last executing test programs: 17m31.286207361s ago: executing program 32 (id=22): syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) 17m24.81901983s ago: executing program 33 (id=38): socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) read$FUSE(r0, &(0x7f0000004540)={0x2020}, 0x2020) 17m20.100623083s ago: executing program 34 (id=54): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private=0xa010100, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x1, 0x0, 0xa}, {0x7, 0x9, 0x100000003, 0x2, 0x0, 0x0, 0xffffdffffffffffd}, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0x0, 0x102}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x2}, 0x1c) 16m14.524143037s ago: executing program 35 (id=291): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES32=r2, @ANYRES16=r2], 0x44}}, 0x0) 15m48.596258383s ago: executing program 36 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r2) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0xb, &(0x7f0000000280)={0x8, 0x0, 0x4}) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180073d2d1c2263905ec90ac7dbad40000000000002400000024000000030000000000000000000002020000000100000000000008030000000100"], 0x0, 0x3f}, 0x20) 15m30.723732718s ago: executing program 37 (id=411): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$tcp_mem(r1, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) 14m32.514468456s ago: executing program 6 (id=488): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1eb2, 0x0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 14m29.325666589s ago: executing program 6 (id=491): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040), 0x3b) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) 14m25.112620893s ago: executing program 6 (id=497): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000000)=ANY=[], 0x10, 0x614, &(0x7f0000001280)="$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") r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 14m24.330280148s ago: executing program 6 (id=500): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mmap(&(0x7f0000467000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0xa2bd0000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c40)={0x44, 0x0, &(0x7f0000001180)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000b40)='?'}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01}, 0x78}}, 0x0) 14m20.312414249s ago: executing program 6 (id=503): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000f40)="98c65fb44864549cb39f3af32539a8ebe6a5b8dd77f0160e1d6939b6ef7738beac3a2b9666623cf2dd16cf08e6faa6b3c0c45e3376db677e4973b6a4c98771ae", 0x40}, {&(0x7f0000001000)}], 0x2}}], 0x1, 0x84) 14m11.276132348s ago: executing program 6 (id=515): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) utime(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x74b, 0x3}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x19101204, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x80, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x4, {0x8001, 0xcd, 0x0, {0xfffffffffffffffe, 0x642, 0x10, 0x7ff, 0x4, 0x2, 0xf79c000, 0x8, 0x20b, 0x6000, 0x578, 0x0, r2, 0xfd95, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) 14m10.613082971s ago: executing program 38 (id=515): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) utime(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x74b, 0x3}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x19101204, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x80, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78, 0x0, 0x4, {0x8001, 0xcd, 0x0, {0xfffffffffffffffe, 0x642, 0x10, 0x7ff, 0x4, 0x2, 0xf79c000, 0x8, 0x20b, 0x6000, 0x578, 0x0, r2, 0xfd95, 0xc}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) 13m27.013092938s ago: executing program 3 (id=516): mlockall(0x7) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x9, 0x0, 0x6}) io_setup(0x4, &(0x7f0000000340)) 13m24.91491455s ago: executing program 3 (id=571): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000001e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, r7, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 13m20.032347877s ago: executing program 3 (id=578): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 13m18.022865207s ago: executing program 3 (id=582): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 13m17.211748103s ago: executing program 3 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x5120400, 0x0, 0xffffffffffffff48, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xf}, 0x8) shutdown(r2, 0x1) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) 13m16.310760131s ago: executing program 3 (id=585): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) 13m14.426595679s ago: executing program 39 (id=585): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0x3], [{0x0, 0xffffffff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x100000c}, {0xffffffff}, {0x0, 0x4}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x10000}, {0x0, 0x82}, {0x1000000, 0x6}, {0x1, 0xffffffff}, {0x3, 0x8}], 0xc}) 10m55.02107673s ago: executing program 9 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) 10m54.800558045s ago: executing program 9 (id=774): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYBLOB="01000000000008001c001280"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x16, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, 0x0, 0x8008000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x81, 0x40000) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) epoll_create1(0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$HIDIOCGUCODE(r8, 0xc018480d, &(0x7f0000000000)={0x3, 0xffffffff, 0xffffffff, 0xfbe, 0x100, 0x5}) 10m52.908059193s ago: executing program 9 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000500)={"6d121c3063643fd6a39710e95e9cf24068ab311182f7545d0f5b3db63e00", 0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x4d, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000280)='.\x00', 0x0, 0xc) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x66c00) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r6, r7, 0x3, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000540)={"217c033fcd080fbb3114b267e88a8c300aa7040c89d1bfc37554db161b35fcb0"}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r8) 10m47.50045562s ago: executing program 9 (id=781): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffffff, r2, 0x0, 0x0, 0x0) 10m41.623277137s ago: executing program 9 (id=787): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_emit_ethernet(0x3e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) 10m39.409825511s ago: executing program 9 (id=789): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace(0x4207, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000000005, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'dvmrp1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x325) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000040), &(0x7f0000000100)=0x4) 10m37.287326603s ago: executing program 40 (id=789): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace(0x4207, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200000000000005, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'dvmrp1\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x325) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) fchown(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x13, &(0x7f0000000040), &(0x7f0000000100)=0x4) 9m47.761561168s ago: executing program 8 (id=830): syz_open_dev$tty1(0xc, 0x4, 0x1) symlink(0x0, &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) mlockall(0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1c040, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) mlockall(0x1) write(r0, &(0x7f0000000640)='u', 0x1) r1 = syz_open_pts(r0, 0xc0840) r2 = dup(r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x6a280) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000340)=@x86={0x2, 0x92, 0xf8, 0x0, 0x400, 0x10, 0x5, 0x7, 0x9, 0x4, 0x6, 0xb, 0x0, 0x9, 0x4, 0xff, 0x0, 0x7, 0x6a, '\x00', 0x40, 0x2000000020000}) io_setup(0x202, &(0x7f0000000200)) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180)) 9m43.006961533s ago: executing program 8 (id=835): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000200)='#$*\x00', r0) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000140)='#$*\x00', &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0xbc1, 0xc0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x8000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x3, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7fffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = epoll_create1(0x80000) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/keys\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r8, 0x7003) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000)) epoll_wait(r7, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1555555555555696, 0x86f2) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000240)) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x2) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x4, 0x8, 0x9, 0x8000, 0x2}) 9m40.076940071s ago: executing program 8 (id=840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_pts(0xffffffffffffffff, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 9m36.533181861s ago: executing program 8 (id=844): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1eb2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) 9m34.783225796s ago: executing program 8 (id=845): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYBLOB="01000000000008001c001280"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x16, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, 0x0, 0x8008000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x81, 0x40000) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) epoll_create1(0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002640)={0x9, {"a2e3ad214fc752f91b2547f70e06d038e7ff7fc6e5539b325d078b089b3b083872090890e0878f0e1ac6e7049b3367959b669a240d5b67f3988f7e0319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d606495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07840900000000000000f5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45259f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a605fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96e8664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94195413cd091c0922f93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000fa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0xfa0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x3, 0xffffffff, 0xffffffff, 0xfbe, 0x100, 0x5}) 9m32.415747243s ago: executing program 8 (id=846): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x240048d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001ba00)=""/102400, 0x19000) pipe(0x0) close(0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x20000023896) 9m16.995371999s ago: executing program 41 (id=846): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x240048d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001ba00)=""/102400, 0x19000) pipe(0x0) close(0xffffffffffffffff) sendfile(r0, r1, 0x0, 0x20000023896) 3m20.225990684s ago: executing program 1 (id=1227): clock_adjtime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r1 = shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil) r2 = shmat(r1, &(0x7f0000fec000/0x4000)=nil, 0x600c) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40082) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000000c0)={0xfffffff7, 0x6, 0xfffffffe}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) shmdt(r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0xac, 0x2, 0xf, 0xb}, {0x6, 0x6, 0xf, 0x5}]}) 3m19.283807512s ago: executing program 1 (id=1229): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYBLOB="01000000000008001c001280"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x16, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002640)={0x9, {"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", 0x1000}}, 0xfa0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000000)={0x3, 0xffffffff, 0xffffffff, 0xfbe, 0x100, 0x5}) 3m17.944373439s ago: executing program 1 (id=1231): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x88, &(0x7f0000000000)={[{@errors_continue}, {@quota}, {@block_validity}, {@nogrpid}, {@lazytime}, {@auto_da_alloc}]}, 0x3, 0x453, &(0x7f0000000ec0)="$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") r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) signalfd(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={'vlan0\x00', @multicast}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f0000000200)={{}, 'port1\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x0, 0x7188, 0x3, 0x1, 0x4, 0x5}}, {0x1e}}]}, @TCA_RATE={0x6, 0x5, {0x7, 0x4f}}]}, 0x60}}, 0x44080) 3m13.816984541s ago: executing program 1 (id=1236): sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0x104) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003"], 0xdc}}, 0x0) 3m9.074424216s ago: executing program 1 (id=1239): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYBLOB="01000000000008001c001280"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000021c0)={0x16, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002640)={0x9, {"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", 0x1000}}, 0xfa0) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f0000000000)={0x3, 0xffffffff, 0xffffffff, 0xfbe, 0x100, 0x5}) 3m7.534901847s ago: executing program 1 (id=1241): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa6", 0x10}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_open_dev$loop(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x94f, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) select(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040051) r2 = getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r5, 0x4, 0x0) 2m51.604994923s ago: executing program 42 (id=1241): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x24, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x82}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa6", 0x10}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_open_dev$loop(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x94f, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) select(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040051) r2 = getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') lseek(r5, 0x4, 0x0) 2m9.740629246s ago: executing program 5 (id=1291): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2f, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_a, @device_a, @initial, {0x2, 0x2}, @value=@ver_80211n={0x0, 0x49c3, 0x2, 0x1, 0x0, 0x3, 0x1}}, 0x6, @random=0xd1, 0x2100, @void, @void, @val={0x3, 0x1, 0xa1}, @void, @void, @void, @void, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m7.746268565s ago: executing program 5 (id=1293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000000)=0x6, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x5, 0x0) semop(0x0, &(0x7f0000000100)=[{0x3, 0x7fff, 0x800}], 0x1f4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m6.00175926s ago: executing program 5 (id=1294): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xfd, 0x2c3, &(0x7f0000000440)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2m0.784269274s ago: executing program 5 (id=1300): r0 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xc, 0x4, 0x268, 0xffffffff, 0x130, 0x98, 0x98, 0x98, 0xffffffff, 0x1d0, 0x98, 0x1d0, 0x98, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 1m58.237689704s ago: executing program 5 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000000)=0x6, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x5, 0x0) semop(0x0, &(0x7f0000000100)=[{0x3, 0x7fff, 0x800}], 0x1f4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m56.009056129s ago: executing program 5 (id=1305): syz_open_dev$tty1(0xc, 0x4, 0x1) symlink(0x0, &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) mlockall(0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x1c040, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "4bad897e0716799a64be03008b78a3cddf00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) mlockall(0x1) write(r0, &(0x7f0000000640)='u', 0x1) r1 = syz_open_pts(r0, 0xc0840) r2 = dup(r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x6a280) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000340)=@x86={0x2, 0x92, 0xf8, 0x0, 0x400, 0x10, 0x5, 0x7, 0x9, 0x4, 0x6, 0xb, 0x0, 0x9, 0x4, 0xff, 0x0, 0x7, 0x6a, '\x00', 0x40, 0x2000000020000}) io_setup(0x202, &(0x7f0000000200)) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180)) 1m39.902829229s ago: executing program 43 (id=1305): syz_open_dev$tty1(0xc, 0x4, 0x1) symlink(0x0, &(0x7f00000059c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x18) mlockall(0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x1c040, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121381, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "4bad897e0716799a64be03008b78a3cddf00"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) mlockall(0x1) write(r0, &(0x7f0000000640)='u', 0x1) r1 = syz_open_pts(r0, 0xc0840) r2 = dup(r1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x6a280) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000340)=@x86={0x2, 0x92, 0xf8, 0x0, 0x400, 0x10, 0x5, 0x7, 0x9, 0x4, 0x6, 0xb, 0x0, 0x9, 0x4, 0xff, 0x0, 0x7, 0x6a, '\x00', 0x40, 0x2000000020000}) io_setup(0x202, &(0x7f0000000200)) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180)) 34.446067638s ago: executing program 0 (id=1381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x76b4, 0x800, 0x0, 0xffffffff}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-avx)\x00'}, 0x58) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000080)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x7}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x41, 0xb, 0xff, 0x8, 0x7, 0xb}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x4, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0xc000000a, 0x0, 0x0, 0x2024, 0xffffffffffffffff, 0x1500, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 32.573238665s ago: executing program 7 (id=1383): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000200)=0x80000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe85fd000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) 25.810776519s ago: executing program 2 (id=1387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:'], 0xa) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000340)={[{@utf8}, {@nocompress, 0x0}, {@check_relaxed}, {@hide}, {@map_off}, {@uid, 0x41}, {@session={'session', 0x3d, 0x37}}, {@unhide}, {@unhide}, {}, {@map_off}, {@hide}, {}, {@gid}]}, 0x2, 0x6c6, &(0x7f0000000840)="$eJzs3V1vG1kdx/HfOI7jplCtAFVV1YfTlpVSUdyxs00VFYk143EyYHusGQclEtKqbJNVVacLbZFobpbcACstbwBxwwVc8CKQuN53wQ0CaQV3SMuF0Tz5IbbjZNdtd7ffT7Tr8Zn/nPOfGdd/TeI5FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUbLtsqeG1trbNdE4t8Jvp8v964+uT3hZ1M1m4OXNcyYr+U7GoC0nThW8NVp+P/nddl5Jnl1SMHoo6OHv+jXvfzOey7Y9J+LPQaTt8+vzg0f1ud/fJCWIXdOruXyXlsqUz6TmZELThtrzQ95rVDdd4oW/W19bs25v10NS9hhvuhB23aZzAzXX8wKw4N015fX3VuKUdf6u1Uas23Kzx7ncrtr1mfriUnGhJpdDZ9BoNr7URx0Sro5i75qOfJAFutWnM3sPu7uqsPYmCyicJqswKqtiVSrlcqZTX7qzfuWvb+eGGnKS8HbHsPo1tMvcXLb5k5vPGDcxBLqr/f7ekhopqaUvbMhN/HNUUyFdzyvpUVv/fvO0eO+5w/c+q/AXp++nqi4rr/5Xk2ZVp9X9KLkYm3mDSGmtS+9lp0dN+FuOMjJ7quQ70SPfVVVe7enKqXqb+XJ1LLy/hZ0OuWvIUypenpqra0J++rrTFaF1rWpOtd7SpukIZ1eWpIVehdhSqIzd+RTkK5KqqjnwFMlqRo5syKmtd61qVkauSduRrSy1tqKaq/tvr9fb0MD7uq8fkqCyoPCVgaTiockxPo8X8D8rq/08/SF6ndt4+gvr/ekleB0vJw8fHxQBfAL30+n9YbvZmV19cRgAAAAAAYN6s+LfvVvy3+8uSeqp7Ddd+1WkBAAAAAIA5stRb0iVZ0fW/pMuyuP4HAAAAAOCrxorvsbMkLccf6rcGd0Kd5JcACy8hRQAAAAAA8DnFd/5fKUi9eNKKq7JOdf0PAAAAAAC+BH47NMd+Pptjt5f9WT8nKWwvWX/995KCReuwvf1ta78aranupzGf9rvKNqpftM6lE/XGDwVJ8TPHvWRdSibHTCfB7M87+MnerLn+reBIAoWF4Q6GdIYSsKKR1/LpM32ka8km19J55h8c5BSvSUZZrnsNt+T4jXtlVavnch13u/OLxw9/KQX9TzrsPezult59v/sgzuUwajrcjzr9YCSd3Fgu8cMgl2fxfAvxPReT9viM6tmQH7aay1Y8rp3t/4Kq+7nhgabs/5Exf63ryZm6vpzELh/0Z9yP9r8Y7X+5FJ+ykb0PFq1BFuWjez7pREzJohhncSOJubFyQ5V/JMv9s5Czit9ZkCql8XMwkkVlOIvZx8L6z9ixGMoifjjIvulgcCxWoyz+FnU0JYvV02UxdkYA4FXZ02XF70KXFU9i3q9CxbTuZuUhe1P7THVndnV/e7S6P/t9rxdvsCDl079NHDtKUdE7+ooV16FCskv5i4N32f47up3WlaKmvKPbn6O6RWP9ZfAdSGnaY1l82uv17pXjcX93pKr+cWS4sXHDRmUhOoS3n+3/LJ4AP/Le7nu7jyuV1TX7Ldu+U9FivBvpw4KoPQCAMbO/Y2dmhPWWriUR1x78681kaaTifaP/kYKS3tX76uqBbmVfIXB1cq/LQx9DuJVctWroqtWcf+NefLU2GlvWrfGrujSXuJYOxVb6sYvKNhmt1IPY1Rd8FgAAeLmuz6jDk+t/caT+39JKErFyceJ192gtT6+O+5f002LLs5N/e95HAwCA14MbfGItd35jBYHXfqe8vl6udjZdE/jOj0zg1TZc47U6buBsVlsbrmkHfsd3/IZpB1ryam5owq122w86pu4Hpu2H3nb8ze8m/er30G1WWx3PCdsNtxq6xvFbnarTMTUvdEx76wcNL9x0g3jjsO06Xt1zqh3Pb5nQ3woct2RM6LpDgV7NbXW8uhcttkw78JrVYMf82G9sNV1Tc0Mn8NodP+kwG8tr1f2gGXdbyvcmfV4AAIDXztPnB4/ud7u7T44unIkuzZOWQ02JGV8o6Onz6Ko8asmnq5gjCACAL5hBAT/FRsUXmBAAAAAAAAAAAAAAAAAAAAAAABgz+5a+Uy4sTrpZUOq3/Pxc2qJfaXCL4Vg/luadWLbw4QlicqftObsl4uDRx9NiCrp/pt+SHf7hmMO5n4tpC//8mnQ2blHSkp//WGeOObkvYuF7e8kRnRoTrZy4aql/LvIn+udQHGkpaGaGj/88ZVWv1+sdP9bS6DEsjOxg7rhB85KeFE59CgpjL1EAX1X/DwAA//9giDIu") 24.472254635s ago: executing program 2 (id=1388): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, 0x0, 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000440)=""/247, 0x26) tkill(r5, 0x7) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r8 = timerfd_create(0x0, 0x0) r9 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 22.7316552s ago: executing program 7 (id=1389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(0x0, 0x104) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b86080003"], 0xdc}}, 0x0) 22.252556019s ago: executing program 0 (id=1391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xffffffffffffffcd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xfffffffffffffdcd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) fchmod(0xffffffffffffffff, 0x4a) r2 = socket(0xa, 0x801, 0x0) socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x33, &(0x7f0000000180)={0x0, 0x58000005, 0x0, {[0xfffbfffffffffffc]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 22.252091179s ago: executing program 4 (id=1392): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, 0x0, 0x0) creat(0x0, 0x104) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003"], 0xdc}}, 0x0) 20.990890414s ago: executing program 0 (id=1393): r0 = fsopen(&(0x7f0000000b00)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x2000, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000500), r1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) socket$netlink(0x10, 0x3, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800808}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7f}, @CTA_STATUS={0x8}]}, 0x2c}}, 0xd4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) 19.831523517s ago: executing program 4 (id=1394): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1eb2, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1bb6, &(0x7f0000000440)={0x0, 0xc6e8, 0x0, 0x202, 0x3d7}, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x3, 0x0) io_uring_setup(0x7a12, &(0x7f0000000300)) 17.64183233s ago: executing program 2 (id=1395): r0 = syz_usb_connect$uac1(0x2, 0xb8, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) prlimit64(0x0, 0xa74f4d2231f8950a, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_targets\x00') io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r3, 0x1e, &(0x7f00000000c0)={r3}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x220}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 15.712311579s ago: executing program 7 (id=1396): r0 = socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000000980)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x1e) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000005440)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) 13.785785497s ago: executing program 0 (id=1397): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, 0x0, r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000440)={{0x2, 0x0, 0x1ff, 0x3, 0x9}, 0x1, 0x4}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000040)={{0x1, 0xdfaa}, 0x100, './file0\x00'}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "6c5b1acb23471e53a309d5202bdba2d8", 0x8}}}, 0x1a) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x2000090, &(0x7f0000000280)=ANY=[@ANYBLOB="dd"], 0x1, 0x1cd, &(0x7f0000000000)="$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") 11.950727683s ago: executing program 4 (id=1398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000000)={0x108, r4}, 0x0) 8.958416952s ago: executing program 2 (id=1399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x76b4, 0x800, 0x0, 0xffffffff}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha256-avx)\x00'}, 0x58) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000080)=0x9, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x15, 0x3, 0x2, 0x87}, {0x1000, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x7}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x41, 0xb, 0xff, 0x8, 0x7, 0xb}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x4, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0xc000000a, 0x0, 0x0, 0x2024, 0xffffffffffffffff, 0x1500, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0x8]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 7.640646358s ago: executing program 0 (id=1400): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0x1) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, 0x0) 7.58095342s ago: executing program 7 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xffffffffffffffcd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xfffffffffffffdcd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) fchmod(0xffffffffffffffff, 0x4a) r3 = socket(0xa, 0x801, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x33, &(0x7f0000000180)={0x0, 0x58000005, 0x0, {[0xfffbfffffffffffc]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xfffffffa, 0xc3, 0x6}, 0x3c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1dc}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 6.326373184s ago: executing program 7 (id=1402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) eventfd2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, 0x0, 0x0) creat(0x0, 0x104) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003"], 0xdc}}, 0x0) 4.286811535s ago: executing program 2 (id=1403): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, 0x0, 0x0}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r6, &(0x7f0000000440)=""/247, 0x26) tkill(r5, 0x7) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r8 = timerfd_create(0x0, 0x0) r9 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000100)) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 3.02975507s ago: executing program 7 (id=1404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1da38000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(0x0, 0x104) close(r3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b86080003"], 0xdc}}, 0x0) 2.98776669s ago: executing program 4 (id=1405): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 1.855952223s ago: executing program 2 (id=1406): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x593, &(0x7f0000000b80)="$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") timer_create(0x1, &(0x7f00000047c0)={0x0, 0x3b, 0x1, @thr={0x0, 0x0}}, &(0x7f0000004800)=0x0) timer_settime(r0, 0x0, &(0x7f0000004880)={{}, {0x77359400}}, &(0x7f00000048c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r1, 0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x206000, 0x0) syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001cc0)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,iocharset=default,anchor=00000000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c706172746974696f6e3d30303030303030303030303030303030303030322c756e64656c6574652c706172746974696f6e3d30303030303030303030303030303030303030312c756e686964652c001e066340c987db28915dbe6892bc3dce41ae76eaf528dc889820692d753009e30e567403a6c30e933de68a0a923eec1dccf226b58adb7d968bafe76628bceade8672fb893f87dc88", @ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="4728616e82f5b82e70f3e834f3354e60067530dd5481c7602ca5c084048320dca8eb0cac46c4bfe1408068eee0e31e4cb24d3e6ea468bdc26a70285b4af3434e41b06dab68f2b07b7b651ef2e9ee2b704cb0b87685ace28ff11e57682b14130c02d0a02d492ec1fc090545670e081b83e7cbb5c7eeef0e1c6caf2d276440193ff9425c7c056fee024f43be77f0daba402706546ec23105fb1842917df696a1b7cc48ee214882f8494ee8d3"], 0x1, 0xc5a, &(0x7f0000001040)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcVy9S+mYhXOqqbZBpBlIRRzC8CVuFIXpkiCpBrZSAumlx56CFAUPeTEojUKpGhgNEXQI9O6QHLxocipJ6KFjaDogSkCBCgQMJjZt+KSIm3ZJCVK/nxs8js7897sezPrGZrgmxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMTvv3Th5Km0xYYDD6AxAMB9cWnsKydPb3X/BwAeWVe2+/9/AAAAAAAAAAAAAABgv0hRxOORYvbSapqoXnfVL3YGbt0eHxndutqhVNU8UJUvv+qnTp85+4Xnhs/18mJn+j3q77ZPxStjVy40Xpy5OTvXnp9vTzbGpzvXZibb97yHndbf7Hh1ABo3X701ef36fOP0s2c2bL499O7gY0eHzg8/feKpXtnxkdHRsfUi9f7ytQ/dkK7tRngcjCJORIpnvvuT1IqIInZ+LOr399xvdqjqxPGqE+Mjo1VHpjqt6YVy4+XegSgiGn2Vmr1jtPW5iNrAfe3D9poRi2XzywYfL7s3Ntuaa12dajcut+YWOgudmenLqdvasj+NKOJciliKiJXBu3c3EEXUIsW3j6ymq/mpH9Vx+Hw1MHj7dhR72Md7ULazMRCxVDwE52wfG4wiXo4UP3vrWFzL15nqWvO5iJfL/H7EG2W+EJHKD8bZiHe2+BzxcKpFEX9Rnv/zq2myuh70risXv9r48vT1mb6yvevKB7w/3HWleED3h0Ob8v7Y59emehTRqq74q+nD/7ADAAAAAAAAAAAAAAAAwG47FEV8MlK89B9/XI0rjmpc+pHzw38w9Kv9Y8affJ/9lGWfjYjF4t7G5B7MAwMvp8spPeCxxB9l9SjiT/L4v2++T1mnCQAAAAAAAAAAAAAAAAAAYC8V8eNI8fzbx9JS9M8p3pm+0bjSujrVnRW2N/dvb870tbW1tUbqZjPnRM7FnEs5l3Ou5Iwi18/ZzDmRczHnUs7lnCs540Cun7OZcyLnYs6lnMs5V3JGLdfP2cw5kXMx51LO5ZwrOWOfzN0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAoKaKIX0SKb319NUWKiGbERHRzefBBtw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2mIr4XKRp/2LyzrhYRqfq361j57Ww0D5b58WgOl/lCNC/kbFVZa37zAbSfnRlIRfwoUgzW37xzwvP5H+i+uvMxiDe+sf7qU7VuHuhtHHp38LGjR84Pj37mye2W01YNOH6xM33rdmN8ZHR0rG91Lb/7x/vWDeX3LXan60TE/Guvv9qamvqbn0ZUC+25vObeF8qPwAev9TAupNpHpacWqoWo7YtmPJi+b1B/UBco9lR5/38nUvzu2//Zu+F37//1+JXuqzt3+Pj5n67f/5/fvKN7vP/XNtfL9//ynr7V/f/xvnXP559GBmoR9YWbswNHI+rzr71+onOzdaN9oz199uTJLw4Pf/HMyYGDEfXrnal239KuHC4AAAAAAAAAAAAAAACA+ycV8aVI0frRampExO1qvNbQ+eGnTzx1IA5U4602jNt+ZezKhcaLMzdn59rz8+3Jxvh059rMZPte365eDfcaHxndk868r0N73P5D9RdnZl+b69z4o4Uttx+uX7g6vzDXurb15jgURUSzf83xqsHjI6NVo6c6remq6uUtB9N/cAOpiP+KFNfONtJn87o8/n/zCP8N4/8XN+9oF8f/f+bw+vi/j/UVLd8zpSJ+Hil+5y+fjM9W7Twcdx2zXO7vIsXxc5/O5eJgWa7Xhu5zBbojA8uyP40U//SLjWV74yEfXy976gMd3IdAef6PRIrv/fl34jfzuo3Pf9j6/B/evKM9ev7DE33rDq8/r6A9N7/jrpPP/4lI8cLjb8ZvVWv+/z2f/9F79saxbuH153Ps0fn/9b51Q/l9f3u3Og8AAAAAAAAAAPAQG0hF/H2k+MFoLT2X193L3/9Nbt7RHv391yf61k1u+Pu/vVvY8UEFAAAAgH1iIBXx40hxY+HNO2OoN47/7hv/+Xvr4z9H0qat1e/5fq16bsBu/v6v31B+34mddxsAAAAAAAAAAAAAAAAAAAD2lZSKeC7Ppz5Rjeef3HY+9eVI8dL/PJPLpaNlud488EPV9/qlmekTF6amZuqx0Lo61W6Mzbautcu6T0SK1b/9dK77pWp+9d5889053tfnYp+LFKP/0CvbnYu9Nzf5E+tlT5VlPxYp/vsfN5bNU1PnuaOrsqfLsn8dKb72L72ya2vl1l7Zo+tlz5RlvxMpfvi1Rm+/h8v99p6P+on1ss9emyl2/6QAAAAAAAAAAAAAAAAAAADwkTOQivizSPG/N5fujOXP8/8P9L2svPGNvvn+N7ldzfM/VM3/v93yh5n/v3quwOJ27woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+mFEW8HilmL62m5cHydVf9Ymf61u3xkdGtqx1KVc0DVfnyq37q9JmzX3hu+Fwv37v+bvtkvDJ25ULjxZmbs3Pt+fn2ZGN8unNtZrJ9z3vYaf3NjlcHoHHz1VuT16/PN04/e2bD5ttD7w4+dnTo/PDTJ55ajIiy7PjI6OhYX5nawId+97ukbdYfjCL+KlI8892fpB8MRhSx82PxPp+dvXao6sTxqhPjI6NVR6Y6remFcuPl3oEoIhp9lZq9Y5TP216eix1pRpSfl6Js8PGye2OzrbnW1al243JrbqGz0JmZvpy6rS3704gizqWIpYhYGbx7dwNRxKuR4ttHVtO/DkYc6B2Hz18a+8rJ09u3o9jDPt6Dsp2NgYil4iE4Z/vYYBTxz5HiZ28di38bjKhF9ys+F/Fymd+PeCO65zuVH4yzEe9s8Tni4VSLIv6vPP/nV9Nbg+X1oHddufjVxpenr8/0le1dVx76+8P9tM+vTfUo4ofVFX81/bv/rgEAAAAAAAAAAAAAAAD2kSJ+I1I8//axVI0PvjOmuDN9o3GldXWqO6yvN/avN2Z6bW1trZG62cw5kXMx51LO5ZwrOaPI9XM2y6yvrU3k14s5l3Iu51zJGQdy/ZzNnBM5F3Mu5VzOuZIzarl+zmbOiZyLOZdyLudcyRn7ZOweAAAAAAAAAAAAAAAAAADwaCmqf1J86+uraW2wO7/0RHRz2Xygj7xfBgAA//8XrPrB") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$tcp_mem(r4, &(0x7f00000000c0)={0x1, 0x20, 0x2, 0x20, 0xfffffffffffffffd}, 0x48) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40086610, &(0x7f0000000000)={0x1, 0x0, 0x1000, 0x0, 0x0, 0xfffffffffffffda9, 0x0, 0x0}) 1.394757862s ago: executing program 0 (id=1407): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x0, {{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x9, 0x0, 0x5, 0x8, 0x0, 0x3, 0x8}, {0x0, 0x0, 0x40000000000, 0x9}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3d}}}, 0xf8}, 0x1, 0x0, 0x0, 0xc1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) 1.313659184s ago: executing program 4 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0xffffffffffffffcd) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xfffffffffffffdcd) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) fchmod(0xffffffffffffffff, 0x4a) r2 = socket(0xa, 0x801, 0x0) socket$igmp(0x2, 0x3, 0x2) rt_sigaction(0x33, &(0x7f0000000180)={0x0, 0x58000005, 0x0, {[0xfffbfffffffffffc]}}, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 0s ago: executing program 4 (id=1409): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, 0x0, r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x800) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000440)={{0x2, 0x0, 0x1ff, 0x3, 0x9}, 0x1, 0x4}) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, &(0x7f0000000040)={{0x1, 0xdfaa}, 0x100, './file0\x00'}) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "6c5b1acb23471e53a309d5202bdba2d8", 0x8}}}, 0x1a) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x2000090, &(0x7f0000000280)=ANY=[@ANYBLOB="dd"], 0x1, 0x1cd, &(0x7f0000000000)="$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") kernel console output (not intermixed with test programs): nal. Quota mode: none. [ 330.716018][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.827058][ T8315] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.889229][ T8026] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.896468][ T8026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.013296][ T8026] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.020569][ T8026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.063773][ T7735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.262396][ T8575] loop8: detected capacity change from 0 to 128 [ 331.309836][ T8577] netlink: 'syz.2.560': attribute type 4 has an invalid length. [ 331.315038][ T8575] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 331.336595][ T8579] loop9: detected capacity change from 0 to 8 [ 331.378255][ T8575] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.415073][ T8579] SQUASHFS error: Unable to read inode 0x11f [ 331.694074][ T8582] netlink: 'syz.2.560': attribute type 4 has an invalid length. [ 334.687988][ T8600] xt_cgroup: path and classid specified [ 336.296050][ T8609] loop8: detected capacity change from 0 to 16 [ 336.335294][ T8609] erofs: (device loop8): mounted with root inode @ nid 36. [ 336.428737][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 336.433061][ T8315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.497971][ T8609] erofs: (device loop8): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 336.566147][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 336.624026][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 336.666116][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 336.667297][ T8315] veth0_vlan: entered promiscuous mode [ 336.734507][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 336.758612][ T8315] veth1_vlan: entered promiscuous mode [ 336.786140][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 336.830012][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 336.849271][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 336.900069][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 336.916794][ T8315] veth0_macvtap: entered promiscuous mode [ 336.924382][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 336.962931][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 336.976022][ T8315] veth1_macvtap: entered promiscuous mode [ 337.017410][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 337.057483][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 337.068435][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.105742][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 337.113575][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.152868][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.169961][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 337.195946][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.197742][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 337.233841][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 337.243413][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 337.252558][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.252580][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.254729][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.327200][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.344805][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 337.359626][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 337.369370][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.392636][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.428043][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.468912][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.513726][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.535866][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.580521][ T8609] erofs: (device loop8): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 337.612846][ T8315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.620819][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 337.637091][ T8609] syz.8.565: attempt to access beyond end of device [ 337.637091][ T8609] loop8: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 337.641279][ T8315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.664989][ T8609] syz.8.565: attempt to access beyond end of device [ 337.664989][ T8609] loop8: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 337.680484][ T8621] loop9: detected capacity change from 0 to 256 [ 337.688161][ T8609] syz.8.565: attempt to access beyond end of device [ 337.688161][ T8609] loop8: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 337.710297][ T8315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.733572][ T8621] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 337.733854][ T8609] syz.8.565: attempt to access beyond end of device [ 337.733854][ T8609] loop8: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 337.741357][ T8315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.770092][ T8609] syz.8.565: attempt to access beyond end of device [ 337.770092][ T8609] loop8: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 337.790829][ T8621] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 337.855652][ T8621] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 337.863714][ T8609] syz.8.565: attempt to access beyond end of device [ 337.863714][ T8609] loop8: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 337.895137][ T8609] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress 1919 in[52, 4044] out[4055] [ 337.959928][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 338.016738][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 338.151359][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 338.387229][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 83 @ nid 36 [ 338.631211][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 338.665488][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 338.715408][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 338.768691][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.795667][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.829862][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 338.840022][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 338.886120][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 338.896468][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 338.913636][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 75 @ nid 36 [ 338.923073][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 338.935969][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 338.946638][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 338.959549][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 338.981258][ T3545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.001680][ T3545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.019953][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 340.805525][ T8634] loop9: detected capacity change from 0 to 2048 [ 341.623077][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 341.623378][ T8634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.641953][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 341.669489][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 341.681507][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 341.692409][ T28] audit: type=1800 audit(1759032762.984:11): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.567" name="file1" dev="loop9" ino=1415 res=0 errno=0 [ 341.723872][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 341.734160][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 341.804725][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 341.914256][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 50 @ nid 36 [ 341.952595][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 341.969991][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 341.994222][ T8609] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 342.023973][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 342.049477][ T8609] erofs: (device loop8): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 342.092180][ T8609] syz.8.565: attempt to access beyond end of device [ 342.092180][ T8609] loop8: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 342.118609][ T8643] loop9: detected capacity change from 0 to 1024 [ 342.288136][ T8609] syz.8.565: attempt to access beyond end of device [ 342.288136][ T8609] loop8: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 342.917523][ T8643] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.017113][ T8609] syz.8.565: attempt to access beyond end of device [ 343.017113][ T8609] loop8: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 343.033948][ T8643] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.084788][ T8609] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress 1919 in[52, 4044] out[5297] [ 344.040141][ T7735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.612280][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 351.846716][ T8714] loop9: detected capacity change from 0 to 1024 [ 352.675295][ T8688] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 352.724415][ T3545] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.240874][ T3545] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.469110][ T3545] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.666511][ T3545] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.220000][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.236796][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.254373][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.263246][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.273368][ T5805] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 355.281857][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.360890][ T8744] loop9: detected capacity change from 0 to 128 [ 355.369070][ T8744] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 355.387326][ T8744] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 357.794837][ T5809] Bluetooth: hci1: command tx timeout [ 359.689452][ T8739] chnl_net:caif_netlink_parms(): no params data found [ 359.833599][ T5809] Bluetooth: hci1: command tx timeout [ 360.001046][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.018745][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.028548][ T8739] bridge_slave_0: entered allmulticast mode [ 360.037283][ T8739] bridge_slave_0: entered promiscuous mode [ 360.061624][ T8786] loop8: detected capacity change from 0 to 512 [ 360.085577][ T3545] hsr_slave_0: left promiscuous mode [ 360.111830][ T3545] hsr_slave_1: left promiscuous mode [ 360.135089][ T8786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.164761][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.172241][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.199387][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.210618][ T8786] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.249760][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.274480][ T3545] bridge_slave_1: left allmulticast mode [ 360.301361][ T8786] EXT4-fs error (device loop8): ext4_do_update_inode:5230: inode #2: comm syz.8.591: corrupted inode contents [ 360.323620][ T3545] bridge_slave_1: left promiscuous mode [ 360.329557][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.356357][ T8786] EXT4-fs error (device loop8): ext4_dirty_inode:6106: inode #2: comm syz.8.591: mark_inode_dirty error [ 360.372042][ T3545] bridge_slave_0: left allmulticast mode [ 360.378359][ T3545] bridge_slave_0: left promiscuous mode [ 360.389363][ T8786] EXT4-fs error (device loop8): ext4_do_update_inode:5230: inode #2: comm syz.8.591: corrupted inode contents [ 360.392710][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.420312][ T8786] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #2: comm syz.8.591: mark_inode_dirty error [ 360.451557][ T8786] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #18: comm syz.8.591: directory missing '.' [ 360.471075][ T3545] veth1_macvtap: left promiscuous mode [ 360.477172][ T3545] veth0_macvtap: left promiscuous mode [ 360.483161][ T3545] veth1_vlan: left promiscuous mode [ 360.490218][ T3545] veth0_vlan: left promiscuous mode [ 360.538740][ T7555] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.637021][ T8803] loop8: detected capacity change from 0 to 1024 [ 360.720971][ T8803] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.759493][ T8803] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.964019][ T5837] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 361.216836][ T5837] usb 10-1: config 0 has an invalid interface number: 168 but max is 0 [ 361.338081][ T5837] usb 10-1: config 0 has no interface number 0 [ 361.402308][ T5837] usb 10-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 361.551416][ T5837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.687785][ T5837] usb 10-1: config 0 descriptor?? [ 361.739439][ T7555] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.905003][ T5809] Bluetooth: hci1: command tx timeout [ 361.941984][ T5809] Bluetooth: hci0: Malformed LE Event: 0x0d [ 361.945241][ T5837] usb 10-1: string descriptor 0 read error: -71 [ 362.002681][ T5837] usb-storage 10-1:0.168: USB Mass Storage device detected [ 362.034524][ T5837] usb-storage 10-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 362.097141][ T5837] usb 10-1: USB disconnect, device number 3 [ 362.439575][ T3545] team0 (unregistering): Port device team_slave_1 removed [ 362.492055][ T3545] team0 (unregistering): Port device team_slave_0 removed [ 362.569039][ T3545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.628822][ T3545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.769277][ T8820] loop8: detected capacity change from 0 to 128 [ 362.797010][ T8820] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 362.842656][ T8820] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 363.846143][ T8822] hub 9-0:1.0: USB hub found [ 363.868619][ T8822] hub 9-0:1.0: 1 port detected [ 363.983591][ T5809] Bluetooth: hci1: command tx timeout [ 364.108349][ T5837] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 364.293982][ T5837] usb 10-1: Using ep0 maxpacket: 16 [ 364.306081][ T5837] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.319492][ T5837] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 364.381286][ T3545] bond0 (unregistering): Released all slaves [ 364.388030][ T5837] usb 10-1: New USB device found, idVendor=0731, idProduct=2003, bcdDevice=7d.89 [ 364.442891][ T5837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.452719][ T5837] usb 10-1: Product: syz [ 364.462917][ T5837] usb 10-1: Manufacturer: syz [ 364.469073][ T5837] usb 10-1: SerialNumber: syz [ 364.498843][ T5837] usb 10-1: config 0 descriptor?? [ 364.545432][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.553382][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.562346][ T8739] bridge_slave_1: entered allmulticast mode [ 364.576934][ T8739] bridge_slave_1: entered promiscuous mode [ 364.589908][ T8814] netlink: 'syz.2.598': attribute type 298 has an invalid length. [ 367.735341][ T8739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.766327][ T8739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.990415][ T8739] team0: Port device team_slave_0 added [ 372.064886][ T8739] team0: Port device team_slave_1 added [ 372.208954][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.223320][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.282009][ T8739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.346658][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.364173][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.453670][ T8739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.662793][ T8739] hsr_slave_0: entered promiscuous mode [ 372.682521][ T8739] hsr_slave_1: entered promiscuous mode [ 372.703956][ T8739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.715158][ T8739] Cannot create hsr debugfs directory [ 373.123148][ T5803] usb 10-1: USB disconnect, device number 4 [ 373.624910][ T8877] loop9: detected capacity change from 0 to 16 [ 373.810200][ T8877] erofs: (device loop9): mounted with root inode @ nid 36. [ 374.473710][ T8877] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 374.557378][ T8877] erofs: (device loop9): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 374.630559][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 374.763987][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 374.786297][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 374.795869][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 374.806614][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 375.921975][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 376.423658][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 376.433065][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 376.451665][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 378.009014][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 378.031159][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 378.043046][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 378.209894][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 26 @ nid 36 [ 378.219614][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 378.229435][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 378.276231][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 378.296273][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 378.348147][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 378.376024][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 378.406170][ T8884] erofs: (device loop9): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 378.443626][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 378.471026][ T8884] syz.9.611: attempt to access beyond end of device [ 378.471026][ T8884] loop9: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 378.499650][ T8884] syz.9.611: attempt to access beyond end of device [ 378.499650][ T8884] loop9: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 378.535993][ T8884] syz.9.611: attempt to access beyond end of device [ 378.535993][ T8884] loop9: rw=524288, sector=16, nr_sectors = 8 limit=16 [ 378.572459][ T8884] syz.9.611: attempt to access beyond end of device [ 378.572459][ T8884] loop9: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 378.604064][ T8884] syz.9.611: attempt to access beyond end of device [ 378.604064][ T8884] loop9: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 378.634532][ T8884] syz.9.611: attempt to access beyond end of device [ 378.634532][ T8884] loop9: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 378.670781][ T8884] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 1919 in[52, 4044] out[4055] [ 378.701837][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 378.738412][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 378.769092][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 378.791906][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.798914][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.809369][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 83 @ nid 36 [ 378.839844][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 378.909003][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 378.941069][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 378.970768][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 379.010955][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 379.056960][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 379.083710][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 379.115978][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 75 @ nid 36 [ 379.144176][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 379.175087][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 379.197084][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 379.208201][ T8739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.226004][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 379.238898][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 379.252355][ T8739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.259579][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 379.273278][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 379.289791][ T8739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.300096][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 379.322218][ T8739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 379.347357][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 379.374060][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 379.383329][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 379.418997][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 379.443000][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 50 @ nid 36 [ 379.463685][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 379.498136][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 379.517809][ T8884] erofs: (device loop9): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 379.550391][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 379.573689][ T8884] erofs: (device loop9): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 379.583319][ T8884] syz.9.611: attempt to access beyond end of device [ 379.583319][ T8884] loop9: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 379.611419][ T8739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.649724][ T8884] syz.9.611: attempt to access beyond end of device [ 379.649724][ T8884] loop9: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 379.679601][ T8739] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.695741][ T8884] syz.9.611: attempt to access beyond end of device [ 379.695741][ T8884] loop9: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 379.726176][ T8884] erofs: (device loop9): z_erofs_lz4_decompress_mem: failed to decompress 1919 in[52, 4044] out[5297] [ 379.782643][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.789850][ T8012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.835272][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.842574][ T8012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.194561][ T8953] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 382.372200][ T23] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 383.383149][ T8739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.454246][ T23] usb 9-1: device descriptor read/64, error -71 [ 383.550052][ T8739] veth0_vlan: entered promiscuous mode [ 383.592625][ T8739] veth1_vlan: entered promiscuous mode [ 383.939478][ T8739] veth0_macvtap: entered promiscuous mode [ 384.265171][ T8739] veth1_macvtap: entered promiscuous mode [ 384.402177][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.489791][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.513742][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.562960][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.603821][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.638601][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.675671][ T8739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.732247][ T8974] Driver unsupported XDP return value 0 on prog (id 90) dev N/A, expect packet loss! [ 384.750407][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.794933][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.826206][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.858494][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.881358][ T8739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.910349][ T8739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.925184][ T8979] loop8: detected capacity change from 0 to 1024 [ 384.965419][ T8739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.025853][ T8739] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.063131][ T8739] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.109583][ T8739] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.139504][ T8739] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.601020][ T8995] loop9: detected capacity change from 0 to 1024 [ 385.678526][ T8009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.833081][ T8009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.669360][ T8026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.755610][ T8026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.172701][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.400778][ T9013] loop0: detected capacity change from 0 to 512 [ 387.507154][ T9013] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 387.687148][ T9013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.798745][ T9013] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.170799][ T9013] netlink: 856 bytes leftover after parsing attributes in process `syz.0.586'. [ 388.478051][ T8739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.986682][ T9055] loop9: detected capacity change from 0 to 256 [ 392.068636][ T9055] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 397.155477][ T9076] loop9: detected capacity change from 0 to 2048 [ 399.687162][ T9096] loop0: detected capacity change from 0 to 128 [ 399.715006][ T9096] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 399.785812][ T9096] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 405.914858][ T9145] kvm: pic: non byte read [ 405.919658][ T9145] kvm: pic: non byte read [ 405.937566][ T9145] kvm: pic: non byte read [ 406.015366][ T9145] kvm: pic: non byte read [ 406.038818][ T9145] kvm: pic: non byte read [ 406.072581][ T9145] kvm: pic: non byte read [ 406.123623][ T9145] kvm: pic: non byte read [ 406.174898][ T9145] kvm: pic: non byte read [ 406.179847][ T9145] kvm: pic: non byte read [ 406.184808][ T9145] kvm: pic: non byte read [ 407.045627][ T9153] loop8: detected capacity change from 0 to 128 [ 407.068129][ T9153] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 407.119642][ T9153] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 416.806395][ T9199] loop9: detected capacity change from 0 to 1024 [ 416.829610][ T9199] EXT4-fs: inline encryption not supported [ 416.856736][ T9199] EXT4-fs: Ignoring removed nobh option [ 416.879147][ T9199] EXT4-fs: Ignoring removed bh option [ 416.903508][ T9199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 416.970531][ T9199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.311299][ T7735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.348245][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 418.023296][ T9226] netlink: 88 bytes leftover after parsing attributes in process `syz.8.673'. [ 423.057994][ T9241] loop0: detected capacity change from 0 to 128 [ 423.346080][ T28] audit: type=1800 audit(1759032844.664:12): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.681" name="file1" dev="loop0" ino=1048682 res=0 errno=0 [ 423.725956][ T9241] syz.0.681: attempt to access beyond end of device [ 423.725956][ T9241] loop0: rw=2049, sector=377, nr_sectors = 568 limit=128 [ 431.867813][ T9284] loop9: detected capacity change from 0 to 512 [ 433.660069][ T9284] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.811370][ T9284] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 434.009900][ T7735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.455946][ T9337] fuse: Bad value for 'fd' [ 441.204341][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.210708][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.910603][ T9348] loop0: detected capacity change from 0 to 128 [ 441.974726][ T9348] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 442.050792][ T9348] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 448.657776][ T9397] loop9: detected capacity change from 0 to 128 [ 448.691818][ T9397] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 448.764205][ T9397] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 451.019353][ T9414] fuse: Bad value for 'fd' [ 456.680705][ T9434] loop0: detected capacity change from 0 to 512 [ 456.803998][ T9434] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.720: corrupted in-inode xattr: overlapping e_value [ 456.873948][ T9434] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.720: couldn't read orphan inode 15 (err -117) [ 456.927716][ T9434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.020176][ T9439] loop8: detected capacity change from 0 to 1024 [ 457.095733][ T9439] EXT4-fs: inline encryption not supported [ 457.101738][ T9439] EXT4-fs: Ignoring removed nobh option [ 457.120311][ T8739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.153966][ T9439] EXT4-fs: Ignoring removed bh option [ 457.189336][ T9439] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 457.331325][ T9439] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.540876][ T7555] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.099990][ T9487] loop9: detected capacity change from 0 to 1024 [ 463.164697][ T9487] EXT4-fs: inline encryption not supported [ 463.170676][ T9487] EXT4-fs: Ignoring removed nobh option [ 463.227269][ T9487] EXT4-fs: Ignoring removed bh option [ 463.258778][ T9487] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 463.418548][ T9487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.454160][ T7735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.448495][ T9514] loop9: detected capacity change from 0 to 512 [ 467.578279][ T9514] EXT4-fs warning (device loop9): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 467.710242][ T9514] EXT4-fs (loop9): mount failed [ 469.350267][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.9.739'. [ 476.004361][ T9578] loop0: detected capacity change from 0 to 8 [ 476.011153][ T9578] squashfs: Unknown parameter 'Ý' [ 481.661390][ T9606] Bluetooth: hci1: command 0x0406 tx timeout [ 482.158277][ T9621] loop0: detected capacity change from 0 to 8 [ 482.165096][ T9621] squashfs: Unknown parameter 'Ý' [ 490.833922][ T9655] xt_limit: Overflow, try lower: 167772/2147483648 [ 490.883853][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 491.113921][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 491.156270][ T23] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 491.184058][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.229708][ T23] usb 1-1: config 0 has no interface number 0 [ 491.243631][ T23] usb 1-1: config 0 interface 52 has no altsetting 0 [ 491.271587][ T23] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 491.293885][ T23] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 491.313904][ T23] usb 1-1: Manufacturer: syz [ 491.327327][ T23] usb 1-1: config 0 descriptor?? [ 491.547437][ T9675] loop0: detected capacity change from 0 to 128 [ 491.725014][ T9675] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.779871][ T9675] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.026060][ T5837] usb 1-1: USB disconnect, device number 3 [ 492.407161][ T9697] loop8: detected capacity change from 0 to 8 [ 492.414022][ T9697] squashfs: Unknown parameter 'Ý' [ 493.397588][ T9693] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 493.871205][ T8739] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 496.124494][ T9722] loop0: detected capacity change from 0 to 8 [ 496.131379][ T9722] squashfs: Unknown parameter 'Ý' [ 501.694221][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.701104][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.633116][ T9779] loop9: detected capacity change from 0 to 1024 [ 506.730959][ T9779] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.855788][ T9779] loop9: detected capacity change from 1024 to 64 [ 506.887984][ T9779] syz.9.781: attempt to access beyond end of device [ 506.887984][ T9779] loop9: rw=2049, sector=226, nr_sectors = 2 limit=64 [ 506.901784][ T9779] EXT4-fs warning (device loop9): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 113) [ 506.913502][ T9779] Buffer I/O error on device loop9, logical block 113 [ 506.920911][ T9779] syz.9.781: attempt to access beyond end of device [ 506.920911][ T9779] loop9: rw=2049, sector=230, nr_sectors = 26 limit=64 [ 506.934817][ T9779] EXT4-fs warning (device loop9): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 115) [ 506.946073][ T9779] Buffer I/O error on device loop9, logical block 115 [ 506.952856][ T9779] Buffer I/O error on device loop9, logical block 116 [ 506.959617][ T9779] Buffer I/O error on device loop9, logical block 117 [ 506.966400][ T9779] Buffer I/O error on device loop9, logical block 118 [ 506.973183][ T9779] Buffer I/O error on device loop9, logical block 119 [ 506.980072][ T9779] Buffer I/O error on device loop9, logical block 120 [ 506.986860][ T9779] Buffer I/O error on device loop9, logical block 121 [ 506.993639][ T9779] Buffer I/O error on device loop9, logical block 122 [ 507.000582][ T9779] Buffer I/O error on device loop9, logical block 123 [ 507.007787][ T9779] syz.9.781: attempt to access beyond end of device [ 507.007787][ T9779] loop9: rw=2049, sector=258, nr_sectors = 2 limit=64 [ 507.021080][ T9779] EXT4-fs warning (device loop9): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 129) [ 507.033043][ T9779] syz.9.781: attempt to access beyond end of device [ 507.033043][ T9779] loop9: rw=2049, sector=258, nr_sectors = 30 limit=64 [ 507.046409][ T9779] EXT4-fs warning (device loop9): ext4_end_bio:357: I/O error 10 writing to inode 15 starting block 129) [ 507.206491][ T7735] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 507.273223][ T7735] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 507.314188][ T7735] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 507.393028][ T7735] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 507.437382][ T7735] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 507.494106][ T7735] EXT4-fs warning (device loop9): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 509.297999][ T7735] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.361226][ T9781] kmmpd-loop9: attempt to access beyond end of device [ 509.361226][ T9781] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 509.403483][ T9781] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 509.686158][ T9800] loop0: detected capacity change from 0 to 8 [ 509.693811][ T9800] squashfs: Unknown parameter 'Ý' [ 510.763522][ T9677] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 511.086344][ T3467] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.233807][ T9807] loop8: detected capacity change from 0 to 1024 [ 511.274620][ T9807] EXT4-fs: Ignoring removed mblk_io_submit option [ 511.408193][ T9807] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.467866][ T3467] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.649171][ T9807] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2244: inode #15: comm syz.8.786: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 511.713369][ T9807] EXT4-fs (loop8): Remounting filesystem read-only [ 512.063691][ T5809] Bluetooth: hci3: Malformed HCI Event [ 512.309461][ T3467] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.716766][ T7555] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.788701][ T3467] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.129051][ T9606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.150171][ T9606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.173774][ T9606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.188677][ T9606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.196616][ T9606] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 516.214095][ T9606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 518.305004][ T9606] Bluetooth: hci0: command tx timeout [ 519.451976][ T9865] loop8: detected capacity change from 0 to 256 [ 519.626276][ T9865] FAT-fs (loop8): Directory bread(block 64) failed [ 519.632940][ T9865] FAT-fs (loop8): Directory bread(block 65) failed [ 519.683877][ T9865] FAT-fs (loop8): Directory bread(block 66) failed [ 519.690478][ T9865] FAT-fs (loop8): Directory bread(block 67) failed [ 519.699936][ T9870] loop0: detected capacity change from 0 to 8 [ 519.735320][ T9870] SQUASHFS error: zlib decompression failed, data probably corrupt [ 519.743349][ T9870] SQUASHFS error: Failed to read block 0x9b: -5 [ 519.753255][ T9865] FAT-fs (loop8): Directory bread(block 68) failed [ 519.775399][ T9865] FAT-fs (loop8): Directory bread(block 69) failed [ 519.782277][ T9865] FAT-fs (loop8): Directory bread(block 70) failed [ 519.813752][ T9870] SQUASHFS error: Unable to read metadata cache entry [99] [ 519.821126][ T9870] SQUASHFS error: Unable to read inode 0x127 [ 519.845921][ T9865] FAT-fs (loop8): Directory bread(block 71) failed [ 519.852640][ T9865] FAT-fs (loop8): Directory bread(block 72) failed [ 519.871332][ T9865] FAT-fs (loop8): Directory bread(block 73) failed [ 519.900884][ T9833] chnl_net:caif_netlink_parms(): no params data found [ 521.379120][ T9606] Bluetooth: hci0: command tx timeout [ 522.555214][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.555214][ T8007] loop8: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 522.582800][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.582800][ T8007] loop8: rw=1, sector=1288, nr_sectors = 544 limit=256 [ 522.602200][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.602200][ T8007] loop8: rw=1, sector=1864, nr_sectors = 1792 limit=256 [ 522.622815][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.622815][ T8007] loop8: rw=1, sector=5032, nr_sectors = 32 limit=256 [ 522.648603][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.648603][ T8007] loop8: rw=1, sector=5128, nr_sectors = 32 limit=256 [ 522.662976][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.662976][ T8007] loop8: rw=1, sector=5192, nr_sectors = 32 limit=256 [ 522.677517][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.677517][ T8007] loop8: rw=1, sector=5352, nr_sectors = 160 limit=256 [ 522.714037][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.714037][ T8007] loop8: rw=1, sector=5544, nr_sectors = 224 limit=256 [ 522.761106][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.761106][ T8007] loop8: rw=1, sector=5800, nr_sectors = 128 limit=256 [ 522.824304][ T8007] kworker/u4:14: attempt to access beyond end of device [ 522.824304][ T8007] loop8: rw=1, sector=5960, nr_sectors = 256 limit=256 [ 523.160458][ T9833] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.208144][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.243693][ T9833] bridge_slave_0: entered allmulticast mode [ 523.258359][ T9833] bridge_slave_0: entered promiscuous mode [ 523.297122][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.680754][ T9606] Bluetooth: hci0: command tx timeout [ 524.724427][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.742215][ T9833] bridge_slave_1: entered allmulticast mode [ 524.780198][ T9833] bridge_slave_1: entered promiscuous mode [ 525.180863][ T3467] hsr_slave_0: left promiscuous mode [ 525.204453][ T3467] hsr_slave_1: left promiscuous mode [ 525.244263][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.251752][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.300006][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.323759][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.344323][ T3467] bridge_slave_1: left allmulticast mode [ 525.350030][ T3467] bridge_slave_1: left promiscuous mode [ 525.373764][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.387858][ T3467] bridge_slave_0: left allmulticast mode [ 525.403504][ T3467] bridge_slave_0: left promiscuous mode [ 525.409320][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.575450][ T3467] veth1_macvtap: left promiscuous mode [ 525.581086][ T3467] veth0_macvtap: left promiscuous mode [ 525.606444][ T3467] veth1_vlan: left promiscuous mode [ 525.629068][ T3467] veth0_vlan: left promiscuous mode [ 527.966174][ T9606] Bluetooth: hci0: command tx timeout [ 535.360181][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 535.556950][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 535.704152][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.857614][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.308700][ T3467] bond0 (unregistering): Released all slaves [ 541.598447][ T9833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.657106][ T9833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.922806][ T9833] team0: Port device team_slave_0 added [ 542.016390][ T9833] team0: Port device team_slave_1 added [ 542.767505][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.783682][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.869782][ T9833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.904066][ T9833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.911172][ T9833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.089293][ T9833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.568702][ T9833] hsr_slave_0: entered promiscuous mode [ 544.614762][ T9833] hsr_slave_1: entered promiscuous mode [ 544.626840][ T9988] loop0: detected capacity change from 0 to 256 [ 544.653789][ T9833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.661598][ T9833] Cannot create hsr debugfs directory [ 544.869518][ T9988] FAT-fs (loop0): Directory bread(block 64) failed [ 544.937729][ T9988] FAT-fs (loop0): Directory bread(block 65) failed [ 544.963869][ T9988] FAT-fs (loop0): Directory bread(block 66) failed [ 544.970478][ T9988] FAT-fs (loop0): Directory bread(block 67) failed [ 545.164090][ T9988] FAT-fs (loop0): Directory bread(block 68) failed [ 545.170711][ T9988] FAT-fs (loop0): Directory bread(block 69) failed [ 545.211175][ T9988] FAT-fs (loop0): Directory bread(block 70) failed [ 545.858037][ T9988] FAT-fs (loop0): Directory bread(block 71) failed [ 545.875381][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 545.908489][ T9988] FAT-fs (loop0): Directory bread(block 72) failed [ 546.014302][ T9988] FAT-fs (loop0): Directory bread(block 73) failed [ 547.915657][ T8014] bio_check_eod: 18 callbacks suppressed [ 547.915675][ T8014] kworker/u4:17: attempt to access beyond end of device [ 547.915675][ T8014] loop0: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 548.012986][ T8014] kworker/u4:17: attempt to access beyond end of device [ 548.012986][ T8014] loop0: rw=1, sector=1288, nr_sectors = 544 limit=256 [ 548.087877][ T8014] kworker/u4:17: attempt to access beyond end of device [ 548.087877][ T8014] loop0: rw=1, sector=1864, nr_sectors = 1952 limit=256 [ 548.181682][ T8014] kworker/u4:17: attempt to access beyond end of device [ 548.181682][ T8014] loop0: rw=1, sector=5672, nr_sectors = 4088 limit=256 [ 548.314194][ T8014] kworker/u4:17: attempt to access beyond end of device [ 548.314194][ T8014] loop0: rw=1, sector=9760, nr_sectors = 4096 limit=256 [ 548.424782][ T8014] kworker/u4:17: attempt to access beyond end of device [ 548.424782][ T8014] loop0: rw=1, sector=13856, nr_sectors = 4096 limit=256 [ 550.169613][ T8014] kworker/u4:17: attempt to access beyond end of device [ 550.169613][ T8014] loop0: rw=1, sector=17952, nr_sectors = 6896 limit=256 [ 550.268716][ T8014] kworker/u4:17: attempt to access beyond end of device [ 550.268716][ T8014] loop0: rw=1, sector=24848, nr_sectors = 8192 limit=256 [ 550.400402][ T8014] kworker/u4:17: attempt to access beyond end of device [ 550.400402][ T8014] loop0: rw=1, sector=33040, nr_sectors = 760 limit=256 [ 550.478238][ T8014] kworker/u4:17: attempt to access beyond end of device [ 550.478238][ T8014] loop0: rw=1, sector=3816, nr_sectors = 1832 limit=256 [ 552.727508][ T9833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.795928][ T9833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.856387][ T9833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.942851][ T9833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 555.079946][ T9833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.208278][ T9833] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.277915][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.285159][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.351055][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.358349][ T8023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.260896][ T9833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.546823][ T9833] veth0_vlan: entered promiscuous mode [ 559.607265][ T9833] veth1_vlan: entered promiscuous mode [ 559.765484][ T9833] veth0_macvtap: entered promiscuous mode [ 559.836692][ T9833] veth1_macvtap: entered promiscuous mode [ 559.924993][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.983667][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.105317][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.163649][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.177080][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.498007][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.635674][ T9833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.700603][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.733527][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.783864][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.796177][T10090] loop8: detected capacity change from 0 to 2048 [ 560.823466][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.873669][ T9833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 560.911568][ T9833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.952798][ T9833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.016632][ T9833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.093711][ T9833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.113143][ T9833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.122378][ T9833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.484910][ T8016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.492812][ T8016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.624713][ T8007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.632591][ T8007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.592857][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.603557][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.382919][T10142] netlink: 116 bytes leftover after parsing attributes in process `syz.0.834'. [ 567.625020][T10142] syz_tun: entered promiscuous mode [ 568.961413][T10156] loop1: detected capacity change from 0 to 8 [ 568.968228][T10156] squashfs: Unknown parameter 'Ý' [ 570.936531][T10107] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 571.617015][T10166] xt_socket: unknown flags 0x4c [ 576.136583][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 581.741596][T10224] binder: BINDER_SET_CONTEXT_MGR already set [ 581.748370][T10224] binder: 10215:10224 ioctl 4018620d 200000004a80 returned -16 [ 582.995113][T10228] trusted_key: syz.0.852 sent an empty control message without MSG_MORE. [ 584.633661][ T9606] Bluetooth: hci2: unexpected event for opcode 0x202a [ 585.105153][T10238] futex_wake_op: syz.2.854 tries to shift op by -1; fix this program [ 587.210381][T10249] loop1: detected capacity change from 0 to 8 [ 587.219264][T10249] squashfs: Unknown parameter 'Ý' [ 594.351801][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 594.371446][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 594.394266][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 594.403999][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 594.411762][ T5809] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 594.419176][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.201215][T10303] loop1: detected capacity change from 0 to 1024 [ 595.274358][T10303] EXT4-fs: Ignoring removed orlov option [ 595.419090][T10303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 595.434087][T10303] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.942021][ T8014] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.946764][ T5809] Bluetooth: hci4: command tx timeout [ 597.029155][T10290] chnl_net:caif_netlink_parms(): no params data found [ 597.055487][ T9833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 597.255005][T10320] netlink: 88 bytes leftover after parsing attributes in process `syz.0.866'. [ 598.697596][T10324] loop1: detected capacity change from 0 to 8 [ 598.704463][T10324] squashfs: Unknown parameter 'Ý' [ 598.807034][ T8014] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.024948][ T5809] Bluetooth: hci4: command tx timeout [ 599.875319][T10330] loop1: detected capacity change from 0 to 1024 [ 600.775021][ T28] audit: type=1800 audit(1759033022.024:13): pid=10329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.868" name="file0" dev="loop1" ino=2 res=0 errno=0 [ 600.966009][ T8014] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.108415][ T5809] Bluetooth: hci4: command tx timeout [ 601.447111][ T8014] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.756764][T10290] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.783587][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.794056][T10290] bridge_slave_0: entered allmulticast mode [ 601.801281][T10290] bridge_slave_0: entered promiscuous mode [ 601.894974][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.902164][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.943709][T10290] bridge_slave_1: entered allmulticast mode [ 601.952169][T10290] bridge_slave_1: entered promiscuous mode [ 602.256094][T10343] loop0: detected capacity change from 0 to 128 [ 602.294689][T10290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.334424][T10343] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 602.351385][T10290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.384411][T10343] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 604.132650][ T5809] Bluetooth: hci4: command tx timeout [ 604.458224][T10290] team0: Port device team_slave_0 added [ 604.736627][T10290] team0: Port device team_slave_1 added [ 605.124688][T10356] loop0: detected capacity change from 0 to 2048 [ 605.232432][T10356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 605.703169][T10290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.737519][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.830901][T10290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.843228][T10358] loop0: detected capacity change from 0 to 128 [ 605.856662][T10290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.873842][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.914965][T10358] EXT4-fs (loop0): Test dummy encryption mode enabled [ 605.933589][T10290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.958589][T10358] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 605.971660][T10358] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 606.329080][T10290] hsr_slave_0: entered promiscuous mode [ 606.348402][T10290] hsr_slave_1: entered promiscuous mode [ 606.366853][T10290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.385694][T10290] Cannot create hsr debugfs directory [ 606.458027][T10358] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 606.609709][ T8739] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 614.692370][ T8014] hsr_slave_0: left promiscuous mode [ 614.719482][ T8014] hsr_slave_1: left promiscuous mode [ 614.741884][T10427] loop1: detected capacity change from 0 to 512 [ 614.767322][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.803763][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.856190][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.859665][T10427] [EXT4 FS bs=4096, gc=1, bpg=95, ipg=32, mo=e040e01c, mo2=0000] [ 614.863966][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.879592][ T8014] bridge_slave_1: left allmulticast mode [ 614.880165][T10427] System zones: [ 614.885366][ T8014] bridge_slave_1: left promiscuous mode [ 614.885611][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.914510][ T8014] bridge_slave_0: left allmulticast mode [ 614.920333][ T8014] bridge_slave_0: left promiscuous mode [ 614.931156][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.933825][T10427] 0-2, 18-18, 34-34 [ 614.987448][T10427] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.878: corrupted inode contents [ 615.047533][T10427] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #3: comm syz.1.878: mark_inode_dirty error [ 615.070759][ T8014] veth1_macvtap: left promiscuous mode [ 615.078768][ T8014] veth0_macvtap: left promiscuous mode [ 615.088710][T10427] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #3: comm syz.1.878: corrupted inode contents [ 615.109079][ T8014] veth1_vlan: left promiscuous mode [ 615.123603][ T8014] veth0_vlan: left promiscuous mode [ 615.189447][T10427] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.878: mark_inode_dirty error [ 615.247905][T10427] Quota error (device loop1): write_blk: dquota write failed [ 615.259404][T10427] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 615.311459][T10427] EXT4-fs error (device loop1): ext4_acquire_dquot:6940: comm syz.1.878: Failed to acquire dquot type 0 [ 615.379678][T10427] EXT4-fs (loop1): 1 orphan inode deleted [ 615.401268][ T3499] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 615.442315][ T3499] EXT4-fs error (device loop1): ext4_release_dquot:6976: comm kworker/u4:11: Failed to release dquot type 1 [ 615.442553][T10427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.552815][T10427] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.729867][ T9833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.340843][ T8014] team0 (unregistering): Port device team_slave_1 removed [ 617.421781][ T8014] team0 (unregistering): Port device team_slave_0 removed [ 617.490211][ T8014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.556641][ T8014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.304522][T10443] loop0: detected capacity change from 0 to 2048 [ 618.325121][T10443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 618.448910][ T8014] bond0 (unregistering): Released all slaves [ 618.806549][T10290] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 618.852031][T10290] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 618.906323][T10290] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 618.933134][T10290] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 621.095366][T10290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.202299][T10290] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.240510][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.247790][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.308741][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.316015][ T8023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.998919][T10290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.025944][T10498] loop1: detected capacity change from 0 to 8 [ 625.032819][T10498] squashfs: Unknown parameter 'Ý' [ 625.039252][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.052221][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.081769][T10299] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 626.546564][T10290] veth0_vlan: entered promiscuous mode [ 626.592749][T10290] veth1_vlan: entered promiscuous mode [ 626.737926][T10290] veth0_macvtap: entered promiscuous mode [ 626.794503][T10290] veth1_macvtap: entered promiscuous mode [ 626.866151][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.903614][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.933441][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.963433][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.973320][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.003723][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.029843][T10290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.086012][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.103462][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.113735][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.156378][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.178195][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.207875][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.235129][T10290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.309278][T10290] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.357934][T10290] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.379692][T10290] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.428259][T10290] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.905156][ T8023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.913130][ T8023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.049867][ T8023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.082968][ T8023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.803853][T10535] x_tables: duplicate entry at hook 3 [ 637.548731][T10569] loop1: detected capacity change from 0 to 8 [ 637.556008][T10569] squashfs: Unknown parameter 'Ý' [ 637.686023][T10555] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 640.472219][T10595] x_tables: duplicate entry at hook 3 [ 645.282564][T10623] loop0: detected capacity change from 0 to 8 [ 645.289651][T10623] squashfs: Unknown parameter 'Ý' [ 645.583562][T10585] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 646.844928][T10636] loop1: detected capacity change from 0 to 8 [ 646.877911][T10636] SQUASHFS error: Unable to read inode 0x11f [ 649.261041][T10642] loop1: detected capacity change from 0 to 1024 [ 649.337545][T10642] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 649.363540][T10642] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 649.413636][T10642] EXT4-fs (loop1): invalid journal inode [ 649.419414][T10642] EXT4-fs (loop1): can't get journal size [ 649.486070][T10642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 649.794649][ T9833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.563215][T10663] bridge_slave_1: default FDB implementation only supports local addresses [ 650.658092][T10659] loop5: detected capacity change from 0 to 8 [ 650.692600][T10659] squashfs: Unknown parameter 'Ý' [ 654.411850][T10675] loop0: detected capacity change from 0 to 8 [ 654.419038][T10675] squashfs: Unknown parameter 'Ý' [ 654.596323][T10585] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 655.168101][T10690] loop1: detected capacity change from 0 to 128 [ 655.279596][T10690] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 655.418091][T10690] System zones: 1-3, 19-19, 35-36 [ 655.475738][T10690] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 655.541095][T10690] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 656.383494][ T9606] Bluetooth: hci4: command 0x0406 tx timeout [ 656.600265][ T9833] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 657.004851][T10706] loop0: detected capacity change from 0 to 8 [ 657.304765][T10706] SQUASHFS error: Failed to read block 0x260685: -5 [ 657.311854][T10706] SQUASHFS error: Unable to read metadata cache entry [260685] [ 657.802459][T10716] loop1: detected capacity change from 0 to 2048 [ 657.810179][T10716] UDF-fs: bad mount option "00000000000000000000" or missing value [ 658.203588][T10706] SQUASHFS error: Unable to read directory block [260685:0] [ 659.184461][T10725] loop1: detected capacity change from 0 to 8 [ 659.195980][T10725] squashfs: Unknown parameter 'Ý' [ 659.600104][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 659.745867][T10664] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 660.055537][T10735] loop0: detected capacity change from 0 to 16 [ 660.139728][T10735] erofs: (device loop0): mounted with root inode @ nid 36. [ 660.440383][T10740] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 660.553844][T10740] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 662.344326][T10740] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 662.657741][T10735] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 662.753786][T10735] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 662.933458][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 662.942769][T10735] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 663.048235][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 663.189352][T10735] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 663.234717][T10748] loop1: detected capacity change from 0 to 8 [ 663.241469][T10748] squashfs: Unknown parameter 'Ý' [ 663.377052][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 663.483221][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 663.530385][T10585] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 663.543925][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 663.602742][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 663.750194][T10735] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 663.895071][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 664.028591][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 664.113521][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 664.189559][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 664.300219][T10735] syz.0.929: attempt to access beyond end of device [ 664.300219][T10735] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 664.424755][T10735] syz.0.929: attempt to access beyond end of device [ 664.424755][T10735] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 664.603599][T10735] syz.0.929: attempt to access beyond end of device [ 664.603599][T10735] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 664.684539][T10735] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[2639] [ 664.803719][T10735] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 664.943493][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 664.952870][T10735] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 665.039329][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 665.085885][T10768] loop1: detected capacity change from 0 to 1024 [ 665.108024][T10735] erofs: (device loop0): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 665.226196][T10735] syz.0.929: attempt to access beyond end of device [ 665.226196][T10735] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 665.362643][T10768] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 665.393563][T10735] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[3537] [ 669.420338][T10792] loop1: detected capacity change from 0 to 512 [ 669.806349][T10792] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 670.071535][T10792] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.938: bg 0: block 5: invalid block bitmap [ 670.273537][T10792] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 670.343535][T10792] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.938: invalid indirect mapped block 3 (level 2) [ 670.560002][T10792] EXT4-fs (loop1): 2 truncates cleaned up [ 670.614860][T10792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.160800][ T9833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.711205][T10830] loop5: detected capacity change from 0 to 256 [ 674.840181][T10833] loop0: detected capacity change from 0 to 1024 [ 674.942672][T10830] FAT-fs (loop5): Directory bread(block 64) failed [ 674.966209][T10830] FAT-fs (loop5): Directory bread(block 65) failed [ 674.996176][T10830] FAT-fs (loop5): Directory bread(block 66) failed [ 675.006279][T10830] FAT-fs (loop5): Directory bread(block 67) failed [ 675.043686][T10830] FAT-fs (loop5): Directory bread(block 68) failed [ 675.050327][T10830] FAT-fs (loop5): Directory bread(block 69) failed [ 675.131343][T10830] FAT-fs (loop5): Directory bread(block 70) failed [ 675.177531][T10830] FAT-fs (loop5): Directory bread(block 71) failed [ 675.234108][ T8007] hfsplus: b-tree write err: -5, ino 4 [ 675.246000][T10830] FAT-fs (loop5): Directory bread(block 72) failed [ 675.257404][T10830] FAT-fs (loop5): Directory bread(block 73) failed [ 676.277829][T10839] loop1: detected capacity change from 0 to 512 [ 678.647831][T10850] loop0: detected capacity change from 0 to 8 [ 678.660376][T10850] squashfs: Unknown parameter 'Ý' [ 679.185031][T10839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.233576][T10839] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 679.767402][ T9833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.834935][T10860] syz_tun: entered allmulticast mode [ 681.327163][T10866] loop0: detected capacity change from 0 to 8 [ 681.334149][T10866] squashfs: Unknown parameter 'Ý' [ 681.773979][T10585] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 684.318038][ T8774] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 684.378093][ T8774] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 684.612375][T10890] loop0: detected capacity change from 0 to 1024 [ 684.834720][T10890] EXT4-fs: Ignoring removed nomblk_io_submit option [ 684.841421][T10890] ext4: Unknown parameter 'smackfshat' [ 686.553941][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.560332][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.566828][ T28] audit: type=1326 audit(1759033106.894:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10898 comm="syz.2.958" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f509238eec9 code=0x0 [ 689.218774][T10915] loop5: detected capacity change from 0 to 1024 [ 689.556660][T10915] hfsplus: extend alloc file! (8192,512,16777719) [ 689.894290][ T28] audit: type=1326 audit(1759033111.214:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10918 comm="syz.0.962" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6b38d8eec9 code=0x0 [ 691.182664][T10928] loop5: detected capacity change from 0 to 8 [ 691.295487][T10928] squashfs: Unknown parameter 'Ý' [ 691.752150][T10585] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 696.106408][T10957] loop1: detected capacity change from 0 to 256 [ 696.194119][T10957] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 696.275547][T10957] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 696.426370][T10957] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 713.677395][ T28] audit: type=1326 audit(1759033135.004:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 714.744299][ T28] audit: type=1326 audit(1759033135.004:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 714.872079][ T28] audit: type=1326 audit(1759033135.034:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 714.907241][ T28] audit: type=1326 audit(1759033135.034:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 715.021396][ T28] audit: type=1326 audit(1759033135.034:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 715.224050][ T28] audit: type=1326 audit(1759033135.034:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 716.447294][T11077] loop5: detected capacity change from 0 to 1024 [ 716.456725][T11077] ext4: Unknown parameter 'nouser_xattr' [ 718.333574][ T28] audit: type=1326 audit(1759033135.034:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 718.583728][ T28] audit: type=1326 audit(1759033135.034:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 718.689381][ T28] audit: type=1326 audit(1759033135.034:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 718.791426][ T28] audit: type=1326 audit(1759033135.034:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11056 comm="syz.1.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f9798eec9 code=0x7ffc0000 [ 723.380800][T11119] loop5: detected capacity change from 0 to 512 [ 723.440188][T11119] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 723.592625][T11119] EXT4-fs error (device loop5): ext4_validate_block_bitmap:430: comm syz.5.991: bg 0: block 5: invalid block bitmap [ 723.705002][T11119] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 725.386146][T11119] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.991: invalid indirect mapped block 3 (level 2) [ 725.407360][T11119] EXT4-fs (loop5): 2 truncates cleaned up [ 725.457061][T11119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 725.531383][T11119] EXT4-fs (loop5): shut down requested (2) [ 725.736207][T10290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.533427][ T28] audit: type=1326 audit(1759033150.924:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.2.993" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f509238eec9 code=0x0 [ 735.664926][T11181] loop1: detected capacity change from 0 to 8 [ 735.671781][T11181] squashfs: Unknown parameter 'Ý' [ 736.663607][T11113] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 744.405778][T11229] IPv6: sit1: Disabled Multicast RS [ 744.464843][T11229] sit1: entered allmulticast mode [ 748.433059][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.439697][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.345863][T11381] loop1: detected capacity change from 0 to 8 [ 772.455248][T11381] squashfs: Unknown parameter 'Ý' [ 777.313524][T10029] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 778.593418][T10029] usb 6-1: Using ep0 maxpacket: 16 [ 778.682444][T10029] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 778.723557][T10029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.774736][T10029] usb 6-1: Product: syz [ 778.779133][T10029] usb 6-1: Manufacturer: syz [ 778.805809][T10029] usb 6-1: SerialNumber: syz [ 778.854245][T10029] r8152-cfgselector 6-1: config 0 descriptor?? [ 779.369137][T10029] r8152-cfgselector 6-1: Unknown version 0x0000 [ 779.423024][T10029] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 782.314124][T11451] loop1: detected capacity change from 0 to 512 [ 782.463260][T11451] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 783.063929][T11451] EXT4-fs (loop1): 1 truncate cleaned up [ 783.084899][T11451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 783.668716][ T9833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.927451][T11467] loop5: detected capacity change from 0 to 8 [ 783.934418][T11467] squashfs: Unknown parameter 'Ý' [ 785.013537][T11386] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 791.695825][T11515] loop0: detected capacity change from 0 to 8 [ 793.016883][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1065'. [ 794.154909][T11525] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1066'. [ 794.164919][T11525] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1066'. [ 802.135645][T11571] x_tables: duplicate entry at hook 3 [ 803.883435][T11581] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 804.078718][T11578] loop5: detected capacity change from 0 to 512 [ 804.964573][T11578] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1075: bad orphan inode 13 [ 804.983594][T11578] ext4_test_bit(bit=12, block=4) = 1 [ 804.989000][T11578] is_bad_inode(inode)=0 [ 804.993163][T11578] NEXT_ORPHAN(inode)=0 [ 804.997341][T11578] max_ino=32 [ 805.000552][T11578] i_nlink=1 [ 805.005078][T11578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 805.197037][T10290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.917801][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.924489][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.725277][T11643] loop5: detected capacity change from 0 to 256 [ 815.790248][T11643] exFAT-fs (loop5): error, The cluster chain has a loop [ 815.858452][T11643] exFAT-fs (loop5): failed to count the number of clusters in root [ 815.944755][T11643] exFAT-fs (loop5): failed to recognize exfat type [ 816.062591][T11647] input: syz1 as /devices/virtual/input/input10 [ 817.808453][T11659] loop5: detected capacity change from 0 to 256 [ 817.864676][T11659] exfat: Deprecated parameter 'namecase' [ 818.072380][T11659] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 824.611072][T11696] loop5: detected capacity change from 0 to 256 [ 825.328531][T11696] FAT-fs (loop5): Directory bread(block 64) failed [ 825.363635][T11696] FAT-fs (loop5): Directory bread(block 65) failed [ 825.370394][T11696] FAT-fs (loop5): Directory bread(block 66) failed [ 825.483413][T11696] FAT-fs (loop5): Directory bread(block 67) failed [ 825.601772][T11696] FAT-fs (loop5): Directory bread(block 68) failed [ 825.631422][T11696] FAT-fs (loop5): Directory bread(block 69) failed [ 825.834157][T11696] FAT-fs (loop5): Directory bread(block 70) failed [ 825.840817][T11696] FAT-fs (loop5): Directory bread(block 71) failed [ 825.973543][T11696] FAT-fs (loop5): Directory bread(block 72) failed [ 825.980221][T11696] FAT-fs (loop5): Directory bread(block 73) failed [ 828.424718][T11720] loop0: detected capacity change from 0 to 128 [ 828.457449][T11722] loop5: detected capacity change from 0 to 256 [ 828.465444][T11722] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 830.316220][T11720] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 830.603598][T11720] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 830.806135][ T28] audit: type=1804 audit(1759033508.128:27): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1097" name="/newroot/124/file0/bus" dev="loop0" ino=115 res=1 errno=0 [ 834.920121][T11755] loop5: detected capacity change from 0 to 128 [ 834.993605][T11755] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 835.001722][T11755] System zones: 1-3, 19-19, 35-36 [ 835.310996][T11755] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 835.352041][T11755] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 836.398206][T10290] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 839.209707][T11797] loop0: detected capacity change from 0 to 512 [ 839.391647][T11797] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 839.679317][T11797] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1111: bg 0: block 5: invalid block bitmap [ 839.883116][T11806] loop1: detected capacity change from 0 to 512 [ 839.942115][T11797] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 840.054607][T11797] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1111: invalid indirect mapped block 3 (level 2) [ 840.118142][T11806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.178609][T11806] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 840.499949][T11806] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 840.530885][T11797] EXT4-fs (loop0): 2 truncates cleaned up [ 841.307457][T11806] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.458334][T11797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.410625][ T8739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.481400][T11827] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1114'. [ 848.425669][T11862] loop5: detected capacity change from 0 to 128 [ 848.554564][T11862] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 848.587993][T11862] System zones: 1-3, 19-19, 35-36 [ 848.644749][T11862] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 848.662428][T11862] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 850.145264][T10290] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 853.058217][T11884] loop0: detected capacity change from 0 to 512 [ 853.633654][T11884] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 854.055145][T11884] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1124: bg 0: block 5: invalid block bitmap [ 854.479399][T11884] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 854.917202][T11884] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1124: invalid indirect mapped block 3 (level 2) [ 855.059003][T11884] EXT4-fs (loop0): 2 truncates cleaned up [ 855.172992][T11906] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1125'. [ 855.517157][T11884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 855.766522][T11884] EXT4-fs (loop0): shut down requested (2) [ 857.278041][ T8739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.166413][T11926] loop0: detected capacity change from 0 to 128 [ 858.509413][T11926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 858.583626][T11926] System zones: 1-3, 19-19, 35-36 [ 858.696406][T11926] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 858.861255][T11926] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 861.285319][ T8739] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 868.830082][T11988] loop0: detected capacity change from 0 to 2048 [ 869.213889][T11988] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 869.236146][T11988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 870.309433][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.315952][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 886.153490][ T7869] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 886.376022][ T7869] usb 6-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config [ 886.386979][ T7869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.421237][ T7869] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 886.441010][ T7869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 886.473316][ T7869] usb 6-1: SerialNumber: syz [ 886.787185][ T7869] usb 6-1: 0:2 : does not exist [ 886.880214][ T7869] usb 6-1: USB disconnect, device number 5 [ 887.014275][T12108] udevd[12108]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.674841][ T5809] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 905.292273][T12212] x_tables: duplicate entry at hook 3 [ 910.930021][T12254] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1172'. [ 912.225933][T12258] x_tables: duplicate entry at hook 3 [ 914.072518][T12275] loop5: detected capacity change from 0 to 256 [ 914.315830][T12275] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 918.063141][T12298] loop0: detected capacity change from 0 to 512 [ 918.097653][T12298] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 918.155098][T12298] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 918.184544][T12298] EXT4-fs (loop0): 1 truncate cleaned up [ 918.191603][T12298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.386303][ T8739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.579606][T12306] x_tables: duplicate entry at hook 3 [ 920.401315][T12322] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1190'. [ 929.072925][T12387] x_tables: duplicate entry at hook 3 [ 931.748811][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.755515][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.220355][T12418] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 933.599008][T12425] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1206'. [ 935.089852][T12433] loop5: detected capacity change from 0 to 128 [ 935.114662][T12433] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 935.173395][T12433] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 935.253105][ T8009] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 942.310696][T12494] loop0: detected capacity change from 0 to 8 [ 942.597364][T12494] squashfs: Unknown parameter 'Ý' [ 944.072548][T12489] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 946.758830][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1225'. [ 949.254375][ T28] audit: type=1326 audit(1759033626.578:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12527 comm="syz.1.1227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f9798eec9 code=0x0 [ 950.406396][T12544] loop0: detected capacity change from 0 to 128 [ 950.437142][T12544] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 950.511571][T12544] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 950.625065][ T8007] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 951.095704][T12550] loop0: detected capacity change from 0 to 1024 [ 952.194081][ T8009] hfsplus: b-tree write err: -5, ino 4 [ 953.122335][T12568] loop0: detected capacity change from 0 to 1024 [ 953.964105][T12568] ext4: Unknown parameter 'nouser_xattr' [ 954.133128][T12489] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 954.447018][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1231'. [ 958.037644][T12597] loop0: detected capacity change from 0 to 256 [ 958.109350][T12597] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 958.183433][T12597] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 958.211621][T12597] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x256728a3, utbl_chksum : 0xe619d30d) [ 974.463960][T12667] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1247'. [ 981.359545][ T9606] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 981.380055][ T9606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 981.409775][ T9606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 981.463679][ T9606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 981.474011][ T9606] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 981.483894][ T9606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 982.985083][ T8014] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.139894][T12727] loop0: detected capacity change from 0 to 512 [ 983.340407][T12727] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1256: iget: bad i_size value: 38620345925642 [ 983.445406][ T8014] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.504986][T12727] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1256: couldn't read orphan inode 15 (err -117) [ 983.548885][T12727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 984.681701][ T5809] Bluetooth: hci3: command tx timeout [ 984.846540][T12712] chnl_net:caif_netlink_parms(): no params data found [ 986.004127][T12731] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 986.247966][ T8739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.323571][ T8014] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.093337][ T5809] Bluetooth: hci3: command tx timeout [ 988.590677][ T8014] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.000313][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.029342][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.063582][T12712] bridge_slave_0: entered allmulticast mode [ 989.070655][T12712] bridge_slave_0: entered promiscuous mode [ 989.127318][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.174550][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.181838][T12712] bridge_slave_1: entered allmulticast mode [ 989.228551][T12712] bridge_slave_1: entered promiscuous mode [ 989.537608][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.653794][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.778207][T12712] team0: Port device team_slave_0 added [ 989.836273][T12712] team0: Port device team_slave_1 added [ 990.143996][ T9606] Bluetooth: hci3: command tx timeout [ 990.175917][T12712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.223995][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.313407][T12712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.694087][T12712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.701101][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.853300][T12712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.161893][T12712] hsr_slave_0: entered promiscuous mode [ 991.275574][T12712] hsr_slave_1: entered promiscuous mode [ 992.973269][ T9606] Bluetooth: hci3: command tx timeout [ 993.188653][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.195149][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.113105][T12800] loop0: detected capacity change from 0 to 1024 [ 994.234645][T12733] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 994.309887][T12800] input: syz1 as /devices/virtual/input/input11 [ 997.699679][T12827] loop0: detected capacity change from 0 to 128 [ 997.739852][T12827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 999.453434][T12827] System zones: 1-3, 19-19, 35-36 [ 999.468976][T12827] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 999.513041][T12827] ext4 filesystem being mounted at /161/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.056913][ T8739] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1000.718817][ T8014] hsr_slave_0: left promiscuous mode [ 1000.768954][ T8014] hsr_slave_1: left promiscuous mode [ 1000.837415][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.863518][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.894760][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.902879][ T8014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.947276][ T8014] bridge_slave_1: left allmulticast mode [ 1000.969024][ T8014] bridge_slave_1: left promiscuous mode [ 1000.975407][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.991632][ T8014] bridge_slave_0: left allmulticast mode [ 1001.013738][ T8014] bridge_slave_0: left promiscuous mode [ 1001.033783][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.178616][ T8014] veth1_macvtap: left promiscuous mode [ 1001.185147][ T8014] veth0_macvtap: left promiscuous mode [ 1001.190868][ T8014] veth1_vlan: left promiscuous mode [ 1001.196868][ T8014] veth0_vlan: left promiscuous mode [ 1003.595371][T12871] loop0: detected capacity change from 0 to 512 [ 1003.613994][T12871] EXT4-fs: Ignoring removed oldalloc option [ 1003.621251][ T8014] team0 (unregistering): Port device team_slave_1 removed [ 1003.661041][T12871] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1003.685255][T12871] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 1003.708134][T12871] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 1003.726647][T12871] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1274: attempt to clear invalid blocks 2 len 1 [ 1003.758114][T12871] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1274: invalid indirect mapped block 1819239214 (level 0) [ 1003.794105][T12871] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1274: invalid indirect mapped block 1819239214 (level 1) [ 1003.831709][T12871] EXT4-fs (loop0): 1 truncate cleaned up [ 1003.839028][T12871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1003.841028][ T8014] team0 (unregistering): Port device team_slave_0 removed [ 1003.895148][T12871] EXT4-fs (loop0): shut down requested (1) [ 1003.932877][ T8014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1003.975465][ T8739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.055462][ T8014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1011.437553][ T8014] bond0 (unregistering): Released all slaves [ 1011.962493][T12712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1012.039557][T12712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1012.111476][T12712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1012.158834][T12712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1013.850217][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.955725][T12712] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.002714][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.010000][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.256684][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.264037][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.388291][T12712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1015.403498][T12928] loop5: detected capacity change from 0 to 1024 [ 1015.417132][T12712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1016.839965][T12712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.872071][T12712] veth0_vlan: entered promiscuous mode [ 1019.920694][T12712] veth1_vlan: entered promiscuous mode [ 1020.092097][T12712] veth0_macvtap: entered promiscuous mode [ 1020.137892][T12712] veth1_macvtap: entered promiscuous mode [ 1020.190395][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.239411][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.273439][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.303843][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.336137][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.363444][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.399606][T12712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.467949][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.500556][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.531074][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.572294][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.603334][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.623394][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.655209][T12712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.691785][T12712] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.731520][T12712] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.751847][T12712] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.788182][T12712] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.028977][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.083170][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.155691][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.852459][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.845902][T13010] loop5: detected capacity change from 0 to 128 [ 1025.881596][T13010] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1025.945780][T13010] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1027.815494][ T3545] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1028.574105][T13026] x_tables: duplicate entry at hook 3 [ 1029.748611][T13038] loop7: detected capacity change from 0 to 1024 [ 1029.755726][T13038] ext4: Unknown parameter 'nouser_xattr' [ 1030.580423][T12733] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1030.608238][ T9606] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1043.800329][T13112] x_tables: duplicate entry at hook 3 [ 1048.302678][T13145] loop7: detected capacity change from 0 to 1024 [ 1048.313291][T13145] ext4: Unknown parameter 'nouser_xattr' [ 1052.724926][T13171] x_tables: duplicate entry at hook 3 [ 1054.629650][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.653291][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.824768][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1054.848623][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1054.858277][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1054.883723][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1054.892535][ T5809] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1054.912752][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1055.389352][ T8009] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.067144][T13183] loop7: detected capacity change from 0 to 8192 [ 1057.276157][ T5809] Bluetooth: hci0: command tx timeout [ 1057.360250][ T8009] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.764871][T13187] loop0: detected capacity change from 0 to 128 [ 1057.842532][ T8009] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.883420][T13187] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1057.921510][T13187] System zones: 1-3, 19-19, 35-36 [ 1057.992087][T13187] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1058.074690][T13187] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1058.391783][ T8009] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.807853][T13177] chnl_net:caif_netlink_parms(): no params data found [ 1059.353849][ T5809] Bluetooth: hci0: command tx timeout [ 1061.423510][ T5809] Bluetooth: hci0: command tx timeout [ 1061.615840][T13177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.658877][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.673916][T13177] bridge_slave_0: entered allmulticast mode [ 1061.681389][T13177] bridge_slave_0: entered promiscuous mode [ 1061.883614][T13177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.924587][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.963605][T13177] bridge_slave_1: entered allmulticast mode [ 1061.971218][T13177] bridge_slave_1: entered promiscuous mode [ 1062.240338][T13177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.390748][ T8739] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1062.767563][T13244] x_tables: duplicate entry at hook 3 [ 1063.710296][ T5809] Bluetooth: hci0: command tx timeout [ 1063.828562][T13177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.543603][T13257] loop0: detected capacity change from 0 to 8192 [ 1065.728564][T13177] team0: Port device team_slave_0 added [ 1065.934917][T13177] team0: Port device team_slave_1 added [ 1066.207803][T13177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.223226][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.273314][T13177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.478938][T13177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.043217][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.121655][T13177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.511886][T13177] hsr_slave_0: entered promiscuous mode [ 1067.554197][T13177] hsr_slave_1: entered promiscuous mode [ 1067.584248][T13177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1067.638054][T13177] Cannot create hsr debugfs directory [ 1069.639435][T13293] loop7: detected capacity change from 0 to 8 [ 1069.652186][T13293] squashfs: Unknown parameter 'Ý' [ 1072.964333][T13226] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1073.593564][ T8009] hsr_slave_0: left promiscuous mode [ 1073.703358][ T8009] hsr_slave_1: left promiscuous mode [ 1073.783412][ T8009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.790913][ T8009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1073.864610][ T8009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.872109][ T8009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1073.944368][ T8009] bridge_slave_1: left allmulticast mode [ 1073.950085][ T8009] bridge_slave_1: left promiscuous mode [ 1073.979862][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.085574][ T8009] bridge_slave_0: left allmulticast mode [ 1074.091294][ T8009] bridge_slave_0: left promiscuous mode [ 1074.129906][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.394951][ T8009] veth1_macvtap: left promiscuous mode [ 1074.400608][ T8009] veth0_macvtap: left promiscuous mode [ 1074.411818][ T8009] veth1_vlan: left promiscuous mode [ 1076.113220][ T9606] Bluetooth: hci3: command 0x0406 tx timeout [ 1076.153643][ T8009] veth0_vlan: left promiscuous mode [ 1081.580113][ T8009] team0 (unregistering): Port device team_slave_1 removed [ 1082.748838][ T8009] team0 (unregistering): Port device team_slave_0 removed [ 1082.882142][ T8009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.007432][ T8009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1084.832952][T13348] loop7: detected capacity change from 0 to 128 [ 1084.841591][T13348] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1084.898942][T13348] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1084.940273][ T11] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1087.034540][ T8009] bond0 (unregistering): Released all slaves [ 1087.336621][T13359] mmap: syz.2.1346 (13359) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1091.386784][T13384] loop7: detected capacity change from 0 to 128 [ 1091.461232][T13384] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1091.515415][T13384] System zones: 1-3, 19-19, 35-36 [ 1091.587254][T13384] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1091.665795][T13384] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1092.538147][T13177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1092.572070][T13177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1092.612533][T13177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1092.671605][T13177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1093.021341][T13177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.105341][T13177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.222220][ T8016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.229570][ T8016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.299482][ T8016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.306739][ T8016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.361666][T13422] loop0: detected capacity change from 0 to 512 [ 1093.458449][T13422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.484481][T13177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.495520][T13422] ext4 filesystem being mounted at /186/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1093.553006][ T28] audit: type=1800 audit(1759033770.868:29): pid=13422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1357" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1093.651155][ T28] audit: type=1800 audit(1759033770.868:30): pid=13422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1357" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1093.776294][ T8739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.607267][T12712] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1097.261561][T13177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1102.526124][T13177] veth0_vlan: entered promiscuous mode [ 1102.585229][T13177] veth1_vlan: entered promiscuous mode [ 1102.716253][T13177] veth0_macvtap: entered promiscuous mode [ 1102.727780][T13177] veth1_macvtap: entered promiscuous mode [ 1102.814252][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.853224][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.923239][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1102.953351][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1102.983257][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.023337][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.045180][T13177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.115677][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.183240][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.193118][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.263246][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.423220][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.507120][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.563450][T13177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.631650][T13177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.693228][T13177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.701995][T13177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.753458][T13177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.154189][ T8012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.162099][ T8012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.322920][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.359602][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.558663][T13508] loop7: detected capacity change from 0 to 1024 [ 1105.635875][T13508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1106.134917][ T28] audit: type=1800 audit(1759034039.463:31): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1370" name="file1" dev="loop7" ino=839 res=0 errno=0 [ 1110.580186][T13530] loop7: detected capacity change from 0 to 2048 [ 1110.787863][T13530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1110.875227][ T28] audit: type=1800 audit(1759034044.203:32): pid=13530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1377" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 1112.624133][T13530] EXT4-fs (loop7): Online defrag not supported with bigalloc [ 1114.549779][T13530] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1116.208513][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.214978][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.015278][T13608] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1392'. [ 1140.202176][T13664] loop0: detected capacity change from 0 to 8 [ 1140.209432][T13664] squashfs: Unknown parameter 'Ý' [ 1144.791097][T13699] netlink: 88 bytes leftover after parsing attributes in process `syz.7.1402'. [ 1145.765349][T13702] loop0: detected capacity change from 0 to 2048 [ 1146.935675][ T9606] Bluetooth: hci0: command tx timeout [ 1147.004712][T13702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1147.180637][T13713] input: syz1 as /devices/virtual/input/input12 [ 1147.435789][ T8739] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.885563][T13728] ================================================================== [ 1148.893703][T13728] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x598/0x11f0 [ 1148.901481][T13728] Read of size 4 at addr ffff888027db48a0 by task syz.0.1407/13728 [ 1148.909406][T13728] [ 1148.911770][T13728] CPU: 0 PID: 13728 Comm: syz.0.1407 Not tainted syzkaller #0 [ 1148.919264][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1148.929372][T13728] Call Trace: [ 1148.932683][T13728] [ 1148.935656][T13728] dump_stack_lvl+0x16c/0x230 [ 1148.940472][T13728] ? __lock_acquire+0x7c80/0x7c80 [ 1148.945543][T13728] ? show_regs_print_info+0x20/0x20 [ 1148.950810][T13728] ? load_image+0x3b0/0x3b0 [ 1148.955360][T13728] ? __virt_addr_valid+0x469/0x540 [ 1148.960740][T13728] print_report+0xac/0x220 [ 1148.965258][T13728] ? xfrm_alloc_spi+0x598/0x11f0 [ 1148.970271][T13728] kasan_report+0x117/0x150 [ 1148.974830][T13728] ? xfrm_alloc_spi+0x598/0x11f0 [ 1148.979824][T13728] xfrm_alloc_spi+0x598/0x11f0 [ 1148.984641][T13728] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 1148.989638][T13728] ? verify_spi_info+0x120/0x120 [ 1148.994621][T13728] ? xfrm_find_acq+0x79/0x90 [ 1148.999262][T13728] xfrm_alloc_userspi+0x5d1/0xa90 [ 1149.004438][T13728] ? end_current_label_crit_section+0x170/0x170 [ 1149.010728][T13728] ? apparmor_capable+0x137/0x1a0 [ 1149.015791][T13728] ? xfrm_dump_policy_done+0x90/0x90 [ 1149.021118][T13728] ? __nla_parse+0x40/0x50 [ 1149.025591][T13728] xfrm_user_rcv_msg+0x596/0x870 [ 1149.030573][T13728] ? lockdep_hardirqs_on+0x98/0x150 [ 1149.035819][T13728] ? xfrm_netlink_rcv+0x90/0x90 [ 1149.040711][T13728] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1149.046140][T13728] ? __dev_queue_xmit+0x245/0x35a0 [ 1149.051313][T13728] ? __mutex_trylock_common+0x153/0x250 [ 1149.056914][T13728] netlink_rcv_skb+0x216/0x480 [ 1149.061722][T13728] ? xfrm_netlink_rcv+0x90/0x90 [ 1149.066698][T13728] ? netlink_ack+0x1110/0x1110 [ 1149.071508][T13728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1149.076758][T13728] ? __lock_acquire+0x7c80/0x7c80 [ 1149.081843][T13728] xfrm_netlink_rcv+0x79/0x90 [ 1149.086561][T13728] netlink_unicast+0x751/0x8d0 [ 1149.091377][T13728] netlink_sendmsg+0x8c1/0xbe0 [ 1149.096190][T13728] ? netlink_getsockopt+0x580/0x580 [ 1149.101427][T13728] ? aa_sock_msg_perm+0x94/0x150 [ 1149.106399][T13728] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1149.111721][T13728] ? security_socket_sendmsg+0x80/0xa0 [ 1149.117217][T13728] ? netlink_getsockopt+0x580/0x580 [ 1149.122451][T13728] ____sys_sendmsg+0x5bf/0x950 [ 1149.127266][T13728] ? __asan_memset+0x22/0x40 [ 1149.131902][T13728] ? __sys_sendmsg_sock+0x30/0x30 [ 1149.136974][T13728] ? __import_iovec+0x5f2/0x860 [ 1149.141965][T13728] ? import_iovec+0x73/0xa0 [ 1149.146517][T13728] ___sys_sendmsg+0x220/0x290 [ 1149.151237][T13728] ? __sys_sendmsg+0x270/0x270 [ 1149.156168][T13728] __se_sys_sendmsg+0x1a5/0x270 [ 1149.161075][T13728] ? __x64_sys_sendmsg+0x80/0x80 [ 1149.166066][T13728] ? lockdep_hardirqs_on+0x98/0x150 [ 1149.171318][T13728] do_syscall_64+0x55/0xb0 [ 1149.175775][T13728] ? clear_bhb_loop+0x40/0x90 [ 1149.180483][T13728] ? clear_bhb_loop+0x40/0x90 [ 1149.185209][T13728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1149.191152][T13728] RIP: 0033:0x7f6b38d8eec9 [ 1149.195623][T13728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.215368][T13728] RSP: 002b:00007f6b39b5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.223831][T13728] RAX: ffffffffffffffda RBX: 00007f6b38fe5fa0 RCX: 00007f6b38d8eec9 [ 1149.231847][T13728] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1149.239860][T13728] RBP: 00007f6b38e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1149.248047][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1149.256058][T13728] R13: 00007f6b38fe6038 R14: 00007f6b38fe5fa0 R15: 00007ffff643e568 [ 1149.264079][T13728] [ 1149.267128][T13728] [ 1149.269536][T13728] Allocated by task 13216: [ 1149.273996][T13728] kasan_set_track+0x4e/0x70 [ 1149.278629][T13728] __kasan_slab_alloc+0x6c/0x80 [ 1149.283553][T13728] slab_post_alloc_hook+0x6e/0x4d0 [ 1149.288714][T13728] kmem_cache_alloc+0x11e/0x2e0 [ 1149.293609][T13728] xfrm_state_alloc+0x22/0x2a0 [ 1149.298407][T13728] pfkey_add+0x6e1/0x2da0 [ 1149.302815][T13728] pfkey_sendmsg+0xbed/0x1050 [ 1149.307535][T13728] ____sys_sendmsg+0x5bf/0x950 [ 1149.312340][T13728] ___sys_sendmsg+0x220/0x290 [ 1149.317064][T13728] __se_sys_sendmsg+0x1a5/0x270 [ 1149.322038][T13728] do_syscall_64+0x55/0xb0 [ 1149.326492][T13728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1149.332434][T13728] [ 1149.334794][T13728] The buggy address belongs to the object at ffff888027db4800 [ 1149.334794][T13728] which belongs to the cache xfrm_state of size 848 [ 1149.348797][T13728] The buggy address is located 160 bytes inside of [ 1149.348797][T13728] freed 848-byte region [ffff888027db4800, ffff888027db4b50) [ 1149.362632][T13728] [ 1149.364990][T13728] The buggy address belongs to the physical page: [ 1149.371432][T13728] page:ffffea00009f6d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888027db4800 pfn:0x27db4 [ 1149.382936][T13728] head:ffffea00009f6d00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1149.392089][T13728] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1149.400110][T13728] page_type: 0xffffffff() [ 1149.404475][T13728] raw: 00fff00000000840 ffff888140ae2640 dead000000000122 0000000000000000 [ 1149.413088][T13728] raw: ffff888027db4800 000000008010000c 00000001ffffffff 0000000000000000 [ 1149.421698][T13728] page dumped because: kasan: bad access detected [ 1149.428263][T13728] page_owner tracks the page as allocated [ 1149.434003][T13728] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6587, tgid 6585 (syz.4.151), ts 138420921315, free_ts 138405427160 [ 1149.454629][T13728] post_alloc_hook+0x1cd/0x210 [ 1149.459443][T13728] get_page_from_freelist+0x195c/0x19f0 [ 1149.465045][T13728] __alloc_pages+0x1e3/0x460 [ 1149.469681][T13728] alloc_slab_page+0x5d/0x170 [ 1149.474404][T13728] new_slab+0x87/0x2e0 [ 1149.478520][T13728] ___slab_alloc+0xc6d/0x1300 [ 1149.483246][T13728] kmem_cache_alloc+0x1b7/0x2e0 [ 1149.488139][T13728] xfrm_state_alloc+0x22/0x2a0 [ 1149.492970][T13728] xfrm_add_sa+0xfe5/0x30a0 [ 1149.497506][T13728] xfrm_user_rcv_msg+0x596/0x870 [ 1149.502564][T13728] netlink_rcv_skb+0x216/0x480 [ 1149.507362][T13728] xfrm_netlink_rcv+0x79/0x90 [ 1149.512067][T13728] netlink_unicast+0x751/0x8d0 [ 1149.516868][T13728] netlink_sendmsg+0x8c1/0xbe0 [ 1149.521679][T13728] ____sys_sendmsg+0x5bf/0x950 [ 1149.526484][T13728] ___sys_sendmsg+0x220/0x290 [ 1149.531205][T13728] page last free stack trace: [ 1149.535993][T13728] free_unref_page_prepare+0x7ce/0x8e0 [ 1149.541595][T13728] free_unref_page+0x32/0x2e0 [ 1149.546322][T13728] __slab_free+0x35e/0x410 [ 1149.550783][T13728] qlist_free_all+0x75/0xe0 [ 1149.555404][T13728] kasan_quarantine_reduce+0x143/0x160 [ 1149.560903][T13728] __kasan_slab_alloc+0x22/0x80 [ 1149.565787][T13728] slab_post_alloc_hook+0x6e/0x4d0 [ 1149.570939][T13728] kmem_cache_alloc+0x11e/0x2e0 [ 1149.575829][T13728] getname_flags+0xbb/0x500 [ 1149.580374][T13728] do_sys_openat2+0xcb/0x1c0 [ 1149.584996][T13728] __x64_sys_openat+0x139/0x160 [ 1149.589881][T13728] do_syscall_64+0x55/0xb0 [ 1149.594437][T13728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1149.600376][T13728] [ 1149.602721][T13728] Memory state around the buggy address: [ 1149.608462][T13728] ffff888027db4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1149.616554][T13728] ffff888027db4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.624735][T13728] >ffff888027db4880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.632994][T13728] ^ [ 1149.638131][T13728] ffff888027db4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.646314][T13728] ffff888027db4980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1149.654409][T13728] ================================================================== [ 1149.662715][T13728] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1149.669950][T13728] CPU: 0 PID: 13728 Comm: syz.0.1407 Not tainted syzkaller #0 [ 1149.677456][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1149.687555][T13728] Call Trace: [ 1149.690863][T13728] [ 1149.693845][T13728] dump_stack_lvl+0x16c/0x230 [ 1149.698573][T13728] ? show_regs_print_info+0x20/0x20 [ 1149.703824][T13728] ? load_image+0x3b0/0x3b0 [ 1149.708544][T13728] panic+0x2c0/0x710 [ 1149.712489][T13728] ? bpf_jit_dump+0xd0/0xd0 [ 1149.717055][T13728] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 1149.722988][T13728] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1149.729123][T13728] ? _raw_spin_unlock+0x40/0x40 [ 1149.734032][T13728] ? print_memory_metadata+0x314/0x400 [ 1149.739544][T13728] ? xfrm_alloc_spi+0x598/0x11f0 [ 1149.744642][T13728] check_panic_on_warn+0x84/0xa0 [ 1149.749814][T13728] ? xfrm_alloc_spi+0x598/0x11f0 [ 1149.754796][T13728] end_report+0x6f/0x140 [ 1149.759270][T13728] kasan_report+0x128/0x150 [ 1149.763817][T13728] ? xfrm_alloc_spi+0x598/0x11f0 [ 1149.768802][T13728] xfrm_alloc_spi+0x598/0x11f0 [ 1149.773621][T13728] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 1149.778702][T13728] ? verify_spi_info+0x120/0x120 [ 1149.783718][T13728] ? xfrm_find_acq+0x79/0x90 [ 1149.788355][T13728] xfrm_alloc_userspi+0x5d1/0xa90 [ 1149.793514][T13728] ? end_current_label_crit_section+0x170/0x170 [ 1149.799810][T13728] ? apparmor_capable+0x137/0x1a0 [ 1149.804878][T13728] ? xfrm_dump_policy_done+0x90/0x90 [ 1149.810214][T13728] ? __nla_parse+0x40/0x50 [ 1149.814734][T13728] xfrm_user_rcv_msg+0x596/0x870 [ 1149.819751][T13728] ? lockdep_hardirqs_on+0x98/0x150 [ 1149.824996][T13728] ? xfrm_netlink_rcv+0x90/0x90 [ 1149.829883][T13728] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1149.835311][T13728] ? __dev_queue_xmit+0x245/0x35a0 [ 1149.840473][T13728] ? __mutex_trylock_common+0x153/0x250 [ 1149.846124][T13728] netlink_rcv_skb+0x216/0x480 [ 1149.850966][T13728] ? xfrm_netlink_rcv+0x90/0x90 [ 1149.855867][T13728] ? netlink_ack+0x1110/0x1110 [ 1149.860682][T13728] ? netlink_deliver_tap+0x2e/0x1b0 [ 1149.865928][T13728] ? __lock_acquire+0x7c80/0x7c80 [ 1149.870990][T13728] xfrm_netlink_rcv+0x79/0x90 [ 1149.875696][T13728] netlink_unicast+0x751/0x8d0 [ 1149.880508][T13728] netlink_sendmsg+0x8c1/0xbe0 [ 1149.885316][T13728] ? netlink_getsockopt+0x580/0x580 [ 1149.890556][T13728] ? aa_sock_msg_perm+0x94/0x150 [ 1149.895538][T13728] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1149.900879][T13728] ? security_socket_sendmsg+0x80/0xa0 [ 1149.906375][T13728] ? netlink_getsockopt+0x580/0x580 [ 1149.911641][T13728] ____sys_sendmsg+0x5bf/0x950 [ 1149.916558][T13728] ? __asan_memset+0x22/0x40 [ 1149.921276][T13728] ? __sys_sendmsg_sock+0x30/0x30 [ 1149.926346][T13728] ? __import_iovec+0x5f2/0x860 [ 1149.931332][T13728] ? import_iovec+0x73/0xa0 [ 1149.935871][T13728] ___sys_sendmsg+0x220/0x290 [ 1149.940597][T13728] ? __sys_sendmsg+0x270/0x270 [ 1149.945432][T13728] __se_sys_sendmsg+0x1a5/0x270 [ 1149.950327][T13728] ? __x64_sys_sendmsg+0x80/0x80 [ 1149.955322][T13728] ? lockdep_hardirqs_on+0x98/0x150 [ 1149.960564][T13728] do_syscall_64+0x55/0xb0 [ 1149.965017][T13728] ? clear_bhb_loop+0x40/0x90 [ 1149.969810][T13728] ? clear_bhb_loop+0x40/0x90 [ 1149.974535][T13728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1149.980495][T13728] RIP: 0033:0x7f6b38d8eec9 [ 1149.984956][T13728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.004693][T13728] RSP: 002b:00007f6b39b5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1150.013312][T13728] RAX: ffffffffffffffda RBX: 00007f6b38fe5fa0 RCX: 00007f6b38d8eec9 [ 1150.021403][T13728] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1150.029394][T13728] RBP: 00007f6b38e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1150.037384][T13728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.045462][T13728] R13: 00007f6b38fe6038 R14: 00007f6b38fe5fa0 R15: 00007ffff643e568 [ 1150.053463][T13728] [ 1150.056784][T13728] Kernel Offset: disabled [ 1150.061111][T13728] Rebooting in 86400 seconds..