 to 512 [ 533.461859][T13272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 533.496067][T13281] loop4: detected capacity change from 0 to 128 [ 533.501783][T13272] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.581163][T13281] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 533.591994][T13282] loop5: detected capacity change from 0 to 1024 [ 533.620386][T13281] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 533.736744][T13282] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 533.777367][T12334] EXT4-fs (loop3): unmounting filesystem. [ 534.064161][T12683] EXT4-fs (loop5): unmounting filesystem. [ 534.161195][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 534.172852][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 534.186740][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 534.211812][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 534.219783][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 534.227103][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 534.332044][T12719] EXT4-fs (loop4): unmounting filesystem. [ 534.808533][T13294] chnl_net:caif_netlink_parms(): no params data found [ 535.051423][T13294] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.080094][T13294] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.110683][T13294] device bridge_slave_0 entered promiscuous mode [ 535.130264][T13323] loop3: detected capacity change from 0 to 512 [ 535.141680][T13294] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.151726][T13323] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 535.172630][T13294] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.201169][T13323] UDF-fs: Scanning with blocksize 512 failed [ 535.202013][T13294] device bridge_slave_1 entered promiscuous mode [ 535.234749][T13323] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 535.263116][T13323] UDF-fs: Scanning with blocksize 1024 failed [ 535.296369][T13323] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 535.326080][T13323] UDF-fs: Scanning with blocksize 2048 failed [ 535.337461][T13294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.351985][T13323] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 535.374731][T13294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.399685][T13323] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.409443][T13332] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 535.427647][T13332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.467537][T13332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.522380][T13332] device bridge_slave_0 left promiscuous mode [ 535.555237][T13332] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.631591][T13332] device bridge_slave_1 left promiscuous mode [ 535.712503][T13332] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.733183][T13345] syz.0.2858 (13345): /proc/13337/oom_adj is deprecated, please use /proc/13337/oom_score_adj instead. [ 535.735939][T13342] loop3: detected capacity change from 0 to 764 [ 535.769032][T13332] bond0: (slave bond_slave_0): Releasing backup interface [ 535.851413][T13332] bond0: (slave bond_slave_1): Releasing backup interface [ 535.991153][T13332] team0: Port device team_slave_0 removed [ 536.057891][T13349] loop5: detected capacity change from 0 to 128 [ 536.072208][T13332] team0: Port device team_slave_1 removed [ 536.096532][T13332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.107970][T13332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.110965][T13349] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 536.151307][T13332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.196332][T13332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.251033][T13352] loop3: detected capacity change from 0 to 128 [ 536.308612][ T4263] Bluetooth: hci3: command 0x0409 tx timeout [ 536.369732][T13352] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 536.374126][T13333] team0: Mode changed to "loadbalance" [ 536.459399][T13336] device vlan0 entered promiscuous mode [ 536.520697][T13336] team0: Port device vlan0 added [ 536.590619][T13294] team0: Port device team_slave_0 added [ 536.631753][T13294] team0: Port device team_slave_1 added [ 536.742737][T13294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.770163][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.857715][T13294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.890753][T13294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.907979][T13294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.985516][T13294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.089593][T13294] device hsr_slave_0 entered promiscuous mode [ 537.106928][T13294] device hsr_slave_1 entered promiscuous mode [ 537.137200][T13294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.156645][T13294] Cannot create hsr debugfs directory [ 537.631762][T13294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.052681][T13379] loop5: detected capacity change from 0 to 1024 [ 538.378631][ T4263] Bluetooth: hci3: command 0x041b tx timeout [ 539.096465][T13381] loop3: detected capacity change from 0 to 1024 [ 540.459032][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 540.980606][T13294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.232325][T13294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.386866][T13294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.574424][T13415] loop5: detected capacity change from 0 to 1024 [ 541.644950][T13420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.677369][ T26] audit: type=1800 audit(1742044968.674:468): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2875" name="bus" dev="loop5" ino=26 res=0 errno=0 [ 541.771056][T12683] hfsplus: bad catalog entry type [ 541.791480][T13294] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 541.860266][T13294] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 541.888583][T13294] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 541.918070][T13294] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 542.266695][ T5330] hfsplus: b-tree write err: -5, ino 4 [ 542.474772][T11876] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.538529][ T4250] Bluetooth: hci3: command 0x0419 tx timeout [ 542.646712][T13294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.741479][T11876] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.766574][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 542.787387][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.810248][T13294] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.922319][T11876] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.984268][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 543.019186][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 543.058549][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.066060][ T5330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.209865][T11876] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.302622][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 543.335195][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 543.369447][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.412517][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.419823][ T5330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.489703][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 543.519727][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 543.580112][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.606481][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.643307][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.671070][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.703397][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.764909][T13294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 543.809786][ T4263] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.823797][T13294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.834017][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.844116][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.844852][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.871822][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.880713][ T4263] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.881296][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.888837][ T4263] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 543.897001][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 543.905674][ T4263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.916460][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 544.123154][T13480] program syz.3.2892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 544.679908][T13505] loop4: detected capacity change from 0 to 256 [ 544.719417][T13505] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 544.774748][T13505] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 544.798885][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.806478][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.891177][T13294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.041738][T13474] chnl_net:caif_netlink_parms(): no params data found [ 545.125896][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 545.144447][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.246140][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 545.255601][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 545.336045][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 545.344530][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 545.356494][T13294] device veth0_vlan entered promiscuous mode [ 545.423027][T13474] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.439124][T13474] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.447543][T13474] device bridge_slave_0 entered promiscuous mode [ 545.474216][T13294] device veth1_vlan entered promiscuous mode [ 545.535461][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 545.554532][T13474] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.561878][T13474] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.573523][T13474] device bridge_slave_1 entered promiscuous mode [ 545.609902][T13474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.647852][T13474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.724593][T13474] team0: Port device team_slave_0 added [ 545.735750][T13474] team0: Port device team_slave_1 added [ 545.772158][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 545.781347][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 545.865182][T13474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.872353][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.899152][T13474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.941968][T13294] device veth0_macvtap entered promiscuous mode [ 545.950283][T13474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.957526][T13474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.984429][ T4250] Bluetooth: hci4: command 0x0409 tx timeout [ 546.007784][T13474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.038109][T13294] device veth1_macvtap entered promiscuous mode [ 546.200743][T13474] device hsr_slave_0 entered promiscuous mode [ 546.210061][T13474] device hsr_slave_1 entered promiscuous mode [ 546.216971][T13474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.225139][T13474] Cannot create hsr debugfs directory [ 546.268026][T13294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 546.291259][T13294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 546.304558][T13294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.338051][T11876] device hsr_slave_0 left promiscuous mode [ 546.344897][T11876] device hsr_slave_1 left promiscuous mode [ 546.352048][T11876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.360328][T11876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.369384][T11876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.376879][T11876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.385283][T11876] device bridge_slave_1 left promiscuous mode [ 546.392457][T11876] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.401993][T11876] device bridge_slave_0 left promiscuous mode [ 546.408326][T11876] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.444898][T11876] device veth1_macvtap left promiscuous mode [ 546.451158][T11876] device veth0_macvtap left promiscuous mode [ 546.457243][T11876] device veth1_vlan left promiscuous mode [ 546.463821][T11876] device veth0_vlan left promiscuous mode [ 547.136689][T11876] team0 (unregistering): Port device team_slave_1 removed [ 547.196368][T11876] team0 (unregistering): Port device team_slave_0 removed [ 547.253560][T11876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.317800][T11876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.022148][T11876] bond0 (unregistering): Released all slaves [ 548.058386][ T4250] Bluetooth: hci4: command 0x041b tx timeout [ 548.109360][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 548.117737][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 548.128082][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 548.137320][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 548.152531][T13294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.186300][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 548.195906][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 548.210713][T13294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.224730][T13294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.234057][T13294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.243112][T13294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.846763][T13547] loop3: detected capacity change from 0 to 2048 [ 548.972094][T13547] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 549.025501][T13552] loop4: detected capacity change from 0 to 8192 [ 549.134550][T12334] EXT4-fs (loop3): unmounting filesystem. [ 549.379458][T13556] loop4: detected capacity change from 0 to 764 [ 549.387913][T13556] rock: directory entry would overflow storage [ 549.395393][T13556] rock: sig=0x4654, size=5, remaining=4 [ 549.631437][T13561] loop4: detected capacity change from 0 to 2048 [ 549.678220][T13561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 549.696012][T13561] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.753467][T13561] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.2913: bg 0: block 345: padding at end of block bitmap is not set [ 549.807021][T13561] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 117 [ 549.829052][T13561] EXT4-fs (loop4): This should not happen!! Data will be lost [ 549.829052][T13561] [ 549.972546][T12719] EXT4-fs (loop4): unmounting filesystem. [ 550.148005][ T4250] Bluetooth: hci4: command 0x040f tx timeout [ 550.348584][ T4293] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 550.548473][ T4293] usb 5-1: Using ep0 maxpacket: 16 [ 550.555763][ T4293] usb 5-1: config 0 interface 0 has no altsetting 0 [ 550.564159][ T4293] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 550.574570][ T4293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.610012][ T4293] usb 5-1: config 0 descriptor?? [ 551.029052][ T4293] hid (null): report_id 0 is invalid [ 551.234177][ T4293] usb 5-1: USB disconnect, device number 30 [ 552.228691][ T4250] Bluetooth: hci4: command 0x0419 tx timeout [ 552.978010][ T4316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.011765][ T4316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.189916][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 553.268911][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.314900][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.358577][ T4293] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 553.518366][ T4293] usb 5-1: device descriptor read/64, error -71 [ 553.593740][T12141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 553.828577][ T4293] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 553.998415][ T4293] usb 5-1: device descriptor read/64, error -71 [ 554.026318][T13474] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 554.054135][T13474] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 554.092185][T13474] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 554.112086][T13474] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.122657][ T4293] usb usb5-port1: attempt power cycle [ 554.339049][T13474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.397336][T13599] loop2: detected capacity change from 0 to 2048 [ 554.412261][T13474] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.451046][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.483331][T13599] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 554.491466][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.511755][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.535167][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.545601][ T4293] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 554.559517][T11699] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.567062][T11699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.591793][ T4293] usb 5-1: device descriptor read/8, error -71 [ 554.603646][T11699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 554.627259][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.649413][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.689312][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.696473][ T4304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.750674][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 554.780803][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.813306][T13612] loop2: detected capacity change from 0 to 512 [ 554.829007][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.848487][T13612] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 554.852627][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.865908][ T4293] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 554.894518][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.911658][ T4293] usb 5-1: device descriptor read/8, error -71 [ 554.929597][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.930373][T13612] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.2925: bad orphan inode 15 [ 554.949092][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.984402][T13617] loop3: detected capacity change from 0 to 1024 [ 555.008796][T13612] ext4_test_bit(bit=14, block=5) = 0 [ 555.015149][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 555.018504][T13612] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 555.031948][ T4293] usb usb5-port1: unable to enumerate USB device [ 555.081750][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 555.122712][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 555.194279][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 555.231905][T13474] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 555.287434][T13294] EXT4-fs (loop2): unmounting filesystem. [ 555.438047][T13624] loop2: detected capacity change from 0 to 512 [ 555.497215][T13624] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 555.525291][T13624] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 555.577268][T13624] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 555.599891][T13624] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 555.617207][T13624] System zones: 0-2, 18-18, 34-34 [ 555.640934][T13624] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 555.666873][T13624] EXT4-fs (loop2): 1 truncate cleaned up [ 555.678827][T13624] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 555.702016][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 555.723754][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 555.784000][T13474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.794136][ T26] audit: type=1800 audit(1742044982.784:469): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2927" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 556.509778][ T26] audit: type=1800 audit(1742044983.504:470): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2927" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 556.828094][T13666] futex_wake_op: syz.4.2931 tries to shift op by -1; fix this program [ 557.525596][T13668] loop3: detected capacity change from 0 to 1024 [ 557.548131][T13294] EXT4-fs (loop2): unmounting filesystem. [ 557.752034][ T5308] hfsplus: b-tree write err: -5, ino 4 [ 557.821917][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 557.859529][ T5330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 557.913402][T13681] loop2: detected capacity change from 0 to 256 [ 557.947450][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 557.964650][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 557.979057][T13681] exfat: Deprecated parameter 'utf8' [ 557.984536][T13681] exfat: Bad value for 'gid' [ 558.016375][T13474] device veth0_vlan entered promiscuous mode [ 558.030310][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.039934][T13686] loop3: detected capacity change from 0 to 1024 [ 558.063382][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.087939][T13686] EXT4-fs: Ignoring removed orlov option [ 558.140980][T13474] device veth1_vlan entered promiscuous mode [ 558.192217][T13686] EXT4-fs (loop3): Test dummy encryption mode enabled [ 558.268457][T13686] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 558.300344][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 558.319065][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 558.380185][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 558.433069][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 558.456079][T13474] device veth0_macvtap entered promiscuous mode [ 558.510427][T13474] device veth1_macvtap entered promiscuous mode [ 558.561829][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.573469][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.635170][T13474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.698193][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 558.740890][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 559.373975][T13686] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 559.436833][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 559.525207][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 559.558449][T13474] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.624020][T13474] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.625855][T13717] loop2: detected capacity change from 0 to 512 [ 559.635988][T13474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.652665][T13474] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.662090][T13474] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.672398][T13474] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.681891][T13474] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.710926][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 559.743429][T13717] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 559.750627][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 559.767123][T12334] EXT4-fs (loop3): unmounting filesystem. [ 559.814663][T13717] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.2943: invalid indirect mapped block 63488 (level 2) [ 559.849570][T13717] EXT4-fs (loop2): Remounting filesystem read-only [ 559.905400][T13717] EXT4-fs (loop2): 1 truncate cleaned up [ 559.955208][T13717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 559.988369][T13717] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 560.085276][T13726] loop3: detected capacity change from 0 to 2048 [ 560.107132][T11876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.162809][T13726] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 560.178020][T13294] EXT4-fs (loop2): unmounting filesystem. [ 560.197478][T11876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.233481][ T5330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.265254][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 560.278431][ T5330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.326023][T11876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 560.759065][T13747] loop6: detected capacity change from 0 to 764 [ 560.812641][T13747] Symlink component flag not implemented [ 560.850817][T13747] Symlink component flag not implemented [ 560.857164][T13747] Symlink component flag not implemented (129) [ 560.864606][T13747] Symlink component flag not implemented (6) [ 562.941467][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.947949][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.305554][T13782] loop4: detected capacity change from 0 to 256 [ 563.478561][ T4300] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 563.502440][T13782] FAT-fs (loop4): Directory bread(block 64) failed [ 563.509248][T13782] FAT-fs (loop4): Directory bread(block 65) failed [ 563.516358][T13782] FAT-fs (loop4): Directory bread(block 66) failed [ 563.523134][T13782] FAT-fs (loop4): Directory bread(block 67) failed [ 563.530333][T13782] FAT-fs (loop4): Directory bread(block 68) failed [ 563.537013][T13782] FAT-fs (loop4): Directory bread(block 69) failed [ 563.544312][T13782] FAT-fs (loop4): Directory bread(block 70) failed [ 563.551052][T13782] FAT-fs (loop4): Directory bread(block 71) failed [ 563.558145][T13782] FAT-fs (loop4): Directory bread(block 72) failed [ 563.565053][T13782] FAT-fs (loop4): Directory bread(block 73) failed [ 563.851092][ T4300] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.990936][ T4300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.018749][T13788] loop6: detected capacity change from 0 to 256 [ 564.028056][ T4300] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.062439][ T4300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.090581][T13788] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 564.102833][ T4300] usb 4-1: Product: syz [ 564.107036][ T4300] usb 4-1: Manufacturer: syz [ 564.118348][ T4300] usb 4-1: SerialNumber: syz [ 564.174011][T13790] loop4: detected capacity change from 0 to 256 [ 564.367115][ T4300] usb 4-1: 0:2 : does not exist [ 564.419888][ T4300] usb 4-1: USB disconnect, device number 33 [ 564.699926][ T4324] udevd[4324]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.846596][T13804] loop6: detected capacity change from 0 to 1024 [ 565.251393][T13809] loop4: detected capacity change from 0 to 512 [ 565.339095][T13809] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 565.402088][T13809] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2970: invalid indirect mapped block 63488 (level 2) [ 565.509980][T13809] EXT4-fs (loop4): Remounting filesystem read-only [ 565.557434][T13809] EXT4-fs (loop4): 1 truncate cleaned up [ 565.563388][T13809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 565.588386][T13809] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 565.771622][T12719] EXT4-fs (loop4): unmounting filesystem. [ 565.982105][T13824] loop6: detected capacity change from 0 to 1024 [ 566.079962][T13824] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 566.230973][T13834] loop4: detected capacity change from 0 to 256 [ 566.254348][T13834] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x3eebdab2, utbl_chksum : 0xe619d30d) [ 566.293522][T13834] syz.4.2976: attempt to access beyond end of device [ 566.293522][T13834] loop4: rw=524288, sector=4280, nr_sectors = 1 limit=256 [ 566.344747][T13834] syz.4.2976: attempt to access beyond end of device [ 566.344747][T13834] loop4: rw=0, sector=4280, nr_sectors = 1 limit=256 [ 566.398326][ T26] audit: type=1800 audit(1742044993.384:471): pid=13834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2976" name="file1" dev="loop4" ino=1048798 res=0 errno=0 [ 566.477787][T13474] EXT4-fs (loop6): unmounting filesystem. [ 566.482113][T13839] loop2: detected capacity change from 0 to 1024 [ 566.519329][T13839] EXT4-fs: Ignoring removed orlov option [ 566.578666][T13839] EXT4-fs (loop2): Test dummy encryption mode enabled [ 566.705118][T13839] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 566.796628][T13849] loop6: detected capacity change from 0 to 512 [ 566.846919][T13849] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 567.001034][T13849] EXT4-fs (loop6): 1 truncate cleaned up [ 567.006774][T13849] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 567.147441][T13474] EXT4-fs (loop6): unmounting filesystem. [ 567.196507][T13862] loop4: detected capacity change from 0 to 1024 [ 567.236372][T13839] fscrypt (loop2): Error allocating 'xts(aes)' transform: -4 [ 567.499792][T13294] EXT4-fs (loop2): unmounting filesystem. [ 567.716331][T13875] loop3: detected capacity change from 0 to 512 [ 567.864421][T13875] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 567.964015][T13875] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2986: invalid indirect mapped block 63488 (level 2) [ 568.114501][T13889] loop6: detected capacity change from 0 to 128 [ 568.118643][T13875] EXT4-fs (loop3): Remounting filesystem read-only [ 568.151904][T13875] EXT4-fs (loop3): 1 truncate cleaned up [ 568.161775][T13875] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 568.226169][T13875] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 568.390331][T13895] syz.6.2990: attempt to access beyond end of device [ 568.390331][T13895] loop6: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 568.431214][T12334] EXT4-fs (loop3): unmounting filesystem. [ 568.508751][T13889] syz.6.2990: attempt to access beyond end of device [ 568.508751][T13889] loop6: rw=2049, sector=233, nr_sectors = 119 limit=128 [ 570.082197][T13926] loop2: detected capacity change from 0 to 1024 [ 570.599942][T13937] loop3: detected capacity change from 0 to 1764 [ 570.634419][T13944] loop6: detected capacity change from 0 to 512 [ 570.665607][T13943] loop2: detected capacity change from 0 to 512 [ 570.778901][T13943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 570.808315][T13944] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 570.816652][T13944] System zones: 0-2, 18-18, 34-34 [ 570.824731][T13943] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 570.891062][T13944] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 570.970854][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 570.995204][T13944] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #16: comm syz.6.3006: corrupted inode contents [ 571.059676][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 571.066315][T13944] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #16: comm syz.6.3006: mark_inode_dirty error [ 571.182843][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 571.191258][T13944] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #16: comm syz.6.3006: corrupted inode contents [ 571.238159][T13294] EXT4-fs (loop2): unmounting filesystem. [ 571.272948][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 571.360485][T13944] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #16: comm syz.6.3006: mark_inode_dirty error [ 571.543463][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 571.765878][T13944] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #16: comm syz.6.3006: corrupted inode contents [ 572.248293][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 572.266421][T13944] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 572.349568][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 572.356259][T13944] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #16: comm syz.6.3006: corrupted inode contents [ 572.411493][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 572.427990][T13944] EXT4-fs error (device loop6): ext4_truncate:4311: inode #16: comm syz.6.3006: mark_inode_dirty error [ 572.477784][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 572.494705][T13944] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 572.540456][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 572.568280][T13944] EXT4-fs (loop6): 1 truncate cleaned up [ 572.588152][ T5333] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 572.597869][T13944] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 572.616523][ T5333] EXT4-fs error (device loop6): ext4_release_dquot:6818: comm kworker/u4:21: Failed to release dquot type 1 [ 572.637893][T13944] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 572.658611][ T5333] EXT4-fs (loop6): Remounting filesystem read-only [ 572.788096][T13944] Quota error (device loop6): write_blk: dquota write failed [ 572.820103][T13973] loop3: detected capacity change from 0 to 8192 [ 572.836901][T13944] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 572.928712][T13944] EXT4-fs error (device loop6): ext4_acquire_dquot:6795: comm syz.6.3006: Failed to acquire dquot type 1 [ 573.004827][T13944] EXT4-fs (loop6): Remounting filesystem read-only [ 573.105052][T13984] loop2: detected capacity change from 0 to 128 [ 573.175559][T13474] EXT4-fs (loop6): unmounting filesystem. [ 573.218515][ T5333] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 573.235478][ T5333] EXT4-fs error (device loop6): ext4_release_dquot:6818: comm kworker/u4:21: Failed to release dquot type 1 [ 573.268140][ T5333] EXT4-fs (loop6): Remounting filesystem read-only [ 573.276837][T13986] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3014'. [ 573.341056][T13989] loop3: detected capacity change from 0 to 128 [ 573.373124][T13989] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 573.452944][T13989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.512287][T13994] loop6: detected capacity change from 0 to 1024 [ 573.899463][T13999] loop4: detected capacity change from 0 to 512 [ 573.968185][T13999] EXT4-fs: Ignoring removed orlov option [ 573.968762][T13999] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 574.037188][T13999] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.3020: casefold flag without casefold feature [ 574.038022][T13999] EXT4-fs (loop4): Remounting filesystem read-only [ 574.038093][T13999] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3020: couldn't read orphan inode 15 (err -117) [ 574.038301][T13999] EXT4-fs (loop4): Remounting filesystem read-only [ 574.038331][T13999] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 574.155269][ T26] audit: type=1804 audit(1742045257.144:472): pid=13999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3020" name="/newroot/57/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 574.676643][T12719] EXT4-fs (loop4): unmounting filesystem. [ 575.585555][T14036] loop4: detected capacity change from 0 to 512 [ 575.766247][T14036] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 575.777754][ T4295] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 575.818294][T14036] System zones: 0-2, 18-18, 34-34 [ 575.853359][T14036] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 575.877474][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 575.895926][T14036] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.3029: corrupted inode contents [ 575.998661][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.006073][T14036] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #16: comm syz.4.3029: mark_inode_dirty error [ 576.009274][ T4295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.030114][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.036725][T14036] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.3029: corrupted inode contents [ 576.077659][ T4295] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.097699][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.107546][T14036] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.3029: mark_inode_dirty error [ 576.117293][ T4295] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.136032][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.146840][ T4295] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.157034][T14036] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.3029: corrupted inode contents [ 576.173794][ T4295] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.200067][ T4295] usb 7-1: config 0 descriptor?? [ 576.210220][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.226505][T14036] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 576.254450][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.278259][T14036] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.3029: corrupted inode contents [ 576.304214][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.328042][T14036] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.3029: mark_inode_dirty error [ 576.355043][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.367347][T14036] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 576.376875][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.393877][T14036] EXT4-fs (loop4): 1 truncate cleaned up [ 576.400090][T14036] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 576.414899][ T5314] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 576.436442][T14036] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.448570][ T5314] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:14: Failed to release dquot type 1 [ 576.617967][ T5314] EXT4-fs (loop4): Remounting filesystem read-only [ 576.640588][ T4295] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.659821][ T4295] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.676013][ T4295] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.678514][T14036] Quota error (device loop4): write_blk: dquota write failed [ 576.710513][ T4295] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.727151][ T4295] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.731737][T14036] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 576.736970][ T4295] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 576.766921][ T4295] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 576.778787][T14036] EXT4-fs error (device loop4): ext4_acquire_dquot:6795: comm syz.4.3029: Failed to acquire dquot type 1 [ 576.799280][T14036] EXT4-fs (loop4): Remounting filesystem read-only [ 576.811452][ T4295] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 576.929760][ T127] usb 7-1: USB disconnect, device number 4 [ 576.946748][T12719] EXT4-fs (loop4): unmounting filesystem. [ 576.961112][T13784] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 577.007322][T13784] EXT4-fs error (device loop4): ext4_release_dquot:6818: comm kworker/u4:8: Failed to release dquot type 1 [ 577.057272][T13784] EXT4-fs (loop4): Remounting filesystem read-only [ 577.320366][T14071] loop2: detected capacity change from 0 to 2048 [ 577.368526][T14071] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 577.400215][T14071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 577.820744][T14088] loop2: detected capacity change from 0 to 256 [ 577.944344][T14088] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 577.982307][T14091] loop6: detected capacity change from 0 to 1024 [ 578.169070][T14091] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 578.177929][T14091] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 578.182845][T14102] capability: warning: `syz.0.3045' uses 32-bit capabilities (legacy support in use) [ 578.364229][T13474] EXT4-fs (loop6): unmounting filesystem. [ 580.329570][T14172] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 580.337721][T14172] IPv6: NLM_F_CREATE should be set when creating new route [ 580.344984][T14172] IPv6: NLM_F_CREATE should be set when creating new route [ 580.448396][T14174] loop6: detected capacity change from 0 to 256 [ 580.496267][T14174] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 580.886051][ T26] audit: type=1326 audit(1742045263.875:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 580.922706][T14192] loop6: detected capacity change from 0 to 512 [ 580.997031][ T26] audit: type=1326 audit(1742045263.915:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 581.029686][T14192] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 581.082073][T14192] EXT4-fs (loop6): 1 truncate cleaned up [ 581.136797][T14192] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 581.156626][ T26] audit: type=1326 audit(1742045263.915:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 581.244599][T14192] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.6.3072: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 581.299099][ T26] audit: type=1326 audit(1742045263.915:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 581.325151][T14192] EXT4-fs error (device loop6) in ext4_delete_entry:2800: Corrupt filesystem [ 581.366898][T14192] EXT4-fs warning (device loop6): ext4_rename_delete:3778: inode #2: comm syz.6.3072: Deleting old file: nlink 5, error=-117 [ 581.416671][ T26] audit: type=1326 audit(1742045263.915:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 581.498339][ T26] audit: type=1326 audit(1742045263.915:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 581.576011][ T26] audit: type=1326 audit(1742045263.915:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 581.646043][T13474] EXT4-fs (loop6): unmounting filesystem. [ 581.726572][ T26] audit: type=1326 audit(1742045263.915:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 581.825317][T14220] loop3: detected capacity change from 0 to 512 [ 581.832134][T14218] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 581.859931][ T26] audit: type=1326 audit(1742045263.915:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 581.923748][ T26] audit: type=1326 audit(1742045263.915:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14186 comm="syz.4.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04658d169 code=0x7ffc0000 [ 581.956102][T14223] loop4: detected capacity change from 0 to 4096 [ 582.013986][T14223] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 582.065456][T14220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 582.110534][T14220] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 582.967872][T12334] EXT4-fs (loop3): unmounting filesystem. [ 583.067046][T12719] EXT4-fs (loop4): unmounting filesystem. [ 583.245175][T14250] loop3: detected capacity change from 0 to 1024 [ 583.361936][T14250] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 583.374844][T14250] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 583.461459][T14250] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 583.518511][T14250] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 4 with error 28 [ 583.562325][T14250] EXT4-fs (loop3): This should not happen!! Data will be lost [ 583.562325][T14250] [ 583.595835][T14250] EXT4-fs (loop3): Total free blocks count 0 [ 583.616085][T14250] EXT4-fs (loop3): Free/Dirty block details [ 583.639557][T14250] EXT4-fs (loop3): free_blocks=4293918720 [ 583.664341][T14250] EXT4-fs (loop3): dirty_blocks=16 [ 583.690685][T14250] EXT4-fs (loop3): Block reservation details [ 583.735831][T14250] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 583.755447][T14261] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 9 with error 28 [ 583.802348][T14268] loop4: detected capacity change from 0 to 1024 [ 583.920562][T14268] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 583.936719][T14268] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 584.314672][T12719] EXT4-fs (loop4): unmounting filesystem. [ 584.675585][T14285] loop2: detected capacity change from 0 to 512 [ 584.720593][T14284] loop4: detected capacity change from 0 to 1024 [ 584.810974][T14285] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3097: bg 0: block 393: padding at end of block bitmap is not set [ 584.889090][T14285] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 584.908932][T14285] EXT4-fs (loop2): 2 truncates cleaned up [ 584.914936][T14285] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 585.080230][T13294] EXT4-fs (loop2): unmounting filesystem. [ 586.276014][ T4300] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 586.478488][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.505990][ T4300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.515805][ T4300] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 586.578824][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.612138][ T4300] usb 5-1: config 0 descriptor?? [ 587.058442][ T4300] hid-generic 0003:05AC:4262.0010: item fetching failed at offset 1/5 [ 587.096606][ T4300] hid-generic: probe of 0003:05AC:4262.0010 failed with error -22 [ 587.145672][T14347] loop6: detected capacity change from 0 to 2048 [ 587.187659][T14347] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 587.256755][ T4331] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 587.259787][ T127] usb 5-1: USB disconnect, device number 35 [ 587.538734][T14362] loop2: detected capacity change from 0 to 1024 [ 587.580140][T14362] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 587.629415][T14362] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 587.722447][T14368] loop3: detected capacity change from 0 to 4096 [ 587.769993][T14362] JBD2: no valid journal superblock found [ 587.948482][T14362] EXT4-fs (loop2): error loading journal [ 587.995170][T14368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 588.483417][T14369] loop6: detected capacity change from 0 to 1024 [ 588.699283][T14369] EXT4-fs: Ignoring removed bh option [ 588.883913][T14369] EXT4-fs (loop6): Test dummy encryption mode enabled [ 589.019994][T12334] EXT4-fs (loop3): unmounting filesystem. [ 589.025689][T14369] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 589.274373][T13474] EXT4-fs (loop6): unmounting filesystem. [ 589.391768][T14381] loop3: detected capacity change from 0 to 2048 [ 589.490048][T14381] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 589.532163][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 589.532180][ T26] audit: type=1800 audit(1742045272.526:485): pid=14381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3121" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 590.003336][T12334] EXT4-fs (loop3): unmounting filesystem. [ 590.320360][T14403] loop3: detected capacity change from 0 to 2048 [ 590.366888][T14403] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.424983][T14407] loop6: detected capacity change from 0 to 2048 [ 590.445713][ T127] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 590.481780][T14407] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.645663][ T127] usb 5-1: Using ep0 maxpacket: 8 [ 590.653642][ T127] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.713852][ T127] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.760281][ T127] usb 5-1: config 0 interface 0 has no altsetting 0 [ 590.787070][ T127] usb 5-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 590.815660][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.855774][ T127] usb 5-1: config 0 descriptor?? [ 591.079937][ T127] usbhid 5-1:0.0: can't add hid device: -71 [ 591.090612][ T127] usbhid: probe of 5-1:0.0 failed with error -71 [ 591.142834][ T127] usb 5-1: USB disconnect, device number 36 [ 591.212901][T14426] loop2: detected capacity change from 0 to 1024 [ 591.270687][T14426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 591.292977][T14426] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 591.488350][T13294] EXT4-fs (loop2): unmounting filesystem. [ 591.495645][T14435] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 591.538927][T14437] loop3: detected capacity change from 0 to 2048 [ 591.589002][T14437] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 591.611649][T14437] UDF-fs: Scanning with blocksize 512 failed [ 591.643651][T14437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 591.713495][T14441] loop2: detected capacity change from 0 to 128 [ 591.807312][T14441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 591.876016][T14441] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 592.464236][T14455] loop3: detected capacity change from 0 to 1024 [ 592.496107][T13294] EXT4-fs (loop2): unmounting filesystem. [ 592.516266][T14455] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 592.564190][T14455] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.816480][T12334] EXT4-fs (loop3): unmounting filesystem. [ 592.852209][T14475] loop6: detected capacity change from 0 to 512 [ 592.963727][T14475] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 593.007132][T14482] loop3: detected capacity change from 0 to 1024 [ 593.055570][T14482] hfsplus: request for non-existent node 3 in B*Tree [ 593.092694][T14482] hfsplus: request for non-existent node 3 in B*Tree [ 593.129428][ T4347] hid-generic 0000:40000003:0000.0011: unknown main item tag 0x0 [ 593.137859][ T4347] hid-generic 0000:40000003:0000.0011: unknown main item tag 0x0 [ 593.148807][T14475] EXT4-fs (loop6): 1 truncate cleaned up [ 593.149579][ T4347] hid-generic 0000:40000003:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz1 [ 593.175540][T14475] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 593.248096][T14489] loop4: detected capacity change from 0 to 2048 [ 593.277873][T14489] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 593.437020][T12334] hfsplus: walked past end of dir [ 594.366286][T13474] EXT4-fs (loop6): unmounting filesystem. [ 594.512713][T14502] loop4: detected capacity change from 0 to 128 [ 594.661622][T14502] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 594.679408][T14502] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 594.986477][ T5289] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.032048][T12719] EXT4-fs (loop4): unmounting filesystem. [ 595.220318][ T5289] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.393167][T14522] loop6: detected capacity change from 0 to 512 [ 595.428696][T14522] EXT4-fs: Ignoring removed i_version option [ 595.459251][T14522] EXT4-fs: Ignoring removed nomblk_io_submit option [ 595.518074][T14522] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 595.569809][ T5289] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.612739][T14522] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 595.706156][T14522] EXT4-fs warning (device loop6): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 596.051271][T14522] EXT4-fs (loop6): mount failed [ 596.337715][ T5289] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.553192][T14535] loop4: detected capacity change from 0 to 128 [ 596.646173][T14535] EXT4-fs: Ignoring removed bh option [ 596.651770][T14535] EXT4-fs: Ignoring removed nobh option [ 596.684482][T14535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 596.739326][T14535] ext4 filesystem being mounted at /91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 597.090664][T14547] loop2: detected capacity change from 0 to 1024 [ 597.902540][ T4250] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 597.919188][ T4250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 597.932712][ T4250] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 597.952632][ T4250] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 597.989476][ T4250] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 598.003181][ T4250] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.916157][T12719] EXT4-fs (loop4): unmounting filesystem. [ 600.055913][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 600.560872][T14596] loop2: detected capacity change from 0 to 512 [ 600.620352][T14596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 600.650999][T14598] loop4: detected capacity change from 0 to 1024 [ 600.716489][T14598] EXT4-fs: Ignoring removed bh option [ 600.769441][T14598] EXT4-fs (loop4): Test dummy encryption mode enabled [ 600.825267][T14596] EXT4-fs (loop2): 1 truncate cleaned up [ 600.830986][T14596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 600.852071][T14598] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 601.578389][T12719] EXT4-fs (loop4): unmounting filesystem. [ 601.663544][T14617] loop6: detected capacity change from 0 to 512 [ 601.702868][T14551] chnl_net:caif_netlink_parms(): no params data found [ 601.797713][T13294] EXT4-fs (loop2): unmounting filesystem. [ 601.827591][T14617] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 601.896352][T14617] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.138397][ T26] audit: type=1800 audit(1742045541.136:486): pid=14617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3184" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 602.165275][ T4250] Bluetooth: hci1: command 0x041b tx timeout [ 602.336879][T14631] support for the xor transformation has been removed. [ 602.635234][T13474] EXT4-fs (loop6): unmounting filesystem. [ 603.217821][T14637] loop4: detected capacity change from 0 to 128 [ 603.293277][T14637] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 603.324958][T14637] FAT-fs (loop4): Filesystem has been set read-only [ 603.335495][ T4250] Bluetooth: hci0: command 0x0c1a tx timeout [ 603.345368][ T4266] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 604.190747][T14551] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.211923][T14551] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.220831][T14551] device bridge_slave_0 entered promiscuous mode [ 604.240778][T14551] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.261057][T14551] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.280162][T14551] device bridge_slave_1 entered promiscuous mode [ 604.301078][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 604.310788][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3192'. [ 604.352728][T14656] loop4: detected capacity change from 0 to 512 [ 604.388425][T14656] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 604.423419][T14551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.459990][ T5289] device hsr_slave_0 left promiscuous mode [ 604.476149][ T5289] device hsr_slave_1 left promiscuous mode [ 604.516598][T14656] EXT4-fs (loop4): 1 truncate cleaned up [ 604.544470][T14656] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 604.612370][ T5289] device veth1_macvtap left promiscuous mode [ 604.652966][ T5289] device veth0_macvtap left promiscuous mode [ 604.681890][ T5289] device veth1_vlan left promiscuous mode [ 604.688506][ T5289] device veth0_vlan left promiscuous mode [ 605.545949][T12719] EXT4-fs (loop4): unmounting filesystem. [ 605.692678][T14672] loop2: detected capacity change from 0 to 512 [ 605.764119][T14672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 605.791113][T14672] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 606.041920][T13294] EXT4-fs (loop2): unmounting filesystem. [ 606.375527][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 607.687472][T14696] loop2: detected capacity change from 0 to 512 [ 607.750916][T14696] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3205: invalid indirect mapped block 256 (level 2) [ 607.768079][T14696] EXT4-fs (loop2): Remounting filesystem read-only [ 607.774917][T14696] EXT4-fs (loop2): 2 truncates cleaned up [ 607.780855][T14696] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 607.844638][T14696] EXT4-fs error (device loop2): ext4_check_dx_root:2266: inode #2: comm syz.2.3205: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 607.886901][T14696] EXT4-fs (loop2): Remounting filesystem read-only [ 607.953095][T13294] EXT4-fs (loop2): unmounting filesystem. [ 608.131814][ T5289] bond0 (unregistering): Released all slaves [ 608.226882][T14551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.238748][T14700] device batadv_slave_1 entered promiscuous mode [ 608.338029][T14699] device batadv_slave_1 left promiscuous mode [ 608.400848][T14551] team0: Port device team_slave_0 added [ 608.487384][T14551] team0: Port device team_slave_1 added [ 608.559541][T14711] loop2: detected capacity change from 0 to 128 [ 608.607843][T14711] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 608.642858][T14711] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 608.653453][T14551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.666692][T14715] loop4: detected capacity change from 0 to 8 [ 608.672946][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.678656][ T26] audit: type=1800 audit(1742045547.676:487): pid=14711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3209" name=96A55DCEFD4024A5D7A848D08BDB5D8BB89B4C1968CF6AE0FD7858FA38B738C1EE6822F2CFDB30C3941199251D603D495AB6CE2DDB8E918E72B9171AAA287F2B19755BDC92109150850D5C14EC2AC32DEE0122B28FCB3E88D5096D6352799C5F13F597695ADFD21E644379E6A4 dev="loop2" ino=125 res=0 errno=0 [ 608.787904][T14715] SQUASHFS error: lzo decompression failed, data probably corrupt [ 608.801360][T14551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.809682][T14715] SQUASHFS error: Failed to read block 0x91: -5 [ 608.835248][T14715] SQUASHFS error: Unable to read metadata cache entry [8f] [ 608.842591][T14715] SQUASHFS error: Unable to read inode 0x11f [ 608.854495][T14551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.895812][T14551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.995970][T14551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.091405][T14551] device hsr_slave_0 entered promiscuous mode [ 609.112904][T14551] device hsr_slave_1 entered promiscuous mode [ 609.130136][T14551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.173937][T14551] Cannot create hsr debugfs directory [ 609.329174][T14728] loop4: detected capacity change from 0 to 512 [ 609.342069][T14729] loop2: detected capacity change from 0 to 512 [ 609.399141][T14729] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3212: casefold flag without casefold feature [ 609.435593][T14729] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3212: couldn't read orphan inode 15 (err -117) [ 609.453083][T14728] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.3211: casefold flag without casefold feature [ 609.472146][T14729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 609.492139][T14728] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.3211: couldn't read orphan inode 15 (err -117) [ 609.541371][T14728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 609.618099][T13294] EXT4-fs (loop2): unmounting filesystem. [ 609.801004][T14742] loop2: detected capacity change from 0 to 256 [ 609.878366][T12719] EXT4-fs (loop4): unmounting filesystem. [ 609.976546][T14742] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 610.014626][T14742] FAT-fs (loop2): Filesystem has been set read-only [ 610.025661][T14742] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 610.073005][T14742] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 610.098320][ T26] audit: type=1800 audit(1742045549.096:488): pid=14742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3213" name="file1" dev="loop2" ino=1048805 res=0 errno=0 [ 610.217772][T14742] syz.2.3213 (14742) used greatest stack depth: 18592 bytes left [ 610.612922][T14760] loop2: detected capacity change from 0 to 256 [ 610.671121][T14760] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 611.128229][T14764] loop4: detected capacity change from 0 to 1024 [ 611.638993][T14766] loop2: detected capacity change from 0 to 128 [ 612.022084][T14766] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 612.195022][T14766] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 612.899330][T14551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 613.179147][T14551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 613.438195][T14551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 613.648587][T14551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 614.005678][T13294] EXT4-fs (loop2): unmounting filesystem. [ 614.103150][T14775] loop4: detected capacity change from 0 to 512 [ 614.289301][T14775] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.3223: bad orphan inode 13 [ 614.391232][T14775] ext4_test_bit(bit=12, block=4) = 1 [ 614.397034][T14775] is_bad_inode(inode)=0 [ 614.401225][T14775] NEXT_ORPHAN(inode)=0 [ 614.415313][T14775] max_ino=32 [ 614.425531][T14775] i_nlink=1 [ 614.435685][T14775] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 614.449590][T14551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.533033][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 614.556753][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 614.581042][T12719] EXT4-fs (loop4): unmounting filesystem. [ 614.592245][T14551] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.674241][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 614.696984][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 614.706365][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.713502][ T5321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.761574][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 614.778847][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 614.789908][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 614.816303][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.823461][ T5321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.824810][T14792] loop2: detected capacity change from 0 to 8 [ 614.838631][T14789] loop4: detected capacity change from 0 to 256 [ 614.879883][ T5321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 614.906546][T14789] exfat: Deprecated parameter 'utf8' [ 614.912303][T14789] exfat: Deprecated parameter 'namecase' [ 614.942674][T14789] exfat: Deprecated parameter 'utf8' [ 614.977958][T14789] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 615.075709][T14789] syz.4.3232: attempt to access beyond end of device [ 615.075709][T14789] loop4: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 615.111666][T14789] syz.4.3232: attempt to access beyond end of device [ 615.111666][T14789] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 615.141675][ T26] audit: type=1800 audit(1742045554.126:489): pid=14789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3232" name="file1" dev="loop4" ino=1048807 res=0 errno=0 [ 615.177451][T11926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 615.187283][T11926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 615.465183][T11926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 615.596338][T11926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 615.995721][T11926] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 616.028470][T11926] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 616.116984][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 616.165599][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 616.183409][T14551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.215262][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 616.223675][ T4250] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 616.231117][T14551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 616.252877][T14803] loop6: detected capacity change from 0 to 512 [ 616.276799][T14803] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.3233: invalid indirect mapped block 256 (level 2) [ 616.303871][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 616.316698][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 616.338718][T14803] EXT4-fs (loop6): Remounting filesystem read-only [ 616.357143][T14803] EXT4-fs (loop6): 2 truncates cleaned up [ 616.362962][T14803] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 616.443974][T14803] EXT4-fs error (device loop6): ext4_check_dx_root:2266: inode #2: comm syz.6.3233: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 616.496279][T14803] EXT4-fs (loop6): Remounting filesystem read-only [ 616.637337][T13474] EXT4-fs (loop6): unmounting filesystem. [ 618.295309][ T4250] Bluetooth: hci0: command 0x0c1a tx timeout [ 619.738526][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 619.747031][ T5325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.788921][T14551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.616889][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 620.637121][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 620.700908][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 620.721942][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 620.754629][T14551] device veth0_vlan entered promiscuous mode [ 620.762411][T14866] loop4: detected capacity change from 0 to 512 [ 620.776741][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 620.801947][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 620.815237][T14866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 620.842152][T14551] device veth1_vlan entered promiscuous mode [ 620.919379][T14866] EXT4-fs (loop4): 1 truncate cleaned up [ 620.925235][T14866] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 620.960606][T14874] loop2: detected capacity change from 0 to 1024 [ 621.038711][T11926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 621.058385][T11926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 621.087533][T14551] device veth0_macvtap entered promiscuous mode [ 621.134609][T14551] device veth1_macvtap entered promiscuous mode [ 621.820816][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 621.851416][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 621.922224][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.975343][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.043850][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.054526][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.066580][T14551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.067031][T12719] EXT4-fs (loop4): unmounting filesystem. [ 622.077238][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.091726][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.102478][T14551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.113115][T14551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.124845][T14551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.142772][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 622.187088][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 622.197123][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 622.207300][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 622.220529][T14551] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.233939][T14551] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.258179][T14551] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.275347][T14551] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.486635][ T5325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.497693][ T5325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.530340][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 622.601584][ T5325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.638204][ T5325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.674826][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.690730][T14900] loop2: detected capacity change from 0 to 512 [ 622.699863][T14898] loop4: detected capacity change from 0 to 1024 [ 622.720090][T14898] EXT4-fs: Ignoring removed i_version option [ 622.734263][T14898] EXT4-fs: Ignoring removed orlov option [ 622.742417][T14898] EXT4-fs: Ignoring removed oldalloc option [ 622.912323][T14900] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.3254: casefold flag without casefold feature [ 622.980710][T14906] loop6: detected capacity change from 0 to 1024 [ 623.311697][T14898] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 623.335399][ T4250] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 623.422981][T14900] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.3254: couldn't read orphan inode 15 (err -117) [ 623.495378][ T4250] Bluetooth: hci0: command 0x0c1a tx timeout [ 623.594965][T14898] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 623.711274][T14900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 623.788910][T14898] EXT4-fs (loop4): invalid journal inode [ 623.933477][T14898] EXT4-fs (loop4): can't get journal size [ 624.206490][T14898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 624.448062][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.458744][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.914405][T14913] loop7: detected capacity change from 0 to 16 [ 625.252584][T14913] erofs: (device loop7): mounted with root inode @ nid 36. [ 625.793464][T13294] EXT4-fs (loop2): unmounting filesystem. [ 625.816250][T12719] EXT4-fs (loop4): unmounting filesystem. [ 625.891275][T14919] loop6: detected capacity change from 0 to 256 [ 626.253131][T14927] loop7: detected capacity change from 0 to 1024 [ 626.311518][T14930] loop6: detected capacity change from 0 to 512 [ 626.329964][T14927] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 626.376792][T14930] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2186: inode #15: comm syz.6.3262: corrupted in-inode xattr [ 626.445205][T14930] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.3262: couldn't read orphan inode 15 (err -117) [ 626.505699][T14930] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 626.597076][T14551] EXT4-fs (loop7): unmounting filesystem. [ 626.736540][T13474] EXT4-fs (loop6): unmounting filesystem. [ 626.739730][T14949] loop7: detected capacity change from 0 to 512 [ 626.845676][T14949] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 626.919325][T14949] EXT4-fs (loop7): 1 truncate cleaned up [ 626.955997][T14949] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 628.107845][T14551] EXT4-fs (loop7): unmounting filesystem. [ 628.803896][T14979] loop6: detected capacity change from 0 to 512 [ 629.203736][T14979] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.3271: casefold flag without casefold feature [ 629.435698][T14979] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.3271: couldn't read orphan inode 15 (err -117) [ 629.459163][T14979] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 629.502048][ T4250] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 629.575242][ T4250] Bluetooth: hci0: command 0x0c1a tx timeout [ 629.909658][T13474] EXT4-fs (loop6): unmounting filesystem. [ 630.233648][T15011] netlink: 'syz.0.3284': attribute type 12 has an invalid length. [ 630.329358][T15016] loop7: detected capacity change from 0 to 256 [ 630.397700][ T26] audit: type=1326 audit(1742045569.396:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.0.3284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6786d8d169 code=0x0 [ 632.159284][T15037] input: syz1 as /devices/virtual/input/input19 [ 632.739194][T15063] loop6: detected capacity change from 0 to 1024 [ 632.782601][T15063] EXT4-fs: Ignoring removed orlov option [ 632.847381][T15063] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 633.010842][T13474] EXT4-fs (loop6): unmounting filesystem. [ 636.181142][T15107] loop4: detected capacity change from 0 to 256 [ 636.307112][T15107] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 636.495412][ T26] audit: type=1326 audit(1742045575.466:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786d8d169 code=0x7ffc0000 [ 636.615132][ T26] audit: type=1326 audit(1742045575.516:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786d8d169 code=0x7ffc0000 [ 636.735196][ T26] audit: type=1326 audit(1742045575.516:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f6786d8d169 code=0x7ffc0000 [ 636.863282][ T26] audit: type=1326 audit(1742045575.516:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786d8d169 code=0x7ffc0000 [ 636.955694][ T26] audit: type=1326 audit(1742045575.516:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15115 comm="syz.0.3318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6786d8d169 code=0x7ffc0000 [ 637.624878][T15155] loop7: detected capacity change from 0 to 1024 [ 638.295194][ T14] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 638.486992][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.518837][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.555756][ T14] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.558876][T15184] loop7: detected capacity change from 0 to 512 [ 638.599454][ T14] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.625451][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.640327][ T14] usb 5-1: config 0 descriptor?? [ 638.645781][T15184] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 638.653723][T15184] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 638.677832][T15184] System zones: 0-1, 15-15, 18-18, 34-34 [ 638.687655][T15184] EXT4-fs (loop7): orphan cleanup on readonly fs [ 638.695505][T15184] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 638.714891][T15184] EXT4-fs warning (device loop7): ext4_enable_quotas:7030: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 638.767092][T15184] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 638.838203][T15184] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3342: bg 0: block 40: padding at end of block bitmap is not set [ 638.915672][T15184] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 638.948761][T15184] EXT4-fs (loop7): 1 truncate cleaned up [ 638.954682][T15184] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 639.437162][T14551] EXT4-fs (loop7): unmounting filesystem. [ 639.827411][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.834879][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.847270][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.854728][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.862363][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.869841][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.877374][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.884807][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.915207][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.922673][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.945865][ T14] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 639.966026][ T14] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 639.996615][ T14] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 640.024645][ T14] usb 5-1: USB disconnect, device number 37 [ 641.555258][ T41] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 641.895276][ T4250] Bluetooth: hci2: command 0x0406 tx timeout [ 642.014662][ T41] usb 8-1: device descriptor read/64, error -71 [ 644.136739][T15253] loop4: detected capacity change from 0 to 512 [ 644.241384][T15253] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 644.278836][T15253] ext4 filesystem being mounted at /132/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 644.382445][T12719] EXT4-fs (loop4): unmounting filesystem. [ 644.601417][T15277] loop6: detected capacity change from 0 to 128 [ 644.659301][T15277] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 644.734724][T15277] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 644.775603][ T41] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 644.854277][T15277] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 808976385 (only 1 groups) [ 644.968762][ T41] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 645.005250][ T41] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 645.031280][ T41] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 645.090808][ T41] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 645.113351][ T41] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.971479][ T41] usb 8-1: Product: syz [ 645.976695][ T41] usb 8-1: Manufacturer: syz [ 645.981717][ T41] usb 8-1: SerialNumber: syz [ 645.993237][ T41] cdc_ncm 8-1:1.0: skipping garbage [ 646.001009][ T41] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found [ 646.007924][ T41] cdc_ncm 8-1:1.0: bind() failure [ 646.046877][T13474] EXT4-fs (loop6): unmounting filesystem. [ 646.215737][T13539] usb 8-1: USB disconnect, device number 4 [ 646.234370][T15309] loop6: detected capacity change from 0 to 128 [ 646.276195][T15309] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 646.311611][T15309] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 646.479511][T15320] loop4: detected capacity change from 0 to 128 [ 646.627952][T15324] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input20 [ 646.645792][T15320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 646.653950][T15320] System zones: 1-3, 19-19, 35-36 [ 646.696342][T15320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 646.736844][T15320] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 647.142487][T12719] EXT4-fs (loop4): unmounting filesystem. [ 649.819084][T15342] loop6: detected capacity change from 0 to 2048 [ 649.851314][T15342] EXT4-fs: test_dummy_encryption requires encrypt feature [ 651.046883][T15355] loop7: detected capacity change from 0 to 256 [ 651.112483][T15355] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 651.165316][ T4300] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 651.357279][ T4300] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 651.375309][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.424394][ T4300] usb 5-1: config 0 descriptor?? [ 651.458167][ T4300] cp210x 5-1:0.0: cp210x converter detected [ 651.662307][ T4300] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 651.675408][ T4300] cp210x 5-1:0.0: querying part number failed [ 651.734036][ T4300] usb 5-1: cp210x converter now attached to ttyUSB0 [ 653.983734][ T129] usb 5-1: USB disconnect, device number 38 [ 654.012694][ T129] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 654.053473][ T129] cp210x 5-1:0.0: device disconnected [ 654.368228][T15440] loop6: detected capacity change from 0 to 2048 [ 654.391403][T15440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 654.445907][ T26] audit: type=1800 audit(1742045593.446:496): pid=15440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3417" name="file1" dev="loop6" ino=1346 res=0 errno=0 [ 759.635013][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 759.642126][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5311/1:b..l [ 759.650887][ C0] (detected by 0, t=10502 jiffies, g=96309, q=128 ncpus=2) [ 759.658222][ C0] task:kworker/u4:13 state:R running task stack:22328 pid:5311 ppid:2 flags:0x00004000 [ 759.670894][ C0] Workqueue: bat_events batadv_nc_worker [ 759.676612][ C0] Call Trace: [ 759.679919][ C0] [ 759.682894][ C0] __schedule+0x143f/0x4570 [ 759.687473][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 759.693405][ C0] ? print_irqtrace_events+0x210/0x210 [ 759.698919][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 759.704243][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 759.709394][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 759.715152][ C0] ? rcu_is_watching+0x11/0xb0 [ 759.719960][ C0] irqentry_exit+0x53/0x80 [ 759.724410][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 759.729903][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 759.735230][ C0] Code: 00 f6 44 24 21 02 0f 84 02 ff ff ff e9 6c ff ff ff 48 c7 c7 60 50 33 8d 4c 89 f6 e8 1a 62 fb 02 e9 2b ff ff ff e8 d0 eb 3d 09 <41> 57 41 56 53 65 ff 05 4c d9 8e 7e e8 0f 04 3e 09 89 c3 83 f8 08 [ 759.754882][ C0] RSP: 0018:ffffc90003617bf0 EFLAGS: 00000202 [ 759.760997][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88807e355940 [ 759.769100][ C0] RDX: ffff88807e355940 RSI: 0000000000000001 RDI: 0000000000000000 [ 759.777219][ C0] RBP: 0000000000000000 R08: ffffffff8a82285a R09: fffffbfff225724d [ 759.785248][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807ab20c80 [ 759.793254][ C0] R13: 000000000000030b R14: ffff88807b8342c0 R15: dffffc0000000000 [ 759.801267][ C0] ? batadv_nc_worker+0x1fa/0x610 [ 759.806343][ C0] batadv_nc_worker+0x203/0x610 [ 759.811232][ C0] ? batadv_nc_worker+0xc7/0x610 [ 759.816233][ C0] ? process_one_work+0x806/0x1260 [ 759.821383][ C0] process_one_work+0x917/0x1260 [ 759.826384][ C0] ? worker_detach_from_pool+0x260/0x260 [ 759.832152][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 759.837776][ C0] ? kthread_data+0x4e/0xc0 [ 759.842341][ C0] ? wq_worker_running+0x97/0x190 [ 759.847403][ C0] worker_thread+0xa47/0x1200 [ 759.852170][ C0] kthread+0x28d/0x320 [ 759.856288][ C0] ? worker_clr_flags+0x190/0x190 [ 759.861369][ C0] ? kthread_blkcg+0xd0/0xd0 [ 759.866006][ C0] ret_from_fork+0x1f/0x30 [ 759.870502][ C0] [ 759.873546][ C0] rcu: rcu_preempt kthread starved for 10518 jiffies! g96309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 759.884774][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 759.894787][ C0] rcu: RCU grace-period kthread stack dump: [ 759.900703][ C0] task:rcu_preempt state:R running task stack:26712 pid:16 ppid:2 flags:0x00004000 [ 759.911519][ C0] Call Trace: [ 759.914846][ C0] [ 759.917879][ C0] __schedule+0x143f/0x4570 [ 759.922442][ C0] ? _raw_spin_unlock+0x40/0x40 [ 759.927357][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 759.933302][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 759.938744][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 759.944685][ C0] ? _raw_spin_unlock+0x40/0x40 [ 759.949575][ C0] schedule+0xbf/0x180 [ 759.953693][ C0] schedule_timeout+0x1b9/0x300 [ 759.958592][ C0] ? console_conditional_schedule+0x40/0x40 [ 759.964526][ C0] ? update_process_times+0x1b0/0x1b0 [ 759.969961][ C0] ? prepare_to_swait_event+0x329/0x350 [ 759.975576][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 759.980492][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 759.986693][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 759.991932][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 759.996733][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 760.002664][ C0] ? finish_swait+0xcf/0x1e0 [ 760.007300][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 760.011933][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 760.017079][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 760.023013][ C0] ? __kthread_parkme+0x168/0x1c0 [ 760.028087][ C0] kthread+0x28d/0x320 [ 760.032189][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 760.037340][ C0] ? kthread_blkcg+0xd0/0xd0 [ 760.041979][ C0] ret_from_fork+0x1f/0x30 [ 760.046448][ C0] [ 760.049494][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 760.055835][ C0] Sending NMI from CPU 0 to CPUs 1: [ 760.061080][ C1] NMI backtrace for cpu 1 [ 760.061097][ C1] CPU: 1 PID: 15448 Comm: syz.2.3419 Not tainted 6.1.131-syzkaller #0 [ 760.061116][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 760.061127][ C1] RIP: 0010:lock_acquire+0x28a/0x5a0 [ 760.061159][ C1] Code: 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 4b c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 11 00 00 00 00 <66> 43 c7 44 25 15 00 00 43 c6 44 25 17 00 65 48 8b 04 25 28 00 00 [ 760.061173][ C1] RSP: 0018:ffffc900001e0c20 EFLAGS: 00000046 [ 760.061189][ C1] RAX: 0000000000000001 RBX: 1ffff9200003c190 RCX: ffffffff816b7142 [ 760.061202][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c2ec0 RDI: ffffffff8b5f6f80 [ 760.061215][ C1] RBP: ffffc900001e0d68 R08: dffffc0000000000 R09: fffffbfff225724e [ 760.061228][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200003c18c [ 760.061241][ C1] R13: dffffc0000000000 R14: ffffc900001e0c80 R15: 0000000000000046 [ 760.061254][ C1] FS: 00007f2a978626c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 760.061270][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.061282][ C1] CR2: 00007f6786f9b3d8 CR3: 000000005524e000 CR4: 00000000003506e0 [ 760.061298][ C1] Call Trace: [ 760.061306][ C1] [ 760.061312][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 760.061331][ C1] ? read_lock_is_recursive+0x10/0x10 [ 760.061359][ C1] ? nmi_trigger_cpumask_backtrace+0x430/0x430 [ 760.061377][ C1] ? nmi_handle+0x25/0x440 [ 760.061411][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 760.061428][ C1] ? nmi_handle+0x12e/0x440 [ 760.061454][ C1] ? nmi_handle+0x25/0x440 [ 760.061480][ C1] ? lock_acquire+0x28a/0x5a0 [ 760.061504][ C1] ? default_do_nmi+0x62/0x150 [ 760.061524][ C1] ? exc_nmi+0xa8/0x100 [ 760.061541][ C1] ? end_repeat_nmi+0x16/0x31 [ 760.061566][ C1] ? validate_chain+0x112/0x5950 [ 760.061584][ C1] ? lock_acquire+0x28a/0x5a0 [ 760.061609][ C1] ? lock_acquire+0x28a/0x5a0 [ 760.061635][ C1] ? lock_acquire+0x28a/0x5a0 [ 760.061660][ C1] [ 760.061665][ C1] [ 760.061674][ C1] ? read_lock_is_recursive+0x10/0x10 [ 760.061700][ C1] ? ktime_get_update_offsets_now+0x38/0x420 [ 760.061727][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 760.061755][ C1] ? read_lock_is_recursive+0x10/0x10 [ 760.061782][ C1] ? do_raw_spin_lock+0x14a/0x370 [ 760.061800][ C1] ? ktime_get_update_offsets_now+0x89/0x420 [ 760.061827][ C1] seqcount_lockdep_reader_access+0xf8/0x220 [ 760.061857][ C1] ? ktime_get_update_offsets_now+0x89/0x420 [ 760.061883][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 760.061914][ C1] ktime_get_update_offsets_now+0x89/0x420 [ 760.061944][ C1] hrtimer_interrupt+0x12f/0x980 [ 760.061966][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 760.061986][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 760.062010][ C1] ? __irq_exit_rcu+0x163/0x240 [ 760.062025][ C1] ? irq_exit_rcu+0x20/0x20 [ 760.062044][ C1] __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 760.062071][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 760.062093][ C1] [ 760.062098][ C1] [ 760.062104][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 760.062127][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 760.062147][ C1] Code: a1 84 f5 ff 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e dc ae f6 48 89 df e8 f6 1a b0 f6 e8 51 6d d5 f6 fb bf 01 00 00 00 d6 9b a2 f6 65 8b 05 f7 71 46 75 85 c0 74 02 5b c3 e8 94 95 44 [ 760.062161][ C1] RSP: 0018:ffffc9000d567b30 EFLAGS: 00000286 [ 760.062174][ C1] RAX: 76d597296dc79e00 RBX: ffff88807de00000 RCX: ffffffff973c0103 [ 760.062188][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c1d40 RDI: 0000000000000001 [ 760.062200][ C1] RBP: ffffc9000d567c70 R08: dffffc0000000000 R09: ffffed100fbc0001 [ 760.062213][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100fbc0093 [ 760.062225][ C1] R13: 000000001c000004 R14: 0000000000000021 R15: ffff88807de00498 [ 760.062246][ C1] get_signal+0x151f/0x17a0 [ 760.062280][ C1] ? ptrace_notify+0x370/0x370 [ 760.062310][ C1] arch_do_signal_or_restart+0xb0/0x1a10 [ 760.062330][ C1] ? __might_fault+0xa1/0x110 [ 760.062355][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 760.062384][ C1] ? do_sigaltstack+0x3f3/0x610 [ 760.062406][ C1] ? get_sigframe_size+0x10/0x10 [ 760.062424][ C1] ? restore_altstack+0x107/0x150 [ 760.062443][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 760.062476][ C1] ? exit_to_user_mode_loop+0x39/0x100 [ 760.062495][ C1] exit_to_user_mode_loop+0x6a/0x100 [ 760.062513][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 760.062531][ C1] syscall_exit_to_user_mode+0x60/0x270 [ 760.062555][ C1] do_syscall_64+0x47/0xb0 [ 760.062570][ C1] ? clear_bhb_loop+0x45/0xa0 [ 760.062592][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 760.062613][ C1] RIP: 0033:0x7f2a9698d167 [ 760.062632][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 760.062646][ C1] RSP: 002b:00007f2a97862038 EFLAGS: 00000246 [ 760.062660][ C1] RAX: 0000000000000113 RBX: 00007f2a96ba5fa0 RCX: 00007f2a9698d169 [ 760.062671][ C1] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 760.062681][ C1] RBP: 00007f2a96a0e2a0 R08: 0000000008000f28 R09: 0000000000000000 [ 760.062693][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.062703][ C1] R13: 0000000000000000 R14: 00007f2a96ba5fa0 R15: 00007ffd060f6cb8 [ 760.062723][ C1]