last executing test programs: 47.16991842s ago: executing program 2 (id=38): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4a4, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={'batadv_slave_1\x00', {0x2, 0x4e1e, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 46.131203063s ago: executing program 2 (id=42): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4a4, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x1d8) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = open(&(0x7f0000000100)='./file1\x00', 0x14f840, 0xa4) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) preadv2(r1, &(0x7f0000007f40)=[{&(0x7f0000007fc0)=""/4110, 0x100e}, {0x0, 0x30}], 0x2, 0x0, 0x5, 0xc) 45.625087775s ago: executing program 2 (id=43): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 45.428556599s ago: executing program 2 (id=45): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x76400) lseek(r0, 0x2, 0x4) 45.162264185s ago: executing program 2 (id=46): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 44.738027915s ago: executing program 2 (id=48): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r8, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r7, 0x0, r0, 0x0, 0x40010003, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 44.309921954s ago: executing program 32 (id=48): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r6, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r8, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r7, 0x0, r0, 0x0, 0x40010003, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 28.205315196s ago: executing program 1 (id=101): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x88b70011641af407, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b362", 0xbd}, {&(0x7f00000003c0)="641a6a2b863c0dd8", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000b80)="f77d2b", 0x3}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000400)="83d0d3d65586d7e0d55381d2", 0xc}, {&(0x7f0000000800)="f24aaf6222f960796829e27ef1284c6a24f8e55f50089d74fa7d88bf7d3bfb9b5477e5de94e57fe97f82cca01c701f8168197e0ce9181cecf1691fa344891aa832f9559ad0f75d80e5052b3331b986b069ac599b0ff1e0dafcaccdf7bfa3f6b3ae5f85efcc34011296cd189515b5e49ef161c895b6033ea92d3e638c7ed78d21cc1d9af5683d9fed756c60b7663dbc6f2df1535f09d89af50641b9e89b49faa1c42cb8b5e26b6d5eba512d", 0xab}, {&(0x7f0000000980)="3036f32fd3f4ca14d48aecd35ebc7ebcbe3f6494b26997b422f18b2436d6923b38e2cf02e081cbcc3844f767c2e438b54f2348836a44f042cb6a9832aa7ae9abe7c7c5530f6cbe53be6a6fd9e79aff2fe47a1fc795fe626feda0e1bc52249c22e4dba4b944c2ec5c083c", 0x6a}], 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 27.945250772s ago: executing program 1 (id=103): r0 = open(&(0x7f0000000040)='./bus\x00', 0x1c1242, 0x0) ftruncate(r0, 0x2007ffb) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$nl_xfrm(r0, 0x0, 0x44050) 27.706393247s ago: executing program 1 (id=104): r0 = syz_io_uring_setup(0x1c8c, &(0x7f0000000080)={0x0, 0x5d8c, 0x8, 0x1, 0x1}, &(0x7f0000000440)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0xfffd) syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_end_user_recovery_sqe={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0207511, 0x0, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r0, 0x317d, 0x5, 0x2, 0x0, 0x0) 26.794306738s ago: executing program 1 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xa) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvmmsg(r0, &(0x7f0000006240)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000480)=""/62, 0x3e}], 0x3}, 0x81}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x120, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 23.930536172s ago: executing program 1 (id=112): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x8, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="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", 0x3f9}], 0x1}}], 0x1, 0x24044015) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.726222239s ago: executing program 1 (id=117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbff, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0xfffd, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x20, 0x87, 0x0, 0xee00}, {@in=@empty, 0x20, 0x2b}, @in=@private=0xa010101, {0xffffffff00000000, 0x7, 0x0, 0x4, 0x7, 0x4, 0x2000000000a, 0x1}, {0x100000001, 0xa, 0x0, 0x8}, {0xf8, 0x0, 0x1}, 0xfffffffd, 0x3506, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x844) 22.301506419s ago: executing program 33 (id=117): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbff, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0xfffd, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x20, 0x87, 0x0, 0xee00}, {@in=@empty, 0x20, 0x2b}, @in=@private=0xa010101, {0xffffffff00000000, 0x7, 0x0, 0x4, 0x7, 0x4, 0x2000000000a, 0x1}, {0x100000001, 0xa, 0x0, 0x8}, {0xf8, 0x0, 0x1}, 0xfffffffd, 0x3506, 0x2, 0x0, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x844) 16.591210397s ago: executing program 4 (id=131): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000002fc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES16, @ANYRES16, @ANYRES8=0x0, @ANYRESDEC], 0x1, 0x376, &(0x7f0000000700)="$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") syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x20000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) fallocate(r3, 0x0, 0xfff, 0x9) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0xfffffffffffffffe, 0x2000000000001]}}) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e00000002001b0002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 15.57435837s ago: executing program 4 (id=136): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x0, 0x4d88, 0x8, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de2920a9fc0790cc176bd2b901e4127b09835ae6d0d196048bb19a64d26f20a05b95c69f371882ef2e20c5606ed1b2ebcf09a4a333f6e1c3c4fb64d8182df4ab09d0a381d966977fc041cea9bdf0aa31fe51efe9211b9b8e6e4551b6438f8efcc41265574ff6504435eb22a678a99768f0327ded8fdcb41f27c2024d2b923f7dc5df5bf62af447b121dd9f94d766d6cebdeb02f611ab10e57af4b3268fb3f9777373bd5fd6b82f730e67c4eab113d8e65d7405be3e5d92dc5e7e85d34bb8b7c894cbed629ecc25c288b3d4556a85a1e2150cac5b686a8de29ab7c35040b77875bfa0e451dc0869cfe105bd115e7cf48f44dfdf26be65f3b727fd88d6395d051e49c060998e84b19377fcb20fe2eb392335e5a9d84555ef037aab37169ce761aa8a8ec08ea87e3a3b896f3d1b2380bc8256e0f7ea7dc488382e6112b53a7bb269d6261f87e0e0e0cef9152f8a67f412148f34880c970101fbd7b0e8fc49d6a5c87e487b7b175b15be26b6b8e1ed8527614dcefcfd80f8392560c8b706418b7de8fbb7a666a7e7f322dc70373606bf39efa04616cb99d662dfc591061bde5ed27a66aa7edbfec1eb0b1e843c372b84c3ed514a0aadf523b8669e526765d429824aeaa0a6f4c185754d437d977a1f586431dc256ce5aa7c25be259de3a0ae6e5bcdf56b4c7e8199fe6b461e78467cfac19de6956056ef57e93d3a7df8f646f4a9002b100edb0a6caa72b3f6eb29dc54de58120d27daff9cd61c64107e1bcb3b3212e1e2aa24fb24dc2dafc636c82ad25da9d934e46c7783d8f915337612feb348857ce2262240dfe51ec94d9d61074959f167b9840b20f003883bf167149228d7f03eafde851427cd1966a96aeae05b51ae4cd82f4b4dad60a070c01a8b500e2683f7136e331602e76845262825d7f3764cf1a05ad95d88aab71d41484f63fa6a43c044c7f03130552321933bc40b888fd0cc55939ff79a5059516f3b80c7ba8188ffb6a259a34567ee52c1f9df0f6c91737d688e36d076a49d1045cac30d5ed52a10381c96d9f22e469cc531bb06853d18b8f8625d2a917e795ffa4407fa75713510a3f5370e1ecbf7a5ff68a90a1eda077531cf4d399d4908f138c936e1931c72240070c6a6255f5fd03966e9a06c1d481e8e3d128e880776e572177780a3481c49bd86c174e152bafed245d58ef3428c645b08e48833960d1b5223d7be0c67a2b2c7531390d1837a84ed004a00cb4b0cd6e78824da032b48c49ec006d14206dc3d0c67d7ca87e9ea0faddc3e0b0c917c64eefeebf79e3a16c958db63a08a5d4d7210273aba3e56a4cd4cccb044750ff97749505ff1332b2dd30990849ab1500e1947d0abfb0c59760f0a502806ee1bce56fbb42251dd6ac8b709c73a6b8c548c2b23cf351dc498810e477bd082464e76702703b56d3cd2f3d8a2e00f19d8ffa3c236d3601f169c9dfe9c316f8cbe63c3801a51ea5ac785694a0c653cd28d68c5a81c2590d2aeea8c8688b2e88f46c4f99890e51b42cce485fcb4d91557fb3912b36b0dbeac8df44e945eb9937141402fb2aa1476185e1f8c37f6c98bc937f36d9c7237135132a54a03067b002b9c657ab0daa253af66eee78b0309cb8532dd2dee800c8349b731da0efa66ead82eebe0102279df5aa281fe1d86c0dbf154910d5e8a113ecbddbd046367b9e2acfa7cc406f61b472bbec6919534615ed81b664da956ce6586bf4c92d63ef371dfec5f9ce748931d585cadc9372a95a1372c7213e2c52fca253945afeee02e9f2de2d9452c85fd2dbdc87cb6c25697dfcbed8a0eba381835e6c360f3861367ec98a9a9ccf956d6cbfb706fee0d391cf82a0d4662792274f52fc2b5d72a43ec74a86400e62d3652f607774cfad1504bc0476570d532b527bf0d7012804b2e6fdf9a9414f10b16c9374f2b065348d865b309e37750d3a7e12394e356c48c9fa0d4a9a43f689f6cbf70b09a3b9782cc3d5d93480f8a7a21a049780fc6bf21f1eca938a37afcbb2b929a0c502e164d2571e78d214b359d97e3edc0ad5c7fd1625b4ece33e1f569676e9a7262ead857873f77ef149d2f8c5a09ab19ae384a7f957f612a24283c35327aa969b20711309644c5b3e6c89da94e1f5da54246bd771468a1adc8a8d601e0b12769604f0f07ca43ce2a8a2f4b5654c0b76b146c49038e07db54dae702580b97096911f034fc1797029de8b7c213c902d1d754e77ff85e6222e745db9d5d2d45c5d29a8b6de0f27e5701fdf12b09fd6c70baa0f85a424c21ce0796dbe1fd366b94fcdf64ea232b3e88b89a38d728de77e84decc804f07a48f2716ca6f76b24923cea1a4da0d1f1dc73611269e784c4fd921f9b26c11f35b5cda45842a81b603ce2155d95c273fa0743a571b52e68c9ea3f28009fc37406b9e329ce50fedfb20dfb4cdf3a94769aee2586c2a17e68a07abfcd18aceddfd3876b14558e4d092eadb9120796c44e89610494085117bc41b5c4619a8c160b97811df49fc7d9bf222d7a002640644337ef5af53ed50661131f7c042665b276c0adf0c9a74f3542729beb7632a6027e65eddff7bb27915826701ec9b6a4c672f08877eefd859e0aa6e75a2e841e1ea98dff994e5a58be628df86bff17497a4d0f92ab39db421eb1062a2a393656bbb1d92becbb91a59619156b51585cd2eafd8a18d6326166312efeaa7258bddad63e0c7372ffb7ce1f1adf1ac2ffa0f278e4be6684d762f8971ed7bb04096b96f8126bf5fd32142e745d421f495327dde0f1e2d9a1d8ba63c1453101396a2e54e89cdabac2c6a01f23a5c1d5a2dfa2a3c634176e97c9c62b41ea28102b5a08af2fba1d311bb323df086ea97726c9d8c7b7b53a3399a80f040d434fdcc2148fb1da3b7d7f0f3e3fd56471a310ee275da611c79f86be8ed6343f6ed0ad91dfeffebc3ab6389d0566d6db904c1db499ae7d2698fdc7170320f85cc3d3d0d9d0d0c7d45db7b53c5eb79a2fed2a048d9d74419532122fac62f6315a9e13b461cb4e26514491debd366927987271be963ea5805a49b8b480c6a393fda1b11fd5634890cf02948cb5bfea237afb30d081c7403cd334a02e5bb8db542c4d5fa5ec5c8a0dd36b62156881c98e01948b4775a502c5d8453439fd930df52caac9d71c28b712000b306b913c10918ca0bc194f2533334462e5cd2b2e6c978a4838febfbc2d4375b8108bd0aa32aeaf05e7ba30c781cace6470ead574f5cbfa68aa8c8d835e9b3ab2bd7dd90b5e3e6cd62d8e04c3b45326e1f560a8dd8f3db4177e9e5ccd61f21dacb5c40c8030559cdfe88f7aa98bdcde90c1214cf293b3df093d0630bc3073cbaffa025b1f5537b49d799731745de7d36cded4a9db25915a511ba505b4ddd885cd226c24ea37fd926dbd90b887"}, {0x0, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x2, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001c00)="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", 0x3f9}], 0x1}}], 0x1, 0x24044015) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x8000}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.448272833s ago: executing program 4 (id=137): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) setresuid(0x0, 0xee00, 0x0) utimensat(r0, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, 0x0) 15.402515584s ago: executing program 4 (id=138): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f00000005c0)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lseek(0xffffffffffffffff, 0x2, 0x4) 15.214285968s ago: executing program 4 (id=139): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 14.868110476s ago: executing program 4 (id=141): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20008a, &(0x7f0000000180)={[{@min_batch_time}, {@data_writeback}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@resgid={'resgid', 0x3d, r1}}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") 14.599070952s ago: executing program 34 (id=141): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20008a, &(0x7f0000000180)={[{@min_batch_time}, {@data_writeback}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@resgid={'resgid', 0x3d, r1}}, {@quota}]}, 0xff, 0x44b, &(0x7f0000000dc0)="$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") 7.326926955s ago: executing program 3 (id=171): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x88b70011641af407, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b362", 0xbd}, {&(0x7f00000003c0)="641a6a2b863c0dd8", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000b80)="f77d2b", 0x3}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000400)="83d0d3d65586d7e0d55381d2", 0xc}, {&(0x7f0000000800)="f24aaf6222f960796829e27ef1284c6a24f8e55f50089d74fa7d88bf7d3bfb9b5477e5de94e57fe97f82cca01c701f8168197e0ce9181cecf1691fa344891aa832f9559ad0f75d80e5052b3331b986b069ac599b0ff1e0dafcaccdf7bfa3f6b3ae5f85efcc34011296cd189515b5e49ef161c895b6033ea92d3e638c7ed78d21cc1d9af5683d9fed756c60b7663dbc6f2df1535f09d89af50641b9e89b49faa1c42cb8b5e26b6d5eba512d1eb67fbadaa3eb732abc0b3de75b01b21c7d", 0xbd}, {&(0x7f0000000980)="3036f32fd3f4ca14d48aecd35ebc7ebcbe3f6494b26997b422f18b2436d6923b38e2cf02e081cbcc3844f767c2e438b54f2348836a44f042cb6a9832aa7ae9abe7c7c5530f6cbe53be6a6fd9e79aff2fe47a1fc795fe626feda0e1bc52249c22e4dba4b944c2ec5c083c", 0x6a}], 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.008652492s ago: executing program 3 (id=172): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) sendmsg(r0, 0x0, 0x0) 6.6581082s ago: executing program 3 (id=174): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) setresuid(0x0, 0xee00, 0x0) utimensat(r0, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, 0x0) 6.039584744s ago: executing program 3 (id=175): syz_mount_image$vfat(&(0x7f0000000840), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000cc0)={[{@shortname_winnt}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_mixed}, {@shortname_winnt}, {@numtail}, {@shortname_lower}, {@fat=@gid}, {@rodir}, {@rodir}, {@utf8no}, {@fat=@flush}]}, 0x2d, 0x33e, &(0x7f0000000480)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1353404, 0x0) 4.734288794s ago: executing program 3 (id=177): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x70004, 0x2}, 0x8) shutdown(r1, 0x0) 4.162952716s ago: executing program 0 (id=179): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000440)='./file0\x00', 0x8, &(0x7f00000005c0)=ANY=[], 0x1, 0x1de, &(0x7f00000006c0)="$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") 3.99033506s ago: executing program 3 (id=180): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x2080) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 3.53169505s ago: executing program 35 (id=180): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x2080) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 3.519284581s ago: executing program 0 (id=182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(r2, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x6, 0x8, 0x5, 0xc88, 0x6, 0x3, 0xafc, 0x32, 0x838, 0x9, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0xd, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x4, 0x42, 0xd48, 0xffefe87a, 0x1, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x8000002, 0xa45, 0x1df, 0xffff, 0x0, 0x380000, 0x10000009, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0x8a, 0x63, 0x0, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x336, 0x3, 0x2, 0x108, 0x3, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x4, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x1, 0x9, 0x6, 0x10000, 0x6, 0x8, 0x401, 0xfd, 0x20, 0x8, 0x9, 0x81, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0xb, 0x0, 0x4, 0x2, 0x80008001, 0x126, 0x1, 0x10002, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x80000000, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xa, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0xfffffffe, 0x9, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x4, 0x80000005, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0x2d, 0x400]}, 0x45c) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$UI_DEV_CREATE(r2, 0x5501) 2.492790594s ago: executing program 0 (id=183): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 2.090356873s ago: executing program 0 (id=184): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000001840)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard}, {@discard}, {@umask}, {@uid={'uid', 0x3d, 0xee01}}, {@sys_tz}, {@gid}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@discard}, {@namecase}]}, 0x41, 0x1532, &(0x7f0000000300)="$eJzs3QmcjlUbMPDrOufcY0h6mmQZzjnXzZPEIUmyJMmSJEmSZEtIkrySkBiyJQ1JyDokyxCSZWLS2Pd9SUiSJklCsiXn+03Mp97qe7fe1/u9c/1/v/s353rOfc59Pc91P8+9zPZN5yHVG9aoUp+I4F+CF78kAEAsAAwAgGsAIACAMnFl4jL6s0tM+Nc2wv5cDydf6QzYlcT1z9q4/lkb1z9r4/pnbVz/rI3rn7Vx/bM2rj9jWdnm6fmv5SXrLnz//39f3T/s4eP///98ZiO9xNgv1pa4vgtAzN87luuftXH9/2cFf89KXP+sjeufVcVe6QTYfwF+/2cF2f6wh+uftXH9GcvKrvT95yu9QCRrvwZXev9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY1nPGXKQDIbF/pvBhjjDHGGGOMMfbn8dmudAaMMcYYY4wxxhj790MQIEFBADGQDWIhO+QAAQBXQy64BiJwLcTBdZAbroc8kBfyQX6IhwJQEDQYsEAQQiEoDFG4AYrAjVAUboJiUBwclICScDOUglugNNwKZeA2KAu3QzkoDxWgItwBleBOqAx3QRW4G6pCNagONeAeqAn3Qi24D2rD/VAHHoC68CDUg4egPjwMDeARaAiPQiN4DBpDE2gKzaD5PzX+RegOL0EP6AkJ0At6w8vQB/pCP+gPA+AVGAivwiB4DRJhMAyB12EovAHD4E0YDiNgJLwFo2A0jIGxMA7GQxJMgInwNkyCd2AyTIGpMA2SYTrMgHdhJsyC2fAezIH3YS7Mg/mwAFLgA1gIiyAVPoTF8BGkwRJYCstgOayAlbAKVsMaWAvrYD1sgI2wCTbDFtgK22A77ICd8DHsgk9gN+yBvfAp7IPP/sHxp/9qfBcEBBQoUKHCGIzBWIzFHJgDc2JOzIW5MIIRjMM4zI25MQ/mwXyYD+MxHgtiQTRokJCwEBbCKEaxCBbBolgUi2ExdOiwJJbEUngLlsbSWAbLYFksi+WwPJbHilgRK2ElrIyVsQpWwapYFatjdbwH78FeWAtrYW2sjXWwTubtKayP9bEBNsCG2BAbYSNsjI2xKTbF5tgcW2ALbIktsTW2xjbYBttiW2yH7bA9tscO2AE7YkfshJ2wM3bGLtgVu6a/mA3wJXwJe2JV0Qt7Y2/sg4nZ+mF/7I+v4EB8FV/F1zARB+MQfB1fxzdwGJ7C4TgCR+JIrCRG4xgciyTGYxIm4USciJNwEk7GKTgFp2EyTscZOANn4iyche/hHHwf38d5OA8XYAqm4EJchKmYiovxNKbhElyKy3A5rsDluApX4ypci+twLW7ADbgJN+EW3ILbcBvuwB34MSoA/AT34B5MxH24D/fjfjyAB/AgHsR0TMdDeAgP42E8gkfwKB7FY3gcT+BxPIkn8RSexjN4Bs/hOTyPz8d/1eDjm9YkgsighBIxIkbEiliRQ+QQOUVOkUvkEhEREXEiTuQWuUUekUfkE/lEvIgXBUVBYYQRJMIYABBRERVFRBFRVBQVxUQx4YQTJRFEKVFKlBalRRlxmygrbhflRHnRylUUFUUl0dpVFneJKqKKqCqqieqihqghaoqaopaoJWqL2qKOqCPqigdFPdEL++HDIqMyDcVgbCSGYGPRRMhLn2AtxDBsKVqJ1uJJMQKHY1vRwrUTz4j2Ygx2EH8RY/E50UmMx87iBdFFdBXdxIuiu2jpeoieYjL2Er3FNOwj+op+or+YidXEezgne3XxmkgUg8UQ8bpYgG+IYeJNMVyMECPFW2KUGC3GiLFinBgvksQEMVG8LSaJd8RkMUVMFdNEspguZoh3xUwxS8wW74k54n0xV8wT88UCkSI+EAvFIpEqPhSLxUciTSwRS8UysVysECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFd7BA7xcdil/hE7BZ7xF7xqdgnPhP7xefigPhCHBRfinTxlTgkvhaHxTfiiPhWHBXfiWPiuDghvhcnxQ/ilDgtzoiz4pz4UZwXP4kLwguQKIWUUslAxshsMlZmlznkVTKnDC69utfKOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKovImWUwWl06WkCXlzbKUvEWWlrfKMvI2WVbeLsvJ8rKCrCjvkJXknRIiF7dRVVaT1WUNeY9MgHtlLXmfrC3vl3XkA7KufFDWkw/J+vJh2UA+IhvKR2Uj+ZhsLJvIprKZbC4fly3kE7KlbCVbyydlG/mUbCuflu3kM7K99Jd2kedkJ/m87CxfkF1kV9lN/iQvSC97yJ4SeoHsLV+WfWRf2U/2lwPkK3KgfFUOkq/JRDlYDpGvy6HyDTlMvimHyxFypHxLjpKj5Rg5Vo6T42WSnCAnyrflJPmOnCynyKlymkyW02W/SzPNlvJvjn/7d8YP+nnrm+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXXgNQqISSSqlAxahsKlZlVznUVSqnulrlUteoiLpWxanrVG51vcqj8qp8Kr+KVwVUQaWVUVaRClUhVVhF1Q14aYdRxVRx5VQJVVLd/I+MV0XUjaqouulX4zPzS/iD/Jqr5qqFaqFaqpaqtWqt2qg2qq1qq9qpdqq9aq86qA6qo+qoOqlOqrPqrLqoLqqb6qa6q+6qh+qhElSC6q1eVn1UX9VP9VcD1CtqoBqoBqlBKlElqiFqiBqqhqphapgaroarkWqkGqVGqTFqjBqnxqkklaQmqolqkpqkJqvJaqqaqpJVspqhZqiZaqaarWarOWqOmqvmqvlqvkpRKWqhWqhSVaparBarNLVELVHL1DK1Qq1Qq9QqtUatUevUOrVBbVBparParLaqrWq72q52qp1ql9qldqvdaq/aq/apfWq/2q8OqAPqoDqo0lW6OqQOqcPqsDqijqij6qg6po6pE+qEOqlOqlPqlDqjzqhz6pw6r86rC+pCxmlfIAIRqEAFMUFMEBvEBjmCHEHOIGeQK8gVRIJIEBfEBbmD64M8Qd4gX5A/iA8KBAUDHZjABuJS0aPBDUGR4MagaHBTUCwoHrigRFAyuDkoFdwSlA5uDcoEtwVlg9uDckH5oEJQMbgjqBTcGVQO7gqqBHcHVYNqQfWgRnBPUDO4N6gV3BfUDu4P6gQPBHWDB4N6wUNB/eDhoEHwSNAweDRoFDwWNA6aBE2DZkHzP3V+70/lfcL10D11gu6le+uXdR/dV/fT/fUA/YoeqF/Vg/RrOlEP1kP063qofkMP02/q4XqEHqnf0qP0aD1Gj9Xj9HidpCfoifptPUm/oyfrKXqqnqaT9XQ9Q7+rZ+pZerZ+T8/R7+u5ep6erxfoFP2BXqgX6VT9oV6sP9Jpeoleqpfp5XqFXqlX6dV6jV6r1+n1eoPeqDfpzXqL3qq36e16h96pP9a79Cd6t96j9+pP9T79md6vP9cH9Bf6oP5Sp+uv9CH9tT6sv9FH9Lf6qP5OH9PH9Qn9vT6pf9Cn9Gl9Rp/V5/SP+rz+SV/QPuPkPuPwbpRRJsbEmFgTa3KYHCanyWlymVwmYiImzsSZ3Ca3yWPymHwmn4k38aagKWgykCFTyBQyURM1RUwRU9QUNcVMMeOMMyVNSVPKlDKlTWlTxpQxZU1ZU86UMxVMBXOHucPcae40d5m7zN3mblPNVDM1TA1T09Q0tUwtU9vUNnVMHVPX1DX1TD1T39Q3DUwD09A0NI1MI9PYNDZNTVPT3DQ3LUwL09K0NK1Na9PGtDFtTVvTzrQz7U1708F0MB1NR9PJdDKdTWfTxXQx3Uw30910Nz1MD5NgEkxv09v0MX1MP9PPDDADzEAz0Awyg0yiSTRDzBAz1Aw1w8wwM9yMMCMzTlTNaDPGjDXjzHiTZJLMRDPRTDKTzGQz2Uw1U02ySTYzzAwz08w0s81sM8fMMXPNXDPfzDcpJsUsNAtNqkk1i81ik2bSzFKz1Cw3y81Ks9KsNqvNWrPWrIf1ZqPZaDabzWar2Wq2m+1mp9lpdpldZrfZbfaavWaf2Wf2m/3mgDlgDpqDJt2km0PmkDlsDpsj5og5ao6aY+aYOWFOmJPmpDllTpkz5ow5Z/JeOl56E2uz2xz2KpvTXm1z2WvsX8f5bH4bbwvYglbbPDbvr2JjrS1qb7LFbHHrbAlb0t78m7icLW8r2Ir2DlvJ3mkr/yauae+1tex9tra939aw9/wqrmMfsHXto7YeIoBtYhvYZrahfdQ2so/ZxraJbWqb2YyT0rb2advOPmPb22dtG/uU/WW80C6yq+0au9aus7vtHnvGnrWH7Tf2nP3R9rA97QD7ih1oX7WD7Gs20Q7+TTzSvmVH2dF2jB1rx9nxv4mn2mk22U63M+y7dqad9Zs4xX5g59hUO9fOs/Ptgp/jjJxS7Yd2sf3IptkAltpldrldYVfaVf8312V2g91oN9ld9hO71W6z2+0OuzPzRNjusXvtp3af/cwesl/bA/YLe9Aesen2q5/jjOd3xH5rj9rv7DF73J6w39uT9gf189jRfQDsj/Z7+5O9YL0FQgKSpCigGMpGsZSdctBVlJOuplx0DUXoWoqj6yg3XU95KC/lo/wUTwWoIGkyZIkopEJUmKJ0A2WmV4yKk6MSVJJuplJ0C5WmW6kM3UZl6XYqR+WpAlWkO6gS3UmV6S6qQndTVapG1akG3UM16V6qRfdRbbqf6tADVJcepHr0ENWnh6kBPUIN6VFqRI9RY2pCTakZNafHqQU9QS2pFbWmJ6kNPUVt6WlqR89Qe3qWOtBfqCM9R53oeepML1AX6krd6EXqTi9RD+pJCdSLetPL1If6Uj/qTwPoFRpIr9Igeo0SaTANoddpKL1Bw+hNGk4jaCS9RaNoNI2hsTSOxlMSTaCJ9DZNondoMk2hqTSNkmk6zaB3aSbNotn0Hs2h92kuzaP5tIBS6ANaSIsolT6kxfQRpdESWkrLaDmtoJW0ilbTGlpL62g9baCNtIk20xbaSttoO+2gnfQx7aJPaDftob30Ke2jz2g/fU4H6As6SF9SOn1Fh+hrOkyZR+vv6BgdpxP0PZ2kH+gUnaYzdJbO0Y90nn6iC+QJQgxFKEMVBmFMmC2MDbOHOcKrwpzh1WGu8JowEl4bxoXXhbnD68M8Yd4wX5g/jA8LhAVDHZrQhhSGYaGwcBgNbwiLhDeGRUMMi4XFQxeWCEuGN4elwlvC0uGtYZnwtrBseHtYLiwfPnp/xfCOsFJ4Z1g5vCusEt4dVg2rhdXDGuE9Yc3w3rBWeF9YO7w/LB0+ENYNHwzrhQ+F9cOHwwbhI2HD8NGwUfhY2DhsEjYNm4XNw8fDFuETYcuwVdg6fDJsEz4Vtg2fDtuFz4Ttw2d/7n9g0R/3J4S9wt7hy+HLoff3yfnRBdGU6AfRhdFF0dToh9HF0Y+iadEl0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTVHva2QDh0446ZQLXCwAxLrsLoe7yuV0V7tc7hoXcde6OHedy+2ud3lcXpfP5XfxroAr6LQzzjpyoSvkCruou8EVcTe6ou4mV8wVd86VcCVdM9fcNXct3BOupWvlWrsn3ZPuKfeUe9o97Z5x7d2zroP7i+vonnOd3PPuefeC6+K6um7uRdfdTch1cU9IcL1db9fH9XH9XD83wA1wA91AN8gNcoku0Q1xQ9xQN9QNc8PccDfcjXTZL+1BY9w4N84luSQ30U10k9wkN9lNdlPdVJfskt0MN8PNdDNdpVkX157r5rr5br5LcSluocvYC1PdYrfYpbk0t9QtdcvdcrfSrXSr3Wq31q116916t9FtdJvdZrfVbXXb3Xa30+10u9wut9tfc3FSt8/td/vdAXfAHXRfunT3lTvkvnaH3TfuiPvWHXXfuWPuuDvhvncn3Q/ulDvtzriz7pz70Z13P7kLzrukyITIxMjbkUmRdyKTI1MiUyPTIsmR6ZEZkXcjMyOzIrMj70XmRN6PzI3Mi8yPLIikRD6ILIwsiqRGPowsjnwUSYssiSyNLIssj6yIeF9ga+gL+cI+6m/wRfyNvqi/yRfzxb3zJXxJf7Mv5W/xpf2tvoy/zZf1t/tyvryv4B/zjX0T39Q38839476Ff8K39K18a/+kb+Of8m39076df8a398/6Dv4vvqN/znfyz/vO/gXfxXf13fyLvrt/yffwPX2C7+V7+5d9H9/X9/P9/QD/ih/oX/WD/Gs+0Q/2Q/zrfqh/ww/zb/rhfoQfGfOWH5V5iQzjfZKf4Cf6t/0k/46f7Kf4qX6aT/bT/Qz/rp/pZ/nZ/j0/x7/v5/p5fr5f4FP8B36hX+RT/Yd+sf/Ip/klmTeV/Uq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xO/7Hf5T/xu/0ev9d/6vf5z/x+/7k/4L/wB/2XPt1/5Q/5r/1h/40/4r/1R/13/pg/7k/47/1J/4M/5U/7M/6sP+d/9Of9T/4C/84aY4wxxtjfZcLlpvh1z8Xb+b1+Z4z4xcq9AeDqbfnTf9mfcUa5Ps/Fdl8R3yYCAM/07Pxw5lK1akJCwqV10yQEhecBZH4nKEMMXI6XQGt4CtpBKyj1u/n3FV3P0d+YP3obQI5fjMm4EsuML8//OQAm/M78jz85cmHZ8Ezc/2P+eQBFC18ek3GNlBkvgdY/319pBaX/IP+8LX6Zf+xv58/+RRJAy1+MyQmX48v5l4Qn4Flo96s1GWOMMcYYY4yxi/qKCh0zrz8zf+Lz967P49XlMdngcvy3rs8ZY4wxxhhjjDF25T3XtdvTj7dr16rjP96o/E+N+rsbjeDfNfM/08j8Pwn/Lfn8GxreA2Q+ogDgX5wQIKMh/5PPYst/ZFuJl946f921/KwP4L+jlH9G4wp/MDHGGGOMMcb+dJdP+n/9uLpSCTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY1nQf+LPiV3p58gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdaf8nAAD//2wV/yM=") getgid() mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 1.584929744s ago: executing program 0 (id=185): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x88b70011641af407, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b362", 0xbd}, {&(0x7f0000000700)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb60400000000", 0xf8}, {0x0}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b", 0x50}], 0x4}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000b80)="f77d", 0x2}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000400)="83d0d3d65586d7e0d55381d2", 0xc}, {&(0x7f0000000800)="f24aaf6222f960796829e27ef1284c6a24f8e55f50089d74fa7d88bf7d3bfb9b5477e5de94e57fe97f82cca01c701f8168197e0ce9181cecf1691fa344891aa832f9559ad0f75d80e5052b3331b986b069ac599b0ff1e0dafcaccdf7bfa3f6b3ae5f85efcc34011296cd189515b5e49ef161c895b6033ea92d3e638c7ed78d21cc1d9af5683d9fed756c60b7663dbc6f2df1535f09d89af50641b9e89b49faa1c42cb8b5e26b6d5eba512d1eb67fbadaa3eb732abc0b3de75b01b21c7d810eb545f83496", 0xc4}, {&(0x7f0000000980)="3036f32fd3f4ca14d48aecd35ebc7ebcbe3f6494b26997b422f18b2436d6923b38e2cf02e081cbcc3844f767c2e438b54f2348836a44f042cb6a9832aa7ae9abe7c7c5530f6cbe53be6a6fd9e79aff2fe47a1fc795fe626feda0e1bc52249c22e4dba4b944c2ec5c083cdbe74941e99da88b673c9dad034ab66bef3bf148a1efbf67668f26dd36f31ee24e33d6019f85f55a1403c778350a3b9a24af9418635daf10375bce23b91598034b3286cb3a42", 0xb0}], 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 971.084448ms ago: executing program 5 (id=119): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x20000800) socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x24020400) r1 = syz_io_uring_setup(0x7701, &(0x7f0000000300)={0x0, 0x5c81, 0x1000, 0x1, 0xa5}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) r5 = eventfd(0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000440)=r5, 0x1) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000004c0)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf1cd, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@new_dev={0x4, 0x7e2, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x100}}}, &(0x7f0000000540)) 790.414962ms ago: executing program 0 (id=186): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 408.270431ms ago: executing program 36 (id=186): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = timerfd_create(0x0, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) 403.691231ms ago: executing program 5 (id=188): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x88b70011641af407, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b362", 0xbd}, {&(0x7f00000003c0)="641a6a2b863c0dd8", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000b80)="f77d2b", 0x3}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000400)="83d0d3d65586d7e0d55381d2", 0xc}, {&(0x7f0000000800)="f24aaf6222f960796829e27ef1284c6a24f8e55f50089d74fa7d88bf7d3bfb9b5477e5de94e57fe97f82cca01c701f8168197e0ce9181cecf1691fa344891aa832f9559ad0f75d80e5052b3331b986b069ac599b0ff1e0dafcaccdf7bfa3f6b3ae5f85efcc34011296cd189515b5e49ef161c895b6033ea92d3e638c7ed78d21cc1d9af5683d9fed756c60b7663dbc6f2df1535f09d89af50641b9e89b49faa1c42cb8b5e26b6d5eba512d1eb67fbadaa3eb732abc0b3de75b01b21c7d810eb5", 0xc0}, {&(0x7f0000000980)="3036f32fd3f4ca14d48aecd35ebc7ebcbe3f6494b26997b422f18b2436d6923b38e2cf02e081cbcc3844f767c2e438b54f2348836a44f042cb6a9832aa7ae9abe7c7c5530f6cbe53be6a6fd9e79aff2fe47a1fc795fe626feda0e1bc52249c22e4dba4b944c2ec5c083c", 0x6a}], 0x3) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 310.954842ms ago: executing program 5 (id=189): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 114.235317ms ago: executing program 5 (id=190): syz_open_dev$loop(0x0, 0x3, 0x100) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@data_err_ignore}]}, 0x22, 0x4a2, &(0x7f0000000980)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x0, 0xa}, 0x18) 0s ago: executing program 6 (id=142): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0xfffffd2a, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x2}, @enter_looper, @acquire_done], 0xffffffa9, 0x0, 0x0}) r3 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x1000) io_uring_enter(r3, 0x8a1, 0xb08a, 0x6, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 71.216431][ T5760] cgroup: Unknown subsys name 'net' [ 71.350100][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.747144][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.753793][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.751372][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.191440][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.200747][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.210396][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.219129][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.227839][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.237538][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.240712][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.245373][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.255138][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.260408][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.268161][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.276077][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.283852][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.296560][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.304565][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.315449][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.323801][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.332269][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.332912][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.348012][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.348021][ T5082] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.363154][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.370786][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.379978][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.815980][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 74.847137][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 74.929678][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 74.946952][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 74.988131][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.995478][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.003661][ T5772] bridge_slave_0: entered allmulticast mode [ 75.010465][ T5772] bridge_slave_0: entered promiscuous mode [ 75.062698][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.072184][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.079640][ T5772] bridge_slave_1: entered allmulticast mode [ 75.087824][ T5772] bridge_slave_1: entered promiscuous mode [ 75.095480][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.102720][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.110125][ T5771] bridge_slave_0: entered allmulticast mode [ 75.119298][ T5771] bridge_slave_0: entered promiscuous mode [ 75.138090][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.145402][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.152571][ T5771] bridge_slave_1: entered allmulticast mode [ 75.159557][ T5771] bridge_slave_1: entered promiscuous mode [ 75.243846][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.256224][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.287958][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.300848][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.327900][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.335253][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.342650][ T5773] bridge_slave_0: entered allmulticast mode [ 75.350559][ T5773] bridge_slave_0: entered promiscuous mode [ 75.358137][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.365906][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.373304][ T5774] bridge_slave_0: entered allmulticast mode [ 75.380041][ T5774] bridge_slave_0: entered promiscuous mode [ 75.407393][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.414783][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.422092][ T5773] bridge_slave_1: entered allmulticast mode [ 75.429212][ T5773] bridge_slave_1: entered promiscuous mode [ 75.447236][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.456646][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.464579][ T5774] bridge_slave_1: entered allmulticast mode [ 75.471285][ T5774] bridge_slave_1: entered promiscuous mode [ 75.490611][ T5772] team0: Port device team_slave_0 added [ 75.520317][ T5771] team0: Port device team_slave_0 added [ 75.528806][ T5772] team0: Port device team_slave_1 added [ 75.547431][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.559831][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.579290][ T5771] team0: Port device team_slave_1 added [ 75.615105][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.627389][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.645487][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.652670][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.678774][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.693018][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.699997][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.726021][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.749439][ T5773] team0: Port device team_slave_0 added [ 75.774835][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.781835][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.808588][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.834847][ T5773] team0: Port device team_slave_1 added [ 75.843940][ T5774] team0: Port device team_slave_0 added [ 75.850549][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.857738][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.884588][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.931773][ T5774] team0: Port device team_slave_1 added [ 75.991892][ T5772] hsr_slave_0: entered promiscuous mode [ 75.998885][ T5772] hsr_slave_1: entered promiscuous mode [ 76.007824][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.014893][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.043631][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.057592][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.064959][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.091178][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.111212][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.118310][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.146806][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.159321][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.166492][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.192493][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.231457][ T5771] hsr_slave_0: entered promiscuous mode [ 76.238539][ T5771] hsr_slave_1: entered promiscuous mode [ 76.245561][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.254057][ T5771] Cannot create hsr debugfs directory [ 76.285032][ T5773] hsr_slave_0: entered promiscuous mode [ 76.291553][ T5773] hsr_slave_1: entered promiscuous mode [ 76.298935][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.306610][ T5773] Cannot create hsr debugfs directory [ 76.378311][ T5774] hsr_slave_0: entered promiscuous mode [ 76.384879][ T5774] hsr_slave_1: entered promiscuous mode [ 76.391160][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.393811][ T5777] Bluetooth: hci0: command tx timeout [ 76.399143][ T5774] Cannot create hsr debugfs directory [ 76.462914][ T5777] Bluetooth: hci2: command tx timeout [ 76.466954][ T5783] Bluetooth: hci3: command tx timeout [ 76.468613][ T5777] Bluetooth: hci1: command tx timeout [ 76.770483][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.793983][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.803927][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.814688][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.885447][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.904122][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.917662][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.928244][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.989911][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.012324][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.024010][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.033723][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.110714][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.134327][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.146798][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.157652][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.239720][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.310082][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.331752][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.339151][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.368486][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.375679][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.390143][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.406787][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.442608][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.476940][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.484087][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.513700][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.528553][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.535785][ T4477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.570716][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.581720][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.588934][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.616621][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.623861][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.696840][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.731006][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.738229][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.758601][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.765835][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.860078][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.929324][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.057337][ T5772] veth0_vlan: entered promiscuous mode [ 78.106267][ T5772] veth1_vlan: entered promiscuous mode [ 78.154407][ T5772] veth0_macvtap: entered promiscuous mode [ 78.199903][ T5772] veth1_macvtap: entered promiscuous mode [ 78.235496][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.286218][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.316661][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.351617][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.364477][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.374884][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.386313][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.448300][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.466006][ T5774] veth0_vlan: entered promiscuous mode [ 78.474419][ T5777] Bluetooth: hci0: command tx timeout [ 78.487132][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.529740][ T5774] veth1_vlan: entered promiscuous mode [ 78.543880][ T5777] Bluetooth: hci3: command tx timeout [ 78.543924][ T5783] Bluetooth: hci2: command tx timeout [ 78.549348][ T5777] Bluetooth: hci1: command tx timeout [ 78.602176][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.613895][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.707396][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.717376][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.717560][ T5771] veth0_vlan: entered promiscuous mode [ 78.737914][ T5773] veth0_vlan: entered promiscuous mode [ 78.754071][ T5774] veth0_macvtap: entered promiscuous mode [ 78.767903][ T5774] veth1_macvtap: entered promiscuous mode [ 78.778549][ T5771] veth1_vlan: entered promiscuous mode [ 78.814492][ T5773] veth1_vlan: entered promiscuous mode [ 78.836708][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.849573][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.862186][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.891612][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.904847][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.920361][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.961090][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.985642][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.987715][ T5833] syz.0.1[5833]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.999962][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.013348][ T5833] loop0: detected capacity change from 0 to 512 [ 79.016224][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.129840][ T5773] veth0_macvtap: entered promiscuous mode [ 79.165668][ T5771] veth0_macvtap: entered promiscuous mode [ 79.182310][ T5773] veth1_macvtap: entered promiscuous mode [ 79.220845][ T5771] veth1_macvtap: entered promiscuous mode [ 79.279871][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.291047][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.302714][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.311355][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.317706][ T5835] loop0: detected capacity change from 0 to 128 [ 79.324632][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.340260][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.354716][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.369533][ T5835] ======================================================= [ 79.369533][ T5835] WARNING: The mand mount option has been deprecated and [ 79.369533][ T5835] and is ignored by this kernel. Remove the mand [ 79.369533][ T5835] option from the mount to silence this warning. [ 79.369533][ T5835] ======================================================= [ 79.417277][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.434565][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.444692][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.455461][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.465740][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.476404][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.488511][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.546374][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.560366][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.571122][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.581789][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.596403][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.615936][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.627607][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.642182][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.658792][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.670153][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.684871][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.697538][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.698656][ T5839] loop0: detected capacity change from 0 to 1024 [ 79.714589][ T5839] EXT4-fs: Ignoring removed bh option [ 79.728150][ T5839] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 79.761456][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.772720][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.781601][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.790449][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.794442][ T5839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.828856][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.852801][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.861979][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.868844][ T5839] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.877393][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.898302][ T28] audit: type=1804 audit(1784835036.736:2): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.7" name="/newroot/3/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 79.929714][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.951532][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.962078][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.129629][ T5844] loop0: detected capacity change from 0 to 16 [ 80.159698][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.176038][ T5844] erofs: (device loop0): mounted with root inode @ nid 36. [ 80.194750][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.353087][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.353131][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.403123][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.411012][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.458603][ T3475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.509650][ T3475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.543790][ T5777] Bluetooth: hci0: command tx timeout [ 80.623219][ T5777] Bluetooth: hci1: command tx timeout [ 80.628734][ T5782] Bluetooth: hci2: command tx timeout [ 80.634087][ T5783] Bluetooth: hci3: command tx timeout [ 80.738572][ T5856] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.957610][ T5865] loop1: detected capacity change from 0 to 512 [ 81.157422][ T5877] capability: warning: `syz.0.15' uses deprecated v2 capabilities in a way that may be insecure [ 81.339912][ T5865] EXT4-fs (loop1): Test dummy encryption mode enabled [ 81.357964][ T5865] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.1.13: corrupted xattr block 95: invalid header [ 81.375164][ T5865] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.13: bg 0: block 7: invalid block bitmap [ 81.390354][ T5865] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 81.400767][ T5865] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #11: comm syz.1.13: corrupted xattr block 95: invalid header [ 81.418316][ T5865] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 81.431144][ T5865] EXT4-fs (loop1): 1 orphan inode deleted [ 81.440969][ T5865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.446912][ T5889] loop2: detected capacity change from 0 to 512 [ 81.480477][ T5889] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 81.489192][ T5889] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 81.503893][ T5889] EXT4-fs (loop2): 1 truncate cleaned up [ 81.510921][ T5889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.552817][ T5889] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 81.566806][ T28] audit: type=1804 audit(1784835038.386:3): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13" name="/newroot/1/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 82.239789][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.613268][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.632878][ T5783] Bluetooth: hci0: command tx timeout [ 82.703034][ T5783] Bluetooth: hci3: command tx timeout [ 82.704240][ T5777] Bluetooth: hci1: command tx timeout [ 82.708655][ T5783] Bluetooth: hci2: command tx timeout [ 82.825096][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 82.833694][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.844217][ T9] usb 2-1: config 189 has an invalid interface number: 214 but max is 0 [ 82.852887][ T9] usb 2-1: config 189 has no interface number 0 [ 82.859334][ T9] usb 2-1: config 189 interface 214 has no altsetting 0 [ 82.870548][ T9] usb 2-1: New USB device found, idVendor=0499, idProduct=1011, bcdDevice=da.3a [ 82.880230][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.888347][ T9] usb 2-1: Product: syz [ 82.893416][ T9] usb 2-1: Manufacturer: syz [ 82.898057][ T9] usb 2-1: SerialNumber: syz [ 83.132005][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 83.160902][ T9] snd-usb-audio: probe of 2-1:189.214 failed with error -2 [ 83.179773][ T9] usb 2-1: USB disconnect, device number 2 [ 83.197449][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:189.214/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.794086][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 83.900091][ T5870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.944631][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.013226][ T5912] loop0: detected capacity change from 0 to 512 [ 84.024937][ T5912] EXT4-fs (loop0): Test dummy encryption mode enabled [ 84.085867][ T5912] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.0.26: corrupted xattr block 95: invalid header [ 84.113786][ T5917] loop2: detected capacity change from 0 to 256 [ 84.185968][ T5912] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.26: bg 0: block 7: invalid block bitmap [ 84.211917][ T5912] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 84.231703][ T5912] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #11: comm syz.0.26: corrupted xattr block 95: invalid header [ 84.248982][ T5912] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 84.258964][ T5912] EXT4-fs (loop0): 1 orphan inode deleted [ 84.268622][ T5917] FAT-fs (loop2): Directory bread(block 64) failed [ 84.269636][ T5912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.295159][ T5917] FAT-fs (loop2): Directory bread(block 65) failed [ 84.317918][ T5917] FAT-fs (loop2): Directory bread(block 66) failed [ 84.327282][ T5917] FAT-fs (loop2): Directory bread(block 67) failed [ 84.348497][ T5917] FAT-fs (loop2): Directory bread(block 68) failed [ 84.371602][ T5917] FAT-fs (loop2): Directory bread(block 69) failed [ 84.389705][ T5917] FAT-fs (loop2): Directory bread(block 70) failed [ 84.404362][ T28] audit: type=1804 audit(1784835041.236:4): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.26" name="/newroot/9/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 84.430016][ T5917] FAT-fs (loop2): Directory bread(block 71) failed [ 84.440574][ T5917] FAT-fs (loop2): Directory bread(block 72) failed [ 84.452952][ T5917] FAT-fs (loop2): Directory bread(block 73) failed [ 85.244582][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.627877][ T5936] loop0: detected capacity change from 0 to 512 [ 85.688788][ T5936] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.32: invalid indirect mapped block 10 (level 1) [ 85.773528][ T5936] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.32: invalid indirect mapped block 8 (level 1) [ 85.863367][ T5936] EXT4-fs (loop0): 1 truncate cleaned up [ 85.896175][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.086630][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.872755][ C0] sched: RT throttling activated [ 88.607735][ T5951] usb usb1: check_ctrlrecip: process 5951 (syz.0.36) requesting ep 01 but needs 81 [ 88.649767][ T5951] usb usb1: usbfs: process 5951 (syz.0.36) did not claim interface 0 before use [ 89.197773][ T5959] loop2: detected capacity change from 0 to 512 [ 89.211346][ T5959] EXT4-fs (loop2): Test dummy encryption mode enabled [ 89.232113][ T5959] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.2.38: corrupted xattr block 95: invalid header [ 89.251720][ T5959] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.38: bg 0: block 7: invalid block bitmap [ 89.261925][ T5944] loop3: detected capacity change from 0 to 40427 [ 89.276880][ T5959] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 89.299201][ T5944] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 89.305633][ T5959] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #11: comm syz.2.38: corrupted xattr block 95: invalid header [ 89.322458][ T5944] F2FS-fs (loop3): Image doesn't support compression [ 89.331498][ T5959] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 89.340817][ T5944] F2FS-fs (loop3): Image doesn't support compression [ 89.344095][ T5959] EXT4-fs (loop2): 1 orphan inode deleted [ 89.348974][ T5944] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 89.367746][ T5944] F2FS-fs (loop3): invalid crc value [ 89.368191][ T5959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.392000][ T5944] F2FS-fs (loop3): Found nat_bits in checkpoint [ 89.451926][ T28] audit: type=1804 audit(1784835046.286:5): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.38" name="/newroot/6/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 89.590868][ T5944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 89.860192][ T5968] loop0: detected capacity change from 0 to 512 [ 89.884655][ T5968] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.916596][ T5968] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.190985][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.287503][ T5974] loop2: detected capacity change from 0 to 512 [ 90.299634][ T5974] EXT4-fs (loop2): Test dummy encryption mode enabled [ 90.507787][ T5974] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.2.42: corrupted xattr block 95: invalid header [ 90.525589][ T5974] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.42: bg 0: block 7: invalid block bitmap [ 90.540065][ T5974] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 90.554978][ T5974] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #11: comm syz.2.42: corrupted xattr block 95: invalid header [ 90.570790][ T5974] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 90.581695][ T5974] EXT4-fs (loop2): 1 orphan inode deleted [ 90.589074][ T5974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.617852][ T28] audit: type=1804 audit(1784835047.456:6): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.42" name="/newroot/7/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 90.645614][ T5812] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.675741][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.765453][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.846044][ T5812] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.867418][ T5812] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 90.896831][ T5812] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.910768][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.920461][ T5812] usb 4-1: Product: syz [ 90.927675][ T5982] loop2: detected capacity change from 0 to 1024 [ 90.930208][ T5812] usb 4-1: Manufacturer: syz [ 90.936182][ T5982] EXT4-fs: Ignoring removed bh option [ 90.940753][ T5812] usb 4-1: SerialNumber: syz [ 90.977992][ T5812] cdc_mbim 4-1:1.0: skipping garbage [ 90.997323][ T5982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.100138][ T5771] EXT4-fs error (device loop2): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 91.124214][ T5771] EXT4-fs (loop2): Remounting filesystem read-only [ 91.162854][ T5811] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 91.191961][ T5971] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.370208][ T5811] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 91.379561][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.387713][ T5811] usb 1-1: Product: syz [ 91.393016][ T5811] usb 1-1: Manufacturer: syz [ 91.397659][ T5811] usb 1-1: SerialNumber: syz [ 91.443450][ T5946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.496344][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.621521][ T4477] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.760373][ T4477] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.813759][ T5971] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.821372][ T5812] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 91.853292][ T4477] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.880104][ T5811] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 91.897858][ T5812] cdc_mbim 4-1:1.0: cdc-wdm1: USB WDM device [ 91.933032][ T5812] wwan wwan0: port wwan0mbim0 attached [ 91.956598][ T4477] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.016938][ T5812] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, ce:d4:13:29:bd:c6 [ 92.063038][ T5812] usb 4-1: USB disconnect, device number 2 [ 92.143144][ T5812] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 92.199745][ T5990] loop1: detected capacity change from 0 to 512 [ 92.240491][ T5990] EXT4-fs (loop1): Test dummy encryption mode enabled [ 92.242542][ T1214] cfg80211: failed to load regulatory.db [ 92.282154][ T5990] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.1.50: corrupted xattr block 95: invalid header [ 92.384660][ T5990] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.50: bg 0: block 7: invalid block bitmap [ 92.384706][ T5812] wwan wwan0: port wwan0mbim0 disconnected [ 92.427904][ T5990] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 92.461866][ T5990] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #11: comm syz.1.50: corrupted xattr block 95: invalid header [ 92.515665][ T5990] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 92.567947][ T5990] EXT4-fs (loop1): 1 orphan inode deleted [ 92.599250][ T5990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.707633][ T28] audit: type=1804 audit(1784835049.546:7): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.50" name="/newroot/12/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 92.807477][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.877640][ T6004] loop3: detected capacity change from 0 to 512 [ 92.928401][ T6004] EXT4-fs (loop3): Test dummy encryption mode enabled [ 92.944848][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.957800][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.966603][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.975718][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.983448][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.006257][ T6004] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.3.51: corrupted xattr block 95: invalid header [ 93.020739][ T6004] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.51: bg 0: block 7: invalid block bitmap [ 93.040659][ T6004] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 93.051813][ T6004] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2971: inode #11: comm syz.3.51: corrupted xattr block 95: invalid header [ 93.067822][ T6004] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 93.112364][ T6004] EXT4-fs (loop3): 1 orphan inode deleted [ 93.166310][ T6004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.272969][ T28] audit: type=1804 audit(1784835050.106:8): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.51" name="/newroot/6/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 93.305725][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.330026][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.470321][ T6016] loop1: detected capacity change from 0 to 512 [ 93.557518][ T6016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.624344][ T6016] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.911281][ T9] usb 1-1: USB disconnect, device number 2 [ 93.953648][ T9] usblp0: removed [ 94.235249][ T6000] chnl_net:caif_netlink_parms(): no params data found [ 94.412163][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.631222][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.659966][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.685951][ T6000] bridge_slave_0: entered allmulticast mode [ 94.715316][ T6000] bridge_slave_0: entered promiscuous mode [ 94.799930][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.807275][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.814663][ T6000] bridge_slave_1: entered allmulticast mode [ 94.822109][ T6000] bridge_slave_1: entered promiscuous mode [ 95.043615][ T5777] Bluetooth: hci1: command tx timeout [ 95.978414][ T4477] hsr_slave_0: left promiscuous mode [ 96.026403][ T4477] hsr_slave_1: left promiscuous mode [ 96.063629][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.101512][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.149344][ T4477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.177644][ T4477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.202586][ T4477] bridge_slave_1: left allmulticast mode [ 96.223932][ T6058] loop1: detected capacity change from 0 to 512 [ 96.230363][ T4477] bridge_slave_1: left promiscuous mode [ 96.251016][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.270979][ T6058] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.322516][ T6058] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.1.60: corrupted xattr block 95: invalid header [ 96.353370][ T4477] bridge_slave_0: left allmulticast mode [ 96.359214][ T4477] bridge_slave_0: left promiscuous mode [ 96.371218][ T6058] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.60: bg 0: block 7: invalid block bitmap [ 96.389929][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.399641][ T6058] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 96.444810][ T6058] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2971: inode #11: comm syz.1.60: corrupted xattr block 95: invalid header [ 96.468989][ T4477] veth1_macvtap: left promiscuous mode [ 96.477828][ T6058] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 96.492992][ T4477] veth0_macvtap: left promiscuous mode [ 96.499847][ T6058] EXT4-fs (loop1): 1 orphan inode deleted [ 96.509090][ T4477] veth1_vlan: left promiscuous mode [ 96.520185][ T6058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.533228][ T4477] veth0_vlan: left promiscuous mode [ 96.831102][ T28] audit: type=1804 audit(1784835053.446:9): pid=6058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.60" name="/newroot/16/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 97.102865][ T5777] Bluetooth: hci1: command tx timeout [ 97.108413][ T6034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.735536][ T4477] team0 (unregistering): Port device team_slave_1 removed [ 97.781375][ T4477] team0 (unregistering): Port device team_slave_0 removed [ 97.827956][ T4477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.870712][ T4477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.161634][ T4477] bond0 (unregistering): Released all slaves [ 98.250724][ T6000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.280013][ T6000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.330469][ T6000] team0: Port device team_slave_0 added [ 98.348725][ T6067] tipc: Started in network mode [ 98.365644][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.380067][ T6067] tipc: Node identity 000000000000005f0000000000000001, cluster identity 4711 [ 98.390771][ T6067] tipc: Enabling of bearer rejected, failed to enable media [ 98.434607][ T6000] team0: Port device team_slave_1 added [ 98.538854][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.546246][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.602122][ T6000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.621799][ T6000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.630943][ T6000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.669465][ T6000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.700994][ T6073] loop0: detected capacity change from 0 to 512 [ 98.802858][ T5812] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 98.832549][ T6073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.855084][ T6073] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 98.888289][ T6000] hsr_slave_0: entered promiscuous mode [ 99.068647][ T5812] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 99.106028][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.115872][ T6000] hsr_slave_1: entered promiscuous mode [ 99.132627][ T6000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.143585][ T5812] usb 2-1: Product: syz [ 99.147801][ T5812] usb 2-1: Manufacturer: syz [ 99.152417][ T5812] usb 2-1: SerialNumber: syz [ 99.160933][ T6000] Cannot create hsr debugfs directory [ 99.218189][ T5777] Bluetooth: hci1: command tx timeout [ 99.604054][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.640324][ T5812] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 99.785096][ T6000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.801951][ T6094] loop0: detected capacity change from 0 to 512 [ 99.821371][ T6000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.841386][ T6094] EXT4-fs (loop0): Test dummy encryption mode enabled [ 99.858588][ T6000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.873318][ T6094] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.0.66: corrupted xattr block 95: invalid header [ 99.924512][ T6000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.939547][ T6094] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.66: bg 0: block 7: invalid block bitmap [ 99.954072][ T6094] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 99.968131][ T6094] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #11: comm syz.0.66: corrupted xattr block 95: invalid header [ 99.996665][ T6094] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 100.018462][ T6078] loop3: detected capacity change from 0 to 40427 [ 100.028337][ T6094] EXT4-fs (loop0): 1 orphan inode deleted [ 100.036702][ T6078] F2FS-fs (loop3): invalid crc value [ 100.065601][ T6094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.100430][ T6078] F2FS-fs (loop3): Found nat_bits in checkpoint [ 100.182670][ T6000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.221414][ T6078] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 100.246330][ T28] audit: type=1804 audit(1784835057.086:10): pid=6094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.66" name="/newroot/21/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 100.427731][ T6000] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.659380][ T5774] syz-executor: attempt to access beyond end of device [ 100.659380][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 100.678038][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.685294][ T4477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.708144][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 100.716592][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 100.747691][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.754919][ T4477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.917822][ T6000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.059965][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.270270][ T5777] Bluetooth: hci1: command tx timeout [ 101.462191][ T6000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.563836][ T5993] usb 2-1: USB disconnect, device number 3 [ 101.589936][ T5993] usblp0: removed [ 101.747910][ T6130] loop3: detected capacity change from 0 to 2048 [ 101.846177][ T6130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.883124][ T6130] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.891976][ T6137] netlink: 32 bytes leftover after parsing attributes in process `syz.0.70'. [ 102.213173][ T6155] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.67: bg 0: block 345: padding at end of block bitmap is not set [ 102.222118][ T6000] veth0_vlan: entered promiscuous mode [ 102.268897][ T6155] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 228 with error 28 [ 102.286025][ T6000] veth1_vlan: entered promiscuous mode [ 102.377706][ T6000] veth0_macvtap: entered promiscuous mode [ 102.387004][ T6155] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.387004][ T6155] [ 102.403074][ T6161] loop0: detected capacity change from 0 to 512 [ 102.407235][ T6000] veth1_macvtap: entered promiscuous mode [ 102.435841][ T6161] EXT4-fs (loop0): Test dummy encryption mode enabled [ 102.459141][ T6155] EXT4-fs (loop3): Total free blocks count 0 [ 102.487788][ T6161] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2805: inode #11: comm syz.0.74: corrupted xattr block 95: invalid header [ 102.501744][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.522204][ T6155] EXT4-fs (loop3): Free/Dirty block details [ 102.528242][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.528259][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.528273][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.528282][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.528292][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.529953][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.592405][ T6155] EXT4-fs (loop3): free_blocks=0 [ 102.604959][ T6161] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.74: bg 0: block 7: invalid block bitmap [ 102.613016][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.632183][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.643737][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.660309][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.670519][ T6000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.671535][ T6155] EXT4-fs (loop3): dirty_blocks=240 [ 102.698649][ T6161] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 102.723422][ T6000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.741959][ T6000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.743238][ T6155] EXT4-fs (loop3): Block reservation details [ 102.763127][ T6161] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2971: inode #11: comm syz.0.74: corrupted xattr block 95: invalid header [ 102.792117][ T6000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.798754][ T6155] EXT4-fs (loop3): i_reserved_data_blocks=15 [ 102.806935][ T6000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.807022][ T6000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.834559][ T6161] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 102.845804][ T6000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.862108][ T6161] EXT4-fs (loop0): 1 orphan inode deleted [ 102.881083][ T6161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.996628][ T28] audit: type=1804 audit(1784835059.836:11): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.74" name="/newroot/24/file0/file1" dev="loop0" ino=15 res=1 errno=0 [ 103.065571][ T1022] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 244 with max blocks 2 with error 28 [ 103.096211][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.105694][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.105717][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.178470][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.234386][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.380083][ T6181] loop3: detected capacity change from 0 to 512 [ 103.466460][ T6181] EXT4-fs (loop3): Test dummy encryption mode enabled [ 103.580990][ T6181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.187048][ T6181] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 104.267205][ T6192] overlayfs: failed to resolve './bus': -2 [ 104.439288][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.641163][ T6225] loop3: detected capacity change from 0 to 256 [ 104.743354][ T6225] FAT-fs (loop3): Directory bread(block 64) failed [ 104.750198][ T6225] FAT-fs (loop3): Directory bread(block 65) failed [ 104.778913][ T6225] FAT-fs (loop3): Directory bread(block 66) failed [ 104.829828][ T6225] FAT-fs (loop3): Directory bread(block 67) failed [ 104.843510][ T6225] FAT-fs (loop3): Directory bread(block 68) failed [ 104.854075][ T6232] loop0: detected capacity change from 0 to 256 [ 104.874690][ T6225] FAT-fs (loop3): Directory bread(block 69) failed [ 104.921500][ T6225] FAT-fs (loop3): Directory bread(block 70) failed [ 104.960035][ T6225] FAT-fs (loop3): Directory bread(block 71) failed [ 104.990850][ T6225] FAT-fs (loop3): Directory bread(block 72) failed [ 105.019297][ T6225] FAT-fs (loop3): Directory bread(block 73) failed [ 106.171156][ T5895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.365403][ T5895] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.376264][ T5895] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.390592][ T5895] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 106.412235][ T5895] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 106.432969][ T5895] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 106.483934][ T5895] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.529629][ T5895] usb 1-1: config 1 interface 1 has no altsetting 0 [ 106.553266][ T5895] usb 1-1: string descriptor 0 read error: -22 [ 106.563169][ T5895] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 106.592648][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.710845][ T5895] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 106.711378][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.334591][ T5811] usb 1-1: USB disconnect, device number 3 [ 109.095636][ T6300] loop0: detected capacity change from 0 to 16 [ 109.139786][ T6300] erofs: (device loop0): mounted with root inode @ nid 36. [ 109.279537][ T5777] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 109.315731][ T6300] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 109.330537][ T28] audit: type=1800 audit(1784835066.176:12): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.105" name="file2" dev="overlay" ino=89 res=0 errno=0 [ 109.355125][ T6259] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.641626][ T6300] syz.0.105 (6300) used greatest stack depth: 19960 bytes left [ 112.506456][ T6321] hub 8-0:1.0: USB hub found [ 112.517147][ T6321] hub 8-0:1.0: 1 port detected [ 112.551317][ T6321] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.543003][ T1214] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.680510][ T1022] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.754926][ T1214] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.774785][ T1214] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.801894][ T1214] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.842112][ T1214] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 113.861465][ T1022] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.886324][ T1214] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 113.912992][ T1214] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.956021][ T1214] usb 5-1: config 1 interface 1 has no altsetting 0 [ 113.970929][ T1214] usb 5-1: string descriptor 0 read error: -22 [ 113.978669][ T1214] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 113.998571][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.025771][ T1022] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.103656][ T1214] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 114.135293][ T5989] udevd[5989]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.201928][ T1022] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.676746][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.686585][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.708469][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.719012][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.731595][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 114.740771][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.365339][ T6356] chnl_net:caif_netlink_parms(): no params data found [ 115.572109][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.593615][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.601932][ T6356] bridge_slave_0: entered allmulticast mode [ 115.609584][ T6356] bridge_slave_0: entered promiscuous mode [ 115.632915][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.641734][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.650882][ T6356] bridge_slave_1: entered allmulticast mode [ 115.664113][ T6356] bridge_slave_1: entered promiscuous mode [ 115.760290][ T6356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.774116][ T6356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.832700][ T1022] hsr_slave_0: left promiscuous mode [ 115.843416][ T1022] hsr_slave_1: left promiscuous mode [ 115.851446][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.865089][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.884977][ T1022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.897115][ T1022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.916573][ T1022] bridge_slave_1: left allmulticast mode [ 115.933794][ T1022] bridge_slave_1: left promiscuous mode [ 115.939608][ T1022] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.950697][ T1022] bridge_slave_0: left allmulticast mode [ 115.956491][ T1022] bridge_slave_0: left promiscuous mode [ 115.962272][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.006842][ T6345] loop3: detected capacity change from 0 to 131072 [ 116.015256][ T1022] veth1_macvtap: left promiscuous mode [ 116.021194][ T1022] veth0_macvtap: left promiscuous mode [ 116.032976][ T6345] F2FS-fs (loop3): Zoned block device path is missing [ 116.042671][ T6345] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 116.049944][ T1022] veth1_vlan: left promiscuous mode [ 116.057211][ T1022] veth0_vlan: left promiscuous mode [ 116.084836][ T6345] F2FS-fs (loop3): invalid crc value [ 116.110175][ T6345] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.259407][ T6345] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.268794][ T6345] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 116.323892][ T5895] usb 5-1: USB disconnect, device number 2 [ 116.493132][ T6336] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.869301][ T5783] Bluetooth: hci2: command tx timeout [ 118.312394][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 118.367713][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 118.417016][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.475756][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.822607][ T1022] bond0 (unregistering): Released all slaves [ 118.927447][ T6377] : renamed from bond_slave_0 (while UP) [ 118.953279][ T5783] Bluetooth: hci2: command tx timeout [ 119.019686][ T6356] team0: Port device team_slave_0 added [ 119.061717][ T6356] team0: Port device team_slave_1 added [ 119.140572][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.148312][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.204706][ T6356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.257091][ T6356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.288655][ T6356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.319811][ T6356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.544594][ T6356] hsr_slave_0: entered promiscuous mode [ 119.560701][ T6356] hsr_slave_1: entered promiscuous mode [ 119.570771][ T6356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.597961][ T6356] Cannot create hsr debugfs directory [ 119.848156][ T6417] loop4: detected capacity change from 0 to 128 [ 119.944801][ T6417] syz.4.131: attempt to access beyond end of device [ 119.944801][ T6417] loop4: rw=2049, sector=137, nr_sectors = 8 limit=128 [ 119.980139][ T6417] loop5: detected capacity change from 0 to 7 [ 119.993803][ T6417] Dev loop5: unable to read RDB block 7 [ 120.006753][ T6417] loop5: unable to read partition table [ 120.025898][ T6417] loop5: partition table beyond EOD, truncated [ 120.055063][ T6417] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 120.209835][ T6428] loop3: detected capacity change from 0 to 16 [ 120.233393][ T6428] erofs: (device loop3): mounted with root inode @ nid 36. [ 120.926427][ T6443] loop4: detected capacity change from 0 to 1024 [ 120.941806][ T6443] EXT4-fs: Ignoring removed bh option [ 120.970392][ T6443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.023021][ T5783] Bluetooth: hci2: command tx timeout [ 121.044458][ T6000] EXT4-fs error (device loop4): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /16/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 121.068057][ T6000] EXT4-fs (loop4): Remounting filesystem read-only [ 121.345160][ T6000] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.386091][ T6448] loop3: detected capacity change from 0 to 2048 [ 121.410777][ T6052] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.474678][ T6448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.611692][ T6052] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.631038][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.741077][ T6052] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.772161][ T6453] loop3: detected capacity change from 0 to 1024 [ 121.793294][ T6453] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 121.814644][ T6453] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.829598][ T6453] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 121.873425][ T6052] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.231076][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 122.245284][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 122.264234][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 122.274205][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 122.288304][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 122.296376][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 122.561642][ T6460] chnl_net:caif_netlink_parms(): no params data found [ 122.577603][ T6468] syzkaller0: entered promiscuous mode [ 122.583483][ T6468] syzkaller0: entered allmulticast mode [ 122.663472][ T6410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.703651][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.713016][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.720380][ T6460] bridge_slave_0: entered allmulticast mode [ 122.731102][ T6460] bridge_slave_0: entered promiscuous mode [ 122.745502][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.752688][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.760169][ T6460] bridge_slave_1: entered allmulticast mode [ 122.768641][ T6460] bridge_slave_1: entered promiscuous mode [ 122.790682][ T6356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 122.808312][ T6356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 122.871431][ T6356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 122.896478][ T6356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.020793][ T6460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.071575][ T6460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.103144][ T5777] Bluetooth: hci2: command tx timeout [ 123.317767][ T6460] team0: Port device team_slave_0 added [ 123.346066][ T6460] team0: Port device team_slave_1 added [ 123.530668][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.561599][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.633941][ T6460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.758544][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.768990][ T6494] loop0: detected capacity change from 0 to 1024 [ 123.773322][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.780890][ T6494] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 123.817003][ T6460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.843016][ T6494] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 123.861136][ T6494] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 123.878337][ T6052] hsr_slave_0: left promiscuous mode [ 123.902233][ T6052] hsr_slave_1: left promiscuous mode [ 123.937709][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.945694][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.983925][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.991448][ T6052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.022528][ T6052] bridge_slave_1: left allmulticast mode [ 124.031872][ T6052] bridge_slave_1: left promiscuous mode [ 124.046589][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.059336][ T6052] bridge_slave_0: left allmulticast mode [ 124.059538][ T6485] loop3: detected capacity change from 0 to 32768 [ 124.066109][ T6052] bridge_slave_0: left promiscuous mode [ 124.081088][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.122396][ T6052] veth1_macvtap: left promiscuous mode [ 124.128579][ T6052] veth0_macvtap: left promiscuous mode [ 124.139498][ T6052] veth1_vlan: left promiscuous mode [ 124.147967][ T6052] veth0_vlan: left promiscuous mode [ 124.383667][ T5777] Bluetooth: hci1: command tx timeout [ 124.401158][ T6504] random: crng reseeded on system resumption [ 124.464378][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 124.932978][ T6510] loop3: detected capacity change from 0 to 2048 [ 124.966664][ T6510] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 125.073023][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.288919][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 125.297420][ T9] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 125.325139][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.326539][ T6514] loop3: detected capacity change from 0 to 1024 [ 125.331824][ T9] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 125.331851][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.365393][ T6514] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 125.389569][ T9] usb 1-1: config 0 descriptor?? [ 125.410247][ T6514] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.422127][ T6514] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 125.567415][ T6052] team0 (unregistering): Port device team_slave_1 removed [ 125.659557][ T6052] team0 (unregistering): Port device team_slave_0 removed [ 125.767174][ T6052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.840876][ T6052] bond0 (unregistering): (slave 30): Releasing backup interface [ 125.866530][ T9] nintendo 0003:057E:2009.0001: item fetching failed at offset 40/43 [ 125.883522][ T9] nintendo 0003:057E:2009.0001: HID parse failed [ 125.894101][ T9] nintendo 0003:057E:2009.0001: probe - fail = -22 [ 125.915833][ T9] nintendo: probe of 0003:057E:2009.0001 failed with error -22 [ 125.968415][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.161'. [ 126.472529][ T5777] Bluetooth: hci1: command tx timeout [ 126.561338][ T6534] loop3: detected capacity change from 0 to 1024 [ 126.589673][ T5778] usb 1-1: USB disconnect, device number 4 [ 126.619233][ T6534] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 126.643834][ T6534] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 126.679493][ T6534] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 126.825555][ T6052] bond0 (unregistering): Released all slaves [ 127.076716][ T6460] hsr_slave_0: entered promiscuous mode [ 127.090062][ T6460] hsr_slave_1: entered promiscuous mode [ 127.105213][ T6460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.120694][ T6460] Cannot create hsr debugfs directory [ 127.421986][ T6356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.444655][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.168'. [ 127.587260][ T6356] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.490493][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.497740][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.543136][ T5777] Bluetooth: hci1: command tx timeout [ 128.579135][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.586384][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.924428][ T6460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 129.005680][ T6460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 129.110803][ T6460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 129.169095][ T6460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 129.755561][ T6460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.283429][ T6579] input: syz1 as /devices/virtual/input/input5 [ 130.318478][ T6460] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.398017][ T6356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.497943][ T6583] loop3: detected capacity change from 0 to 256 [ 130.524510][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.532468][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.633540][ T5777] Bluetooth: hci1: command tx timeout [ 130.657196][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.664423][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.794247][ T6583] FAT-fs (loop3): Directory bread(block 64) failed [ 130.800895][ T6583] FAT-fs (loop3): Directory bread(block 65) failed [ 130.888140][ T6583] FAT-fs (loop3): Directory bread(block 66) failed [ 130.955812][ T6583] FAT-fs (loop3): Directory bread(block 67) failed [ 130.962533][ T6583] FAT-fs (loop3): Directory bread(block 68) failed [ 131.080961][ T6460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.104158][ T6583] FAT-fs (loop3): Directory bread(block 69) failed [ 131.110933][ T6583] FAT-fs (loop3): Directory bread(block 70) failed [ 131.162689][ T6583] FAT-fs (loop3): Directory bread(block 71) failed [ 131.213626][ T6583] FAT-fs (loop3): Directory bread(block 72) failed [ 131.220240][ T6583] FAT-fs (loop3): Directory bread(block 73) failed [ 131.294348][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 131.535594][ T5774] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 131.562375][ T5774] FAT-fs (loop3): Filesystem has been set read-only [ 131.844628][ T6460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.913214][ T6356] veth0_vlan: entered promiscuous mode [ 131.980690][ T6356] veth1_vlan: entered promiscuous mode [ 132.217981][ T6356] veth0_macvtap: entered promiscuous mode [ 132.235380][ T6616] loop0: detected capacity change from 0 to 16 [ 132.265402][ T6356] veth1_macvtap: entered promiscuous mode [ 132.335176][ T6616] erofs: (device loop0): mounted with root inode @ nid 36. [ 132.402444][ T6052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.601597][ T6052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.620346][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.672974][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.694029][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.712340][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.724632][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.805592][ T6052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.829509][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.840589][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.854608][ T6356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.866181][ T6356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.897329][ T6356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.986948][ T6460] veth0_vlan: entered promiscuous mode [ 133.206102][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.353236][ T6625] input: syz1 as /devices/virtual/input/input6 [ 133.465420][ T6460] veth1_vlan: entered promiscuous mode [ 133.474764][ T6356] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.535532][ T6356] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.580373][ T6356] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.620416][ T6356] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.747574][ T6052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.227555][ T6460] veth0_macvtap: entered promiscuous mode [ 134.325705][ T6460] veth1_macvtap: entered promiscuous mode [ 134.389336][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.410396][ T6636] loop0: detected capacity change from 0 to 256 [ 134.418126][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.426946][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.435328][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.443218][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.453298][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.496505][ T6636] exfat: Deprecated parameter 'namecase' [ 134.596926][ T6636] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4f74c50, utbl_chksum : 0xe619d30d) [ 134.645736][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.678991][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.691678][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.710312][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.720601][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.736394][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.765741][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.819683][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.834532][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.842401][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.857536][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.869712][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.884483][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.896684][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.909361][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.929385][ T6460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.126458][ T6460] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.136409][ T6460] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.148603][ T6460] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.158562][ T6460] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.186198][ T6054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.194826][ T6054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.730517][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.750457][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.844002][ T6054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.851874][ T6054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.050272][ T6633] chnl_net:caif_netlink_parms(): no params data found [ 136.221247][ T6672] loop5: detected capacity change from 0 to 512 [ 136.250349][ T6672] EXT4-fs: Ignoring removed nobh option [ 136.395044][ T6672] ------------[ cut here ]------------ [ 136.400964][ T6672] EA inode 11 i_nlink=1026 [ 136.402169][ T6672] WARNING: CPU: 0 PID: 6672 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 136.417540][ T6672] Modules linked in: [ 136.421536][ T6672] CPU: 0 PID: 6672 Comm: syz.5.190 Not tainted syzkaller #0 [ 136.429504][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.440160][ T6672] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 136.447947][ T6672] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f2 98 ff 49 8b 34 24 48 c7 c7 a0 da de 8a 44 89 fa e8 8e 53 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 48 5c 45 08 [ 136.468276][ T6672] RSP: 0018:ffffc9000465f360 EFLAGS: 00010246 [ 136.474786][ T6672] RAX: e1eabd7553104d00 RBX: ffff88805d128ea8 RCX: 0000000000080000 [ 136.483082][ T6672] RDX: ffffc9000b709000 RSI: 0000000000023c1f RDI: 0000000000023c20 [ 136.491094][ T6672] RBP: ffffc9000465f450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 136.499264][ T6672] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88805d128d00 [ 136.507362][ T6672] R13: ffffc9000465f3c0 R14: dffffc0000000000 R15: 0000000000000402 [ 136.508946][ T6678] binder: 6677:6678 ioctl c0306201 200000000080 returned -14 [ 136.515453][ T6672] FS: 00007f0a864106c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 136.515510][ T6672] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.515527][ T6672] CR2: 00007f08ddbb8000 CR3: 0000000061091000 CR4: 00000000003506f0 [ 136.515560][ T6672] Call Trace: [ 136.515569][ T6672] [ 136.515584][ T6672] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 136.553046][ T5783] Bluetooth: hci3: command tx timeout [ 136.553732][ T6672] ? __ext4_journal_ensure_credits+0x30/0x450 [ 136.571042][ T6672] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 136.577316][ T6672] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 136.583117][ T6672] ? __ext4_journal_ensure_credits+0x450/0x450 [ 136.589325][ T6672] ext4_xattr_delete_inode+0xb3b/0xd00 [ 136.594954][ T6672] ? ext4_truncate+0xcc0/0x1140 [ 136.599863][ T6672] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 136.606115][ T6672] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 136.611805][ T6672] ext4_evict_inode+0xa88/0xe70 [ 136.616822][ T6672] ? evict+0x482/0x8a0 [ 136.620958][ T6672] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 136.627557][ T6672] ? do_raw_spin_unlock+0x121/0x230 [ 136.633047][ T6672] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 136.638991][ T6672] evict+0x4b7/0x8a0 [ 136.643020][ T6672] ? __lock_acquire+0x7d80/0x7d80 [ 136.648101][ T6672] ? proc_nr_inodes+0x230/0x230 [ 136.653730][ T6672] ? do_raw_spin_unlock+0x121/0x230 [ 136.658984][ T6672] ? _raw_spin_unlock+0x28/0x40 [ 136.664068][ T6672] ext4_orphan_cleanup+0xc33/0x1470 [ 136.669324][ T6672] ? ext4_orphan_del+0xc90/0xc90 [ 136.674390][ T6672] ? ext4_register_li_request+0x182/0x930 [ 136.680180][ T6672] ? errseq_check_and_advance+0x66/0x120 [ 136.686272][ T6672] ext4_fill_super+0x5fb5/0x6870 [ 136.691288][ T6672] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 136.697660][ T6672] ? __might_sleep+0xe0/0xe0 [ 136.700937][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.702354][ T6672] ? read_lock_is_recursive+0x20/0x20 [ 136.702385][ T6672] ? snprintf+0xe9/0x140 [ 136.702425][ T6672] ? down_read_killable+0x340/0x340 [ 136.724785][ T6672] ? setup_bdev_super+0x56b/0x660 [ 136.729865][ T6672] get_tree_bdev+0x3e5/0x520 [ 136.734620][ T6672] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 136.740896][ T6672] ? setup_bdev_super+0x660/0x660 [ 136.746051][ T6672] ? apparmor_capable+0x137/0x1a0 [ 136.751116][ T6672] ? bpf_lsm_capable+0x9/0x10 [ 136.751844][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.756489][ T6672] ? security_capable+0x89/0xb0 [ 136.756524][ T6672] vfs_get_tree+0x8c/0x280 [ 136.756551][ T6672] do_new_mount+0x24a/0xa40 [ 136.756582][ T6672] __se_sys_mount+0x2e7/0x3d0 [ 136.756611][ T6672] ? __x64_sys_mount+0xc0/0xc0 [ 136.756636][ T6672] ? __x64_sys_mount+0x20/0xc0 [ 136.792365][ T6672] do_syscall_64+0x55/0xb0 [ 136.797133][ T6672] ? clear_bhb_loop+0x40/0x90 [ 136.801865][ T6672] ? clear_bhb_loop+0x40/0x90 [ 136.805267][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.806604][ T6672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.817994][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.819454][ T6672] RIP: 0033:0x7f0a8559f10a [ 136.831013][ T6672] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.850791][ T6672] RSP: 002b:00007f0a8640fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 136.859989][ T6672] RAX: ffffffffffffffda RBX: 00007f0a8640fee0 RCX: 00007f0a8559f10a [ 136.868186][ T6672] RDX: 0000200000000580 RSI: 0000200000000140 RDI: 00007f0a8640fea0 [ 136.877064][ T6672] RBP: 0000200000000580 R08: 00007f0a8640fee0 R09: 0000000000800718 [ 136.885428][ T6672] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 136.893503][ T6672] R13: 00007f0a8640fea0 R14: 00000000000004a2 R15: 00002000000003c0 [ 136.901526][ T6672] [ 136.904662][ T6672] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 136.911962][ T6672] CPU: 0 PID: 6672 Comm: syz.5.190 Not tainted syzkaller #0 [ 136.919270][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 136.929340][ T6672] Call Trace: [ 136.932635][ T6672] [ 136.935581][ T6672] dump_stack_lvl+0x18c/0x250 [ 136.940296][ T6672] ? show_regs_print_info+0x20/0x20 [ 136.945514][ T6672] ? load_image+0x420/0x420 [ 136.950056][ T6672] panic+0x2ca/0x720 [ 136.953974][ T6672] ? bpf_jit_dump+0xd0/0xd0 [ 136.958508][ T6672] __warn+0x2e0/0x470 [ 136.962518][ T6672] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 136.968540][ T6672] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 136.974564][ T6672] report_bug+0x2be/0x4f0 [ 136.978933][ T6672] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 136.984943][ T6672] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 136.990963][ T6672] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 136.996978][ T6672] handle_bug+0xcf/0x120 [ 137.001247][ T6672] exc_invalid_op+0x1a/0x50 [ 137.005854][ T6672] asm_exc_invalid_op+0x1a/0x20 [ 137.010738][ T6672] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 137.017361][ T6672] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f2 98 ff 49 8b 34 24 48 c7 c7 a0 da de 8a 44 89 fa e8 8e 53 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 48 5c 45 08 [ 137.036981][ T6672] RSP: 0018:ffffc9000465f360 EFLAGS: 00010246 [ 137.043069][ T6672] RAX: e1eabd7553104d00 RBX: ffff88805d128ea8 RCX: 0000000000080000 [ 137.051060][ T6672] RDX: ffffc9000b709000 RSI: 0000000000023c1f RDI: 0000000000023c20 [ 137.059116][ T6672] RBP: ffffc9000465f450 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 137.067201][ T6672] R10: dffffc0000000000 R11: ffffed10171c518b R12: ffff88805d128d00 [ 137.075188][ T6672] R13: ffffc9000465f3c0 R14: dffffc0000000000 R15: 0000000000000402 [ 137.083183][ T6672] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 137.088855][ T6672] ? __ext4_journal_ensure_credits+0x30/0x450 [ 137.094934][ T6672] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 137.101148][ T6672] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 137.106798][ T6672] ? __ext4_journal_ensure_credits+0x450/0x450 [ 137.112975][ T6672] ext4_xattr_delete_inode+0xb3b/0xd00 [ 137.118461][ T6672] ? ext4_truncate+0xcc0/0x1140 [ 137.123316][ T6672] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 137.129388][ T6672] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 137.135038][ T6672] ext4_evict_inode+0xa88/0xe70 [ 137.139893][ T6672] ? evict+0x482/0x8a0 [ 137.143977][ T6672] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 137.149872][ T6672] ? do_raw_spin_unlock+0x121/0x230 [ 137.155076][ T6672] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 137.160980][ T6672] evict+0x4b7/0x8a0 [ 137.164880][ T6672] ? __lock_acquire+0x7d80/0x7d80 [ 137.169910][ T6672] ? proc_nr_inodes+0x230/0x230 [ 137.174777][ T6672] ? do_raw_spin_unlock+0x121/0x230 [ 137.180029][ T6672] ? _raw_spin_unlock+0x28/0x40 [ 137.184908][ T6672] ext4_orphan_cleanup+0xc33/0x1470 [ 137.190131][ T6672] ? ext4_orphan_del+0xc90/0xc90 [ 137.195071][ T6672] ? ext4_register_li_request+0x182/0x930 [ 137.200789][ T6672] ? errseq_check_and_advance+0x66/0x120 [ 137.206447][ T6672] ext4_fill_super+0x5fb5/0x6870 [ 137.211494][ T6672] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 137.217740][ T6672] ? __might_sleep+0xe0/0xe0 [ 137.222331][ T6672] ? read_lock_is_recursive+0x20/0x20 [ 137.227701][ T6672] ? snprintf+0xe9/0x140 [ 137.231957][ T6672] ? down_read_killable+0x340/0x340 [ 137.237176][ T6672] ? setup_bdev_super+0x56b/0x660 [ 137.242548][ T6672] get_tree_bdev+0x3e5/0x520 [ 137.247146][ T6672] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 137.253386][ T6672] ? setup_bdev_super+0x660/0x660 [ 137.258423][ T6672] ? apparmor_capable+0x137/0x1a0 [ 137.263486][ T6672] ? bpf_lsm_capable+0x9/0x10 [ 137.268177][ T6672] ? security_capable+0x89/0xb0 [ 137.273120][ T6672] vfs_get_tree+0x8c/0x280 [ 137.277546][ T6672] do_new_mount+0x24a/0xa40 [ 137.282051][ T6672] __se_sys_mount+0x2e7/0x3d0 [ 137.286730][ T6672] ? __x64_sys_mount+0xc0/0xc0 [ 137.291493][ T6672] ? __x64_sys_mount+0x20/0xc0 [ 137.296272][ T6672] do_syscall_64+0x55/0xb0 [ 137.300709][ T6672] ? clear_bhb_loop+0x40/0x90 [ 137.305379][ T6672] ? clear_bhb_loop+0x40/0x90 [ 137.310056][ T6672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.315957][ T6672] RIP: 0033:0x7f0a8559f10a [ 137.320411][ T6672] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.340024][ T6672] RSP: 002b:00007f0a8640fe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 137.348442][ T6672] RAX: ffffffffffffffda RBX: 00007f0a8640fee0 RCX: 00007f0a8559f10a [ 137.356415][ T6672] RDX: 0000200000000580 RSI: 0000200000000140 RDI: 00007f0a8640fea0 [ 137.364417][ T6672] RBP: 0000200000000580 R08: 00007f0a8640fee0 R09: 0000000000800718 [ 137.372399][ T6672] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 137.380399][ T6672] R13: 00007f0a8640fea0 R14: 00000000000004a2 R15: 00002000000003c0 [ 137.388382][ T6672] [ 137.391639][ T6672] Kernel Offset: disabled [ 137.396018][ T6672] Rebooting in 86400 seconds..